$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/ayxKbbxXsw8y2Hb3H82kA6Xx1Vc.roa File: ayxKbbxXsw8y2Hb3H82kA6Xx1Vc.roa (raw, json) Hash identifier: 7p4tc1Lwr4nkYVtJ+Q6yK1mrE+lzZteFTCP/miMeHR8= Subject key identifier: 6B:2C:4A:6D:BC:57:B3:0F:32:D8:76:F7:1F:CD:A4:03:A5:F1:D5:57 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0F2C Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/ayxKbbxXsw8y2Hb3H82kA6Xx1Vc.roa Signing time: Fri 22 Aug 2025 09:03:52 +0000 ROA not before: Fri 22 Aug 2025 09:03:52 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131597 IP address blocks: 61.61.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3884 (0xf2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 22 09:03:52 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6B2C4A6DBC57B30F32D876F71FCDA403A5F1D557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0e:e7:2d:94:7c:f3:88:e1:c0:b0:97:87:1c: 98:b6:26:71:85:7f:40:af:06:69:6e:dc:f0:af:98: 90:9c:04:04:be:d7:92:74:a9:8b:63:88:61:dc:54: 06:bf:9b:0f:d6:3a:9e:b5:66:01:36:b0:55:ed:70: da:89:2f:88:52:95:74:cf:cc:5f:9b:c0:75:5b:1e: a1:8f:36:33:d7:78:1e:b2:59:4c:49:67:8d:0e:0f: e4:6b:70:da:dd:07:7e:61:39:62:ad:06:de:09:71: 97:c3:0e:67:38:30:e0:db:a6:8b:29:19:0a:6f:9e: 22:32:cc:1d:e2:2d:fd:f2:14:eb:4a:1f:da:8d:d2: f2:4e:cf:d5:ac:e4:ac:7b:3b:11:df:fb:c7:14:f8: 96:d0:dd:75:d4:52:13:db:81:c1:01:04:da:8f:14: 27:b1:ed:db:76:dc:02:c7:f8:1d:a9:24:dd:d1:ab: 00:f1:71:e1:43:36:ed:d6:16:0d:e0:37:5d:b0:15: 5f:5e:59:c9:c8:2b:f5:e8:e1:80:6e:34:a8:d4:44: 11:df:39:1e:79:32:32:0f:0f:20:61:66:1a:58:30: 1c:7b:6c:09:27:4f:0d:23:10:7d:df:d3:ef:d5:9c: c2:8d:e0:b0:db:6e:2a:84:a3:67:e0:4e:3e:82:2f: de:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2C:4A:6D:BC:57:B3:0F:32:D8:76:F7:1F:CD:A4:03:A5:F1:D5:57 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/ayxKbbxXsw8y2Hb3H82kA6Xx1Vc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.71.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:23:d2:78:0d:57:11:3d:7b:a7:d8:55:28:2c:ef:e9:14:85: e1:81:c3:1e:a7:3a:67:7b:df:d2:9d:57:10:39:09:39:c8:20: 6e:bc:e2:bc:a6:65:d4:86:a7:e6:6c:f5:12:44:67:26:16:87: 76:c5:29:4f:69:eb:99:12:f6:e1:78:51:0c:4c:c3:07:f6:8f: c5:27:58:1d:de:35:86:1f:e5:ef:f9:d6:54:17:f8:e5:eb:ea: 64:5f:33:04:1f:8c:3b:70:51:64:81:32:91:cd:c1:63:92:d3: 22:25:4b:f0:75:17:32:9d:bf:f6:98:06:30:4e:f9:a2:f5:11: 20:96:20:2b:27:1f:e4:0b:cf:cf:40:20:5f:97:58:24:0c:04: 7b:5c:54:63:35:0c:45:51:5a:b3:49:76:91:c8:3b:23:27:fc: 80:db:4d:ca:48:79:ee:cc:89:2b:dc:36:85:3d:48:cd:c6:46: 8c:a0:5f:3b:d2:e6:56:67:0d:42:15:b6:17:ba:81:32:bf:01: 94:63:f4:32:1f:4c:b2:31:63:45:01:65:1a:86:ff:81:dd:4c: 64:42:47:c6:b1:52:0f:25:a0:3e:37:48:2b:b2:df:5b:3c:ff: 05:d9:2c:88:ab:01:98:91:30:23:89:4c:5c:6e:39:cd:f9:3e: 9a:b4:f5:a4 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDywwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTA4MjIw OTAzNTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZCMkM0QTZEQkM1N0Iz MEYzMkQ4NzZGNzFGQ0RBNDAzQTVGMUQ1NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUDuctlHzziOHAsJeHHJi2JnGFf0CvBmlu3PCvmJCcBAS+15J0 qYtjiGHcVAa/mw/WOp61ZgE2sFXtcNqJL4hSlXTPzF+bwHVbHqGPNjPXeB6yWUxJ Z40OD+RrcNrdB35hOWKtBt4JcZfDDmc4MODbpospGQpvniIyzB3iLf3yFOtKH9qN 0vJOz9Ws5Kx7OxHf+8cU+JbQ3XXUUhPbgcEBBNqPFCex7dt23ALH+B2pJN3RqwDx ceFDNu3WFg3gN12wFV9eWcnIK/Xo4YBuNKjURBHfOR55MjIPDyBhZhpYMBx7bAkn Tw0jEH3f0+/VnMKN4LDbbiqEo2fgTj6CL977AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUayxKbbxXsw8y2Hb3H82kA6Xx1VcwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL2F5eEtiYnhYc3c4eTJIYjNIODJrQTZY eDFWYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9PUcwDQYJ KoZIhvcNAQELBQADggEBABoj0ngNVxE9e6fYVSgs7+kUheGBwx6nOmd739KdVxA5 CTnIIG684rymZdSGp+Zs9RJEZyYWh3bFKU9p65kS9uF4UQxMwwf2j8UnWB3eNYYf 5e/51lQX+OXr6mRfMwQfjDtwUWSBMpHNwWOS0yIlS/B1FzKdv/aYBjBO+aL1ESCW ICsnH+QLz89AIF+XWCQMBHtcVGM1DEVRWrNJdpHIOyMn/IDbTcpIee7MiSvcNoU9 SM3GRoygXzvS5lZnDUIVthe6gTK/AZRj9DIfTLIxY0UBZRqG/4HdTGRCR8axUg8l oD43SCuy31s8/wXZLIirAZiRMCOJTFxuOc35Ppq09aQ= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:01 2025 by rpki-client