$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/HTw-3BTHl7LkRGP1KxPu0-9rV6Y.roa File: HTw-3BTHl7LkRGP1KxPu0-9rV6Y.roa (raw, json) Hash identifier: oEb497+tWtIPwFmv5wMNPXzoX/MpTF0oC+IYc1ZU/GY= Subject key identifier: 1D:3C:3E:DC:14:C7:97:B2:E4:44:63:F5:2B:13:EE:D3:EF:6B:57:A6 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0F06 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/HTw-3BTHl7LkRGP1KxPu0-9rV6Y.roa Signing time: Fri 22 Aug 2025 09:03:44 +0000 ROA not before: Fri 22 Aug 2025 09:03:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 61.61.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3846 (0xf06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 22 09:03:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1D3C3EDC14C797B2E44463F52B13EED3EF6B57A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:96:2b:2b:b4:cc:dc:be:eb:1c:f4:5e:d9:bb: 71:df:a3:10:d6:35:c8:3b:3a:80:8a:a2:4f:5e:d8: 0d:da:3b:ec:26:32:4d:fe:44:1b:87:b8:d6:a7:27: ac:14:d5:d4:06:02:dc:f2:f7:49:6c:96:f2:f0:de: dd:25:b4:1d:7c:3c:94:d8:2e:aa:c9:41:5a:ef:75: a6:a7:2a:b4:e5:4a:71:06:b6:70:1e:f5:9b:ac:25: 60:1f:f8:ab:51:cf:c9:83:d5:53:d2:a1:1c:e1:e1: a7:40:62:17:b3:8c:86:cc:6c:4c:4f:29:96:6d:63: f5:87:d8:f4:46:3c:6e:40:67:9b:96:9a:f0:f3:a1: 67:a9:fe:1c:7c:23:55:0c:ae:fa:2f:d6:89:ef:c4: 7f:43:a8:f5:20:8d:c9:3b:7e:c7:8f:64:ac:7f:b1: d4:23:f9:17:c9:21:5e:3d:48:64:fb:5c:30:97:a9: b5:3e:35:27:b1:dc:21:e0:6f:d8:99:c1:92:66:56: 07:0f:25:e9:f3:b9:9a:14:92:93:79:2e:af:cf:32: 3f:55:89:15:5e:85:a2:2c:5a:da:8c:5f:47:8e:51: 7f:b0:8a:ff:e7:06:af:bc:d4:4e:26:ab:21:01:36: c4:7e:0f:d8:e3:72:d8:d8:1c:2d:c1:09:e5:3e:3b: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3C:3E:DC:14:C7:97:B2:E4:44:63:F5:2B:13:EE:D3:EF:6B:57:A6 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/HTw-3BTHl7LkRGP1KxPu0-9rV6Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.6.0/24 Signature Algorithm: sha256WithRSAEncryption 47:01:80:2d:ac:ae:1f:d3:ef:d6:27:21:e5:75:84:a5:c3:26: 7d:05:fa:17:26:66:9b:84:47:32:02:a7:96:28:cc:1e:13:fa: 02:77:e3:4e:2f:20:a7:6c:5c:fc:36:10:5c:82:4c:3e:9b:7e: 39:e8:77:78:6c:d2:d4:5d:de:68:03:da:54:ae:8e:6a:67:3e: c6:bd:6a:c4:e0:f9:9a:4d:75:9a:e5:80:cb:d6:f7:cf:f6:65: 99:b4:ab:3c:07:35:b6:95:d5:4a:7e:2d:9d:62:5e:3e:17:5c: 38:88:99:b4:79:b6:95:3c:00:c7:cb:0a:54:d9:77:07:88:dc: 13:2d:ae:1f:01:bf:9b:aa:5a:28:b4:a8:b4:7c:e6:71:d0:ab: fe:66:44:81:6c:22:41:aa:6e:6b:33:47:7e:4d:37:b8:d2:39: 7a:3d:c0:5d:78:bc:0a:a8:d8:79:fa:48:25:41:a0:40:9f:06: 21:39:df:70:e8:25:0e:bc:2c:b1:c1:0b:1f:e0:23:76:5a:a6: 6a:44:48:d1:89:af:13:74:08:73:20:58:09:83:58:a4:f8:17: 3b:f4:cf:fd:76:6e:2a:a7:39:3f:e7:92:bc:53:78:9d:14:59: 16:c1:5a:0a:29:11:ed:b5:b7:2b:1a:b8:23:3a:7d:83:44:ad: 9e:ef:3a:12 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDwYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTA4MjIw OTAzNDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFEM0MzRURDMTRDNzk3 QjJFNDQ0NjNGNTJCMTNFRUQzRUY2QjU3QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdlisrtMzcvusc9F7Zu3HfoxDWNcg7OoCKok9e2A3aO+wmMk3+ RBuHuNanJ6wU1dQGAtzy90lslvLw3t0ltB18PJTYLqrJQVrvdaanKrTlSnEGtnAe 9ZusJWAf+KtRz8mD1VPSoRzh4adAYhezjIbMbExPKZZtY/WH2PRGPG5AZ5uWmvDz oWep/hx8I1UMrvov1onvxH9DqPUgjck7fsePZKx/sdQj+RfJIV49SGT7XDCXqbU+ NSex3CHgb9iZwZJmVgcPJenzuZoUkpN5Lq/PMj9ViRVehaIsWtqMX0eOUX+wiv/n Bq+81E4mqyEBNsR+D9jjctjYHC3BCeU+O5wfAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUHTw+3BTHl7LkRGP1KxPu0+9rV6YwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL0hUdy0zQlRIbDdMa1JHUDFLeFB1MC05 clY2WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9PQYwDQYJ KoZIhvcNAQELBQADggEBAEcBgC2srh/T79YnIeV1hKXDJn0F+hcmZpuERzICp5Yo zB4T+gJ3404vIKdsXPw2EFyCTD6bfjnod3hs0tRd3mgD2lSujmpnPsa9asTg+ZpN dZrlgMvW98/2ZZm0qzwHNbaV1Up+LZ1iXj4XXDiImbR5tpU8AMfLClTZdweI3BMt rh8Bv5uqWii0qLR85nHQq/5mRIFsIkGqbmszR35NN7jSOXo9wF14vAqo2Hn6SCVB oECfBiE533DoJQ68LLHBCx/gI3ZapmpESNGJrxN0CHMgWAmDWKT4Fzv0z/12biqn OT/nkrxTeJ0UWRbBWgopEe21tysauCM6fYNErZ7vOhI= -----END CERTIFICATE-----Generated at Sun Aug 24 07:32:00 2025 by rpki-client