$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/LGiRxL7ekLY7Nyq3koPZJ47BrBY.roa File: LGiRxL7ekLY7Nyq3koPZJ47BrBY.roa (raw, json) Hash identifier: lLoJum00f/cNgtaB7/aBXHFrdI4n5psxVomj57ATfZM= Subject key identifier: 2C:68:91:C4:BE:DE:90:B6:3B:37:2A:B7:92:83:D9:27:8E:C1:AC:16 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0DF5 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/LGiRxL7ekLY7Nyq3koPZJ47BrBY.roa Signing time: Mon 10 Feb 2025 13:59:17 +0000 ROA not before: Mon 10 Feb 2025 13:59:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4780 IP address blocks: 211.78.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3573 (0xdf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Feb 10 13:59:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2C6891C4BEDE90B63B372AB79283D9278EC1AC16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4c:95:9d:02:15:d5:54:79:8a:3d:23:fd:67: b8:04:ea:2c:44:ab:26:58:02:04:05:01:72:5e:ba: df:97:d3:7c:67:23:d2:72:1b:4e:92:39:5d:05:88: 6e:15:96:86:c1:b5:57:43:1d:93:44:ef:ee:6c:cd: d1:c4:42:d1:65:9d:e6:3e:81:a2:21:12:66:8b:de: 86:a4:7a:52:8a:f4:8b:6b:5e:92:e5:86:0d:7e:ae: 30:32:25:38:85:80:36:3e:1c:e7:e5:3d:2e:df:24: 1a:3a:41:da:dd:2d:70:7b:83:19:62:9b:26:9d:47: 98:72:09:ca:4b:3b:c8:d5:34:36:9f:92:99:cf:d6: 86:f8:92:6a:eb:49:f3:b9:03:a6:d8:27:61:2a:da: 6f:0a:01:47:e8:f2:c6:dc:a3:c5:65:32:29:71:1d: 10:92:9d:4a:e8:26:30:4e:7e:9e:8d:d4:ff:8d:a9: 8b:37:e4:23:92:34:76:80:c5:bc:dc:81:7e:a8:49: 88:9e:70:4d:42:56:1d:03:3c:ca:b9:ca:c7:cd:e0: 8a:9a:c4:3f:b7:0c:93:9e:8b:37:27:60:94:68:d7: 65:7b:c4:db:4d:21:30:ee:77:05:18:fc:52:2b:ba: f6:0f:19:43:2d:1d:fb:ad:51:83:b7:41:d3:a9:0c: 3c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:68:91:C4:BE:DE:90:B6:3B:37:2A:B7:92:83:D9:27:8E:C1:AC:16 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/LGiRxL7ekLY7Nyq3koPZJ47BrBY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.0.0/18 Signature Algorithm: sha256WithRSAEncryption 01:fc:df:03:af:5a:44:02:f7:ba:80:d1:e8:d6:31:96:85:c3: dc:ff:27:33:f5:60:50:c8:2a:0a:06:32:28:43:cb:cd:78:5e: 95:a4:61:84:7b:ee:11:5c:c9:ac:bc:22:ff:8a:7c:f7:3b:7e: b6:92:84:71:eb:07:b2:9b:6c:6f:99:c4:62:6b:01:32:03:05: 72:55:cb:09:69:2f:1b:f5:44:13:88:14:9d:b8:0e:e1:b7:d9: 86:ce:13:7f:59:cd:ed:67:fd:63:8b:44:95:11:1a:04:36:f8: 99:1c:18:36:fe:ff:6f:c7:f5:57:07:43:c4:28:a1:99:4d:b6: 25:f5:1b:fd:eb:c5:2b:2b:75:d3:ce:2d:94:fd:e2:49:a8:03: 63:13:66:0b:da:0b:0b:8e:a9:b1:cd:1c:46:ed:1f:32:ad:5d: bb:b2:51:5e:ec:a2:6e:06:dc:66:38:fd:d0:6d:8b:b0:8a:6d: 2b:59:95:e5:5a:82:8c:9b:91:1a:2f:41:69:55:bd:a0:60:94: 0e:d5:a8:90:c8:cc:f4:e5:93:f6:7e:c2:96:0b:43:e8:69:75: 62:23:8c:c1:7f:73:fe:2b:4d:7d:0c:02:86:84:82:60:cf:18: bb:40:a9:35:bb:83:1d:3a:7b:d7:2a:ac:d6:54:d7:fb:84:64: 70:2d:7c:68 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDfUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTAyMTAx MzU5MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJDNjg5MUM0QkVERTkw QjYzQjM3MkFCNzkyODNEOTI3OEVDMUFDMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDETJWdAhXVVHmKPSP9Z7gE6ixEqyZYAgQFAXJeut+X03xnI9Jy G06SOV0FiG4VlobBtVdDHZNE7+5szdHEQtFlneY+gaIhEmaL3oakelKK9ItrXpLl hg1+rjAyJTiFgDY+HOflPS7fJBo6QdrdLXB7gxlimyadR5hyCcpLO8jVNDafkpnP 1ob4kmrrSfO5A6bYJ2Eq2m8KAUfo8sbco8VlMilxHRCSnUroJjBOfp6N1P+NqYs3 5COSNHaAxbzcgX6oSYiecE1CVh0DPMq5ysfN4IqaxD+3DJOeizcnYJRo12V7xNtN ITDudwUY/FIruvYPGUMtHfutUYO3QdOpDDzDAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQULGiRxL7ekLY7Nyq3koPZJ47BrBYwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL0xHaVJ4TDdla0xZN055cTNrb1BaSjQ3 QnJCWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbTTgAwDQYJ KoZIhvcNAQELBQADggEBAAH83wOvWkQC97qA0ejWMZaFw9z/JzP1YFDIKgoGMihD y814XpWkYYR77hFcyay8Iv+KfPc7fraShHHrB7KbbG+ZxGJrATIDBXJVywlpLxv1 RBOIFJ24DuG32YbOE39Zze1n/WOLRJURGgQ2+JkcGDb+/2/H9VcHQ8QooZlNtiX1 G/3rxSsrddPOLZT94kmoA2MTZgvaCwuOqbHNHEbtHzKtXbuyUV7som4G3GY4/dBt i7CKbStZleVagoybkRovQWlVvaBglA7VqJDIzPTlk/Z+wpYLQ+hpdWIjjMF/c/4r TX0MAoaEgmDPGLtAqTW7gx06e9cqrNZU1/uEZHAtfGg= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net