$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/N3NOw5Wg9bn9h9QV-rBUxRy4Et8.roa File: N3NOw5Wg9bn9h9QV-rBUxRy4Et8.roa (raw, json) Hash identifier: a8aQc/PHU8Pwro6Stkv8rnN0TWRB9MYm7xHhS2UePQs= Subject key identifier: 37:73:4E:C3:95:A0:F5:B9:FD:87:D4:15:FA:B0:54:C5:1C:B8:12:DF Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F5A Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/N3NOw5Wg9bn9h9QV-rBUxRy4Et8.roa Signing time: Fri 22 Aug 2025 08:51:15 +0000 ROA not before: Fri 22 Aug 2025 08:51:15 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 27.147.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3930 (0xf5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:15 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=37734EC395A0F5B9FD87D415FAB054C51CB812DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:09:7c:37:b7:72:05:66:6b:de:2e:5c:25:78: fd:b2:78:f9:19:44:a5:51:7e:a5:a6:8a:1a:95:47: df:39:46:6a:65:59:a7:ac:56:80:0c:40:93:07:c7: 8f:bf:f7:48:3b:70:7f:6d:51:b1:11:5e:52:a3:f7: 7d:c2:e2:5f:91:66:44:aa:ee:8e:d3:3e:5c:0b:fe: 74:f1:ca:bc:d8:14:08:87:a1:1e:23:55:d1:12:5d: f1:8f:ca:87:4e:59:46:8c:51:47:7c:9e:ba:f9:be: f8:1f:04:d5:a6:6e:3a:db:fe:0c:8a:61:24:22:4e: 32:63:f1:2f:e8:b4:a4:7e:43:94:ec:4f:80:74:8c: 13:07:3f:1e:28:4e:34:73:38:21:59:ac:68:fa:ad: 81:fe:8a:41:a1:a7:26:73:d9:0b:da:ab:bb:34:3a: f0:91:77:2e:38:82:36:ca:2c:cc:be:c7:fd:29:5c: bf:ac:08:6e:4f:16:ba:dd:42:92:83:2c:57:d9:4b: e0:25:dc:d9:d7:06:ec:8a:f8:17:b0:68:e4:ec:58: 22:66:93:04:a1:20:a7:62:1e:9c:90:bd:f2:79:d4: a7:6b:39:f3:e1:b7:73:6d:90:a9:42:2d:9d:ae:db: 86:d8:23:38:c7:57:b9:78:e5:5d:d1:08:b8:fc:2d: 99:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:73:4E:C3:95:A0:F5:B9:FD:87:D4:15:FA:B0:54:C5:1C:B8:12:DF X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/N3NOw5Wg9bn9h9QV-rBUxRy4Et8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.56.0/21 Signature Algorithm: sha256WithRSAEncryption 1c:d9:ed:b5:fa:7c:42:06:f8:e3:87:56:72:fa:a2:f6:89:cb: fc:25:3d:54:97:f8:08:27:ee:1e:f7:e2:97:72:41:45:e7:53: 10:3c:b8:96:07:77:91:5b:22:0e:7c:5c:21:c3:78:7a:a1:6d: 51:7a:90:08:dc:18:9c:68:42:73:23:02:69:d5:da:8d:3a:b7: d3:aa:65:65:98:83:4f:5e:6d:0b:f6:a5:ce:96:a3:4f:fe:ba: eb:9c:53:a2:01:91:4a:c3:0a:f4:d6:4f:1a:5a:d7:a5:56:91: 47:80:b0:f9:f9:65:9b:20:1c:fc:c8:13:27:ee:b0:e3:a3:d1: 7f:cb:46:74:f8:b2:61:65:e1:f9:99:a2:ca:52:90:20:53:71: b6:36:b5:24:e0:27:70:bf:4b:85:b7:87:52:21:12:e8:a6:fc: 02:ef:f9:0c:72:ba:1c:ce:29:76:c4:a2:dc:3d:a5:d8:11:cd: 0b:f3:c6:a5:00:f5:d8:7b:38:fb:c8:c6:78:37:61:f0:e6:f4: 0f:24:4a:9b:50:34:0e:b6:a8:a7:c4:31:01:40:01:03:fb:be: a8:e7:6b:23:b5:c9:9f:e5:e7:09:cc:90:b1:6d:bd:68:d0:4b: 03:62:06:01:0d:8b:d6:11:4d:17:b2:de:60:22:ea:8e:4b:46: 7b:6b:ac:18 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD1owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM3NzM0RUMzOTVBMEY1 QjlGRDg3RDQxNUZBQjA1NEM1MUNCODEyREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDzCXw3t3IFZmveLlwleP2yePkZRKVRfqWmihqVR985RmplWaes VoAMQJMHx4+/90g7cH9tUbERXlKj933C4l+RZkSq7o7TPlwL/nTxyrzYFAiHoR4j VdESXfGPyodOWUaMUUd8nrr5vvgfBNWmbjrb/gyKYSQiTjJj8S/otKR+Q5TsT4B0 jBMHPx4oTjRzOCFZrGj6rYH+ikGhpyZz2Qvaq7s0OvCRdy44gjbKLMy+x/0pXL+s CG5PFrrdQpKDLFfZS+Al3NnXBuyK+BewaOTsWCJmkwShIKdiHpyQvfJ51KdrOfPh t3NtkKlCLZ2u24bYIzjHV7l45V3RCLj8LZmfAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUN3NOw5Wg9bn9h9QV+rBUxRy4Et8wHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9OM05PdzVXZzlibjloOVFWLXJC VXhSeTRFdDgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDG5M4 MA0GCSqGSIb3DQEBCwUAA4IBAQAc2e21+nxCBvjjh1Zy+qL2icv8JT1Ul/gIJ+4e 9+KXckFF51MQPLiWB3eRWyIOfFwhw3h6oW1RepAI3BicaEJzIwJp1dqNOrfTqmVl mINPXm0L9qXOlqNP/rrrnFOiAZFKwwr01k8aWtelVpFHgLD5+WWbIBz8yBMn7rDj o9F/y0Z0+LJhZeH5maLKUpAgU3G2NrUk4Cdwv0uFt4dSIRLopvwC7/kMcroczil2 xKLcPaXYEc0L88alAPXYezj7yMZ4N2Hw5vQPJEqbUDQOtqinxDEBQAED+76o52sj tcmf5ecJzJCxbb1o0EsDYgYBDYvWEU0Xst5gIuqOS0Z7a6wY -----END CERTIFICATE-----Generated at Sun Aug 24 16:08:55 2025 by rpki-client