$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/rD6_AxHaJoGdKOLp8AoeAwfZcgE.roa File: rD6_AxHaJoGdKOLp8AoeAwfZcgE.roa (raw, json) Hash identifier: lVrS0WV2y77upNxuwxrNN4tsfnNhxRCJJE/O2tsbtp4= Subject key identifier: AC:3E:BF:03:11:DA:26:81:9D:28:E2:E9:F0:0A:1E:03:07:D9:72:01 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0F1C Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/rD6_AxHaJoGdKOLp8AoeAwfZcgE.roa Signing time: Fri 22 Aug 2025 09:03:48 +0000 ROA not before: Fri 22 Aug 2025 09:03:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 61.61.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3868 (0xf1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 22 09:03:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AC3EBF0311DA26819D28E2E9F00A1E0307D97201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4f:e9:b5:6a:78:16:ba:bf:16:54:31:21:d9: 50:b9:58:ea:3e:81:9b:b1:ba:be:3c:92:a7:f5:4d: cb:ff:ed:62:bd:06:46:21:a4:da:fe:6c:68:fb:e7: 0b:58:9a:e1:7d:84:89:53:99:25:26:cb:6a:67:20: d7:9d:d7:71:d1:8b:f3:cd:89:92:0c:35:7f:ba:da: e8:55:1d:20:02:1c:69:ef:a6:54:cd:0c:5d:d8:f3: 90:91:f9:82:c6:93:f2:03:db:c8:02:08:0d:5a:e7: 90:6c:6c:f8:37:0c:11:aa:b1:5b:5c:e0:5a:d1:2b: 1e:89:d4:4d:ae:98:77:4b:13:55:dd:40:02:0d:4d: 98:b5:70:57:9c:b1:54:62:62:ca:d6:d9:6e:0c:45: a8:a9:af:08:45:3d:fc:44:ad:ba:2e:4f:4d:77:e3: 5e:a5:a9:1f:a6:41:2e:fb:16:96:43:8a:69:d8:7e: fe:d4:09:7c:db:30:c2:6c:1f:cd:e4:aa:8d:f8:23: 16:af:ca:08:d8:27:16:15:bb:67:3c:f8:65:11:24: 7e:26:40:85:0b:9b:54:21:a2:85:db:df:d7:0d:1d: 53:83:8d:3a:1c:4d:fb:b1:2d:83:e2:7a:93:b4:4e: c8:34:37:06:d6:66:26:c1:1f:3d:51:ee:b0:41:44: 3e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3E:BF:03:11:DA:26:81:9D:28:E2:E9:F0:0A:1E:03:07:D9:72:01 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/rD6_AxHaJoGdKOLp8AoeAwfZcgE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.64.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:34:98:10:3c:f3:37:e9:d2:f0:b8:72:48:87:4c:f6:31:1c: c7:a0:42:74:98:ad:15:28:aa:15:82:ca:fa:9b:e9:65:1c:c3: 02:64:ae:d8:b1:1e:a4:82:15:7d:fd:3f:69:03:87:9e:a1:23: 7e:95:02:23:b2:7d:16:9f:99:d9:4b:23:20:20:10:fb:a7:78: 21:04:b0:1b:21:f6:f6:00:dd:e8:56:04:10:5b:ce:a0:8c:ef: c0:42:fc:58:c1:c1:81:df:fd:31:bb:6a:d7:58:17:af:c9:c7: 07:93:16:9f:2a:42:f4:21:dc:37:21:3a:fe:b6:9f:18:37:d7: 6e:81:6e:33:4f:57:03:3d:0a:26:24:cb:b8:39:b8:6b:f3:f7: 0c:8c:ce:69:ba:af:2d:c6:3d:ac:ea:70:58:cf:53:28:62:7c: 87:db:ef:7c:5c:a7:40:12:a4:e2:da:56:5c:81:84:e0:0f:8f: a5:c3:b4:2a:7f:03:e3:5f:9d:d1:b2:a1:c4:ca:31:3f:8b:c7: ec:7a:2f:7b:67:1b:60:e8:92:aa:15:74:76:5d:65:c4:9c:50: 49:8f:f1:ce:72:9a:d1:31:94:2e:73:4c:be:44:b8:43:91:05: 1b:f0:b7:34:4f:c7:b0:a7:e3:97:be:60:19:d0:51:20:34:c1: 8e:4b:3c:a1 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDxwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTA4MjIw OTAzNDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFDM0VCRjAzMTFEQTI2 ODE5RDI4RTJFOUYwMEExRTAzMDdEOTcyMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjT+m1angWur8WVDEh2VC5WOo+gZuxur48kqf1Tcv/7WK9BkYh pNr+bGj75wtYmuF9hIlTmSUmy2pnINed13HRi/PNiZIMNX+62uhVHSACHGnvplTN DF3Y85CR+YLGk/ID28gCCA1a55BsbPg3DBGqsVtc4FrRKx6J1E2umHdLE1XdQAIN TZi1cFecsVRiYsrW2W4MRaiprwhFPfxErbouT013416lqR+mQS77FpZDimnYfv7U CXzbMMJsH83kqo34IxavygjYJxYVu2c8+GURJH4mQIULm1QhooXb39cNHVODjToc TfuxLYPiepO0Tsg0NwbWZibBHz1R7rBBRD5fAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUrD6/AxHaJoGdKOLp8AoeAwfZcgEwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL3JENl9BeEhhSm9HZEtPTHA4QW9lQXdm WmNnRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PUAwDQYJ KoZIhvcNAQELBQADggEBAIo0mBA88zfp0vC4ckiHTPYxHMegQnSYrRUoqhWCyvqb 6WUcwwJkrtixHqSCFX39P2kDh56hI36VAiOyfRafmdlLIyAgEPuneCEEsBsh9vYA 3ehWBBBbzqCM78BC/FjBwYHf/TG7atdYF6/JxweTFp8qQvQh3DchOv62nxg3126B bjNPVwM9CiYky7g5uGvz9wyMzmm6ry3GPazqcFjPUyhifIfb73xcp0ASpOLaVlyB hOAPj6XDtCp/A+NfndGyocTKMT+Lx+x6L3tnG2DokqoVdHZdZcScUEmP8c5ymtEx lC5zTL5EuEORBRvwtzRPx7Cn45e+YBnQUSA0wY5LPKE= -----END CERTIFICATE-----Generated at Sun Aug 24 07:26:33 2025 by rpki-client