$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/3gXM-g-ppa-s12qqWWqfwpRt0ec.roa File: 3gXM-g-ppa-s12qqWWqfwpRt0ec.roa (raw, json) Hash identifier: 3vnhBhL0qBwyWXh/5/pPC8V9QbFsqOndKDut6yHaaIA= Subject key identifier: DE:05:CC:FA:0F:A9:A5:AF:AC:D7:6A:AA:59:6A:9F:C2:94:6D:D1:E7 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F6F Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/3gXM-g-ppa-s12qqWWqfwpRt0ec.roa Signing time: Fri 22 Aug 2025 08:51:22 +0000 ROA not before: Fri 22 Aug 2025 08:51:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 124.155.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3951 (0xf6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=DE05CCFA0FA9A5AFACD76AAA596A9FC2946DD1E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fd:61:c8:5f:82:b6:6b:2c:b7:09:44:47:6e: f1:01:b7:26:ce:b7:05:a1:ef:dd:29:c9:9d:a2:40: 67:db:5c:f3:6e:16:c4:5e:20:b2:15:9f:84:67:cc: 9b:c5:60:a8:1a:7b:08:40:17:aa:e2:a6:f7:18:6b: 3d:a0:81:0a:f7:ab:aa:d4:fb:07:0f:d7:5d:3c:bc: 38:1e:74:26:0e:9b:33:d3:1d:8f:01:1e:b5:79:cb: 69:18:53:33:07:47:b7:87:55:fe:85:a7:58:dd:2e: 5f:ff:1e:ae:d7:ca:55:88:7b:f3:a0:70:bd:57:3c: b0:42:0d:84:4c:d5:85:a0:9f:91:3e:38:30:be:e1: 47:0d:85:3b:ce:1e:b7:dc:ec:4b:9d:5a:14:85:ed: a3:de:65:3c:9d:e4:ac:f6:59:a3:ee:88:d1:c4:5b: ec:5a:de:18:ed:f9:d2:40:0e:82:08:7e:d1:70:44: 0d:41:d1:38:ec:51:26:03:d7:e7:8b:de:61:a5:c4: 38:52:5f:13:73:67:35:4b:e9:48:a2:89:12:80:ac: 9b:77:9e:f6:ae:91:d5:ef:59:e8:a2:5c:c5:4d:9e: 14:50:12:b2:02:1e:eb:ac:90:97:7a:84:85:d8:f2: 6d:f8:28:5a:9a:98:ef:8c:73:87:c9:1e:9c:95:3a: 9d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:05:CC:FA:0F:A9:A5:AF:AC:D7:6A:AA:59:6A:9F:C2:94:6D:D1:E7 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/3gXM-g-ppa-s12qqWWqfwpRt0ec.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.155.160.0/21 Signature Algorithm: sha256WithRSAEncryption 78:cc:5c:be:31:ee:ff:11:59:1f:e0:d6:69:aa:6c:2b:91:fb: 1c:36:79:1b:0c:dc:34:7b:20:04:9f:b8:fa:9e:e6:d2:15:3c: a9:a3:08:c1:ba:48:34:2b:0c:49:50:24:3f:32:26:8a:1a:d0: 48:4e:f4:31:7c:b4:73:88:c9:bb:40:a5:d0:d6:c4:ad:2e:69: 4d:f9:e8:c0:e3:09:0b:39:f4:6f:3a:2c:b1:15:45:42:56:b0: f8:f0:fa:0b:95:c8:6b:5b:48:2e:a7:6b:4e:56:d4:34:f8:3e: 10:15:22:d4:15:2a:0f:9d:d8:f2:7a:44:5c:87:99:48:26:31: 9c:56:38:d9:df:db:5e:1a:f2:11:ee:df:5f:a4:d1:3b:04:3f: c8:45:bf:d4:41:f6:5b:b7:55:d9:4a:d2:df:57:82:f6:5e:19: f1:0d:c8:6b:ec:d0:5c:a2:9a:55:32:c9:46:0e:9c:47:cd:3b: 55:89:4e:dd:b1:28:a5:71:8a:08:21:b9:ae:aa:b1:5e:e7:5d: fc:db:7c:7a:25:30:5b:ec:a0:93:ed:9a:c7:ca:eb:b1:60:76: 9e:1b:b6:54:9d:ae:1a:45:0e:d4:ec:c4:ca:e5:51:ba:36:7c: bf:b7:d5:12:04:3c:f9:64:ba:92:f3:ec:d1:55:66:98:7e:d0: 71:15:fb:cd -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKERFMDVDQ0ZBMEZBOUE1 QUZBQ0Q3NkFBQTU5NkE5RkMyOTQ2REQxRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6/WHIX4K2ayy3CURHbvEBtybOtwWh790pyZ2iQGfbXPNuFsRe ILIVn4RnzJvFYKgaewhAF6ripvcYaz2ggQr3q6rU+wcP1108vDgedCYOmzPTHY8B HrV5y2kYUzMHR7eHVf6Fp1jdLl//Hq7XylWIe/OgcL1XPLBCDYRM1YWgn5E+ODC+ 4UcNhTvOHrfc7EudWhSF7aPeZTyd5Kz2WaPuiNHEW+xa3hjt+dJADoIIftFwRA1B 0TjsUSYD1+eL3mGlxDhSXxNzZzVL6UiiiRKArJt3nvaukdXvWeiiXMVNnhRQErIC HuuskJd6hIXY8m34KFqamO+Mc4fJHpyVOp3HAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQU3gXM+g+ppa+s12qqWWqfwpRt0ecwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC8zZ1hNLWctcHBhLXMxMnFxV1dx ZndwUnQwZWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDfJug MA0GCSqGSIb3DQEBCwUAA4IBAQB4zFy+Me7/EVkf4NZpqmwrkfscNnkbDNw0eyAE n7j6nubSFTypowjBukg0KwxJUCQ/MiaKGtBITvQxfLRziMm7QKXQ1sStLmlN+ejA 4wkLOfRvOiyxFUVCVrD48PoLlchrW0gup2tOVtQ0+D4QFSLUFSoPndjyekRch5lI JjGcVjjZ39teGvIR7t9fpNE7BD/IRb/UQfZbt1XZStLfV4L2XhnxDchr7NBcoppV MslGDpxHzTtViU7dsSilcYoIIbmuqrFe513823x6JTBb7KCT7ZrHyuuxYHaeG7ZU na4aRQ7U7MTK5VG6Nny/t9USBDz5ZLqS8+zRVWaYftBxFfvN -----END CERTIFICATE-----Generated at Sat Oct 25 17:39:47 2025 by rpki-client