$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/EdSrmHzMT6-W0pvTtLXiLYJRAvY.roa File: EdSrmHzMT6-W0pvTtLXiLYJRAvY.roa (raw, json) Hash identifier: 72Wjgh5433Q3JwLCDAqMeu0rmvzFX8us+vIthCbW53o= Subject key identifier: 11:D4:AB:98:7C:CC:4F:AF:96:D2:9B:D3:B4:B5:E2:2D:82:51:02:F6 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F7D Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/EdSrmHzMT6-W0pvTtLXiLYJRAvY.roa Signing time: Fri 22 Aug 2025 08:51:26 +0000 ROA not before: Fri 22 Aug 2025 08:51:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 124.155.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3965 (0xf7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=11D4AB987CCC4FAF96D29BD3B4B5E22D825102F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:d1:4d:fa:58:1a:ea:5b:3e:4d:ee:2b:ec: 6c:a3:14:37:1e:61:73:58:fe:6d:37:a8:19:3e:7b: eb:55:d3:e6:73:9b:02:66:6d:63:70:a8:46:92:5b: 7f:79:e8:8a:1e:76:cd:9d:d3:f8:01:73:36:29:f0: 69:db:c1:d5:01:24:a9:1a:5d:67:5e:ab:ad:1f:77: b1:ea:43:d4:93:9c:19:01:95:07:cc:ae:ad:c8:16: 00:17:df:52:35:5c:af:e9:5d:61:0f:aa:22:1b:f0: 31:1a:87:16:e4:7f:31:4d:c1:37:a9:45:5a:05:cc: f7:e6:cd:a9:77:61:df:f6:ed:ce:1d:b8:20:c9:58: 1b:2e:48:00:37:6e:78:c9:f4:d2:3b:92:08:48:f1: 2f:d8:ef:a4:de:99:5e:7c:e9:ce:e8:42:dd:d4:42: d4:c1:3b:4f:b4:3c:c6:3d:5d:0c:b0:26:db:a2:ab: ef:bf:ed:1c:c9:03:13:7b:e6:70:11:59:33:8a:1f: 4b:73:7f:42:56:96:92:15:02:ba:25:06:d9:e3:bf: 2e:67:7c:bc:fb:ca:24:65:b7:8b:9d:80:96:3e:46: d2:20:f2:7b:05:7c:22:14:4f:9b:fd:ed:ef:03:73: 5b:f4:3c:ed:8b:4b:0b:a4:02:64:74:55:60:ed:c6: 4c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D4:AB:98:7C:CC:4F:AF:96:D2:9B:D3:B4:B5:E2:2D:82:51:02:F6 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/EdSrmHzMT6-W0pvTtLXiLYJRAvY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.155.170.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:c5:e5:98:9b:27:b7:38:d2:68:07:0b:f7:e1:95:fb:9a:f1: b7:09:a1:cd:89:6a:f7:a9:0f:45:27:28:ed:dd:85:fb:f4:ba: 4a:e7:77:81:23:c4:d8:1a:2a:00:1f:19:aa:4a:59:eb:cb:60: 28:ce:b0:9f:c9:e7:e8:0f:5f:24:92:db:94:65:48:87:f3:37: 55:03:01:e1:35:f9:69:50:e0:1c:86:f9:b1:9a:74:5e:3e:3e: 96:73:28:72:85:cc:1b:3a:1f:3c:73:c0:e7:4c:13:e6:fd:ed: 0c:21:ca:e5:dd:97:63:cf:3f:cd:0e:8e:89:a9:ad:a7:7b:8a: 6d:65:30:22:71:eb:cd:ee:4f:84:99:74:01:c5:4c:ad:85:69: 74:86:cb:72:60:0a:99:63:79:79:ce:ba:96:71:29:cd:ab:b1: 2a:16:1d:c2:b3:44:55:b1:78:2a:af:71:d1:58:59:14:78:16: 87:22:a4:ca:fd:53:db:92:23:f6:9b:da:87:1f:9d:d8:aa:79: f9:36:d9:a0:75:bc:b4:fe:10:3e:f8:de:50:39:be:a4:7e:ed: 0a:ea:52:09:24:69:80:be:a2:cc:37:50:69:7e:70:e7:00:2f: 25:fb:b5:27:9f:62:60:e2:8c:05:f8:55:b7:99:8d:b4:b9:0e: f7:35:90:12 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD30wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDExRDRBQjk4N0NDQzRG QUY5NkQyOUJEM0I0QjVFMjJEODI1MTAyRjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOSNFN+lga6ls+Te4r7GyjFDceYXNY/m03qBk+e+tV0+ZzmwJm bWNwqEaSW3956Ioeds2d0/gBczYp8GnbwdUBJKkaXWdeq60fd7HqQ9STnBkBlQfM rq3IFgAX31I1XK/pXWEPqiIb8DEahxbkfzFNwTepRVoFzPfmzal3Yd/27c4duCDJ WBsuSAA3bnjJ9NI7kghI8S/Y76TemV586c7oQt3UQtTBO0+0PMY9XQywJtuiq++/ 7RzJAxN75nARWTOKH0tzf0JWlpIVArolBtnjvy5nfLz7yiRlt4udgJY+RtIg8nsF fCIUT5v97e8Dc1v0PO2LSwukAmR0VWDtxkwdAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUEdSrmHzMT6+W0pvTtLXiLYJRAvYwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9FZFNybUh6TVQ2LVcwcHZUdExY aUxZSlJBdlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBfJuq MA0GCSqGSIb3DQEBCwUAA4IBAQBrxeWYmye3ONJoBwv34ZX7mvG3CaHNiWr3qQ9F Jyjt3YX79LpK53eBI8TYGioAHxmqSlnry2AozrCfyefoD18kktuUZUiH8zdVAwHh NflpUOAchvmxmnRePj6WcyhyhcwbOh88c8DnTBPm/e0MIcrl3Zdjzz/NDo6Jqa2n e4ptZTAicevN7k+EmXQBxUythWl0hstyYAqZY3l5zrqWcSnNq7EqFh3Cs0RVsXgq r3HRWFkUeBaHIqTK/VPbkiP2m9qHH53Yqnn5Ntmgdby0/hA++N5QOb6kfu0K6lIJ JGmAvqLMN1BpfnDnAC8l+7Unn2Jg4owF+FW3mY20uQ73NZAS -----END CERTIFICATE-----Generated at Sat Oct 25 17:43:27 2025 by rpki-client