$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/BZrRqaIWmCCF01JDtv4N2qE-tUQ.roa File: BZrRqaIWmCCF01JDtv4N2qE-tUQ.roa (raw, json) Hash identifier: PDH4fmyuQ0zZroAHk8IAHVvcR1LGYW+i5Yr5czjaNZE= Subject key identifier: 05:9A:D1:A9:A2:16:98:20:85:D3:52:43:B6:FE:0D:DA:A1:3E:B5:44 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F81 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/BZrRqaIWmCCF01JDtv4N2qE-tUQ.roa Signing time: Fri 22 Aug 2025 08:51:26 +0000 ROA not before: Fri 22 Aug 2025 08:51:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 61.57.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3969 (0xf81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=059AD1A9A216982085D35243B6FE0DDAA13EB544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:45:98:51:c0:d4:4b:5c:39:d1:47:42:b5: 1e:e3:1b:42:b2:6f:73:4d:df:ed:1d:ec:3f:3a:7c: f8:fc:19:cf:64:88:85:44:28:53:ac:c1:57:e5:48: 84:95:b8:c5:b7:d3:e9:c8:9f:2b:09:0a:7f:3d:d2: 0c:1f:c0:bf:ea:88:2f:6c:73:cc:a5:6b:a2:ab:8b: 2f:29:ea:10:59:d7:33:ac:2a:c2:93:81:3f:3b:31: 0e:0a:2a:b7:f3:7e:e6:7d:75:55:d1:bf:37:14:21: 72:0d:90:3a:5a:be:fa:4c:78:c7:5a:5a:7d:c3:3d: 41:ff:88:7d:45:53:27:92:54:53:69:47:59:33:e5: 77:65:1c:4a:d2:d7:2d:26:f6:bb:7d:37:1a:71:3b: f6:93:d0:c0:de:4d:cf:be:00:a7:5e:55:d8:26:ac: 97:72:07:77:f8:ba:62:7a:c3:4d:ed:34:c3:f5:ed: d6:0b:04:71:d4:35:81:3c:09:75:5b:3c:df:a5:db: 94:f6:dc:ee:2e:68:1a:96:77:11:d9:37:72:a1:10: 4e:ec:75:5c:b4:b4:0a:0c:aa:da:32:7b:c3:b4:ca: 34:a3:0b:5e:ab:1c:6e:ca:27:4f:e6:73:46:f3:6b: a1:69:28:ab:88:ec:4b:99:ec:83:10:7a:96:88:07: 1f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9A:D1:A9:A2:16:98:20:85:D3:52:43:B6:FE:0D:DA:A1:3E:B5:44 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/BZrRqaIWmCCF01JDtv4N2qE-tUQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.57.152.0/22 Signature Algorithm: sha256WithRSAEncryption 9e:95:b0:de:6c:f8:84:41:70:78:52:03:95:ff:1d:52:ba:01: 05:e7:a0:a2:ec:45:c1:44:85:8a:31:28:cd:14:ee:60:b4:59: 38:d0:3c:db:34:5e:6a:69:97:9c:8d:be:71:c3:6c:99:9f:15: 26:ff:da:8e:6e:c1:93:3e:ad:e1:b2:ab:d1:11:64:e8:18:59: a1:a3:55:60:a4:91:a8:82:bf:c4:4a:5e:c6:84:d5:02:1a:a4: c7:1b:34:b0:c0:2b:ec:90:84:15:7b:a8:4e:5d:15:3e:5a:1c: 5a:48:9e:a5:fd:6a:ec:de:c0:e7:70:cf:97:3a:f9:93:8b:81: 6b:bd:ef:4f:0d:0d:0b:33:7e:2a:fe:db:97:7e:2d:16:ae:d7: 8f:0a:4e:31:e7:04:43:da:ea:17:d1:13:60:18:44:98:9e:f5: 6d:83:e3:29:eb:d3:e0:bf:65:ae:02:b6:52:c1:d8:14:aa:52: d4:6e:91:b9:72:77:f3:7e:c0:ca:60:c3:f2:ce:79:9f:af:48: 31:1a:67:09:da:d3:1d:9e:59:0d:df:fb:73:82:b7:07:6a:d1: 36:2c:41:f9:45:48:82:ee:b6:38:83:cd:90:b2:e5:cf:0d:2b: b9:04:1b:03:59:e0:c5:03:34:02:3f:4c:83:b9:cc:c0:bc:8e: 10:d0:c8:3d -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD4EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA1OUFEMUE5QTIxNjk4 MjA4NUQzNTI0M0I2RkUwRERBQTEzRUI1NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG7EWYUcDUS1w50UdCtR7jG0Kyb3NN3+0d7D86fPj8Gc9kiIVE KFOswVflSISVuMW30+nInysJCn890gwfwL/qiC9sc8yla6Kriy8p6hBZ1zOsKsKT gT87MQ4KKrfzfuZ9dVXRvzcUIXINkDpavvpMeMdaWn3DPUH/iH1FUyeSVFNpR1kz 5XdlHErS1y0m9rt9NxpxO/aT0MDeTc++AKdeVdgmrJdyB3f4umJ6w03tNMP17dYL BHHUNYE8CXVbPN+l25T23O4uaBqWdxHZN3KhEE7sdVy0tAoMqtoye8O0yjSjC16r HG7KJ0/mc0bza6FpKKuI7EuZ7IMQepaIBx9lAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUBZrRqaIWmCCF01JDtv4N2qE+tUQwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9CWnJScWFJV21DQ0YwMUpEdHY0 TjJxRS10VVEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPTmY MA0GCSqGSIb3DQEBCwUAA4IBAQCelbDebPiEQXB4UgOV/x1SugEF56Ci7EXBRIWK MSjNFO5gtFk40DzbNF5qaZecjb5xw2yZnxUm/9qObsGTPq3hsqvREWToGFmho1Vg pJGogr/ESl7GhNUCGqTHGzSwwCvskIQVe6hOXRU+WhxaSJ6l/Wrs3sDncM+XOvmT i4Frve9PDQ0LM34q/tuXfi0WrtePCk4x5wRD2uoX0RNgGESYnvVtg+Mp69Pgv2Wu ArZSwdgUqlLUbpG5cnfzfsDKYMPyznmfr0gxGmcJ2tMdnlkN3/tzgrcHatE2LEH5 RUiC7rY4g82QsuXPDSu5BBsDWeDFAzQCP0yDuczAvI4Q0Mg9 -----END CERTIFICATE-----Generated at Sat Oct 25 17:39:50 2025 by rpki-client