$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/qDt_rU4ABPHycba_j-YYvs45dys.roa File: qDt_rU4ABPHycba_j-YYvs45dys.roa (raw, json) Hash identifier: n4GHSRTGP6tLwWE3oPBFXOQvo7URoQD1pEscFSTKJGU= Subject key identifier: A8:3B:7F:AD:4E:00:04:F1:F2:71:B6:BF:8F:E6:18:BE:CE:39:77:2B Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F5F Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/qDt_rU4ABPHycba_j-YYvs45dys.roa Signing time: Fri 22 Aug 2025 08:51:17 +0000 ROA not before: Fri 22 Aug 2025 08:51:17 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 103.224.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3935 (0xf5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:17 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A83B7FAD4E0004F1F271B6BF8FE618BECE39772B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6e:f9:39:02:be:f9:54:02:fe:0d:fe:80:b3: 26:6b:05:9a:9d:d1:4f:53:12:68:54:d4:95:e1:1b: 0e:32:a6:8b:10:12:4c:d8:bd:48:5f:32:00:8a:5b: a0:35:e0:70:d7:0b:fd:73:73:ac:e0:cb:bc:00:90: 02:42:69:3f:d2:3f:41:e7:6d:77:24:06:1d:0f:15: a1:5b:7c:9e:bb:02:ff:2e:d7:96:81:7d:74:b0:bf: d6:bb:8c:af:c3:5c:75:ca:26:91:87:9d:e0:57:2e: b9:67:50:18:cd:d7:03:09:cc:17:64:e4:34:f5:2d: bc:e5:61:3d:53:0f:0c:5d:9e:14:b9:3a:56:05:a6: 4e:7a:7d:98:3f:6b:41:8a:b4:5a:0e:4f:5c:ca:ba: 37:e9:8d:9d:a2:76:55:fa:7d:35:36:10:58:01:24: e9:bc:a1:3f:86:46:95:d8:c2:20:c5:05:03:f3:17: f7:ed:4c:f0:3c:34:4f:83:60:ff:b4:a0:2d:db:6e: ae:27:44:6a:40:bc:eb:cb:47:32:0a:0d:97:d7:9a: 26:e6:9b:be:e9:ed:c8:7d:bb:34:9e:e2:d0:c9:d3: 8d:a0:37:70:a5:28:0a:22:04:91:9e:f8:05:25:4e: f1:ef:8a:6a:65:ee:80:74:be:51:5d:ea:e5:d9:bc: 9f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3B:7F:AD:4E:00:04:F1:F2:71:B6:BF:8F:E6:18:BE:CE:39:77:2B X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/qDt_rU4ABPHycba_j-YYvs45dys.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.224.200.0/22 Signature Algorithm: sha256WithRSAEncryption 26:90:3f:58:3c:d2:7a:14:0c:e6:88:0c:25:ec:da:7f:97:02: 51:e8:ab:53:3d:ab:0c:db:8a:b0:6e:d4:3e:4b:dd:ca:9f:66: e0:b5:b7:95:52:d9:01:74:7d:0f:16:ed:81:38:5f:4c:76:3c: 08:af:09:5e:53:31:11:06:fe:1b:20:4a:23:68:3f:c4:73:3d: 9f:cb:8d:20:29:14:91:07:09:da:84:af:a6:c3:33:b2:3e:f3: 19:73:6e:8c:b0:82:03:b4:b8:3d:74:1d:20:77:13:f8:2e:02: ef:86:8d:b1:35:9f:ae:42:2c:b0:61:48:bc:a5:10:83:fe:17: df:61:e6:0f:cb:0b:ef:83:df:b8:9d:02:b4:a2:7c:87:50:bf: 70:4d:2a:93:d0:b3:c7:69:ef:18:d4:29:5e:a1:52:d3:d4:3a: 31:c9:9b:b4:08:66:7b:36:eb:6e:d9:2b:28:c9:5f:f3:9c:48: 02:65:63:ba:b8:94:b8:dd:42:98:53:85:09:00:bf:8b:41:04: 52:b8:6e:97:08:eb:39:85:65:59:d8:7a:a3:73:48:50:63:33: 82:3a:cb:12:4a:53:28:2d:d2:29:d1:79:f9:f5:bc:46:bd:df: 4d:27:b9:06:d3:d4:57:1a:05:87:9b:ff:e3:79:45:63:03:a4: 47:5f:3a:44 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD18wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE4M0I3RkFENEUwMDA0 RjFGMjcxQjZCRjhGRTYxOEJFQ0UzOTc3MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUbvk5Ar75VAL+Df6AsyZrBZqd0U9TEmhU1JXhGw4yposQEkzY vUhfMgCKW6A14HDXC/1zc6zgy7wAkAJCaT/SP0HnbXckBh0PFaFbfJ67Av8u15aB fXSwv9a7jK/DXHXKJpGHneBXLrlnUBjN1wMJzBdk5DT1LbzlYT1TDwxdnhS5OlYF pk56fZg/a0GKtFoOT1zKujfpjZ2idlX6fTU2EFgBJOm8oT+GRpXYwiDFBQPzF/ft TPA8NE+DYP+0oC3bbq4nRGpAvOvLRzIKDZfXmibmm77p7ch9uzSe4tDJ042gN3Cl KAoiBJGe+AUlTvHvimpl7oB0vlFd6uXZvJ8bAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUqDt/rU4ABPHycba/j+YYvs45dyswHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9xRHRfclU0QUJQSHljYmFfai1Z WXZzNDVkeXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+DI MA0GCSqGSIb3DQEBCwUAA4IBAQAmkD9YPNJ6FAzmiAwl7Np/lwJR6KtTPasM24qw btQ+S93Kn2bgtbeVUtkBdH0PFu2BOF9MdjwIrwleUzERBv4bIEojaD/Ecz2fy40g KRSRBwnahK+mwzOyPvMZc26MsIIDtLg9dB0gdxP4LgLvho2xNZ+uQiywYUi8pRCD /hffYeYPywvvg9+4nQK0onyHUL9wTSqT0LPHae8Y1CleoVLT1DoxyZu0CGZ7Nutu 2SsoyV/znEgCZWO6uJS43UKYU4UJAL+LQQRSuG6XCOs5hWVZ2Hqjc0hQYzOCOssS SlMoLdIp0Xn59bxGvd9NJ7kG09RXGgWHm//jeUVjA6RHXzpE -----END CERTIFICATE-----Generated at Sun Aug 24 16:03:14 2025 by rpki-client