$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/n9BtrnEBR9zav2fTdgnJ4uhIQWM.roa File: n9BtrnEBR9zav2fTdgnJ4uhIQWM.roa (raw, json) Hash identifier: uFxSbw1hOOLIV1YK3Fm8IwOopaM8maIlIpGrsjePQ5Y= Subject key identifier: 9F:D0:6D:AE:71:01:47:DC:DA:BF:67:D3:76:09:C9:E2:E8:48:41:63 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0DF6 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/n9BtrnEBR9zav2fTdgnJ4uhIQWM.roa Signing time: Mon 10 Feb 2025 13:59:17 +0000 ROA not before: Mon 10 Feb 2025 13:59:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9922 IP address blocks: 61.61.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3574 (0xdf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Feb 10 13:59:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9FD06DAE710147DCDABF67D37609C9E2E8484163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:72:cb:3b:d4:60:e5:bd:07:df:17:cb:bf:22: ce:d6:fa:d2:cb:f2:48:9a:89:97:a7:ef:0c:5b:b1: 9c:b4:b3:11:be:fe:a8:8a:6d:b3:2d:7c:37:19:59: eb:60:ab:a1:9a:2f:b8:91:b8:fb:9d:7d:5c:5a:20: b2:3f:86:8e:93:6e:3e:b9:6e:31:0a:4d:a6:3a:69: 90:dd:f8:73:7b:8c:01:ab:73:92:29:37:c9:60:e3: 5b:a8:c6:a4:19:39:fb:d2:37:61:08:30:bf:c5:56: 1c:24:9e:b7:92:10:a8:db:61:01:ef:87:b9:f2:8d: d4:78:62:c0:93:68:e7:5c:39:ae:e0:a6:00:01:4b: 85:22:e1:24:63:aa:b0:3f:cd:be:8d:2a:95:7b:01: 49:cd:1d:a0:19:33:9f:03:99:9d:e3:0a:8f:3b:5b: d7:57:57:e4:c6:50:c2:8e:3d:74:b7:ea:d7:d1:42: c0:7a:a9:04:85:86:65:d2:3f:76:cd:2d:c5:f7:cc: 94:7b:27:1a:b1:76:da:25:ae:9a:a3:16:2d:52:55: ab:32:ea:e6:41:16:f2:de:a3:a4:0b:62:69:da:42: f9:2d:59:6a:89:ce:ee:4f:0b:6f:23:ce:1a:05:36: 66:8d:9b:2a:5d:a4:c0:a8:91:31:55:e7:23:02:bb: c9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D0:6D:AE:71:01:47:DC:DA:BF:67:D3:76:09:C9:E2:E8:48:41:63 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/n9BtrnEBR9zav2fTdgnJ4uhIQWM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.152.0/22 Signature Algorithm: sha256WithRSAEncryption 38:d7:4e:e4:e3:b5:a5:02:24:9d:7e:af:61:ad:a5:7e:76:5c: ba:bd:3d:91:cf:8a:74:5a:56:2b:e0:1a:fc:17:51:2f:dd:8d: a1:b6:7b:d8:1e:1e:af:1e:5f:52:b4:93:8d:30:18:b1:c2:5c: 21:64:b3:89:1a:76:5f:4e:31:d4:90:27:ba:d8:bb:99:18:4f: 23:90:63:17:54:ed:aa:0c:87:85:07:04:7a:19:d7:42:19:82: c7:0c:ee:18:b5:a9:be:30:9f:ef:f0:aa:fd:2e:e7:c0:77:86: b7:d6:0a:2f:c3:13:a8:71:56:6c:b4:29:57:2c:a3:ff:2e:ea: 29:00:66:63:47:0c:da:d3:ea:3d:2f:27:cd:ec:06:39:ce:17: 21:a8:c4:b7:22:54:da:fa:36:f5:33:f6:43:1a:aa:eb:60:45: fa:73:2e:20:c2:15:3c:cc:92:39:97:7b:bf:3b:5f:67:cb:d3: f5:bb:b6:b2:29:6b:bf:2f:d6:c3:c9:80:ea:05:d3:bf:c9:f4: ef:41:0a:8d:75:c7:cd:4c:f1:93:8d:b5:ad:56:d0:28:47:95: 61:f2:11:ff:89:8e:9a:36:c4:4e:d8:c4:6e:42:6c:be:23:af: 48:28:4c:62:65:ef:e0:3a:f3:3c:54:21:77:3d:39:5d:c3:0e: 8f:ca:a5:04 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDfYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTAyMTAx MzU5MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlGRDA2REFFNzEwMTQ3 RENEQUJGNjdEMzc2MDlDOUUyRTg0ODQxNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+css71GDlvQffF8u/Is7W+tLL8kiaiZen7wxbsZy0sxG+/qiK bbMtfDcZWetgq6GaL7iRuPudfVxaILI/ho6Tbj65bjEKTaY6aZDd+HN7jAGrc5Ip N8lg41uoxqQZOfvSN2EIML/FVhwknreSEKjbYQHvh7nyjdR4YsCTaOdcOa7gpgAB S4Ui4SRjqrA/zb6NKpV7AUnNHaAZM58DmZ3jCo87W9dXV+TGUMKOPXS36tfRQsB6 qQSFhmXSP3bNLcX3zJR7JxqxdtolrpqjFi1SVasy6uZBFvLeo6QLYmnaQvktWWqJ zu5PC28jzhoFNmaNmypdpMCokTFV5yMCu8kfAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUn9BtrnEBR9zav2fTdgnJ4uhIQWMwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL245QnRybkVCUjl6YXYyZlRkZ25KNHVo SVFXTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAI9PZgwDQYJ KoZIhvcNAQELBQADggEBADjXTuTjtaUCJJ1+r2GtpX52XLq9PZHPinRaVivgGvwX US/djaG2e9geHq8eX1K0k40wGLHCXCFks4kadl9OMdSQJ7rYu5kYTyOQYxdU7aoM h4UHBHoZ10IZgscM7hi1qb4wn+/wqv0u58B3hrfWCi/DE6hxVmy0KVcso/8u6ikA ZmNHDNrT6j0vJ83sBjnOFyGoxLciVNr6NvUz9kMaqutgRfpzLiDCFTzMkjmXe787 X2fL0/W7trIpa78v1sPJgOoF07/J9O9BCo11x81M8ZONta1W0ChHlWHyEf+Jjpo2 xE7YxG5CbL4jr0goTGJl7+A68zxUIXc9OV3DDo/KpQQ= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net