$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/vCZLyDwO-Sw0GXLUn-M6MbOcUTE.roa File: vCZLyDwO-Sw0GXLUn-M6MbOcUTE.roa (raw, json) Hash identifier: MhpHWH4FmQE7LYutWeYmONEBtCjk65Fpc1NtWAK8YOM= Subject key identifier: BC:26:4B:C8:3C:0E:F9:2C:34:19:72:D4:9F:E3:3A:31:B3:9C:51:31 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0F0C Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/vCZLyDwO-Sw0GXLUn-M6MbOcUTE.roa Signing time: Fri 22 Aug 2025 09:03:45 +0000 ROA not before: Fri 22 Aug 2025 09:03:45 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 61.61.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3852 (0xf0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 22 09:03:45 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BC264BC83C0EF92C341972D49FE33A31B39C5131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:3e:2d:d0:91:1e:63:22:11:7b:e9:ac:df: 52:36:94:22:3b:ea:59:40:5a:40:a0:0c:0b:e7:fe: 9f:e7:cc:8f:06:14:3e:ea:dc:96:f8:bc:30:7e:a0: 66:1e:72:88:19:dd:e3:9b:04:4d:ce:14:a3:27:9c: 6e:af:c0:3a:d3:2a:4b:76:f8:74:80:39:0b:15:0a: a7:d6:57:4d:11:65:ea:c7:3a:d9:76:80:cc:ff:fc: 7a:67:bf:59:1c:06:11:d6:bd:e2:a1:ed:a8:50:c1: 69:e5:10:4a:f4:ad:6e:6e:8f:85:a9:65:38:f5:56: 5f:47:da:ae:48:8f:fd:46:f3:d1:25:88:56:6a:f1: 44:66:4d:72:ac:c1:79:87:81:95:27:81:a0:9b:76: 20:d4:35:7a:31:e4:0a:d7:14:59:5d:4a:fc:b7:b0: 00:9e:ca:eb:04:95:68:54:2f:b2:5a:dd:f7:42:77: 87:61:08:08:da:8b:a9:3f:42:ef:e3:54:fe:c8:75: 13:a7:d2:25:74:c1:5d:e2:00:5c:f4:66:bf:e7:bf: bc:10:a3:75:f3:75:26:8b:70:e4:88:59:5a:1b:ab: d0:f1:16:f8:1e:d6:cf:ba:62:9f:6e:92:f6:1b:39: c9:84:9f:2f:df:a8:67:70:af:df:dc:58:c9:6b:75: 38:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:26:4B:C8:3C:0E:F9:2C:34:19:72:D4:9F:E3:3A:31:B3:9C:51:31 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/vCZLyDwO-Sw0GXLUn-M6MbOcUTE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.16.0/20 Signature Algorithm: sha256WithRSAEncryption 21:f3:4e:63:b8:48:06:d0:be:75:fb:f8:4f:43:cf:f8:03:55: 2f:32:74:0d:ab:44:8c:76:c7:32:06:04:24:6a:65:12:1a:1d: 7d:1b:d4:e7:df:0e:a6:0d:a2:f8:c5:88:7a:19:26:64:d4:6f: 78:d7:02:25:2b:e9:1b:03:64:7b:db:14:17:2d:f4:61:35:d2: b3:95:52:bd:d5:bb:a0:78:40:d6:ee:e3:16:60:25:52:02:09: 4e:28:f9:1a:43:b6:fc:c2:f3:f7:72:0c:13:31:07:35:0d:e6: 9f:65:f9:78:85:65:39:eb:ce:96:e2:0e:4e:e3:fa:63:37:38: f6:fb:8f:03:fc:ac:4b:f3:47:e4:63:2e:12:de:ba:82:2d:a5: c5:ac:8f:65:c4:03:f8:7c:b6:3a:ae:71:67:77:67:2c:4b:be: 8c:b2:db:af:92:9c:69:44:55:ee:90:45:4a:84:81:37:c6:49: 70:f2:db:89:e7:b9:ff:be:87:cb:32:d5:77:d2:ad:44:4d:ed: 10:1f:4c:55:49:91:67:e3:06:ca:64:6c:a8:a3:07:33:69:a5: 90:24:fc:fd:84:04:2b:8b:91:04:bc:ad:9f:7d:ef:63:95:c2: 7f:70:95:4d:24:cf:44:e4:71:39:95:d8:a0:a1:f3:44:1e:a5: 62:11:f1:c2 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDwwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTA4MjIw OTAzNDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJDMjY0QkM4M0MwRUY5 MkMzNDE5NzJENDlGRTMzQTMxQjM5QzUxMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2iz4t0JEeYyIRe+ms31I2lCI76llAWkCgDAvn/p/nzI8GFD7q 3Jb4vDB+oGYecogZ3eObBE3OFKMnnG6vwDrTKkt2+HSAOQsVCqfWV00RZerHOtl2 gMz//Hpnv1kcBhHWveKh7ahQwWnlEEr0rW5uj4WpZTj1Vl9H2q5Ij/1G89EliFZq 8URmTXKswXmHgZUngaCbdiDUNXox5ArXFFldSvy3sACeyusElWhUL7Ja3fdCd4dh CAjai6k/Qu/jVP7IdROn0iV0wV3iAFz0Zr/nv7wQo3XzdSaLcOSIWVobq9DxFvge 1s+6Yp9ukvYbOcmEny/fqGdwr9/cWMlrdTjVAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUvCZLyDwO+Sw0GXLUn+M6MbOcUTEwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL3ZDWkx5RHdPLVN3MEdYTFVuLU02TWJP Y1VURS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQ9PRAwDQYJ KoZIhvcNAQELBQADggEBACHzTmO4SAbQvnX7+E9Dz/gDVS8ydA2rRIx2xzIGBCRq ZRIaHX0b1OffDqYNovjFiHoZJmTUb3jXAiUr6RsDZHvbFBct9GE10rOVUr3Vu6B4 QNbu4xZgJVICCU4o+RpDtvzC8/dyDBMxBzUN5p9l+XiFZTnrzpbiDk7j+mM3OPb7 jwP8rEvzR+RjLhLeuoItpcWsj2XEA/h8tjqucWd3ZyxLvoyy26+SnGlEVe6QRUqE gTfGSXDy24nnuf++h8sy1XfSrURN7RAfTFVJkWfjBspkbKijBzNppZAk/P2EBCuL kQS8rZ9972OVwn9wlU0kz0TkcTmV2KCh80QepWIR8cI= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:26 2025 by rpki-client