$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/lHJ3KrtQqyTFSIA5VYL_2P1xJQA.roa File: lHJ3KrtQqyTFSIA5VYL_2P1xJQA.roa (raw, json) Hash identifier: fuqx13JQqoG3stJ2ztpLPJfSxR43lLEjMDd79l3O7+g= Subject key identifier: 94:72:77:2A:BB:50:AB:24:C5:48:80:39:55:82:FF:D8:FD:71:25:00 Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Certificate serial: 0E0A Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/lHJ3KrtQqyTFSIA5VYL_2P1xJQA.roa Signing time: Fri 22 Aug 2025 08:54:21 +0000 ROA not before: Fri 22 Aug 2025 08:54:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4782 IP address blocks: 61.60.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3594 (0xe0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9 Validity Not Before: Aug 22 08:54:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9472772ABB50AB24C54880395582FFD8FD712500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:b8:07:62:5e:86:c7:38:55:38:86:31:63: 7c:e8:f6:25:89:8c:6d:40:ea:e9:16:e7:d3:2e:c2: a5:71:a0:23:f3:ca:2b:62:0d:3d:f4:a4:91:54:02: 13:bc:c6:d6:f6:7a:b5:05:f1:bf:d6:39:4b:9e:f5: 24:7a:d7:ff:cc:fe:4f:50:29:08:e7:cd:ba:6d:eb: 9d:6a:3c:51:f6:86:44:57:fb:68:b8:1b:7d:bd:0f: 04:6e:93:a7:78:53:bf:4d:01:01:2b:0f:b6:9e:33: c9:c0:b6:41:db:9a:72:ac:c1:66:e4:3a:6c:a2:49: f3:e7:b6:cf:f1:86:2e:bc:99:8b:ec:5f:2b:e8:29: 0f:0f:d7:9b:16:11:9c:28:aa:08:55:b2:5c:46:e1: 4c:db:5f:6d:c3:f8:ce:2a:08:2b:48:7e:b6:3d:eb: 7b:b2:16:e8:a1:56:2e:e0:20:3d:38:50:c2:79:78: 19:53:6a:12:7b:d8:c9:f7:3e:f6:fb:23:13:4b:6b: c6:c2:78:9f:37:15:b2:41:98:35:cb:81:33:3a:de: 98:38:64:66:29:40:60:89:ca:88:3e:95:6b:ec:e6: 56:31:3d:f8:82:86:18:16:f0:84:d4:d3:de:ed:d8: f0:6e:02:88:42:d4:a4:75:dd:42:f9:b7:b8:88:b6: ed:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:72:77:2A:BB:50:AB:24:C5:48:80:39:55:82:FF:D8:FD:71:25:00 X509v3 Authority Key Identifier: keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/lHJ3KrtQqyTFSIA5VYL_2P1xJQA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.60.0.0/17 Signature Algorithm: sha256WithRSAEncryption 7c:e8:f0:be:f7:de:9e:72:9d:e0:7d:c5:9e:10:78:0f:fb:35: f2:70:bc:25:b6:bb:19:b7:c1:3a:f9:fb:87:e2:ec:90:89:8d: 1c:d4:9b:a2:9d:e6:16:53:a2:2c:07:41:59:ca:64:86:da:9c: 13:b5:5a:18:8c:8e:08:bd:3b:36:fb:69:b1:56:6a:06:95:52: 7d:28:98:14:fd:84:dc:49:11:f2:86:b0:52:db:92:94:0c:2a: f4:ea:c8:61:82:a2:39:bb:4e:f4:dc:8f:a4:7e:62:2d:19:7c: 24:f9:fd:61:6e:f1:37:00:3c:b2:03:87:0c:65:e8:75:7b:7f: 99:45:52:a6:f1:49:c4:03:38:fe:bd:7c:26:c2:ae:10:b6:48: 84:a8:17:35:64:30:38:ef:0f:60:56:37:24:34:57:03:86:f2: 99:a3:e5:b0:8b:ed:fb:c6:8d:e7:b9:9d:b5:1d:8a:88:ec:e1: 08:5d:d3:77:59:17:83:2c:e9:5d:35:27:c4:56:ef:22:d6:ad: ea:d5:70:09:62:e2:c2:d0:05:7c:d9:ed:df:e3:d6:94:28:fe: ec:e6:7b:20:bd:b6:9c:f9:c0:a3:3c:0b:6a:a8:8c:a1:10:9b: 9a:f1:6e:81:a8:3f:6d:2e:e0:f6:30:62:5e:64:0e:6b:b2:8c: a5:a8:1b:59 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDgowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVG RTUzQzYxMUI0RkQ1NkIzRjY4MzE5RUVDQTYyODlGM0YwRjJBOTAeFw0yNTA4MjIw ODU0MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk0NzI3NzJBQkI1MEFC MjRDNTQ4ODAzOTU1ODJGRkQ4RkQ3MTI1MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDS/bgHYl6GxzhVOIYxY3zo9iWJjG1A6ukW59MuwqVxoCPzyiti DT30pJFUAhO8xtb2erUF8b/WOUue9SR61//M/k9QKQjnzbpt651qPFH2hkRX+2i4 G329DwRuk6d4U79NAQErD7aeM8nAtkHbmnKswWbkOmyiSfPnts/xhi68mYvsXyvo KQ8P15sWEZwoqghVslxG4UzbX23D+M4qCCtIfrY963uyFuihVi7gID04UMJ5eBlT ahJ72Mn3Pvb7IxNLa8bCeJ83FbJBmDXLgTM63pg4ZGYpQGCJyog+lWvs5lYxPfiC hhgW8ITU097t2PBuAohC1KR13UL5t7iItu1NAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUlHJ3KrtQqyTFSIA5VYL/2P1xJQAwHwYDVR0jBBgwFoAUdf5TxhG0/Vaz9oMZ 7spiifPw8qkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2Rm NVR4aEcwX1ZhejlvTVo3c3BpaWZQdzhxay5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev ZGY1VHhoRzBfVmF6OW9NWjdzcGlpZlB3OHFrLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvR1NOL2xISjNLcnRRcXlURlNJQTVWWUxfMlAx eEpRQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc9PAAwDQYJ KoZIhvcNAQELBQADggEBAHzo8L733p5yneB9xZ4QeA/7NfJwvCW2uxm3wTr5+4fi 7JCJjRzUm6Kd5hZToiwHQVnKZIbanBO1WhiMjgi9Ozb7abFWagaVUn0omBT9hNxJ EfKGsFLbkpQMKvTqyGGCojm7TvTcj6R+Yi0ZfCT5/WFu8TcAPLIDhwxl6HV7f5lF UqbxScQDOP69fCbCrhC2SISoFzVkMDjvD2BWNyQ0VwOG8pmj5bCL7fvGjee5nbUd iojs4Qhd03dZF4Ms6V01J8RW7yLWrerVcAli4sLQBXzZ7d/j1pQo/uzmeyC9tpz5 wKM8C2qojKEQm5rxboGoP20u4PYwYl5kDmuyjKWoG1k= -----END CERTIFICATE-----Generated at Wed Nov 5 21:06:22 2025 by rpki-client