$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/wp9BItlpLmWtwFMQVsHDS47fIGc.roa File: wp9BItlpLmWtwFMQVsHDS47fIGc.roa (raw, json) Hash identifier: DAaqeW2ghKJAx7ZqyZGNgxqzMBqsJqrOQrhC5ZL4ffM= Subject key identifier: C2:9F:41:22:D9:69:2E:65:AD:C0:53:10:56:C1:C3:4B:8E:DF:20:67 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F82 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/wp9BItlpLmWtwFMQVsHDS47fIGc.roa Signing time: Fri 22 Aug 2025 08:51:26 +0000 ROA not before: Fri 22 Aug 2025 08:51:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 27.147.8.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3970 (0xf82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C29F4122D9692E65ADC0531056C1C34B8EDF2067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:bc:20:4f:95:16:73:3b:34:cc:59:67:f6: e4:b5:e1:be:24:36:4b:e9:12:84:6b:75:b8:8c:03: 8f:0a:a3:55:3b:1c:51:ae:ee:5f:68:75:fa:0e:f0: b6:65:46:20:f3:5f:5a:08:78:a7:07:ea:e5:46:d0: fc:b5:62:14:64:8c:5a:4b:a0:a8:88:f1:84:70:a2: 97:81:2a:a4:f4:65:c3:ab:f7:32:43:67:36:a6:f2: 45:55:e8:c8:3f:97:48:b0:c5:f9:16:a0:de:d5:79: a8:df:ad:76:58:e7:3c:b9:d4:f0:3a:2d:42:45:2f: 70:50:67:b1:69:70:0a:d8:3e:a4:87:e3:3b:2e:6a: 8d:de:9b:d0:ad:6d:ab:70:c9:ca:fa:72:b5:e3:ae: d8:29:e2:e6:77:6f:54:60:0c:ff:61:e6:0a:ae:1c: e7:17:69:eb:0f:2f:cc:57:02:e4:e9:ac:53:67:ff: 7e:a2:19:c3:32:fb:a1:eb:f5:ca:7f:96:e6:fe:88: fc:cc:21:99:3a:6b:76:2f:5a:a4:d9:ef:92:d1:09: 86:37:dc:7e:43:83:18:03:91:90:a1:2d:d0:3d:8d: 67:71:68:93:d3:b6:d8:93:af:b5:51:34:7e:ae:84: c9:18:44:dd:35:ae:47:d5:da:74:c7:17:83:11:14: 88:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9F:41:22:D9:69:2E:65:AD:C0:53:10:56:C1:C3:4B:8E:DF:20:67 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/wp9BItlpLmWtwFMQVsHDS47fIGc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 27.147.8.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:bf:44:89:e0:2c:c8:3e:be:4d:46:9e:3f:65:e0:2b:d0:ea: 20:1f:01:6b:f3:2d:39:59:c5:ab:a6:e7:81:f9:17:f2:78:e4: c5:93:2f:8a:46:c6:ef:22:0c:8e:71:14:ba:bd:64:98:34:de: 21:07:69:a2:b6:72:a9:95:c0:8b:16:b7:3f:26:c2:90:82:01: 73:4d:e6:cb:08:56:87:58:4d:fc:4a:bb:49:89:5b:75:93:03: c3:77:b4:44:4a:d2:82:76:dc:c7:ad:4c:bb:d3:13:ad:a3:50: 61:67:91:b6:c5:c8:d1:fd:d4:f0:b8:ae:e6:83:6e:bb:f0:0b: 13:8d:28:03:d7:ff:3f:c7:d7:69:7f:86:16:6c:b9:30:04:f7: 3b:f6:21:e3:e8:cb:22:8b:d3:b2:42:7a:25:65:96:b7:31:d7: 78:37:7c:1c:80:f7:0b:7a:b0:9b:e0:5a:c3:e3:3a:9e:66:4d: f1:a9:93:08:91:43:11:0a:e4:c4:0c:38:53:c2:c3:ab:2a:3d: 8d:de:37:b8:bc:a4:21:d6:ba:88:ba:a7:18:01:ff:da:75:76: 42:76:4e:c1:9b:3b:56:48:c7:33:9f:3c:43:83:81:f8:3a:b6: 8b:0e:7a:28:3f:68:c2:b5:6f:e1:5e:11:ed:91:c9:73:ab:21: 9a:c3:8f:51 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMyOUY0MTIyRDk2OTJF NjVBREMwNTMxMDU2QzFDMzRCOEVERjIwNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKGLwgT5UWczs0zFln9uS14b4kNkvpEoRrdbiMA48Ko1U7HFGu 7l9odfoO8LZlRiDzX1oIeKcH6uVG0Py1YhRkjFpLoKiI8YRwopeBKqT0ZcOr9zJD Zzam8kVV6Mg/l0iwxfkWoN7VeajfrXZY5zy51PA6LUJFL3BQZ7FpcArYPqSH4zsu ao3em9Ctbatwycr6crXjrtgp4uZ3b1RgDP9h5gquHOcXaesPL8xXAuTprFNn/36i GcMy+6Hr9cp/lub+iPzMIZk6a3YvWqTZ75LRCYY33H5DgxgDkZChLdA9jWdxaJPT ttiTr7VRNH6uhMkYRN01rkfV2nTHF4MRFIjnAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUwp9BItlpLmWtwFMQVsHDS47fIGcwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC93cDlCSXRscExtV3R3Rk1RVnNI RFM0N2ZJR2Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDG5MI MA0GCSqGSIb3DQEBCwUAA4IBAQBdv0SJ4CzIPr5NRp4/ZeAr0OogHwFr8y05WcWr pueB+RfyeOTFky+KRsbvIgyOcRS6vWSYNN4hB2mitnKplcCLFrc/JsKQggFzTebL CFaHWE38SrtJiVt1kwPDd7REStKCdtzHrUy70xOto1BhZ5G2xcjR/dTwuK7mg267 8AsTjSgD1/8/x9dpf4YWbLkwBPc79iHj6Msii9OyQnolZZa3Mdd4N3wcgPcLerCb 4FrD4zqeZk3xqZMIkUMRCuTEDDhTwsOrKj2N3je4vKQh1rqIuqcYAf/adXZCdk7B mztWSMcznzxDg4H4OraLDnooP2jCtW/hXhHtkclzqyGaw49R -----END CERTIFICATE-----Generated at Sun Aug 24 16:05:09 2025 by rpki-client