$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/I5R4TTcm7f26jPEdF0HqHXR1Lyk.roa File: I5R4TTcm7f26jPEdF0HqHXR1Lyk.roa (raw, json) Hash identifier: mdhFxWCuocLfxucU6IuYc3kj0B5bWfS7kIQIyoyZF5w= Subject key identifier: 23:94:78:4D:37:26:ED:FD:BA:8C:F1:1D:17:41:EA:1D:74:75:2F:29 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0F17 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/I5R4TTcm7f26jPEdF0HqHXR1Lyk.roa Signing time: Fri 22 Aug 2025 09:03:47 +0000 ROA not before: Fri 22 Aug 2025 09:03:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9919 IP address blocks: 61.61.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3863 (0xf17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 22 09:03:47 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2394784D3726EDFDBA8CF11D1741EA1D74752F29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:69:40:7b:18:d8:d4:fc:29:a7:d9:8f:43:1f: 0f:48:d4:46:a5:8a:24:16:14:da:0d:ad:c2:81:d3: ce:87:f9:84:d8:f5:66:28:09:4d:51:ef:f1:86:53: 51:b0:a8:6f:a4:e2:3a:a3:f5:f4:71:07:28:ff:58: fc:3f:93:a8:45:b7:7d:01:83:f3:59:87:c8:ac:28: 9a:ee:b8:e8:be:17:b8:26:84:24:1e:66:17:33:73: e2:ad:27:96:78:ed:b2:30:fd:dd:a0:1f:c3:54:54: 0a:dc:ba:de:73:3c:d1:0d:60:76:6a:a3:ff:bd:00: 9a:f7:d8:08:bc:cb:06:58:07:3d:89:a2:57:25:de: 65:c0:f9:5a:45:b7:0a:71:31:33:22:2e:b3:1a:67: 78:6f:41:70:bd:ed:ec:5b:a8:13:2a:76:47:5a:f6: 6f:11:51:0d:85:05:3b:e9:8c:de:14:5d:4d:a7:9b: ba:c6:3b:58:3d:39:c0:05:ed:9e:91:1c:32:b2:e8: 26:16:29:9e:fe:53:1a:9c:e4:f8:ed:2b:6a:8f:03: 0e:98:f2:41:55:e3:7f:8a:80:87:d5:d8:f5:22:e0: 86:31:f1:dc:55:90:a4:6c:1a:37:c4:b0:e0:35:29: 9d:16:e3:9d:f0:f9:2e:be:10:7b:fa:e9:a0:59:98: 39:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:94:78:4D:37:26:ED:FD:BA:8C:F1:1D:17:41:EA:1D:74:75:2F:29 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/I5R4TTcm7f26jPEdF0HqHXR1Lyk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.48.0/24 Signature Algorithm: sha256WithRSAEncryption 93:ff:12:8d:64:8d:bd:6e:b8:5e:3e:c4:14:59:91:23:31:0d: ad:55:88:9f:0f:cf:58:53:d6:55:0c:06:57:32:92:fe:df:65: b2:0b:f9:5c:c4:e4:04:b6:6b:9a:95:ad:be:50:6f:0b:31:bf: a6:17:71:1d:9d:dd:5f:7e:0e:eb:88:9b:1b:ca:e9:51:c3:0c: ff:d0:60:53:c9:38:19:9a:04:c0:d9:62:6e:0e:a4:19:e6:50: 8f:ce:a7:92:b1:75:02:9a:89:a1:25:d1:58:3c:96:99:39:32: 7c:8a:2d:16:6d:64:af:dd:f9:2f:7e:c9:4f:a1:b4:cd:07:24: 36:4e:77:20:cd:a6:a1:bc:78:3f:9f:13:2b:d5:94:89:6f:75: e3:4f:f9:14:11:f7:43:d0:39:bf:b2:06:8e:27:46:cc:34:26: 8f:34:23:93:36:b4:c8:92:b4:75:26:ce:10:9c:29:77:08:76: 0b:6d:4a:8d:60:81:f4:e4:13:35:80:90:50:16:ee:a1:a8:dc: 8e:f1:cb:3c:5d:c8:1f:55:da:1e:6d:06:c8:f0:0f:45:47:fa: ef:06:51:bb:07:78:f1:db:e5:3d:0a:df:4e:b6:97:e6:dd:05: 2e:72:62:bd:f9:ac:9a:1d:5a:bf:82:1b:da:6e:fd:c9:35:99: 73:0b:ba:70 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDxcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTA4MjIw OTAzNDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIzOTQ3ODREMzcyNkVE RkRCQThDRjExRDE3NDFFQTFENzQ3NTJGMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKaUB7GNjU/Cmn2Y9DHw9I1EaliiQWFNoNrcKB086H+YTY9WYo CU1R7/GGU1GwqG+k4jqj9fRxByj/WPw/k6hFt30Bg/NZh8isKJruuOi+F7gmhCQe Zhczc+KtJ5Z47bIw/d2gH8NUVArcut5zPNENYHZqo/+9AJr32Ai8ywZYBz2Jolcl 3mXA+VpFtwpxMTMiLrMaZ3hvQXC97exbqBMqdkda9m8RUQ2FBTvpjN4UXU2nm7rG O1g9OcAF7Z6RHDKy6CYWKZ7+Uxqc5PjtK2qPAw6Y8kFV43+KgIfV2PUi4IYx8dxV kKRsGjfEsOA1KZ0W453w+S6+EHv66aBZmDlhAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUI5R4TTcm7f26jPEdF0HqHXR1LykwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL0k1UjRUVGNtN2YyNmpQRWRGMEhxSFhS MUx5ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9PTAwDQYJ KoZIhvcNAQELBQADggEBAJP/Eo1kjb1uuF4+xBRZkSMxDa1ViJ8Pz1hT1lUMBlcy kv7fZbIL+VzE5AS2a5qVrb5Qbwsxv6YXcR2d3V9+DuuImxvK6VHDDP/QYFPJOBma BMDZYm4OpBnmUI/Op5KxdQKaiaEl0Vg8lpk5MnyKLRZtZK/d+S9+yU+htM0HJDZO dyDNpqG8eD+fEyvVlIlvdeNP+RQR90PQOb+yBo4nRsw0Jo80I5M2tMiStHUmzhCc KXcIdgttSo1ggfTkEzWAkFAW7qGo3I7xyzxdyB9V2h5tBsjwD0VH+u8GUbsHePHb 5T0K3062l+bdBS5yYr35rJodWr+CG9pu/ck1mXMLunA= -----END CERTIFICATE-----Generated at Sun Aug 24 05:34:04 2025 by rpki-client