$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/nPV2zrHA-5en4aksy9-8HgfBcHY.roa File: nPV2zrHA-5en4aksy9-8HgfBcHY.roa (raw, json) Hash identifier: 0iz1mMNZcDxRgKo6X2sBuX8U6dpgZg54zmQQZy75Bsc= Subject key identifier: 9C:F5:76:CE:B1:C0:FB:97:A7:E1:A9:2C:CB:DF:BC:1E:07:C1:70:76 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F5C Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/nPV2zrHA-5en4aksy9-8HgfBcHY.roa Signing time: Fri 22 Aug 2025 08:51:16 +0000 ROA not before: Fri 22 Aug 2025 08:51:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 27.147.0.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3932 (0xf5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9CF576CEB1C0FB97A7E1A92CCBDFBC1E07C17076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:30:01:b1:f0:27:71:dc:11:97:ae:bb:12:23: bf:d8:8b:a7:a4:43:77:44:bd:a9:4c:6c:18:6b:e9: f6:0f:eb:1a:27:d5:9f:ac:51:07:62:70:b4:58:b6: 2d:1e:ff:99:8a:ab:5d:80:de:37:b2:80:e5:01:b0: 9a:5d:45:58:0f:37:eb:ea:45:5f:27:4d:56:1c:27: df:1e:8f:90:35:2f:c1:c3:d1:d0:ae:79:12:5e:cb: b4:ca:85:a2:36:a0:f6:e6:01:9b:5c:ac:29:72:05: 24:22:e3:a0:7f:6b:02:4c:cc:06:97:d4:a4:91:c6: ed:5c:21:ba:96:0f:05:04:36:41:da:64:66:28:a8: 29:f4:1f:e6:e8:86:e7:60:19:be:7e:56:c9:02:81: b2:a6:3a:2f:dc:eb:22:ee:fa:92:87:c2:75:15:e3: e4:95:4b:d2:cf:d9:89:00:ac:2f:90:2b:6e:bf:d0: 4b:94:14:0b:c0:d7:72:f3:9a:08:9e:c7:b4:5e:1a: c1:df:64:1b:dd:26:2d:e4:06:29:22:bf:91:ca:7e: c3:04:ff:16:b7:e5:59:3e:37:0f:20:bf:79:97:ec: 55:cb:a4:60:7e:24:34:34:c7:03:b6:a0:6e:45:41: 56:6b:99:b4:b9:ee:df:f7:d2:7a:71:f5:5a:ca:ce: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F5:76:CE:B1:C0:FB:97:A7:E1:A9:2C:CB:DF:BC:1E:07:C1:70:76 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/nPV2zrHA-5en4aksy9-8HgfBcHY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.0.0/21 Signature Algorithm: sha256WithRSAEncryption 67:bf:c4:9a:74:1b:7e:94:09:cb:56:88:7c:9a:06:ba:73:26: bd:00:ba:44:cd:c5:ac:c0:73:e5:b9:b5:b3:00:0b:d5:ec:23: 08:49:89:9d:97:eb:8b:f5:d4:fa:17:9f:57:f5:6d:35:ec:b8: 39:c6:62:91:16:cc:b7:cf:99:d3:19:6b:f6:ba:31:a0:94:df: 1d:87:e3:ff:9f:26:2b:cc:00:42:ab:9a:79:50:d1:c8:e1:23: 46:dc:8d:36:05:fe:8a:d8:1d:87:81:22:b4:e1:75:ae:b5:80: 02:44:e3:9d:7e:0c:95:95:ec:d6:ed:63:6f:71:e5:78:c6:c2: 1b:23:90:b4:e1:c6:8e:84:69:02:ff:e6:5b:d4:75:0d:a6:b9: fa:65:a4:ae:38:d8:b1:c1:7e:04:66:dc:5f:d1:0f:a6:f0:5b: 1d:70:f8:2b:06:a7:3d:49:19:8c:e3:be:16:df:08:ae:1c:59: 00:0a:ef:d8:ee:6e:4d:2b:b2:bb:6c:69:8a:f2:71:2a:c8:a7: 25:57:d5:4b:cc:df:d3:fc:3a:a3:79:8e:f9:45:60:03:67:bc: d7:f6:2c:90:72:9f:23:6a:45:22:d7:b4:d3:f3:fa:2f:c1:74: 77:26:ad:8d:36:cd:b6:30:dc:58:fa:04:17:a7:b9:27:8d:3d: 77:6a:64:4f -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD1wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlDRjU3NkNFQjFDMEZC OTdBN0UxQTkyQ0NCREZCQzFFMDdDMTcwNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdMAGx8Cdx3BGXrrsSI7/Yi6ekQ3dEvalMbBhr6fYP6xon1Z+s UQdicLRYti0e/5mKq12A3jeygOUBsJpdRVgPN+vqRV8nTVYcJ98ej5A1L8HD0dCu eRJey7TKhaI2oPbmAZtcrClyBSQi46B/awJMzAaX1KSRxu1cIbqWDwUENkHaZGYo qCn0H+bohudgGb5+VskCgbKmOi/c6yLu+pKHwnUV4+SVS9LP2YkArC+QK26/0EuU FAvA13Lzmgiex7ReGsHfZBvdJi3kBikiv5HKfsME/xa35Vk+Nw8gv3mX7FXLpGB+ JDQ0xwO2oG5FQVZrmbS57t/30npx9VrKzj1hAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUnPV2zrHA+5en4aksy9+8HgfBcHYwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9uUFYyenJIQS01ZW40YWtzeTkt OEhnZkJjSFkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDG5MA MA0GCSqGSIb3DQEBCwUAA4IBAQBnv8SadBt+lAnLVoh8mga6cya9ALpEzcWswHPl ubWzAAvV7CMISYmdl+uL9dT6F59X9W017Lg5xmKRFsy3z5nTGWv2ujGglN8dh+P/ nyYrzABCq5p5UNHI4SNG3I02Bf6K2B2HgSK04XWutYACROOdfgyVlezW7WNvceV4 xsIbI5C04caOhGkC/+Zb1HUNprn6ZaSuONixwX4EZtxf0Q+m8FsdcPgrBqc9SRmM 474W3wiuHFkACu/Y7m5NK7K7bGmK8nEqyKclV9VLzN/T/DqjeY75RWADZ7zX9iyQ cp8jakUi17TT8/ovwXR3Jq2NNs22MNxY+gQXp7knjT13amRP -----END CERTIFICATE-----Generated at Sun Aug 24 16:07:09 2025 by rpki-client