$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/wcuBHAIaVIxSSVreHae8hx_AbXk.roa File: wcuBHAIaVIxSSVreHae8hx_AbXk.roa (raw, json) Hash identifier: JlVT0u8XgZXQpJe9K/TaLWNYsFd3Obu9tQRHSj2Taxg= Subject key identifier: C1:CB:81:1C:02:1A:54:8C:52:49:5A:DE:1D:A7:BC:87:1F:C0:6D:79 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0F1E Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/wcuBHAIaVIxSSVreHae8hx_AbXk.roa Signing time: Fri 22 Aug 2025 09:03:48 +0000 ROA not before: Fri 22 Aug 2025 09:03:48 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9918 IP address blocks: 61.61.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3870 (0xf1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Aug 22 09:03:48 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=C1CB811C021A548C52495ADE1DA7BC871FC06D79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:95:3d:72:b1:60:0c:fb:61:f3:53:b3:78: 20:b3:92:6e:83:bf:0a:af:78:15:0a:d2:6b:d3:85: ac:49:81:88:09:4b:6d:df:df:0b:71:d0:53:ac:16: 97:ec:2a:16:12:c0:55:57:9b:e4:03:54:d7:f5:a6: 9e:13:ee:29:f8:d3:94:22:63:69:df:67:7b:2e:4c: df:74:97:2f:f0:ee:5c:f1:97:71:ee:0b:a4:97:0f: 7b:4a:ce:2b:61:f1:a6:9b:ba:96:eb:2f:54:2b:18: 45:92:55:f4:98:19:a3:a4:c2:f9:4b:4b:f1:4c:d6: 56:3e:9b:1f:e2:03:41:43:f9:6f:6f:d5:e4:48:8b: b4:ca:94:d2:84:92:7a:fa:a9:f1:dd:cc:14:9f:d9: 9e:a7:5d:17:96:d6:05:03:d0:3b:2e:45:3e:8b:d5: 63:a7:70:a1:e9:15:a4:b5:80:be:22:4e:22:c3:a8: 5c:7f:b7:75:e7:7b:48:d8:64:9f:cb:09:dd:a5:db: d3:5c:21:4a:c4:08:29:f1:72:fd:1b:d9:89:9b:ad: 9e:5b:89:63:f0:87:5a:89:f4:8f:1d:ab:bb:f6:b4: 4c:99:78:86:2f:a3:33:3a:f2:4b:f7:44:07:b9:17: 3f:a4:e7:f1:e2:83:ac:e8:70:ad:41:4d:d7:f4:b3: 6a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CB:81:1C:02:1A:54:8C:52:49:5A:DE:1D:A7:BC:87:1F:C0:6D:79 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/wcuBHAIaVIxSSVreHae8hx_AbXk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.128.0/18 Signature Algorithm: sha256WithRSAEncryption 7c:08:72:98:b7:2a:d5:49:d7:9d:45:0c:b2:1d:e2:2c:c4:21: 16:1f:3e:e0:4a:14:0b:b8:e0:d5:cd:31:a2:f7:07:2c:31:78: ce:bd:4e:a7:dc:bc:aa:12:0e:ac:ff:a4:aa:d4:4b:85:ff:eb: bb:9d:7f:1a:56:89:84:a0:d9:b5:64:06:af:d9:2d:62:34:12: c8:ce:c9:4b:63:9e:62:75:5f:4e:5c:58:d6:75:06:ed:5a:4d: b0:7d:ed:b5:f6:c7:85:3f:3d:11:8d:86:cf:06:32:7d:41:8b: ac:21:e8:b7:37:29:b4:6b:2d:02:f2:ec:b1:f6:0b:02:81:51: 40:b0:09:08:21:cf:5d:22:c0:cf:3f:39:7b:25:40:f6:6f:82: 4b:66:a6:6f:eb:f7:fe:f0:8f:3d:f0:8f:89:ad:db:d5:b8:c0: aa:65:3e:19:33:d4:70:ab:f6:12:79:76:48:fb:9e:2a:71:34: 18:db:89:aa:47:a1:13:48:ee:e5:4f:36:6e:3c:6d:76:7c:a7: 9f:6c:57:2b:d2:50:0d:aa:87:e5:59:ac:e2:52:2e:07:5a:3b: 93:75:df:6d:6e:d2:9e:97:9f:92:a2:29:44:48:bb:f8:aa:9a: 9f:e7:56:f2:ab:97:3a:3e:9a:d9:59:68:15:ab:6f:4f:cd:e0: e4:97:50:ca -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDx4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTA4MjIw OTAzNDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEMxQ0I4MTFDMDIxQTU0 OEM1MjQ5NUFERTFEQTdCQzg3MUZDMDZENzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCj5ZU9crFgDPth81OzeCCzkm6DvwqveBUK0mvThaxJgYgJS23f 3wtx0FOsFpfsKhYSwFVXm+QDVNf1pp4T7in405QiY2nfZ3suTN90ly/w7lzxl3Hu C6SXD3tKzith8aabupbrL1QrGEWSVfSYGaOkwvlLS/FM1lY+mx/iA0FD+W9v1eRI i7TKlNKEknr6qfHdzBSf2Z6nXReW1gUD0DsuRT6L1WOncKHpFaS1gL4iTiLDqFx/ t3Xne0jYZJ/LCd2l29NcIUrECCnxcv0b2YmbrZ5biWPwh1qJ9I8dq7v2tEyZeIYv ozM68kv3RAe5Fz+k5/Hig6zocK1BTdf0s2rJAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUwcuBHAIaVIxSSVreHae8hx/AbXkwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL3djdUJIQUlhVkl4U1NWcmVIYWU4aHhf QWJYay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAY9PYAwDQYJ KoZIhvcNAQELBQADggEBAHwIcpi3KtVJ151FDLId4izEIRYfPuBKFAu44NXNMaL3 BywxeM69TqfcvKoSDqz/pKrUS4X/67udfxpWiYSg2bVkBq/ZLWI0EsjOyUtjnmJ1 X05cWNZ1Bu1aTbB97bX2x4U/PRGNhs8GMn1Bi6wh6Lc3KbRrLQLy7LH2CwKBUUCw CQghz10iwM8/OXslQPZvgktmpm/r9/7wjz3wj4mt29W4wKplPhkz1HCr9hJ5dkj7 nipxNBjbiapHoRNI7uVPNm48bXZ8p59sVyvSUA2qh+VZrOJSLgdaO5N1321u0p6X n5KiKURIu/iqmp/nVvKrlzo+mtlZaBWrb0/N4OSXUMo= -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:48 2025 by rpki-client