$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/OTAmdcEXUz1llVC74C3MB13FF0s.roa File: OTAmdcEXUz1llVC74C3MB13FF0s.roa (raw, json) Hash identifier: hi4C0qUv9j1j26d/QoZpA3R89OVc8UUlfNgN8nGeqM4= Subject key identifier: 39:30:26:75:C1:17:53:3D:65:95:50:BB:E0:2D:CC:07:5D:C5:17:4B Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F71 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/OTAmdcEXUz1llVC74C3MB13FF0s.roa Signing time: Fri 22 Aug 2025 08:51:22 +0000 ROA not before: Fri 22 Aug 2025 08:51:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 27.147.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3953 (0xf71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=39302675C117533D659550BBE02DCC075DC5174B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:5d:f3:4a:a4:6a:5e:28:35:91:e6:0d:32: 0e:6a:b2:d7:d2:42:f1:a2:f5:e0:84:3f:87:08:3b: c9:4e:b1:5e:2a:48:b8:5f:d7:fa:db:5d:87:20:7f: 4d:56:31:f5:8a:6d:d9:e6:37:c8:88:ce:99:cd:c7: 68:81:ed:da:cd:90:a3:c2:7f:7e:04:73:fe:10:95: 39:0e:10:ea:02:ea:62:93:26:e5:53:e8:24:25:7d: 14:9b:d8:a4:4c:53:f2:7d:a6:27:9c:8f:95:9d:2a: 6e:29:3e:ff:ca:74:3b:3c:50:c0:ac:7f:88:b3:f7: a4:6c:44:37:76:0a:c9:23:3c:91:a8:8c:25:09:62: 69:fb:3e:d6:a2:af:78:8b:48:28:c9:32:12:1b:36: e8:07:de:ae:99:97:c8:42:26:e0:79:92:76:d0:76: 90:ee:87:07:44:35:03:43:c8:41:f5:c4:24:61:cf: b1:00:fa:94:d6:71:dc:45:84:0a:25:52:3e:ec:f9: 6b:d6:66:1d:7f:9c:c2:81:7a:3b:83:99:0c:6a:23: d1:b3:06:81:8a:17:c8:29:0d:af:ee:23:d8:21:9c: 08:af:8c:b0:5e:1f:0e:57:c0:21:5b:98:a4:12:a9: b6:6b:5b:7a:56:f8:1f:c7:06:10:58:ba:01:f1:d8: eb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:30:26:75:C1:17:53:3D:65:95:50:BB:E0:2D:CC:07:5D:C5:17:4B X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/OTAmdcEXUz1llVC74C3MB13FF0s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.56.0/21 Signature Algorithm: sha256WithRSAEncryption 05:b8:d0:03:e4:f8:e8:bb:46:2e:2b:95:4c:fe:d5:04:e9:59: 96:c1:62:a5:9d:0b:9a:2a:b3:6c:1c:83:64:53:a3:dd:79:09: 1d:d4:5f:62:f5:a9:96:63:a5:f2:f1:95:88:e2:5e:29:2f:bb: f1:09:e5:9e:44:6a:25:d2:15:24:95:43:00:5e:01:32:1a:0a: f9:e7:92:c4:f3:10:7d:27:ca:ea:46:49:4f:ca:db:5d:7d:f1: f5:12:a3:78:11:3f:24:0e:4d:2c:ce:b7:7c:0e:a3:4a:4d:7e: 10:d5:a8:91:c1:d6:1b:d1:f2:11:23:c1:f6:fb:41:64:67:fd: ea:06:08:73:d8:47:91:32:37:68:d0:23:57:5c:c8:3e:f7:13: 87:e0:5c:17:7f:82:ac:e4:a8:f8:b4:b8:79:01:13:17:6c:51: 20:52:2b:34:00:9b:6b:9b:55:36:90:f7:97:01:c6:83:6a:cf: 62:dd:43:86:53:64:5e:77:43:7e:74:28:96:84:65:3f:db:ce: 03:48:59:95:65:dc:c1:45:2e:12:b7:5d:a7:36:62:9a:fb:50: 26:78:84:6d:56:85:a9:4d:40:c5:76:92:51:3e:ec:2e:2c:8c: 3f:6d:a2:c4:ef:97:2f:68:30:4d:63:a3:46:50:dd:5f:6f:27: ed:4c:83:19 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD3EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM5MzAyNjc1QzExNzUz M0Q2NTk1NTBCQkUwMkRDQzA3NURDNTE3NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx113zSqRqXig1keYNMg5qstfSQvGi9eCEP4cIO8lOsV4qSLhf 1/rbXYcgf01WMfWKbdnmN8iIzpnNx2iB7drNkKPCf34Ec/4QlTkOEOoC6mKTJuVT 6CQlfRSb2KRMU/J9piecj5WdKm4pPv/KdDs8UMCsf4iz96RsRDd2CskjPJGojCUJ Ymn7Ptair3iLSCjJMhIbNugH3q6Zl8hCJuB5knbQdpDuhwdENQNDyEH1xCRhz7EA +pTWcdxFhAolUj7s+WvWZh1/nMKBejuDmQxqI9GzBoGKF8gpDa/uI9ghnAivjLBe Hw5XwCFbmKQSqbZrW3pW+B/HBhBYugHx2OvdAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUOTAmdcEXUz1llVC74C3MB13FF0swHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9PVEFtZGNFWFV6MWxsVkM3NEMz TUIxM0ZGMHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDG5M4 MA0GCSqGSIb3DQEBCwUAA4IBAQAFuNAD5Pjou0YuK5VM/tUE6VmWwWKlnQuaKrNs HINkU6PdeQkd1F9i9amWY6Xy8ZWI4l4pL7vxCeWeRGol0hUklUMAXgEyGgr555LE 8xB9J8rqRklPyttdffH1EqN4ET8kDk0szrd8DqNKTX4Q1aiRwdYb0fIRI8H2+0Fk Z/3qBghz2EeRMjdo0CNXXMg+9xOH4FwXf4Ks5Kj4tLh5ARMXbFEgUis0AJtrm1U2 kPeXAcaDas9i3UOGU2Red0N+dCiWhGU/284DSFmVZdzBRS4St12nNmKa+1AmeIRt VoWpTUDFdpJRPuwuLIw/baLE75cvaDBNY6NGUN1fbyftTIMZ -----END CERTIFICATE-----Generated at Sun Aug 24 16:03:14 2025 by rpki-client