$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/QqLVesZJmPlei-s3EWTmlwAOcZA.roa File: QqLVesZJmPlei-s3EWTmlwAOcZA.roa (raw, json) Hash identifier: xlmET2pbKWe7n5bS4uZZ1pWJjkbgaL3Ft1wdrBL/TA4= Subject key identifier: 42:A2:D5:7A:C6:49:98:F9:5E:8B:EB:37:11:64:E6:97:00:0E:71:90 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0F04 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/QqLVesZJmPlei-s3EWTmlwAOcZA.roa Signing time: Fri 22 Aug 2025 09:03:43 +0000 ROA not before: Fri 22 Aug 2025 09:03:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9922 IP address blocks: 61.61.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3844 (0xf04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 22 09:03:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=42A2D57AC64998F95E8BEB371164E697000E7190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:62:bb:e3:a1:44:70:fb:04:cb:ee:d9:d3: 2a:4a:25:8c:a7:23:c0:14:61:3d:5f:8b:db:46:a5: 36:f1:d3:0b:b5:cd:90:35:43:47:98:2d:b2:75:ba: 81:68:d8:4a:82:30:66:61:bb:cd:09:a2:87:90:76: 33:a0:af:e9:d7:f7:d2:63:99:20:df:2a:74:b5:cb: 26:4c:05:38:a9:1d:0f:7a:72:04:b4:b8:2c:57:c3: af:eb:55:f9:d5:6e:17:ad:a8:77:bf:e6:1c:e0:1a: 71:bd:00:2f:e8:1f:13:d2:c4:86:8c:3d:3b:2e:22: f0:94:b6:9f:64:0e:fe:82:b7:b3:af:d3:d1:34:57: e5:15:5a:08:20:90:e9:64:cd:10:de:06:c6:26:8f: 92:0f:f1:91:8c:dd:d4:77:33:ee:3c:2b:d1:06:3a: 08:24:82:0a:76:4e:80:57:e1:eb:57:c3:c7:28:01: e6:61:dc:b1:b7:28:f1:c1:9d:76:66:5f:78:3b:3a: d1:02:44:b7:39:eb:14:c9:f5:7e:cd:28:8a:4e:21: c0:51:21:89:55:20:c4:61:4f:72:04:cd:38:f8:83: 16:17:b9:60:29:2c:9a:1a:aa:28:55:a2:1e:09:3c: 27:05:d2:c7:52:54:b6:79:f4:d1:5b:08:48:63:57: 40:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A2:D5:7A:C6:49:98:F9:5E:8B:EB:37:11:64:E6:97:00:0E:71:90 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/QqLVesZJmPlei-s3EWTmlwAOcZA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.80.0/20 Signature Algorithm: sha256WithRSAEncryption 87:a6:fc:f5:4c:f1:dc:43:67:44:8f:c6:c8:be:74:5e:68:31: 53:d1:cc:82:42:a2:67:13:36:dd:eb:ae:d9:45:ec:c8:3e:60: 64:13:72:a2:8d:0d:80:23:34:9d:df:62:83:1e:ae:54:43:91: 2a:58:68:64:73:45:ea:b2:7c:0c:0b:f6:1a:90:1b:bb:55:16: d6:a4:08:3d:02:5a:e7:5e:44:75:85:02:8c:0f:1a:3a:40:0a: c9:ac:11:1b:ad:33:e5:f8:30:88:c5:8c:9f:a0:e4:3d:c1:45: fe:cb:41:57:8f:e1:b2:c8:85:df:bb:40:fd:a6:65:ba:3c:01: e5:33:26:88:96:4e:bb:c3:58:5c:d9:ae:3c:50:b1:7e:2a:e9: a2:f4:ba:ab:2b:0d:72:bf:b4:92:c0:80:d3:1d:ca:81:ba:90: c1:86:fc:ac:2a:e9:b3:0a:a2:f7:8e:49:2a:99:0d:96:fd:b7: a0:e0:3d:cd:df:2a:3f:e7:ce:cb:f5:e2:fd:a6:72:70:5d:61: 53:c5:a0:5a:f4:7b:02:d9:85:99:1b:69:7a:47:9f:2a:ee:5c: e2:b8:b2:f1:45:f1:cd:6e:4c:81:74:b3:64:7c:1e:bd:24:68: 29:a2:4d:cf:b4:74:1a:f6:1d:8f:27:57:49:70:89:ab:20:81: 16:da:e6:aa -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDwQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTA4MjIw OTAzNDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQyQTJENTdBQzY0OTk4 Rjk1RThCRUIzNzExNjRFNjk3MDAwRTcxOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtl2K746FEcPsEy+7Z0ypKJYynI8AUYT1fi9tGpTbx0wu1zZA1 Q0eYLbJ1uoFo2EqCMGZhu80JooeQdjOgr+nX99JjmSDfKnS1yyZMBTipHQ96cgS0 uCxXw6/rVfnVbhetqHe/5hzgGnG9AC/oHxPSxIaMPTsuIvCUtp9kDv6Ct7Ov09E0 V+UVWgggkOlkzRDeBsYmj5IP8ZGM3dR3M+48K9EGOggkggp2ToBX4etXw8coAeZh 3LG3KPHBnXZmX3g7OtECRLc56xTJ9X7NKIpOIcBRIYlVIMRhT3IEzTj4gxYXuWAp LJoaqihVoh4JPCcF0sdSVLZ59NFbCEhjV0CnAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUQqLVesZJmPlei+s3EWTmlwAOcZAwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1FxTFZlc1pKbVBsZWktczNFV1RtbHdB T2NaQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9PVAwDQYJ KoZIhvcNAQELBQADggEBAIem/PVM8dxDZ0SPxsi+dF5oMVPRzIJComcTNt3rrtlF 7Mg+YGQTcqKNDYAjNJ3fYoMerlRDkSpYaGRzReqyfAwL9hqQG7tVFtakCD0CWude RHWFAowPGjpACsmsERutM+X4MIjFjJ+g5D3BRf7LQVeP4bLIhd+7QP2mZbo8AeUz JoiWTrvDWFzZrjxQsX4q6aL0uqsrDXK/tJLAgNMdyoG6kMGG/Kwq6bMKoveOSSqZ DZb9t6DgPc3fKj/nzsv14v2mcnBdYVPFoFr0ewLZhZkbaXpHnyruXOK4svFF8c1u TIF0s2R8Hr0kaCmiTc+0dBr2HY8nV0lwiasggRba5qo= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:57 2025 by rpki-client