$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/pYZi2Jq6ZEeZiAVFwbRrmePdx9s.roa File: pYZi2Jq6ZEeZiAVFwbRrmePdx9s.roa (raw, json) Hash identifier: o/KiHRySzK5V9zsXRCrdN5a2U/aZyapm0ak7SDVAVvQ= Subject key identifier: A5:86:62:D8:9A:BA:64:47:99:88:05:45:C1:B4:6B:99:E3:DD:C7:DB Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0F24 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/pYZi2Jq6ZEeZiAVFwbRrmePdx9s.roa Signing time: Fri 22 Aug 2025 09:03:49 +0000 ROA not before: Fri 22 Aug 2025 09:03:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4780 IP address blocks: 61.61.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3876 (0xf24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 22 09:03:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A58662D89ABA644799880545C1B46B99E3DDC7DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d0:82:ad:8f:65:d0:e6:bd:b9:e6:18:40:92: 26:b1:16:7f:7c:33:b1:68:c0:46:7f:a0:63:ff:36: 6b:fd:40:93:ab:94:75:ba:24:a1:32:c8:20:93:10: 4b:b4:27:a1:4f:3f:4a:91:77:29:5f:77:08:55:11: 2d:95:ca:6f:98:db:db:de:c1:13:e9:4c:b5:52:c3: 2b:71:2e:3d:fa:99:25:a8:96:a8:48:db:8b:1c:cf: 42:1d:36:3d:60:bf:2f:20:4b:7b:f3:46:ce:0f:b2: 38:2e:75:59:55:ea:ab:20:b0:63:e2:3f:f4:26:ed: e6:6b:ed:9f:f6:1a:9a:fe:97:c1:a2:38:f5:85:a3: cf:1b:7e:bf:10:1d:1d:b2:54:d0:8d:13:71:46:55: 45:52:e6:bf:3d:a6:b4:3c:88:3a:7d:58:e4:9f:e9: 5b:e3:00:e0:49:69:26:6b:1c:a0:08:e3:cb:18:97: bb:c8:31:a9:30:a9:50:d4:6d:2c:3a:36:3a:b2:0c: 2c:43:53:92:4f:64:36:3a:d6:f2:34:13:6c:9e:7f: d0:35:28:2d:22:31:5a:8e:6e:c9:50:ac:80:5a:ea: 86:38:3b:cd:9f:7e:fd:96:40:d0:05:d7:76:99:77: 81:77:03:66:6f:86:44:fc:91:ec:7d:27:d1:3b:9b: bf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:86:62:D8:9A:BA:64:47:99:88:05:45:C1:B4:6B:99:E3:DD:C7:DB X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/pYZi2Jq6ZEeZiAVFwbRrmePdx9s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.156.0/22 Signature Algorithm: sha256WithRSAEncryption 73:97:e2:38:ae:d4:88:31:03:19:d8:77:ab:1f:96:0c:ed:0e: 3f:74:d7:af:e3:ad:e6:6d:63:ec:4d:1d:8e:39:36:62:0f:b2: 20:6c:36:4e:e0:77:3e:c1:8b:0a:0b:e5:1c:e1:71:59:be:6b: 9b:2c:ba:0e:60:b9:66:5a:4f:23:d5:c5:45:0c:46:a8:bb:53: e5:1e:81:39:ff:cf:76:54:e6:e7:e1:43:c2:4f:0a:30:c3:81: d8:68:1e:09:ae:6a:61:3d:06:37:6c:c9:13:57:16:a8:84:be: b5:94:1a:2f:dc:88:1c:cd:6b:eb:66:a0:ab:73:db:4e:4e:e7: e2:98:e2:49:08:97:b6:a0:b3:e9:ce:1e:6e:38:ee:9b:19:5b: fe:d3:f3:31:28:d7:7b:a5:15:9f:87:77:f8:cc:89:0c:ea:b3: 6e:32:0d:1c:25:a6:9a:3c:c5:47:a2:8f:05:a1:37:06:cc:7b: bc:dd:3f:db:30:dc:31:72:3d:3f:70:6b:3f:b6:5a:b8:1e:8b: 13:e1:a5:07:a7:51:17:29:68:3d:6e:f2:ad:30:a1:5c:44:ea: a4:17:d1:6e:ce:96:2d:5d:28:fd:85:b7:5a:06:23:48:ba:97: e6:2c:a3:11:f8:d6:7e:ba:08:71:15:30:c0:2e:7e:63:b4:d4: 7f:80:1f:08 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDyQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTA4MjIw OTAzNDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE1ODY2MkQ4OUFCQTY0 NDc5OTg4MDU0NUMxQjQ2Qjk5RTNEREM3REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDs0IKtj2XQ5r255hhAkiaxFn98M7FowEZ/oGP/Nmv9QJOrlHW6 JKEyyCCTEEu0J6FPP0qRdylfdwhVES2Vym+Y29vewRPpTLVSwytxLj36mSWolqhI 24scz0IdNj1gvy8gS3vzRs4PsjgudVlV6qsgsGPiP/Qm7eZr7Z/2Gpr+l8GiOPWF o88bfr8QHR2yVNCNE3FGVUVS5r89prQ8iDp9WOSf6VvjAOBJaSZrHKAI48sYl7vI MakwqVDUbSw6NjqyDCxDU5JPZDY61vI0E2yef9A1KC0iMVqObslQrIBa6oY4O82f fv2WQNAF13aZd4F3A2ZvhkT8kex9J9E7m7/VAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUpYZi2Jq6ZEeZiAVFwbRrmePdx9swHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL3BZWmkySnE2WkVlWmlBVkZ3YlJybWVQ ZHg5cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PZwwDQYJ KoZIhvcNAQELBQADggEBAHOX4jiu1IgxAxnYd6sflgztDj9016/jreZtY+xNHY45 NmIPsiBsNk7gdz7BiwoL5RzhcVm+a5ssug5guWZaTyPVxUUMRqi7U+UegTn/z3ZU 5ufhQ8JPCjDDgdhoHgmuamE9BjdsyRNXFqiEvrWUGi/ciBzNa+tmoKtz205O5+KY 4kkIl7ags+nOHm447psZW/7T8zEo13ulFZ+Hd/jMiQzqs24yDRwlppo8xUeijwWh NwbMe7zdP9sw3DFyPT9waz+2WrgeixPhpQenURcpaD1u8q0woVxE6qQX0W7Oli1d KP2Ft1oGI0i6l+YsoxH41n66CHEVMMAufmO01H+AHwg= -----END CERTIFICATE-----Generated at Sun Aug 24 07:31:00 2025 by rpki-client