$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/cgzqrp99TG0Rtm3l52EMUxDNdk0.roa File: cgzqrp99TG0Rtm3l52EMUxDNdk0.roa (raw, json) Hash identifier: 3gHKkREtYGQ5jTwcVCkLwsVjRndJl4KD3UhNSxFPkbM= Subject key identifier: 72:0C:EA:AE:9F:7D:4C:6D:11:B6:6D:E5:E7:61:0C:53:10:CD:76:4D Certificate issuer: /CN=6A2B1396C142DA6711518875E90C4AEC90B0F5C4 Certificate serial: 03E4 Authority key identifier: 6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aisTlsFC2mcRUYh16QxK7JCw9cQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/cgzqrp99TG0Rtm3l52EMUxDNdk0.roa Signing time: Tue 09 Sep 2025 15:46:37 +0000 ROA not before: Tue 09 Sep 2025 15:46:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 152179 IP address blocks: 160.187.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aisTlsFC2mcRUYh16QxK7JCw9cQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 01:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 996 (0x3e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A2B1396C142DA6711518875E90C4AEC90B0F5C4 Validity Not Before: Sep 9 15:46:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=720CEAAE9F7D4C6D11B66DE5E7610C5310CD764D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:46:3d:cf:04:c0:04:a2:d2:ce:c5:e3:d0: 79:62:0d:cd:bc:35:bc:81:83:7e:d5:90:32:ba:5f: d1:3e:98:d0:c5:b3:fc:bb:a9:88:6c:af:68:d1:fd: cc:e4:7f:ab:b2:6d:42:ae:1b:36:e1:01:a7:22:19: 58:30:17:ac:d5:3b:a2:38:92:47:6a:7b:e6:e7:b7: ef:d8:58:3a:21:15:b2:f5:88:31:01:c3:16:09:d7: 93:96:65:94:2d:00:9e:df:fd:df:e3:4f:5f:6c:8b: de:ab:4e:89:0d:e6:49:c6:da:32:d5:26:ef:f5:75: dd:1b:d6:44:e7:80:0f:19:1d:3a:d1:1f:f5:53:bc: 34:56:fe:86:56:34:73:c4:bd:31:b6:10:6c:48:4c: a9:28:b7:e7:b3:4f:bc:e5:05:80:8e:21:20:8f:f6: be:27:c3:f9:b0:1a:0f:e6:c3:19:f8:92:8e:19:0a: 37:a7:12:74:fa:10:cf:63:98:3f:b2:0e:3b:d2:75: 7e:c8:89:dc:12:15:08:a8:c9:a7:77:28:0a:c0:ee: 43:77:e1:20:0d:c1:42:57:3b:9f:b2:92:c4:d9:70: e1:f9:18:79:3d:61:06:46:04:49:fd:80:82:b5:bb: a8:84:95:28:0b:d5:1e:f5:e6:35:d1:f1:1e:ed:13: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0C:EA:AE:9F:7D:4C:6D:11:B6:6D:E5:E7:61:0C:53:10:CD:76:4D X509v3 Authority Key Identifier: keyid:6A:2B:13:96:C1:42:DA:67:11:51:88:75:E9:0C:4A:EC:90:B0:F5:C4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/aisTlsFC2mcRUYh16QxK7JCw9cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aisTlsFC2mcRUYh16QxK7JCw9cQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NOT_TFN_CO/cgzqrp99TG0Rtm3l52EMUxDNdk0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.187.100.0/23 Signature Algorithm: sha256WithRSAEncryption 14:b1:67:b1:67:8e:e2:6f:c9:c2:42:7a:39:b8:b0:6f:75:ec: de:26:c3:5e:7d:97:ff:b1:0b:36:74:81:f4:a3:b9:f6:20:7b: 03:4d:8f:8f:69:01:6a:63:37:ed:7e:ab:67:5d:8e:26:30:b9: 05:81:4a:89:6b:22:22:6f:4c:1e:aa:ce:6d:22:01:c1:04:e2: 0a:ad:e0:4a:6c:4f:f4:70:f0:8d:9e:11:f8:40:39:ad:a9:2f: a0:e5:6f:5e:1c:81:b9:fe:4c:28:d2:c7:1b:ec:17:b5:25:8b: de:4b:0d:61:86:5a:d6:35:de:2f:35:40:46:5c:3a:66:7d:9e: 08:69:e4:2b:e9:6d:aa:af:d5:9e:55:4b:fa:d8:69:ce:7a:4a: a9:7e:e5:38:0a:57:20:40:02:1e:de:44:a6:52:76:12:68:03: fe:3b:ef:39:e1:85:72:99:67:e2:21:64:1b:5b:41:91:4c:d6: fa:b7:cd:cd:34:31:52:de:74:8d:6c:15:c1:60:db:b6:37:f0: 34:c9:d2:30:48:06:62:35:9d:03:44:cf:ef:ee:98:11:f4:87: 99:c4:90:50:25:9d:ed:83:da:08:cb:88:14:c6:c5:93:41:12: ef:ca:75:39:ca:b1:76:db:e5:40:e4:4c:44:aa:e5:00:c8:9a: 0c:77:7b:e4 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICA+QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkEy QjEzOTZDMTQyREE2NzExNTE4ODc1RTkwQzRBRUM5MEIwRjVDNDAeFw0yNTA5MDkx NTQ2MzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcyMENFQUFFOUY3RDRD NkQxMUI2NkRFNUU3NjEwQzUzMTBDRDc2NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCreEY9zwTABKLSzsXj0HliDc28NbyBg37VkDK6X9E+mNDFs/y7 qYhsr2jR/czkf6uybUKuGzbhAaciGVgwF6zVO6I4kkdqe+bnt+/YWDohFbL1iDEB wxYJ15OWZZQtAJ7f/d/jT19si96rTokN5knG2jLVJu/1dd0b1kTngA8ZHTrRH/VT vDRW/oZWNHPEvTG2EGxITKkot+ezT7zlBYCOISCP9r4nw/mwGg/mwxn4ko4ZCjen EnT6EM9jmD+yDjvSdX7IidwSFQioyad3KArA7kN34SANwUJXO5+yksTZcOH5GHk9 YQZGBEn9gIK1u6iElSgL1R715jXR8R7tE6t1AgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUcgzqrp99TG0Rtm3l52EMUxDNdk0wHwYDVR0jBBgwFoAUaisTlsFC2mcRUYh1 6QxK7JCw9cQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTk9UX1RG Tl9DTy9haXNUbHNGQzJtY1JVWWgxNlF4SzdKQ3c5Y1EuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL2Fpc1Rsc0ZDMm1jUlVZaDE2UXhLN0pDdzljUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL05PVF9URk5fQ08vY2d6cXJwOTlU RzBSdG0zbDUyRU1VeEROZGswLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAaC7ZDANBgkqhkiG9w0BAQsFAAOCAQEAFLFnsWeO4m/JwkJ6Obiwb3Xs 3ibDXn2X/7ELNnSB9KO59iB7A02Pj2kBamM37X6rZ12OJjC5BYFKiWsiIm9MHqrO bSIBwQTiCq3gSmxP9HDwjZ4R+EA5rakvoOVvXhyBuf5MKNLHG+wXtSWL3ksNYYZa 1jXeLzVARlw6Zn2eCGnkK+ltqq/VnlVL+thpznpKqX7lOApXIEACHt5EplJ2EmgD /jvvOeGFcpln4iFkG1tBkUzW+rfNzTQxUt50jWwVwWDbtjfwNMnSMEgGYjWdA0TP 7+6YEfSHmcSQUCWd7YPaCMuIFMbFk0ES78p1OcqxdtvlQORMRKrlAMiaDHd75A== -----END CERTIFICATE-----Generated at Tue Nov 4 21:00:22 2025 by rpki-client