$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/l-jmjw1EpkjL8DflVuEKsISqvd0.roa File: l-jmjw1EpkjL8DflVuEKsISqvd0.roa (raw, json) Hash identifier: MaCODn1SgJg1Q+iLspwZF7NMAdTAfUFORdvLffiZSdw= Subject key identifier: 97:E8:E6:8F:0D:44:A6:48:CB:F0:37:E5:56:E1:0A:B0:84:AA:BD:DD Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0F2A Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/l-jmjw1EpkjL8DflVuEKsISqvd0.roa Signing time: Fri 22 Aug 2025 09:03:51 +0000 ROA not before: Fri 22 Aug 2025 09:03:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 61.61.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3882 (0xf2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 22 09:03:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=97E8E68F0D44A648CBF037E556E10AB084AABDDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:cd:4d:69:e5:0d:0a:d7:96:4e:69:67:26: bc:04:73:c9:69:0a:ac:4b:f8:fc:46:7b:2c:17:20: 07:28:ac:0b:33:92:1c:be:35:98:c4:31:87:2a:f8: ee:15:7b:8f:ab:cd:1b:26:a7:62:42:ff:92:15:37: a0:89:3f:ea:ee:01:32:5d:30:df:b3:7b:53:fb:5a: b9:31:b6:4a:af:a8:d8:cd:2d:9b:10:e6:7d:e6:1c: 6f:0c:1a:23:75:9c:05:12:64:7b:0b:92:53:67:a5: 52:44:eb:4d:83:63:7f:2e:c6:70:03:83:66:68:d4: 73:ef:6f:e6:7b:35:93:55:d0:ce:13:3a:d9:73:58: 81:51:80:4a:23:f5:d2:3c:03:af:95:5a:76:16:ab: 56:28:69:af:25:6d:38:71:51:55:de:87:5e:93:9e: 14:88:ff:67:bc:95:55:48:95:85:d6:93:42:ba:b3: ff:90:a4:7c:3f:6b:7e:69:c8:d8:71:17:b2:e2:d0: 6a:d3:16:68:dc:ac:35:6f:ff:7a:91:83:75:87:8a: 01:79:ce:72:65:b6:5d:b2:5c:94:5b:21:f3:45:3d: 63:d3:0a:d1:b8:60:ce:44:0a:ff:41:f5:f4:ba:46: 60:bd:7c:d2:8e:c6:a8:f0:63:7b:27:10:3c:98:22: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E8:E6:8F:0D:44:A6:48:CB:F0:37:E5:56:E1:0A:B0:84:AA:BD:DD X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/l-jmjw1EpkjL8DflVuEKsISqvd0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.0.0/17 Signature Algorithm: sha256WithRSAEncryption 5e:63:9a:09:98:c4:ce:7d:88:db:b0:ed:74:95:e9:b9:72:b3: cc:af:70:8c:80:54:7c:0b:66:a4:99:40:c2:36:ad:17:5c:c4: 8d:0b:57:40:e6:be:fa:e6:8c:e0:3a:32:e4:b5:cb:1b:8e:24: 1a:cd:4b:9b:29:3d:ac:6e:d8:52:33:5c:af:4f:98:64:c0:3d: 4e:d8:7e:bd:3f:b5:8a:2f:54:4c:b7:ae:3d:38:1d:9c:c1:d2: 71:c2:8f:ea:a9:93:7f:e0:bd:d4:45:4c:22:d0:76:5c:50:14: e9:21:dd:d4:db:86:2f:d9:01:6d:2a:3d:b3:b4:6f:05:d0:f6: 33:83:8c:f7:97:09:ed:83:8c:46:c5:9d:a5:26:af:47:5c:27: 5a:13:a7:d1:de:5a:2c:1d:1a:fd:f9:df:37:9b:42:33:f6:77: 3f:67:27:ac:df:fa:df:50:df:e6:aa:a4:7a:58:6b:78:bb:53: bb:67:30:0e:b4:2f:4b:d6:83:1d:31:ec:18:25:09:5f:d1:36: 0b:ea:06:41:59:59:20:39:46:51:14:91:dc:0a:0d:b0:0e:69: 4e:c0:92:e6:a6:ba:ca:e8:f3:4b:65:ce:62:99:68:79:2a:2e: 80:fc:56:4d:e4:37:cb:f6:ca:52:d8:cd:a7:22:c2:1c:69:d8: 10:1e:af:1b -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDyowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTA4MjIw OTAzNTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk3RThFNjhGMEQ0NEE2 NDhDQkYwMzdFNTU2RTEwQUIwODRBQUJEREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1381NaeUNCteWTmlnJrwEc8lpCqxL+PxGeywXIAcorAszkhy+ NZjEMYcq+O4Ve4+rzRsmp2JC/5IVN6CJP+ruATJdMN+ze1P7WrkxtkqvqNjNLZsQ 5n3mHG8MGiN1nAUSZHsLklNnpVJE602DY38uxnADg2Zo1HPvb+Z7NZNV0M4TOtlz WIFRgEoj9dI8A6+VWnYWq1Yoaa8lbThxUVXeh16TnhSI/2e8lVVIlYXWk0K6s/+Q pHw/a35pyNhxF7Li0GrTFmjcrDVv/3qRg3WHigF5znJltl2yXJRbIfNFPWPTCtG4 YM5ECv9B9fS6RmC9fNKOxqjwY3snEDyYIhKxAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUl+jmjw1EpkjL8DflVuEKsISqvd0wHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL2wtam1qdzFFcGtqTDhEZmxWdUVLc0lT cXZkMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc9PQAwDQYJ KoZIhvcNAQELBQADggEBAF5jmgmYxM59iNuw7XSV6blys8yvcIyAVHwLZqSZQMI2 rRdcxI0LV0DmvvrmjOA6MuS1yxuOJBrNS5spPaxu2FIzXK9PmGTAPU7Yfr0/tYov VEy3rj04HZzB0nHCj+qpk3/gvdRFTCLQdlxQFOkh3dTbhi/ZAW0qPbO0bwXQ9jOD jPeXCe2DjEbFnaUmr0dcJ1oTp9HeWiwdGv353zebQjP2dz9nJ6zf+t9Q3+aqpHpY a3i7U7tnMA60L0vWgx0x7BglCV/RNgvqBkFZWSA5RlEUkdwKDbAOaU7Akuamusro 80tlzmKZaHkqLoD8Vk3kN8v2ylLYzaciwhxp2BAerxs= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:23 2025 by rpki-client