$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/In6B54VWv1APcm9XCgumR-w1uqE.roa File: In6B54VWv1APcm9XCgumR-w1uqE.roa (raw, json) Hash identifier: Uoc+QJi1V3bAFM7PFkpxD12pl3tYntP3GVlzeRZ1z7g= Subject key identifier: 22:7E:81:E7:85:56:BF:50:0F:72:6F:57:0A:0B:A6:47:EC:35:BA:A1 Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F6E Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/In6B54VWv1APcm9XCgumR-w1uqE.roa Signing time: Fri 22 Aug 2025 08:51:22 +0000 ROA not before: Fri 22 Aug 2025 08:51:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 61.57.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3950 (0xf6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=227E81E78556BF500F726F570A0BA647EC35BAA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:94:5f:8f:4f:a5:62:a4:af:82:f1:31:b9:1b: 0c:d3:d4:75:35:e2:2c:98:b7:4a:d1:54:81:65:2f: e2:f3:ea:a3:df:20:31:a7:d0:22:88:7c:c7:92:9a: 5e:87:f0:ce:a1:ba:3c:2b:23:2f:4f:76:ed:13:8a: e1:39:7c:33:81:2b:56:a6:2b:3c:30:07:a6:86:27: f1:19:d8:a3:b9:aa:de:1a:8d:77:8d:26:c7:49:c3: e7:ba:da:e1:e8:95:a2:7c:c6:bf:dd:97:16:51:85: 2f:b1:4e:61:12:12:0c:1e:83:35:68:0b:7f:70:f9: db:b8:4b:6e:e6:f0:87:55:6b:4d:46:ab:d8:21:12: 58:0f:2b:71:39:e2:56:17:86:21:97:ca:c9:40:e9: 4a:d5:5a:72:6c:ec:ca:60:08:3b:64:29:dd:57:ca: cc:8d:32:3f:34:88:14:6b:b4:59:fa:93:c5:7d:c4: e7:60:30:94:48:fe:59:f4:dc:1e:5c:19:78:9d:d6: 25:bb:a4:ea:db:91:b8:c2:a4:4c:c0:df:7c:f4:00: 62:ae:ce:19:5e:29:59:57:94:04:4f:77:bd:bb:87: c7:a9:89:33:cb:b7:51:fd:bb:90:08:08:bf:62:66: 9d:5b:a5:4d:6a:72:25:56:05:13:6e:6b:74:f0:ae: 1c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7E:81:E7:85:56:BF:50:0F:72:6F:57:0A:0B:A6:47:EC:35:BA:A1 X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/In6B54VWv1APcm9XCgumR-w1uqE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.57.128.0/20 Signature Algorithm: sha256WithRSAEncryption 9f:a4:29:17:a0:2c:81:8e:42:93:d4:1d:39:90:a6:c3:2a:46: c0:9a:86:00:f0:8d:57:a0:e6:f5:68:d8:dd:5c:bf:0b:3d:b0: a8:a8:47:36:7d:9a:71:31:97:14:2a:38:72:d0:98:21:e6:0e: 22:26:97:ab:4a:46:d0:dc:9c:0e:17:95:b4:09:37:0c:a5:da: 9a:9e:09:ea:b4:80:fa:29:13:83:a1:ea:eb:bf:f9:02:df:33: 54:ea:89:c2:ca:8f:46:f9:0e:17:81:65:d6:99:18:31:b7:eb: 35:30:65:f1:83:00:c2:29:a1:64:cd:1f:79:85:6f:9e:4b:db: 56:68:bb:0f:ff:76:9f:af:ce:6e:d7:26:e5:1e:08:47:96:d9: 22:0b:fc:da:a6:f2:d9:33:f3:22:8d:a6:48:cc:a6:df:ed:6a: 68:1a:b6:68:c7:46:e9:e1:22:95:01:3c:d9:07:c5:46:a8:84: a1:20:99:1b:15:08:83:49:39:09:03:aa:d7:cf:54:02:1f:2d: 47:67:b5:70:31:75:8a:c6:fb:6c:56:fb:bb:32:22:2c:2c:3c: 54:33:6c:b1:b6:9f:65:71:02:bb:09:cb:04:65:b4:ed:d0:15: a2:13:23:7c:25:f6:b4:0d:17:1c:b7:59:e4:5d:b2:ef:4d:82: 78:45:dc:9b -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD24wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIyN0U4MUU3ODU1NkJG NTAwRjcyNkY1NzBBMEJBNjQ3RUMzNUJBQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFlF+PT6VipK+C8TG5GwzT1HU14iyYt0rRVIFlL+Lz6qPfIDGn 0CKIfMeSml6H8M6hujwrIy9Pdu0TiuE5fDOBK1amKzwwB6aGJ/EZ2KO5qt4ajXeN JsdJw+e62uHolaJ8xr/dlxZRhS+xTmESEgwegzVoC39w+du4S27m8IdVa01Gq9gh ElgPK3E54lYXhiGXyslA6UrVWnJs7MpgCDtkKd1XysyNMj80iBRrtFn6k8V9xOdg MJRI/ln03B5cGXid1iW7pOrbkbjCpEzA33z0AGKuzhleKVlXlARPd727h8epiTPL t1H9u5AICL9iZp1bpU1qciVWBRNua3TwrhzDAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUIn6B54VWv1APcm9XCgumR+w1uqEwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9JbjZCNTRWV3YxQVBjbTlYQ2d1 bVItdzF1cUUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTmA MA0GCSqGSIb3DQEBCwUAA4IBAQCfpCkXoCyBjkKT1B05kKbDKkbAmoYA8I1XoOb1 aNjdXL8LPbCoqEc2fZpxMZcUKjhy0Jgh5g4iJperSkbQ3JwOF5W0CTcMpdqangnq tID6KRODoerrv/kC3zNU6onCyo9G+Q4XgWXWmRgxt+s1MGXxgwDCKaFkzR95hW+e S9tWaLsP/3afr85u1yblHghHltkiC/zapvLZM/MijaZIzKbf7WpoGrZox0bp4SKV ATzZB8VGqIShIJkbFQiDSTkJA6rXz1QCHy1HZ7VwMXWKxvtsVvu7MiIsLDxUM2yx tp9lcQK7CcsEZbTt0BWiEyN8Jfa0DRcct1nkXbLvTYJ4Rdyb -----END CERTIFICATE-----Generated at Sat Oct 25 17:39:47 2025 by rpki-client