$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/K5qlq6iNGXb53_WZLHJLmHcTCzs.roa File: K5qlq6iNGXb53_WZLHJLmHcTCzs.roa (raw, json) Hash identifier: ty8BZuCbjKMP6sDkJhJfTk58xMONzCNbx/bOZyNEglU= Subject key identifier: 2B:9A:A5:AB:A8:8D:19:76:F9:DF:F5:99:2C:72:4B:98:77:13:0B:3B Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0F26 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/K5qlq6iNGXb53_WZLHJLmHcTCzs.roa Signing time: Fri 22 Aug 2025 09:03:51 +0000 ROA not before: Fri 22 Aug 2025 09:03:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9922 IP address blocks: 61.61.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3878 (0xf26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 22 09:03:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2B9AA5ABA88D1976F9DFF5992C724B9877130B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:c7:dc:81:9f:54:75:a8:30:41:0f:d3:27: 32:b4:c7:96:7f:40:65:0f:3e:47:b0:94:7f:21:76: b5:5d:24:3c:d8:8f:a7:61:cd:de:5f:0c:8b:61:8f: a0:2e:60:a6:3a:b4:f5:be:d2:71:43:f3:34:ea:78: d1:2b:92:38:04:89:f2:35:12:74:ac:0a:5a:58:a4: 5a:6d:93:60:40:79:31:72:a9:76:04:2e:79:ea:a9: 1b:0a:40:a3:0f:6a:f3:9d:96:53:ce:f8:72:26:c9: 58:75:8f:7c:3b:5c:d4:22:10:fc:16:8f:1b:bb:3c: 77:49:85:95:00:0c:03:a5:e4:54:9a:60:7b:91:9d: cc:23:7d:4b:45:f5:2e:c5:6a:74:97:27:77:bf:07: 77:6c:eb:15:a2:e4:05:e8:0e:76:a7:82:67:09:79: 0f:78:ee:97:ae:11:79:35:00:dd:d3:01:a1:39:55: 31:f8:62:30:ea:e6:e1:fb:d4:8f:1a:ec:1a:44:46: 9a:7d:40:0f:81:e5:f6:ba:a8:d6:2a:57:3a:d8:9d: 5b:a5:56:fb:43:14:97:64:e4:db:73:28:d0:e3:06: 74:33:96:db:6f:18:29:a5:9f:db:6f:95:9c:28:2f: d0:b6:1c:e8:56:72:41:09:c9:8f:47:f4:18:a2:95: ad:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9A:A5:AB:A8:8D:19:76:F9:DF:F5:99:2C:72:4B:98:77:13:0B:3B X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/K5qlq6iNGXb53_WZLHJLmHcTCzs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.76.0/22 Signature Algorithm: sha256WithRSAEncryption 24:df:51:11:f6:cf:88:59:35:fd:eb:b3:fe:f0:29:bd:ea:27: 1e:bf:bb:4e:63:45:80:69:bc:23:7f:29:f4:ae:02:c6:3a:55: 22:d7:8c:4b:4c:d4:f8:63:ad:e5:28:47:a0:a2:16:1b:6b:fb: 62:a3:6d:d2:f2:cc:1f:7d:2a:55:98:ad:41:f2:3f:b1:dc:96: 64:7f:d0:91:d5:da:b8:8e:aa:e3:28:5e:d2:1d:24:1e:64:5f: c7:55:4a:aa:c9:0f:0b:00:e3:05:ea:5a:bf:8a:2c:78:98:1d: d3:1b:b3:aa:4f:4e:49:62:6f:e3:30:c8:b1:fe:db:0f:40:bf: 7b:ca:4a:98:8a:35:f6:99:ea:db:f2:0f:06:84:96:25:5a:e7: 08:4f:f7:a5:10:1b:c2:6b:bd:14:88:bb:76:dd:97:d7:99:55: 37:9b:a6:31:9a:73:ab:92:80:bc:e8:f6:17:14:4c:54:83:19: 66:a3:34:90:1c:70:f9:72:2c:61:49:bb:0d:45:85:1d:e9:cb: 93:56:25:6d:e9:31:ac:47:2a:8d:3e:99:10:b2:d7:a8:be:bb: 7c:73:82:33:4d:db:58:1c:cc:b1:71:ec:44:d3:15:d9:7c:f5: 9e:1f:cb:46:0c:13:90:12:1a:21:9d:fd:eb:f5:83:3e:bc:66: ee:df:f8:77 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDyYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTA4MjIw OTAzNTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJCOUFBNUFCQTg4RDE5 NzZGOURGRjU5OTJDNzI0Qjk4NzcxMzBCM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwLsfcgZ9UdagwQQ/TJzK0x5Z/QGUPPkewlH8hdrVdJDzYj6dh zd5fDIthj6AuYKY6tPW+0nFD8zTqeNErkjgEifI1EnSsClpYpFptk2BAeTFyqXYE LnnqqRsKQKMPavOdllPO+HImyVh1j3w7XNQiEPwWjxu7PHdJhZUADAOl5FSaYHuR ncwjfUtF9S7FanSXJ3e/B3ds6xWi5AXoDnangmcJeQ947peuEXk1AN3TAaE5VTH4 YjDq5uH71I8a7BpERpp9QA+B5fa6qNYqVzrYnVulVvtDFJdk5NtzKNDjBnQzlttv GCmln9tvlZwoL9C2HOhWckEJyY9H9Biila0DAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUK5qlq6iNGXb53/WZLHJLmHcTCzswHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL0s1cWxxNmlOR1hiNTNfV1pMSEpMbUhj VEN6cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PUwwDQYJ KoZIhvcNAQELBQADggEBACTfURH2z4hZNf3rs/7wKb3qJx6/u05jRYBpvCN/KfSu AsY6VSLXjEtM1PhjreUoR6CiFhtr+2KjbdLyzB99KlWYrUHyP7HclmR/0JHV2riO quMoXtIdJB5kX8dVSqrJDwsA4wXqWr+KLHiYHdMbs6pPTklib+MwyLH+2w9Av3vK SpiKNfaZ6tvyDwaEliVa5whP96UQG8JrvRSIu3bdl9eZVTebpjGac6uSgLzo9hcU TFSDGWajNJAccPlyLGFJuw1FhR3py5NWJW3pMaxHKo0+mRCy16i+u3xzgjNN21gc zLFx7ETTFdl89Z4fy0YME5ASGiGd/ev1gz68Zu7f+Hc= -----END CERTIFICATE-----Generated at Sun Aug 24 07:25:24 2025 by rpki-client