$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/IErOyzoZVkiS9Uhk0QF6wLDAljo.roa File: IErOyzoZVkiS9Uhk0QF6wLDAljo.roa (raw, json) Hash identifier: L6eHFiNuaWY66hK66Hq26PxHIFkjbaThfdmbM18C7cE= Subject key identifier: 20:4A:CE:CB:3A:19:56:48:92:F5:48:64:D1:01:7A:C0:B0:C0:96:3A Certificate issuer: /CN=3F84FAED6CB47E112F24C6B0277A4862270672CA Certificate serial: 021C Authority key identifier: 3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/IErOyzoZVkiS9Uhk0QF6wLDAljo.roa Signing time: Fri 22 Aug 2025 09:01:15 +0000 ROA not before: Fri 22 Aug 2025 09:01:15 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 14618 IP address blocks: 113.192.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 04:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 540 (0x21c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F84FAED6CB47E112F24C6B0277A4862270672CA Validity Not Before: Aug 22 09:01:15 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=204ACECB3A19564892F54864D1017AC0B0C0963A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:24:08:bf:0f:29:e2:c4:cd:d7:d8:d4:a5:39: d1:dc:79:75:c3:bb:9c:d6:3a:61:7a:de:29:fe:16: af:6d:01:5e:9d:30:4c:77:57:c6:28:39:77:91:bf: 56:dd:71:7e:76:f1:89:b5:3b:46:27:50:9b:eb:d8: c7:cc:a2:60:1e:5f:fc:b7:f4:c9:a8:7b:6b:05:df: 35:64:12:1e:bf:57:ac:3a:1f:fa:b3:b9:ba:45:7e: 88:86:03:62:32:b1:db:2d:e2:b4:84:e5:75:29:a9: d2:68:c9:48:c3:cf:7b:3d:73:c0:3e:dc:58:26:ba: e0:4f:e4:7a:62:3b:ab:f0:b6:e4:49:2e:b1:01:c5: 94:63:2c:02:b1:17:cd:36:ac:bd:19:62:ea:fb:3a: 31:25:b4:48:ea:49:04:2a:f8:cb:81:c0:1f:16:f7: a9:6d:2e:d7:fe:cb:f5:0b:82:5f:a4:ae:fa:39:13: 55:21:96:d8:39:de:e6:4e:b4:67:d5:0f:49:5f:30: a1:e2:f0:e8:03:a8:e7:65:27:4c:c0:e3:d0:1a:21: 17:fb:8e:72:26:69:f9:3e:62:9c:9c:b3:14:c7:bf: aa:49:b0:d6:8d:1d:10:9e:ba:e5:fc:ce:47:e5:56: 70:04:7d:0b:60:30:7f:06:fb:a2:f1:96:e0:48:c3: dd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4A:CE:CB:3A:19:56:48:92:F5:48:64:D1:01:7A:C0:B0:C0:96:3A X509v3 Authority Key Identifier: keyid:3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/IErOyzoZVkiS9Uhk0QF6wLDAljo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.192.24.0/23 Signature Algorithm: sha256WithRSAEncryption 99:8b:3f:9b:2e:eb:16:97:a1:07:2b:f9:dd:07:b0:c7:17:50: 02:41:c9:a6:23:9e:db:e4:84:22:f9:59:52:81:3c:6c:4c:07: 3e:ee:0d:91:ad:b9:2e:0e:50:08:a2:fb:59:fc:aa:84:be:47: 36:11:d2:03:44:04:d7:f3:b8:85:6f:4a:c2:96:2d:a7:9b:22: 21:f7:c6:3d:fd:df:e0:32:39:f6:d0:bf:44:ac:a1:d4:a5:4e: 54:34:e3:f3:fb:51:01:80:8c:17:48:4e:68:81:2b:f6:5f:c6: 11:21:61:5a:03:91:1e:89:42:cd:33:a4:85:c8:b3:8c:57:6f: 99:8e:55:c6:f5:15:f2:c8:22:6e:a8:63:62:5c:fa:41:87:95: 8b:8c:b4:d4:4c:87:89:4f:4d:b4:1f:f3:b1:89:4d:18:9d:57: 31:be:eb:30:40:c7:f4:d4:34:b7:dc:63:6e:cd:34:a2:2d:a6: 06:69:4a:52:c3:c2:6f:01:7b:77:b5:6a:7e:48:96:46:c2:aa: 34:f3:e3:a8:59:36:b0:42:14:25:a1:eb:0e:bf:54:5b:dd:82: 3e:f8:e8:3d:a6:94:a9:80:08:6a:41:eb:ba:01:c7:41:cc:6c: 1b:9b:44:6e:66:36:08:fb:98:db:22:e4:46:45:63:be:3b:21: 35:4f:c1:35 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICAhwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Y4 NEZBRUQ2Q0I0N0UxMTJGMjRDNkIwMjc3QTQ4NjIyNzA2NzJDQTAeFw0yNTA4MjIw OTAxMTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIwNEFDRUNCM0ExOTU2 NDg5MkY1NDg2NEQxMDE3QUMwQjBDMDk2M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJJAi/DynixM3X2NSlOdHceXXDu5zWOmF63in+Fq9tAV6dMEx3 V8YoOXeRv1bdcX528Ym1O0YnUJvr2MfMomAeX/y39Mmoe2sF3zVkEh6/V6w6H/qz ubpFfoiGA2Iysdst4rSE5XUpqdJoyUjDz3s9c8A+3FgmuuBP5HpiO6vwtuRJLrEB xZRjLAKxF802rL0ZYur7OjEltEjqSQQq+MuBwB8W96ltLtf+y/ULgl+krvo5E1Uh ltg53uZOtGfVD0lfMKHi8OgDqOdlJ0zA49AaIRf7jnImafk+YpycsxTHv6pJsNaN HRCeuuX8zkflVnAEfQtgMH8G+6LxluBIw92LAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUIErOyzoZVkiS9Uhk0QF6wLDAljowHwYDVR0jBBgwFoAUP4T67Wy0fhEvJMaw J3pIYicGcsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS1JPTk9T VEVDSC9QNFQ2N1d5MGZoRXZKTWF3SjNwSVlpY0djc28uY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1A0VDY3V3kwZmhFdkpNYXdKM3BJWWljR2Nzby5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0tST05PU1RFQ0gvSUVyT3l6b1pW a2lTOVVoazBRRjZ3TERBbGpvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAXHAGDANBgkqhkiG9w0BAQsFAAOCAQEAmYs/my7rFpehByv53QewxxdQ AkHJpiOe2+SEIvlZUoE8bEwHPu4Nka25Lg5QCKL7WfyqhL5HNhHSA0QE1/O4hW9K wpYtp5siIffGPf3f4DI59tC/RKyh1KVOVDTj8/tRAYCMF0hOaIEr9l/GESFhWgOR HolCzTOkhcizjFdvmY5VxvUV8sgibqhjYlz6QYeVi4y01EyHiU9NtB/zsYlNGJ1X Mb7rMEDH9NQ0t9xjbs00oi2mBmlKUsPCbwF7d7VqfkiWRsKqNPPjqFk2sEIUJaHr Dr9UW92CPvjoPaaUqYAIakHrugHHQcxsG5tEbmY2CPuY2yLkRkVjvjshNU/BNQ== -----END CERTIFICATE-----Generated at Thu Sep 18 00:54:14 2025 by rpki-client