$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/xqUO64Yhjxvnxp68bsdSDgI1hCc.roa File: xqUO64Yhjxvnxp68bsdSDgI1hCc.roa (raw, json) Hash identifier: fWTbsfazDrklyI7rkW/wNb5j/5lt8xlGmvhmb9zPe5A= Subject key identifier: C6:A5:0E:EB:86:21:8F:1B:E7:C6:9E:BC:6E:C7:52:0E:02:35:84:27 Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Certificate serial: 0E14 Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/xqUO64Yhjxvnxp68bsdSDgI1hCc.roa Signing time: Mon 10 Feb 2025 13:59:24 +0000 ROA not before: Mon 10 Feb 2025 13:59:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 54994 IP address blocks: 61.61.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3604 (0xe14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3 Validity Not Before: Feb 10 13:59:24 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C6A50EEB86218F1BE7C69EBC6EC7520E02358427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:af:83:4e:44:2c:06:8d:89:60:42:95:a2: 7c:f4:46:a3:09:a0:9d:3e:90:30:60:78:87:05:27: d3:45:44:9d:a0:90:c7:87:21:6d:22:0d:80:91:13: 5d:7e:b6:59:58:66:e7:7a:4f:63:76:d1:bf:8d:a1: fb:0d:10:c2:eb:34:ac:4b:f8:05:7c:a3:ff:0a:fa: 20:71:9d:92:d4:2a:3e:e4:f0:b4:18:23:f8:32:ed: 07:b7:b9:f9:db:e3:9a:d8:04:84:36:c9:b5:9b:a9: 98:2a:44:f9:3c:8b:6f:92:91:5f:f7:78:62:c8:10: 26:22:39:6b:f4:ff:aa:a1:ba:d0:7e:cd:29:1a:70: 77:28:01:02:29:2f:4a:ba:5b:90:d1:6f:a1:81:b1: 86:ae:f1:bc:da:6c:b3:f0:43:da:5e:2a:33:f3:a6: 61:db:0c:d5:51:e6:f9:25:e5:dd:ec:b5:73:54:75: 4b:d6:b5:50:39:b4:ba:82:8b:3d:2f:8a:ba:9c:da: 52:b8:b1:cb:83:43:2b:60:91:42:a4:95:7c:55:c3: 59:2d:50:ac:bf:c8:53:20:c5:6f:45:1a:df:25:37: 1e:a3:9c:d0:a2:f9:2d:b7:c1:1c:e1:f9:71:dc:78: 65:ba:c1:df:f4:5b:ed:9e:be:3f:b8:32:3c:14:c6: 0a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A5:0E:EB:86:21:8F:1B:E7:C6:9E:BC:6E:C7:52:0E:02:35:84:27 X509v3 Authority Key Identifier: keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/xqUO64Yhjxvnxp68bsdSDgI1hCc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.61.163.0/24 Signature Algorithm: sha256WithRSAEncryption 07:3d:26:4b:c6:af:bd:82:82:c4:e5:fc:24:4f:43:1c:19:37: 9c:b5:04:f1:49:76:ee:4c:ec:93:0e:4a:ce:07:01:4d:94:d8: 87:fe:d5:79:63:81:e2:0a:82:46:d0:db:fa:9a:bc:b5:15:b3: 97:40:a3:61:3b:2c:10:e1:73:9d:e2:3f:df:b1:0b:01:bf:11: 51:49:4a:62:af:80:ca:d2:0a:7c:50:a7:46:74:ef:43:f7:0a: 7a:28:35:a9:2a:1a:42:38:63:45:08:31:34:40:f6:09:bd:b1: 98:43:dc:05:3f:30:31:09:01:85:6e:6f:cb:cd:43:82:b6:9c: 3e:c0:6a:5b:fa:f2:15:87:30:a5:0c:08:4f:70:5d:55:ee:c8: dd:b1:99:77:2d:6c:a3:57:e3:75:1b:49:30:2a:90:14:5b:ab: 71:3b:8f:86:9a:f6:22:38:69:d1:45:1b:df:bf:19:2d:80:95: e0:1d:bc:45:d2:67:de:eb:bb:97:0c:2d:f8:b6:ef:5d:8f:ce: 83:e8:4c:fa:75:4e:17:ce:6f:54:86:4e:2e:b2:d3:23:ab:42: e1:94:40:1f:e0:d7:d8:7a:83:65:e7:8b:0c:e8:d7:f1:34:90: 55:37:b8:74:ff:5c:70:58:0c:2e:74:4e:33:6f:ea:eb:17:90: 79:ec:3c:6d -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICDhQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDc3 MkY3MTUzNDVCNTQyRTFENzA4QkNCMjU3MUZDRDcyREQyNkJGMzAeFw0yNTAyMTAx MzU5MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM2QTUwRUVCODYyMThG MUJFN0M2OUVCQzZFQzc1MjBFMDIzNTg0MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxrK+DTkQsBo2JYEKVonz0RqMJoJ0+kDBgeIcFJ9NFRJ2gkMeH IW0iDYCRE11+tllYZud6T2N20b+NofsNEMLrNKxL+AV8o/8K+iBxnZLUKj7k8LQY I/gy7Qe3ufnb45rYBIQ2ybWbqZgqRPk8i2+SkV/3eGLIECYiOWv0/6qhutB+zSka cHcoAQIpL0q6W5DRb6GBsYau8bzabLPwQ9peKjPzpmHbDNVR5vkl5d3stXNUdUvW tVA5tLqCiz0virqc2lK4scuDQytgkUKklXxVw1ktUKy/yFMgxW9FGt8lNx6jnNCi +S23wRzh+XHceGW6wd/0W+2evj+4MjwUxgrDAgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQUxqUO64Yhjxvnxp68bsdSDgI1hCcwHwYDVR0jBBgwFoAUR3L3FTRbVC4dcIvL JXH81y3Sa/MwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL1Iz TDNGVFJiVkM0ZGNJdkxKWEg4MXkzU2FfTS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UjNMM0ZUUmJWQzRkY0l2TEpYSDgxeTNTYV9NLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvS0dUL3hxVU82NFloanh2bnhwNjhic2RTRGdJ MWhDYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9PaMwDQYJ KoZIhvcNAQELBQADggEBAAc9JkvGr72CgsTl/CRPQxwZN5y1BPFJdu5M7JMOSs4H AU2U2If+1XljgeIKgkbQ2/qavLUVs5dAo2E7LBDhc53iP9+xCwG/EVFJSmKvgMrS CnxQp0Z070P3CnooNakqGkI4Y0UIMTRA9gm9sZhD3AU/MDEJAYVub8vNQ4K2nD7A alv68hWHMKUMCE9wXVXuyN2xmXctbKNX43UbSTAqkBRbq3E7j4aa9iI4adFFG9+/ GS2AleAdvEXSZ97ru5cMLfi2712PzoPoTPp1ThfOb1SGTi6y0yOrQuGUQB/g19h6 g2Xniwzo1/E0kFU3uHT/XHBYDC50TjNv6usXkHnsPG0= -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net