$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/DAvLBbZ8da59Z15sMIq73IrVP1E.roa File: DAvLBbZ8da59Z15sMIq73IrVP1E.roa (raw, json) Hash identifier: 5iVp9biqv5cg42gMwVw5cGdeAU11TuUS5rFhYRG5Lpc= Subject key identifier: 0C:0B:CB:05:B6:7C:75:AE:7D:67:5E:6C:30:8A:BB:DC:8A:D5:3F:51 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0F23 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/DAvLBbZ8da59Z15sMIq73IrVP1E.roa Signing time: Fri 22 Aug 2025 09:03:49 +0000 ROA not before: Fri 22 Aug 2025 09:03:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 61.61.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3875 (0xf23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 22 09:03:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0C0BCB05B67C75AE7D675E6C308ABBDC8AD53F51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:9e:42:ed:eb:2c:00:5a:d2:ce:35:a1:86: 21:f5:cb:18:ad:97:a6:02:bc:fc:71:8d:4e:6b:77: cd:82:c0:99:a6:85:4c:42:9b:92:ab:ce:ed:32:0f: 43:98:0b:7d:87:11:e4:36:4e:c9:bb:cf:8e:4d:d8: 1d:7e:60:68:7a:4a:b7:23:c6:13:28:cf:9d:4d:93: ea:d1:07:03:73:00:dc:4e:a9:26:92:5b:4b:d8:78: 51:b8:66:bc:b2:c0:52:81:71:4c:7b:36:ba:94:0f: f2:34:50:54:65:8b:af:f3:b5:c0:db:48:fd:66:80: ab:09:a0:75:61:81:99:56:35:46:67:9b:3e:f2:cf: ee:8e:61:a9:9a:0b:53:b5:f0:22:96:f7:81:42:29: d2:bc:7e:97:56:8e:2f:ce:20:be:cb:b4:85:9b:87: e3:9b:2b:a0:e4:7f:3a:cd:5b:2a:e4:bd:f5:b8:e2: 14:52:1b:08:08:0c:2a:3b:5c:e2:56:5f:d7:90:1b: 45:9b:e9:ea:da:b3:7d:8c:e3:6f:e2:52:59:f3:9e: 87:0e:68:32:cc:78:e9:ed:c5:2f:09:4c:52:5f:9c: b1:80:30:34:fc:60:84:42:a1:db:b8:ff:ff:03:b9: 93:0f:fe:cc:ef:23:32:c6:8e:58:e9:44:10:2e:01: 9c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:CB:05:B6:7C:75:AE:7D:67:5E:6C:30:8A:BB:DC:8A:D5:3F:51 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/DAvLBbZ8da59Z15sMIq73IrVP1E.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.36.0/22 Signature Algorithm: sha256WithRSAEncryption 76:1b:b3:4d:7c:f0:d8:f1:5b:c3:13:4e:a5:7a:64:2c:4c:c8: 66:2c:7f:63:fa:53:76:fd:4f:31:41:a6:c4:9f:94:4e:fb:0c: 1c:f6:0d:db:f3:ae:a0:22:d0:dc:77:a8:b5:14:1b:e8:18:e5: 38:83:53:f7:75:38:74:8b:7e:e1:c8:7a:8d:92:b5:18:13:2a: 6c:f4:d5:7d:02:5e:be:9d:92:99:63:62:29:ef:53:d6:bc:16: b6:c2:4c:3b:85:c3:ef:cb:97:1e:b2:e6:f4:7c:db:ee:1d:5f: ff:73:1e:fd:db:f2:d7:f7:93:5d:78:00:c2:e9:a0:87:23:64: 18:10:da:ac:e9:e0:49:57:5e:e1:ee:3a:04:1e:c6:02:4f:b6: 96:6d:4b:21:07:ba:0c:ca:a1:3b:0a:78:1c:a6:d8:69:ee:67: 1a:d7:48:6c:e7:69:ee:f2:38:d7:9a:ab:dd:9d:cd:93:88:a1: 1b:3c:e3:da:4e:0a:7c:41:85:28:f1:bb:39:b7:cb:47:2d:4a: 4e:8d:80:34:31:03:65:5d:2a:41:3f:24:38:9c:f6:dc:95:b5: 92:22:2f:af:15:5a:05:73:f6:7c:b6:39:ab:a0:ae:01:49:38: 5a:a9:4f:a7:be:d8:8a:71:83:b3:b4:e5:52:3c:d6:27:c0:2f: 79:39:02:4e -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDyMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTA4MjIw OTAzNDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBDMEJDQjA1QjY3Qzc1 QUU3RDY3NUU2QzMwOEFCQkRDOEFENTNGNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGAJ5C7essAFrSzjWhhiH1yxitl6YCvPxxjU5rd82CwJmmhUxC m5Krzu0yD0OYC32HEeQ2Tsm7z45N2B1+YGh6SrcjxhMoz51Nk+rRBwNzANxOqSaS W0vYeFG4ZryywFKBcUx7NrqUD/I0UFRli6/ztcDbSP1mgKsJoHVhgZlWNUZnmz7y z+6OYamaC1O18CKW94FCKdK8fpdWji/OIL7LtIWbh+ObK6DkfzrNWyrkvfW44hRS GwgIDCo7XOJWX9eQG0Wb6eras32M42/iUlnznocOaDLMeOntxS8JTFJfnLGAMDT8 YIRCodu4//8DuZMP/szvIzLGjljpRBAuAZzVAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUDAvLBbZ8da59Z15sMIq73IrVP1EwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL0RBdkxCYlo4ZGE1OVoxNXNNSXE3M0ly VlAxRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PSQwDQYJ KoZIhvcNAQELBQADggEBAHYbs0188NjxW8MTTqV6ZCxMyGYsf2P6U3b9TzFBpsSf lE77DBz2DdvzrqAi0Nx3qLUUG+gY5TiDU/d1OHSLfuHIeo2StRgTKmz01X0CXr6d kpljYinvU9a8FrbCTDuFw+/Llx6y5vR82+4dX/9zHv3b8tf3k114AMLpoIcjZBgQ 2qzp4ElXXuHuOgQexgJPtpZtSyEHugzKoTsKeBym2GnuZxrXSGznae7yONeaq92d zZOIoRs849pOCnxBhSjxuzm3y0ctSk6NgDQxA2VdKkE/JDic9tyVtZIiL68VWgVz 9ny2OaugrgFJOFqpT6e+2Ipxg7O05VI81ifAL3k5Ak4= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:32 2025 by rpki-client