$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/kPKF5SHHCMcRWxLsEHqBoqXHLa8.roa File: kPKF5SHHCMcRWxLsEHqBoqXHLa8.roa (raw, json) Hash identifier: wANMONxYTKg+HNmE0xIOh9atzW85/9xo/MQaLMSacw8= Subject key identifier: 90:F2:85:E5:21:C7:08:C7:11:5B:12:EC:10:7A:81:A2:A5:C7:2D:AF Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Certificate serial: 0E21 Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/kPKF5SHHCMcRWxLsEHqBoqXHLa8.roa Signing time: Fri 22 Aug 2025 09:03:28 +0000 ROA not before: Fri 22 Aug 2025 09:03:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18042 IP address blocks: 61.63.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3617 (0xe21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C Validity Not Before: Aug 22 09:03:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=90F285E521C708C7115B12EC107A81A2A5C72DAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:a8:e0:fd:1f:ff:9b:1d:fa:72:ad:7c:17: 70:5c:4d:a3:83:9b:80:b5:89:05:bf:1b:59:51:ba: 6a:57:f4:22:39:47:45:33:78:8d:00:fe:b0:e6:13: e0:ca:94:18:d6:ce:9d:65:d9:c1:53:45:e1:e8:41: fd:5f:39:05:64:54:a3:08:e4:07:d6:d2:ca:e0:8e: 95:a3:4f:0f:22:20:36:81:a6:54:e4:5e:d5:5a:06: e3:b7:9f:e6:4e:2a:5f:ee:00:25:10:0b:53:73:5d: 95:14:51:92:f1:fb:e8:0e:e0:eb:51:7a:bc:2f:9e: d5:37:23:40:b5:52:63:b7:b3:28:15:b5:98:15:72: 69:76:0d:f8:44:12:94:e7:9f:2b:9a:ed:8e:1c:e5: ab:5c:16:f1:f8:ab:99:cd:d3:c3:01:83:57:a4:90: 99:27:8a:0e:ba:b7:3e:0d:24:d3:dc:f0:3e:94:78: b0:a1:5a:02:b3:d3:d1:ba:72:31:95:ce:8b:7e:ff: 00:d6:05:d3:98:27:fc:7a:28:3c:bc:a6:8e:79:18: b2:3d:51:5a:86:12:e6:66:03:79:b4:50:70:50:8e: 63:6e:91:39:ac:77:36:95:ab:06:7d:07:e1:e4:47: d0:b8:92:1b:57:0a:56:a3:5e:a9:10:cb:01:f7:c2: 18:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F2:85:E5:21:C7:08:C7:11:5B:12:EC:10:7A:81:A2:A5:C7:2D:AF X509v3 Authority Key Identifier: keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/kPKF5SHHCMcRWxLsEHqBoqXHLa8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.63.0.0/19 Signature Algorithm: sha256WithRSAEncryption 53:e4:fa:42:fb:ce:16:30:fe:05:d0:de:79:b3:11:47:b1:fb: 1c:a9:72:d3:c8:b2:cc:fe:30:11:6f:53:b4:4b:01:36:aa:bd: 3a:e5:f2:16:ab:a4:21:63:44:88:c6:2a:b4:36:5c:90:a3:54: be:4f:a2:22:03:43:25:97:02:9d:79:c0:8a:18:eb:7f:cf:f8: 1c:0d:b7:25:ce:5a:d4:2c:2c:35:ad:4a:76:a8:ce:ad:7f:94: 84:8e:e6:3f:3a:a1:f1:22:87:ae:e2:1f:a1:e4:16:e0:7f:a4: 7c:f3:e1:93:c2:72:8b:14:c2:fa:75:49:26:c0:21:0c:1e:a1: c3:1b:ab:45:b2:13:76:ca:06:e7:06:f8:b4:c6:66:dd:b2:f5: ba:ec:43:7e:af:4d:0a:8e:ad:35:5e:cd:e0:1a:61:da:89:29: 4b:81:d0:28:b0:d2:22:30:7c:bb:16:da:4e:df:85:f6:ea:7d: a3:63:02:a8:9e:79:9a:be:e1:4d:70:ff:f3:fb:96:9b:1e:9e: 69:92:14:1b:c9:ff:37:fa:6f:dd:a7:b4:2a:5c:6d:89:fb:a6: b6:3f:78:bc:7a:37:9e:3a:95:41:ce:1a:8f:fd:f5:ba:ed:c8: b6:9a:f9:76:e8:63:06:1b:7c:dd:eb:a3:aa:dc:9b:0c:01:66: 43:b6:a3:ff -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDiEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkRC RUQ3NTFEQThGMDE5MzA0MThFMkRFMjQzMkQwRDAzQTk3REE3QzAeFw0yNTA4MjIw OTAzMjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkwRjI4NUU1MjFDNzA4 QzcxMTVCMTJFQzEwN0E4MUEyQTVDNzJEQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKfqjg/R//mx36cq18F3BcTaODm4C1iQW/G1lRumpX9CI5R0Uz eI0A/rDmE+DKlBjWzp1l2cFTReHoQf1fOQVkVKMI5AfW0srgjpWjTw8iIDaBplTk XtVaBuO3n+ZOKl/uACUQC1NzXZUUUZLx++gO4OtRerwvntU3I0C1UmO3sygVtZgV cml2DfhEEpTnnyua7Y4c5atcFvH4q5nN08MBg1ekkJknig66tz4NJNPc8D6UeLCh WgKz09G6cjGVzot+/wDWBdOYJ/x6KDy8po55GLI9UVqGEuZmA3m0UHBQjmNukTms dzaVqwZ9B+HkR9C4khtXClajXqkQywH3whi9AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUkPKF5SHHCMcRWxLsEHqBoqXHLa8wHwYDVR0jBBgwFoAULb7XUdqPAZMEGOLe JDLQ0DqX2nwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL0xi N1hVZHFQQVpNRUdPTGVKRExRMERxWDJudy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev TGI3WFVkcVBBWk1FR09MZUpETFEwRHFYMm53LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0JUL2tQS0Y1U0hIQ01jUld4THNFSHFCb3FY SExhOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAU9PwAwDQYJ KoZIhvcNAQELBQADggEBAFPk+kL7zhYw/gXQ3nmzEUex+xypctPIssz+MBFvU7RL ATaqvTrl8harpCFjRIjGKrQ2XJCjVL5PoiIDQyWXAp15wIoY63/P+BwNtyXOWtQs LDWtSnaozq1/lISO5j86ofEih67iH6HkFuB/pHzz4ZPCcosUwvp1SSbAIQweocMb q0WyE3bKBucG+LTGZt2y9brsQ36vTQqOrTVezeAaYdqJKUuB0Ciw0iIwfLsW2k7f hfbqfaNjAqieeZq+4U1w//P7lpsenmmSFBvJ/zf6b92ntCpcbYn7prY/eLx6N546 lUHOGo/99brtyLaa+XboYwYbfN3ro6rcmwwBZkO2o/8= -----END CERTIFICATE-----Generated at Sun Aug 24 11:39:36 2025 by rpki-client