$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/zAfILLQGdMn9_H3daB3YDMYuvvc.roa File: zAfILLQGdMn9_H3daB3YDMYuvvc.roa (raw, json) Hash identifier: G1CyC21mffFPH4Sd/OyY/uj22wQjVxjdQJwfemFe6mc= Subject key identifier: CC:07:C8:2C:B4:06:74:C9:FD:FC:7D:DD:68:1D:D8:0C:C6:2E:BE:F7 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0E05 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/zAfILLQGdMn9_H3daB3YDMYuvvc.roa Signing time: Mon 10 Feb 2025 13:59:21 +0000 ROA not before: Mon 10 Feb 2025 13:59:21 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18049 IP address blocks: 61.61.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 21:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3589 (0xe05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Feb 10 13:59:21 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CC07C82CB40674C9FDFC7DDD681DD80CC62EBEF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:01:c2:4e:b7:02:ab:34:78:e9:5b:44:65:d3: 3a:97:3c:62:10:18:61:cc:6b:8c:ee:16:34:ce:07: 4e:11:7e:2d:bb:5d:4d:f0:23:53:18:dd:2b:73:8c: 85:84:d2:39:36:53:dd:85:23:ab:7a:5c:06:dd:a0: 8b:c9:23:1d:68:89:1f:24:20:d5:3e:b6:a8:9c:34: f4:c4:c6:31:63:fa:6d:47:18:9d:c2:e9:33:b3:db: 3f:ea:92:cb:a4:1c:51:42:65:20:76:cf:ec:98:fb: a2:44:82:c7:ff:a3:d5:a8:94:34:04:dd:12:f4:39: 18:43:d8:30:46:5d:12:a2:be:4b:6c:b0:2f:17:32: 18:cb:13:70:ff:7e:04:8f:2f:60:09:ea:0c:67:df: a4:ea:c3:b2:a2:4c:4c:2e:52:27:23:06:25:e3:d9: 77:c9:7a:48:ee:ef:db:57:a4:5b:a1:f8:f6:29:e6: a1:5c:c5:91:85:9c:a1:74:fa:d6:5c:fd:c3:af:60: e6:78:e3:86:51:91:ec:2e:93:78:4c:90:7d:ae:9a: d7:b4:a8:f9:28:97:f5:05:27:c2:10:9c:a5:85:49: 12:3b:3b:aa:e8:11:13:96:60:c5:d1:a7:99:14:71: 8b:48:f1:eb:51:b0:78:c5:c2:ca:2e:8b:e6:2e:be: 0d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:07:C8:2C:B4:06:74:C9:FD:FC:7D:DD:68:1D:D8:0C:C6:2E:BE:F7 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/zAfILLQGdMn9_H3daB3YDMYuvvc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.64.0/22 Signature Algorithm: sha256WithRSAEncryption 79:8f:7b:6c:ed:ec:ab:e1:67:c7:d7:d6:ed:b5:78:2f:62:78: 57:93:32:02:ca:63:6a:c0:4d:6c:39:3d:92:e0:b5:42:ae:db: b6:e9:ee:ee:33:ad:81:69:f1:09:a4:ca:15:46:fa:a2:a2:71: c3:a3:51:bc:59:0d:68:1a:4f:a2:1d:aa:aa:fa:8f:75:43:0f: b3:69:a8:4a:ac:d6:bb:76:dc:e9:20:e8:3d:30:9f:b5:64:32: 3e:89:9a:24:e9:6d:07:88:3a:7a:db:47:44:26:40:1a:02:fd: 06:04:c4:e5:f5:e2:0d:42:48:63:ad:82:01:c6:e7:b9:0b:e6: a6:49:3e:c9:64:3b:cd:05:ba:f2:cd:28:cf:f8:4e:02:b6:17: c0:53:25:9a:78:cf:f4:80:e3:03:f8:3f:df:55:e5:2f:b8:f8: a6:12:6d:42:24:1f:ae:48:a7:14:2a:b9:aa:a9:cc:78:10:18: d5:c8:d2:75:57:3b:9c:79:eb:26:fd:97:4b:23:30:e0:92:06: d6:22:8a:de:22:9d:e9:58:b6:6d:88:4f:74:16:ad:8d:90:95: da:b0:23:2c:b9:da:ce:15:3a:92:df:a4:66:21:d1:2e:fa:d1: 8c:57:d9:53:3c:73:33:b4:34:87:14:7f:7c:e8:f2:d6:e9:80: 4a:9f:45:96 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDgUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTAyMTAx MzU5MjFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENDMDdDODJDQjQwNjc0 QzlGREZDN0RERDY4MUREODBDQzYyRUJFRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbAcJOtwKrNHjpW0Rl0zqXPGIQGGHMa4zuFjTOB04Rfi27XU3w I1MY3StzjIWE0jk2U92FI6t6XAbdoIvJIx1oiR8kINU+tqicNPTExjFj+m1HGJ3C 6TOz2z/qksukHFFCZSB2z+yY+6JEgsf/o9WolDQE3RL0ORhD2DBGXRKivktssC8X MhjLE3D/fgSPL2AJ6gxn36Tqw7KiTEwuUicjBiXj2XfJekju79tXpFuh+PYp5qFc xZGFnKF0+tZc/cOvYOZ444ZRkewuk3hMkH2umte0qPkol/UFJ8IQnKWFSRI7O6ro EROWYMXRp5kUcYtI8etRsHjFwsoui+Yuvg3dAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUzAfILLQGdMn9/H3daB3YDMYuvvcwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL3pBZklMTFFHZE1uOV9IM2RhQjNZRE1Z dXZ2Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PUAwDQYJ KoZIhvcNAQELBQADggEBAHmPe2zt7KvhZ8fX1u21eC9ieFeTMgLKY2rATWw5PZLg tUKu27bp7u4zrYFp8QmkyhVG+qKiccOjUbxZDWgaT6Idqqr6j3VDD7NpqEqs1rt2 3Okg6D0wn7VkMj6JmiTpbQeIOnrbR0QmQBoC/QYExOX14g1CSGOtggHG57kL5qZJ PslkO80FuvLNKM/4TgK2F8BTJZp4z/SA4wP4P99V5S+4+KYSbUIkH65IpxQquaqp zHgQGNXI0nVXO5x56yb9l0sjMOCSBtYiit4inelYtm2IT3QWrY2QldqwIyy52s4V OpLfpGYh0S760YxX2VM8czO0NIcUf3zo8tbpgEqfRZY= -----END CERTIFICATE-----Generated at Sat Apr 26 17:56:47 2025 by rpki-client