$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/WyEhlQTdgOaMNiUuljRDauH1YBY.roa File: WyEhlQTdgOaMNiUuljRDauH1YBY.roa (raw, json) Hash identifier: RpJZ6DAOw8hq63efjNKlJxtoQcIeypGC6v1C5p2Iipw= Subject key identifier: 5B:21:21:95:04:DD:80:E6:8C:36:25:2E:96:34:43:6A:E1:F5:60:16 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F78 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/WyEhlQTdgOaMNiUuljRDauH1YBY.roa Signing time: Fri 22 Aug 2025 08:51:25 +0000 ROA not before: Fri 22 Aug 2025 08:51:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 45.64.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3960 (0xf78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5B21219504DD80E68C36252E9634436AE1F56016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3f:6d:d8:15:d6:4c:8b:c6:58:c5:8c:95:f1: 9c:7e:43:30:e4:3a:6e:9e:1b:b9:5f:65:ec:54:95: 1f:58:17:2e:32:15:c6:ee:fb:41:b4:8c:f7:c7:6c: 57:8f:30:ec:3f:0d:42:ea:4c:95:4f:58:da:2d:8d: d5:f2:a9:8b:8d:72:e3:2d:0f:10:43:48:16:92:6c: be:4b:16:6f:00:12:04:f1:48:fb:ef:51:15:ef:35: 9e:ab:61:f2:04:2f:0d:b6:e9:79:98:22:43:d1:4b: dd:ab:d1:b2:c3:84:4d:03:5d:5d:f8:f2:b0:b4:4c: bf:bf:55:03:69:aa:2b:bd:ae:e2:8f:50:ac:c5:59: d8:1b:13:c7:40:86:e6:c0:8f:6d:59:92:36:bb:83: eb:f0:95:51:92:15:5d:30:d6:48:11:d0:d2:05:10: 9d:e4:76:29:0f:68:36:9a:10:99:45:5c:fd:9a:5b: b4:53:03:ac:c4:92:43:2d:c7:89:ad:e9:72:39:e9: b0:5b:62:11:61:cb:39:19:e1:b3:51:f8:35:ff:bd: 53:8e:fc:14:13:4e:b4:85:21:46:37:d8:8c:a7:33: a7:24:fa:b7:2c:84:cc:01:85:c3:70:4b:8d:28:04: 28:15:1f:d4:fe:d8:c3:bc:2b:1b:ac:7f:dd:8f:66: 70:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:21:21:95:04:DD:80:E6:8C:36:25:2E:96:34:43:6A:E1:F5:60:16 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/WyEhlQTdgOaMNiUuljRDauH1YBY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 45.64.232.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:51:1b:34:26:b9:90:90:a2:e8:30:aa:f0:13:e6:07:e9:0c: 9f:de:0a:a5:b5:1a:e4:33:7a:69:1b:46:97:94:26:cb:c6:cd: 01:b0:20:64:07:f3:96:f3:b5:39:0a:b3:b4:b8:b0:71:15:fb: 0f:a9:0c:49:2f:38:db:47:de:8d:77:59:45:a6:84:bd:e1:c2: e0:f3:45:3c:7a:bd:66:59:d1:47:db:d5:79:7f:2e:e1:69:b6: 81:32:db:4a:29:3e:5f:8a:14:f9:1b:85:56:9c:da:af:d4:0b: ca:af:61:de:c9:a5:1a:8f:c6:bd:8f:ad:26:41:8b:1b:01:c5: 0a:18:3a:30:c4:6b:4b:0d:63:fc:fa:d1:b9:7c:42:85:39:f3: ad:a1:51:6a:8a:a2:24:a6:44:34:31:e8:67:bb:d6:65:45:ec: 81:88:ec:f6:19:4a:57:fe:2f:80:14:a3:ed:f4:5d:34:1e:ec: 61:a0:6c:4b:40:3b:e3:c1:1f:cc:51:89:f9:a6:a7:ec:b5:94: a0:12:55:89:d2:9f:20:3f:5f:2e:aa:cf:46:9e:81:ff:d4:95: 5a:a6:59:94:85:62:ab:4b:d4:3d:0c:a1:de:fb:68:b9:fb:1c: 3f:29:10:e7:49:b4:92:e4:57:70:4a:a8:48:15:f2:41:b7:fc: f1:63:1d:00 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVCMjEyMTk1MDRERDgw RTY4QzM2MjUyRTk2MzQ0MzZBRTFGNTYwMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFP23YFdZMi8ZYxYyV8Zx+QzDkOm6eG7lfZexUlR9YFy4yFcbu +0G0jPfHbFePMOw/DULqTJVPWNotjdXyqYuNcuMtDxBDSBaSbL5LFm8AEgTxSPvv URXvNZ6rYfIELw226XmYIkPRS92r0bLDhE0DXV348rC0TL+/VQNpqiu9ruKPUKzF WdgbE8dAhubAj21Zkja7g+vwlVGSFV0w1kgR0NIFEJ3kdikPaDaaEJlFXP2aW7RT A6zEkkMtx4mt6XI56bBbYhFhyzkZ4bNR+DX/vVOO/BQTTrSFIUY32IynM6ck+rcs hMwBhcNwS40oBCgVH9T+2MO8Kxusf92PZnCrAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUWyEhlQTdgOaMNiUuljRDauH1YBYwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9XeUVobFFUZGdPYU1OaVV1bGpS RGF1SDFZQlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUDo MA0GCSqGSIb3DQEBCwUAA4IBAQAdURs0JrmQkKLoMKrwE+YH6Qyf3gqltRrkM3pp G0aXlCbLxs0BsCBkB/OW87U5CrO0uLBxFfsPqQxJLzjbR96Nd1lFpoS94cLg80U8 er1mWdFH29V5fy7habaBMttKKT5fihT5G4VWnNqv1AvKr2HeyaUaj8a9j60mQYsb AcUKGDowxGtLDWP8+tG5fEKFOfOtoVFqiqIkpkQ0Mehnu9ZlReyBiOz2GUpX/i+A FKPt9F00HuxhoGxLQDvjwR/MUYn5pqfstZSgElWJ0p8gP18uqs9GnoH/1JVaplmU hWKrS9Q9DKHe+2i5+xw/KRDnSbSS5FdwSqhIFfJBt/zxYx0A -----END CERTIFICATE-----Generated at Sun Aug 24 16:08:54 2025 by rpki-client