$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/XIHi8vCZs2OrGtd0SoNibgybuug.roa File: XIHi8vCZs2OrGtd0SoNibgybuug.roa (raw, json) Hash identifier: I4v+HkMrenc4hjPs1/RBjg7dQl0WiPDhgdHLi/plci8= Subject key identifier: 5C:81:E2:F2:F0:99:B3:63:AB:1A:D7:74:4A:83:62:6E:0C:9B:BA:E8 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0F02 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/XIHi8vCZs2OrGtd0SoNibgybuug.roa Signing time: Fri 22 Aug 2025 09:03:43 +0000 ROA not before: Fri 22 Aug 2025 09:03:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131602 IP address blocks: 211.78.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3842 (0xf02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 22 09:03:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5C81E2F2F099B363AB1AD7744A83626E0C9BBAE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:9b:43:1a:b4:39:09:d1:d4:45:ed:60:d0: 6a:2a:04:b7:3a:25:8c:e3:ff:a4:4d:a7:7d:0e:b4: b2:f8:e2:c1:4f:44:eb:26:bd:69:57:40:da:ed:e3: cf:c8:f2:94:e9:93:8e:7a:74:84:a5:8c:c8:6c:35: b0:81:36:bf:ad:da:3e:2a:43:4a:a4:14:35:c5:d8: ee:c6:ef:4b:30:d4:50:14:32:52:87:e5:56:8a:76: b2:54:26:cc:8e:86:de:f9:6b:a9:9d:1b:d1:2f:d0: 11:48:d2:94:ac:04:7f:52:78:76:8d:80:be:47:61: 93:91:5a:e4:dc:47:2c:bd:6e:8a:8d:91:d8:cb:79: d6:5d:0a:52:b1:99:93:6a:f5:47:fb:3c:c5:38:00: 54:d5:52:4b:44:5e:f6:eb:95:b3:fc:0d:e7:f2:20: 65:6f:93:78:23:b3:25:fc:d2:3c:e9:7f:c5:4d:d8: fc:26:d1:31:98:e8:c7:56:86:d7:db:57:01:ad:93: 39:0b:da:7f:ca:b5:88:d1:d3:d4:87:3f:9c:a0:59: f8:53:6c:b9:ae:65:22:a9:c2:2d:95:26:b3:b3:8d: 7a:2e:30:0f:09:60:a0:42:72:21:dc:6d:ff:80:e1: 8f:a0:39:14:65:e4:08:4a:46:cd:ec:10:8d:60:59: fa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:81:E2:F2:F0:99:B3:63:AB:1A:D7:74:4A:83:62:6E:0C:9B:BA:E8 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/XIHi8vCZs2OrGtd0SoNibgybuug.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.24.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:37:e6:68:d5:e8:98:63:23:cb:1c:ec:bc:86:bf:42:e3:3e: 36:70:cc:40:1a:5f:09:ec:21:d1:02:69:d0:c2:af:92:58:09: a8:97:81:d2:c0:e8:74:bc:0e:f5:b1:33:99:c4:31:f5:0a:77: 4e:49:c6:04:09:48:25:94:59:48:08:a6:98:da:c1:32:b4:c9: 5b:99:7e:fa:42:9c:f2:15:96:5c:d0:16:e3:d3:f1:7b:c3:ec: 2b:91:70:90:33:1b:77:18:23:e8:84:cd:0e:92:e6:7c:40:fc: 34:1a:35:f7:52:b9:f8:97:fa:5e:c5:07:c1:0d:81:3f:f6:39: 70:14:bf:2e:c7:07:b2:1e:97:1a:e3:39:44:7b:dc:9c:6b:e0: 01:52:ea:ec:8d:90:7b:40:b4:ee:fb:c0:96:cf:d6:86:fe:1d: 25:7f:37:a4:56:72:5e:72:e7:2a:88:f5:f3:e1:18:16:37:83: 96:aa:62:b1:45:4a:43:98:c8:18:2c:e3:5c:8e:63:f4:95:ff: 3e:b5:4f:a2:71:3a:2b:24:6d:8f:d6:69:64:ec:6a:6c:a1:54: 56:70:7b:97:de:dc:78:4d:69:a1:95:ca:ad:e1:18:4f:ab:4c: ac:45:5b:9c:8e:5b:d6:07:a6:1f:0f:65:f1:35:d0:b3:4a:5b: 94:2c:42:77 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDwIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTA4MjIw OTAzNDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVDODFFMkYyRjA5OUIz NjNBQjFBRDc3NDRBODM2MjZFMEM5QkJBRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsXJtDGrQ5CdHURe1g0GoqBLc6JYzj/6RNp30OtLL44sFPROsm vWlXQNrt48/I8pTpk456dISljMhsNbCBNr+t2j4qQ0qkFDXF2O7G70sw1FAUMlKH 5VaKdrJUJsyOht75a6mdG9Ev0BFI0pSsBH9SeHaNgL5HYZORWuTcRyy9boqNkdjL edZdClKxmZNq9Uf7PMU4AFTVUktEXvbrlbP8DefyIGVvk3gjsyX80jzpf8VN2Pwm 0TGY6MdWhtfbVwGtkzkL2n/KtYjR09SHP5ygWfhTbLmuZSKpwi2VJrOzjXouMA8J YKBCciHcbf+A4Y+gORRl5AhKRs3sEI1gWfo1AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUXIHi8vCZs2OrGtd0SoNibgybuugwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1hJSGk4dkNaczJPckd0ZDBTb05pYmd5 YnV1Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPTThgwDQYJ KoZIhvcNAQELBQADggEBADo35mjV6JhjI8sc7LyGv0LjPjZwzEAaXwnsIdECadDC r5JYCaiXgdLA6HS8DvWxM5nEMfUKd05JxgQJSCWUWUgIppjawTK0yVuZfvpCnPIV llzQFuPT8XvD7CuRcJAzG3cYI+iEzQ6S5nxA/DQaNfdSufiX+l7FB8ENgT/2OXAU vy7HB7IelxrjOUR73Jxr4AFS6uyNkHtAtO77wJbP1ob+HSV/N6RWcl5y5yqI9fPh GBY3g5aqYrFFSkOYyBgs41yOY/SV/z61T6JxOiskbY/WaWTsamyhVFZwe5fe3HhN aaGVyq3hGE+rTKxFW5yOW9YHph8PZfE10LNKW5QsQnc= -----END CERTIFICATE-----Generated at Sun Aug 24 07:28:25 2025 by rpki-client