$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/jMBHoIu3UqvfUUOgM8Hx9fr7uA4.roa File: jMBHoIu3UqvfUUOgM8Hx9fr7uA4.roa (raw, json) Hash identifier: WBjST3p7W8TQKLnBQ4bM6lfuwExeXL+pjXF6LSkN8tQ= Subject key identifier: 8C:C0:47:A0:8B:B7:52:AB:DF:51:43:A0:33:C1:F1:F5:FA:FB:B8:0E Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Certificate serial: 0F83 Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/jMBHoIu3UqvfUUOgM8Hx9fr7uA4.roa Signing time: Fri 22 Aug 2025 08:51:26 +0000 ROA not before: Fri 22 Aug 2025 08:51:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18429 IP address blocks: 123.50.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:57:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3971 (0xf83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261 Validity Not Before: Aug 22 08:51:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8CC047A08BB752ABDF5143A033C1F1F5FAFBB80E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:25:24:53:f9:4d:3a:52:da:54:df:c9:64: 90:b4:d0:4e:6b:84:a3:f7:60:11:b7:b4:74:fe:a9: 96:53:09:2c:da:5f:49:0e:e5:33:24:25:1f:dc:bb: b9:40:4e:51:94:ab:d6:9e:2b:29:9c:7e:b9:4b:55: 6c:a1:d0:03:1c:aa:5c:0f:4d:1c:7a:7d:84:32:d6: 03:89:a1:34:06:49:6f:2b:28:70:b0:2e:49:da:4a: 1c:58:2b:b9:ad:48:19:24:7e:fc:86:c2:54:69:32: 98:ab:57:c2:75:22:01:fd:78:4c:73:b2:dc:0d:02: 8f:15:27:00:98:37:99:18:9b:f0:3d:4c:5f:e1:60: 80:75:74:a4:62:4f:03:ef:a9:68:5f:89:36:20:c4: d0:27:d9:d9:e0:0f:2c:95:8d:e9:83:19:fb:cc:45: 33:47:26:12:31:cd:bf:02:86:f6:bd:08:2e:79:e1: 85:08:c7:db:5d:61:d5:2f:e7:1b:f9:3f:b4:e1:7d: c6:40:0e:08:4b:48:d7:f7:f6:59:f7:62:99:6d:f9: ed:c6:cf:c0:7a:b0:0f:f6:36:48:71:f6:94:c5:d5: 14:08:33:e4:f6:4f:04:e6:f0:71:13:22:bd:9e:d4: 7f:24:a7:b3:29:fd:0f:12:24:5a:64:ce:ec:c0:2e: bc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C0:47:A0:8B:B7:52:AB:DF:51:43:A0:33:C1:F1:F5:FA:FB:B8:0E X509v3 Authority Key Identifier: keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/jMBHoIu3UqvfUUOgM8Hx9fr7uA4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.50.61.0/24 Signature Algorithm: sha256WithRSAEncryption 52:aa:df:35:c4:79:52:5c:07:13:26:1d:9f:63:cd:9e:88:1d: 04:7e:46:2f:aa:71:91:58:25:be:7c:c2:26:ef:07:f4:53:fe: c4:ba:78:f7:7f:73:47:19:94:f8:a0:8d:d1:72:eb:e2:50:b0: 8c:3e:d1:f1:ea:63:a8:27:21:c7:08:8c:7d:61:60:a9:e4:6a: a4:e4:c1:fc:21:d2:3e:44:26:0f:b8:b0:7d:53:55:d7:f7:da: 5d:7d:de:ff:6b:68:80:4a:67:2c:a8:28:56:0a:34:69:d3:da: 53:91:09:8a:15:9f:e1:89:6f:10:8f:19:3f:b8:c8:0a:a5:98: 22:2f:e8:e6:b9:68:1d:9f:33:71:ce:d4:b7:72:b6:dd:21:da: 70:1f:79:09:c7:19:7a:9b:6c:9f:49:9d:48:d3:6e:a2:50:f2: b0:af:c8:e6:a5:11:a2:ff:b4:67:df:f2:1f:52:a0:fa:f5:ce: 23:2b:58:70:8b:ab:a1:c8:4b:3c:b0:e3:75:d7:4b:3b:25:c1: 9e:e6:c7:56:57:91:15:2b:8c:fd:f3:8f:f3:95:96:7a:1a:29: e9:3b:12:92:80:de:a9:41:77:b2:fa:01:a2:9e:e4:c5:e0:09: 16:04:f5:85:61:ad:9a:94:78:dc:2e:9c:62:c3:0d:0b:1e:bf: ad:f8:77:c0 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgICD4MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNTA4MjIw ODUxMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDhDQzA0N0EwOEJCNzUy QUJERjUxNDNBMDMzQzFGMUY1RkFGQkI4MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6aiUkU/lNOlLaVN/JZJC00E5rhKP3YBG3tHT+qZZTCSzaX0kO 5TMkJR/cu7lATlGUq9aeKymcfrlLVWyh0AMcqlwPTRx6fYQy1gOJoTQGSW8rKHCw LknaShxYK7mtSBkkfvyGwlRpMpirV8J1IgH9eExzstwNAo8VJwCYN5kYm/A9TF/h YIB1dKRiTwPvqWhfiTYgxNAn2dngDyyVjemDGfvMRTNHJhIxzb8Chva9CC554YUI x9tdYdUv5xv5P7ThfcZADghLSNf39ln3Yplt+e3Gz8B6sA/2Nkhx9pTF1RQIM+T2 TwTm8HETIr2e1H8kp7Mp/Q8SJFpkzuzALrxLAgMBAAGjggHsMIIB6DAdBgNVHQ4E FgQUjMBHoIu3UqvfUUOgM8Hx9fr7uA4wHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0 X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9qTUJIb0l1M1VxdmZVVU9nTThI eDlmcjd1QTQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAezI9 MA0GCSqGSIb3DQEBCwUAA4IBAQBSqt81xHlSXAcTJh2fY82eiB0EfkYvqnGRWCW+ fMIm7wf0U/7Eunj3f3NHGZT4oI3RcuviULCMPtHx6mOoJyHHCIx9YWCp5Gqk5MH8 IdI+RCYPuLB9U1XX99pdfd7/a2iASmcsqChWCjRp09pTkQmKFZ/hiW8Qjxk/uMgK pZgiL+jmuWgdnzNxztS3crbdIdpwH3kJxxl6m2yfSZ1I026iUPKwr8jmpRGi/7Rn 3/IfUqD69c4jK1hwi6uhyEs8sON110s7JcGe5sdWV5EVK4z984/zlZZ6GinpOxKS gN6pQXey+gGinuTF4AkWBPWFYa2alHjcLpxiww0LHr+t+HfA -----END CERTIFICATE-----Generated at Sat Oct 25 17:42:03 2025 by rpki-client