$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/60MplO-3i832Wu2FKvEH27sq9yc.roa File: 60MplO-3i832Wu2FKvEH27sq9yc.roa (raw, json) Hash identifier: y1dQY+vEX+Lg0/gUWYWnecnHn8JlFZrWTYu1hbECfoM= Subject key identifier: EB:43:29:94:EF:B7:8B:CD:F6:5A:ED:85:2A:F1:07:DB:BB:2A:F7:27 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0F0D Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/60MplO-3i832Wu2FKvEH27sq9yc.roa Signing time: Fri 22 Aug 2025 09:03:45 +0000 ROA not before: Fri 22 Aug 2025 09:03:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 211.78.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3853 (0xf0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 22 09:03:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EB432994EFB78BCDF65AED852AF107DBBB2AF727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:f4:8e:f0:c5:4f:9c:74:dc:b0:8f:cb:c3: 23:c1:04:03:4a:95:49:13:28:ea:f5:4a:3a:d5:a9: f8:75:5d:70:15:52:d3:19:7b:df:c5:09:8e:94:44: 33:ae:54:50:5b:28:0b:b9:45:92:3c:f6:f3:69:c8: 83:d5:0d:62:91:9f:5c:14:12:9c:aa:38:02:d5:c4: 79:72:8e:48:ff:5b:07:13:78:8b:af:78:0a:65:69: 9d:96:60:1d:8a:f6:d0:6a:94:09:9e:7e:96:79:65: b3:70:bf:ed:39:0d:f1:66:8b:7a:27:c9:52:81:f0: ed:2f:91:3f:b3:36:54:bb:97:b1:f4:35:29:f8:ea: c5:44:de:73:ab:a5:2d:0c:48:af:70:68:87:f7:bd: 35:36:a0:61:d1:07:01:67:00:67:b1:47:c5:8e:19: c2:1b:2a:1a:b5:2e:15:e3:1d:e4:b4:5e:93:56:32: a2:8b:7d:a7:6e:af:71:1b:2f:4a:07:d4:3c:0a:69: 10:3c:66:55:39:c2:88:d2:ce:6e:d7:e4:de:c0:d0: b9:fe:19:4e:1e:d4:95:b7:01:84:10:47:cc:bc:78: 68:3c:7d:83:09:ab:4d:19:33:dd:39:6d:36:e9:c0: 67:13:6b:59:48:b9:73:68:5b:c4:e3:0f:f1:ea:fe: 97:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:43:29:94:EF:B7:8B:CD:F6:5A:ED:85:2A:F1:07:DB:BB:2A:F7:27 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/60MplO-3i832Wu2FKvEH27sq9yc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.0.0/18 Signature Algorithm: sha256WithRSAEncryption 70:78:62:74:2d:4a:35:84:62:1e:01:fc:34:27:b4:aa:f5:22: 64:74:ff:b0:09:72:9f:2a:53:eb:09:a1:22:38:7d:65:9f:d8: ac:04:6b:42:c0:ee:dc:b1:ad:2a:3f:1f:56:47:75:5b:a8:0f: e0:f6:32:a7:70:93:0e:4a:7a:42:8f:39:88:a1:a7:ab:b5:72: de:9b:1e:7b:44:52:70:b0:0c:e0:4e:a0:fa:bd:a5:bd:56:83: 01:41:e8:97:99:e5:8e:f0:27:f0:9d:02:05:6d:22:22:1d:68: 2d:7f:2d:50:4a:18:a7:3b:67:72:6d:27:ee:ad:ed:64:02:e0: aa:c9:c2:25:8b:db:f2:1c:8a:33:f6:8e:6e:a0:57:5b:1d:a4: a7:0f:4e:cd:24:2b:f4:75:7c:6f:85:49:02:84:ba:6b:bf:8d: dd:a5:a9:61:20:b8:cb:75:05:29:3c:3d:c7:9c:5b:5b:2e:14: bb:62:e4:5b:63:a2:9e:32:cb:aa:56:9e:ba:5c:d9:f5:dc:25: 3f:12:ed:8f:be:4f:1e:aa:1a:e1:92:81:2a:18:34:b6:d9:58: 29:d2:03:ca:99:3b:7c:59:9e:31:63:64:dd:2a:f2:23:ff:3f: 21:a5:cd:10:b9:a5:d9:00:da:90:16:14:e0:78:67:a0:e1:17: 56:af:fd:1e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDw0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTA4MjIw OTAzNDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVCNDMyOTk0RUZCNzhC Q0RGNjVBRUQ4NTJBRjEwN0RCQkIyQUY3MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHQvSO8MVPnHTcsI/LwyPBBANKlUkTKOr1SjrVqfh1XXAVUtMZ e9/FCY6URDOuVFBbKAu5RZI89vNpyIPVDWKRn1wUEpyqOALVxHlyjkj/WwcTeIuv eAplaZ2WYB2K9tBqlAmefpZ5ZbNwv+05DfFmi3onyVKB8O0vkT+zNlS7l7H0NSn4 6sVE3nOrpS0MSK9waIf3vTU2oGHRBwFnAGexR8WOGcIbKhq1LhXjHeS0XpNWMqKL fadur3EbL0oH1DwKaRA8ZlU5wojSzm7X5N7A0Ln+GU4e1JW3AYQQR8y8eGg8fYMJ q00ZM905bTbpwGcTa1lIuXNoW8TjD/Hq/pezAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU60MplO+3i832Wu2FKvEH27sq9ycwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dULzYwTXBsTy0zaTgzMld1MkZLdkVIMjdz cTl5Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbTTgAwDQYJ KoZIhvcNAQELBQADggEBAHB4YnQtSjWEYh4B/DQntKr1ImR0/7AJcp8qU+sJoSI4 fWWf2KwEa0LA7tyxrSo/H1ZHdVuoD+D2Mqdwkw5KekKPOYihp6u1ct6bHntEUnCw DOBOoPq9pb1WgwFB6JeZ5Y7wJ/CdAgVtIiIdaC1/LVBKGKc7Z3JtJ+6t7WQC4KrJ wiWL2/IcijP2jm6gV1sdpKcPTs0kK/R1fG+FSQKEumu/jd2lqWEguMt1BSk8Pcec W1suFLti5Ftjop4yy6pWnrpc2fXcJT8S7Y++Tx6qGuGSgSoYNLbZWCnSA8qZO3xZ njFjZN0q8iP/PyGlzRC5pdkA2pAWFOB4Z6DhF1av/R4= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:56 2025 by rpki-client