$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/_V6LoM_-PR8kO-9THX4sYwemMuw.roa File: _V6LoM_-PR8kO-9THX4sYwemMuw.roa (raw, json) Hash identifier: YW+JivyED/fd9EZDBynxHWLRE77M0KTdIbd6ysuR0Zg= Subject key identifier: FD:5E:8B:A0:CF:FE:3D:1F:24:3B:EF:53:1D:7E:2C:63:07:A6:32:EC Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0DF7 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/_V6LoM_-PR8kO-9THX4sYwemMuw.roa Signing time: Mon 10 Feb 2025 13:59:17 +0000 ROA not before: Mon 10 Feb 2025 13:59:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 61.61.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 21:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3575 (0xdf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Feb 10 13:59:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FD5E8BA0CFFE3D1F243BEF531D7E2C6307A632EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:4e:d4:e8:47:c6:bf:1f:4b:4a:18:a1:9e: d0:08:0e:64:c0:7f:69:24:c3:8f:03:6a:e7:30:36: c0:6d:a1:96:0e:0d:a0:39:16:1d:ab:cc:c5:45:99: 84:7a:ab:5b:72:3e:33:f7:47:98:4e:73:87:89:1b: 18:42:6a:7d:46:a8:e7:ff:3a:9a:66:a7:4a:3d:cb: 32:c2:65:af:e2:82:4c:32:2f:54:0f:57:c0:56:c1: 13:66:10:cb:b3:c3:76:07:93:77:88:06:44:b3:74: 7e:77:56:bb:0d:b0:6a:4d:9c:a3:73:9d:94:65:47: 8d:cd:18:9b:69:f7:a4:79:07:ed:04:13:c6:62:22: 4d:08:61:f7:74:0a:de:40:58:55:07:1e:7e:04:9f: 7b:2f:ec:77:21:ef:32:99:0e:1c:77:96:ff:a9:54: 02:cc:a0:f1:4a:af:52:43:dd:96:1d:fd:c1:ed:f2: e7:b1:b9:5b:d6:91:9a:01:aa:2b:42:f3:68:74:eb: f4:a5:d4:45:82:6a:b2:ff:d3:15:55:58:97:4e:b5: 14:fc:24:4d:4a:62:89:17:81:ae:29:1f:23:ee:0d: ac:e9:06:83:3b:bd:c5:84:6c:4f:e8:36:60:1c:9f: 11:e1:b9:33:88:b4:78:6e:0d:1f:eb:2d:6a:c5:e7: 8a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5E:8B:A0:CF:FE:3D:1F:24:3B:EF:53:1D:7E:2C:63:07:A6:32:EC X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/_V6LoM_-PR8kO-9THX4sYwemMuw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.44.0/22 Signature Algorithm: sha256WithRSAEncryption 69:03:43:3e:b0:7f:7e:b0:d9:02:e5:93:04:8a:8c:ee:52:11: e4:46:21:e3:65:21:d3:a9:12:ae:ed:3c:69:a1:ba:ef:7f:18: df:18:18:6f:b0:b2:80:73:d1:ab:40:6f:f3:3b:21:96:c9:14: 18:7f:66:02:17:7c:77:63:a0:26:f8:1e:74:73:a7:e2:63:71: b3:45:0a:61:83:59:33:38:52:96:cb:2b:71:cf:3b:b1:52:21: c2:63:1b:df:00:cf:04:83:30:e1:2b:64:11:11:e1:7d:c1:c6: d5:6d:10:a5:a8:86:b8:05:7e:5e:c4:3f:37:29:50:d0:60:5c: f4:e3:60:69:3e:78:3c:d6:63:46:39:fe:f8:1e:9b:23:b6:56: 93:77:c2:58:8a:c2:b9:92:85:32:66:51:2b:2f:a0:c2:ac:40: 7b:42:9d:15:12:7a:d9:c1:70:f5:06:14:89:16:9f:f9:cf:8c: ca:30:3b:4e:54:e2:fc:1a:d9:db:cf:f4:11:de:5d:5b:46:cb: fd:e4:a3:52:f9:6a:a1:cc:ac:25:70:c0:a1:b6:23:56:22:29: 70:67:f1:ca:c7:3d:5f:93:9f:3f:61:5f:5d:57:ee:90:d7:6b: 9b:01:31:3c:9b:88:2d:79:c4:36:12:1a:5a:70:9a:6f:1e:a8: b1:b7:b9:01 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDfcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTAyMTAx MzU5MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZENUU4QkEwQ0ZGRTNE MUYyNDNCRUY1MzFEN0UyQzYzMDdBNjMyRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCwTk7U6EfGvx9LShihntAIDmTAf2kkw48DaucwNsBtoZYODaA5 Fh2rzMVFmYR6q1tyPjP3R5hOc4eJGxhCan1GqOf/Oppmp0o9yzLCZa/igkwyL1QP V8BWwRNmEMuzw3YHk3eIBkSzdH53VrsNsGpNnKNznZRlR43NGJtp96R5B+0EE8Zi Ik0IYfd0Ct5AWFUHHn4En3sv7Hch7zKZDhx3lv+pVALMoPFKr1JD3ZYd/cHt8uex uVvWkZoBqitC82h06/Sl1EWCarL/0xVVWJdOtRT8JE1KYokXga4pHyPuDazpBoM7 vcWEbE/oNmAcnxHhuTOItHhuDR/rLWrF54q3AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQU/V6LoM/+PR8kO+9THX4sYwemMuwwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL19WNkxvTV8tUFI4a08tOVRIWDRzWXdl bU11dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PSwwDQYJ KoZIhvcNAQELBQADggEBAGkDQz6wf36w2QLlkwSKjO5SEeRGIeNlIdOpEq7tPGmh uu9/GN8YGG+wsoBz0atAb/M7IZbJFBh/ZgIXfHdjoCb4HnRzp+JjcbNFCmGDWTM4 UpbLK3HPO7FSIcJjG98AzwSDMOErZBER4X3BxtVtEKWohrgFfl7EPzcpUNBgXPTj YGk+eDzWY0Y5/vgemyO2VpN3wliKwrmShTJmUSsvoMKsQHtCnRUSetnBcPUGFIkW n/nPjMowO05U4vwa2dvP9BHeXVtGy/3ko1L5aqHMrCVwwKG2I1YiKXBn8crHPV+T nz9hX11X7pDXa5sBMTybiC15xDYSGlpwmm8eqLG3uQE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:47:43 2025 by rpki-client