$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/-E9a3ONfXUvwS9sfZWQ17ZHTYTw.roa File: -E9a3ONfXUvwS9sfZWQ17ZHTYTw.roa (raw, json) Hash identifier: /RlG6BFho278MRdnS5SbdYQJ1RmyEBDTmRjW3qS8r0A= Subject key identifier: F8:4F:5A:DC:E3:5F:5D:4B:F0:4B:DB:1F:65:64:35:ED:91:D3:61:3C Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0EBD Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/-E9a3ONfXUvwS9sfZWQ17ZHTYTw.roa Signing time: Fri 22 Aug 2025 08:52:34 +0000 ROA not before: Fri 22 Aug 2025 08:52:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18042 IP address blocks: 119.14.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3773 (0xebd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 22 08:52:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F84F5ADCE35F5D4BF04BDB1F656435ED91D3613C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cb:68:70:69:44:9b:9a:03:46:6f:70:c2:8a: 11:aa:c8:05:0d:d5:57:1a:02:5e:74:5f:06:c8:2f: 16:05:95:56:50:28:eb:72:df:1e:7d:f7:34:04:ce: db:e6:1f:2f:45:d3:41:7a:a4:66:61:48:04:a8:56: 3f:2a:fa:fb:a4:86:0e:d6:59:1b:c1:d8:ef:81:41: c9:5b:04:56:1c:10:c3:84:b5:14:52:b3:30:98:8c: 53:c3:f4:d1:2b:e1:f9:c9:81:0e:81:94:e4:81:5b: fa:f2:22:d8:ee:52:5b:76:d4:09:b2:03:ba:f1:c3: 19:5a:9e:a1:2b:54:75:37:fd:2a:aa:4c:16:a0:c9: 02:84:44:5e:37:9e:f2:56:3d:b6:b3:0b:3b:e8:22: 1d:5a:ef:7e:7d:27:1b:e0:d0:b9:65:48:17:17:d7: 4a:ca:05:c3:b1:2f:d8:dd:e7:83:e1:d0:8d:91:2f: 9a:6f:67:74:54:a1:ce:11:ed:5d:5a:6e:25:f8:f5: 2d:cc:cf:e3:a9:0c:2f:70:93:47:a7:53:bc:5b:8c: ec:fe:d3:8f:be:f9:80:63:94:85:87:e9:43:6b:ac: 48:c6:34:53:e2:2c:7c:8e:58:af:56:c4:aa:4b:98: 84:ea:e2:61:1c:85:d9:c0:7e:b3:06:8e:f5:59:1a: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4F:5A:DC:E3:5F:5D:4B:F0:4B:DB:1F:65:64:35:ED:91:D3:61:3C X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/-E9a3ONfXUvwS9sfZWQ17ZHTYTw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.14.0.0/17 Signature Algorithm: sha256WithRSAEncryption 98:bb:fd:fe:16:04:25:f1:7e:c0:de:53:59:6e:96:6f:94:df: 5a:37:a6:fe:aa:b0:91:d7:e5:6d:7e:ef:69:68:f7:58:f2:09: 50:fc:89:31:21:9e:31:c3:62:c2:df:c6:a2:26:04:79:bc:8c: 11:01:8c:f4:62:27:f6:29:12:b5:79:04:48:fd:33:e8:65:43: a0:c8:0d:04:d6:2d:dc:d4:60:44:6f:f3:0c:b9:9c:1c:ee:52: 0c:a9:e8:8c:e5:21:62:ad:13:e1:0c:15:95:50:bc:87:25:92: 8b:74:45:ea:f9:81:65:2c:c8:a2:95:81:79:78:1d:d8:8f:b5: bb:87:99:84:66:f2:0d:e5:53:f9:44:bb:32:ae:9c:2c:35:03: ef:3d:34:9f:65:1d:bc:0e:21:75:f6:c3:06:45:49:2b:32:a5: bf:75:cb:6c:63:3c:89:9a:0e:c1:2c:ad:ee:20:20:4a:2f:07: c6:cd:dc:57:b4:45:79:20:ad:b9:c3:ca:7e:38:61:37:6b:52: 55:61:95:1a:dd:e8:b3:16:98:26:d6:07:5f:f4:85:38:05:1a: 03:01:d0:ca:ac:4d:af:3e:28:9a:7a:d5:c7:de:1c:db:2d:3a: 5a:9a:87:7b:08:5e:67:f4:e1:0c:20:1e:15:1b:d6:50:af:91: 17:e3:7b:82 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDr0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNTA4MjIw ODUyMzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY4NEY1QURDRTM1RjVE NEJGMDRCREIxRjY1NjQzNUVEOTFEMzYxM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOy2hwaUSbmgNGb3DCihGqyAUN1VcaAl50XwbILxYFlVZQKOty 3x599zQEztvmHy9F00F6pGZhSASoVj8q+vukhg7WWRvB2O+BQclbBFYcEMOEtRRS szCYjFPD9NEr4fnJgQ6BlOSBW/ryItjuUlt21AmyA7rxwxlanqErVHU3/SqqTBag yQKERF43nvJWPbazCzvoIh1a7359Jxvg0LllSBcX10rKBcOxL9jd54Ph0I2RL5pv Z3RUoc4R7V1abiX49S3Mz+OpDC9wk0enU7xbjOz+04+++YBjlIWH6UNrrEjGNFPi LHyOWK9WxKpLmITq4mEchdnAfrMGjvVZGi5PAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU+E9a3ONfXUvwS9sfZWQ17ZHTYTwwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HLy1FOWEzT05mWFV2d1M5c2Za V1ExN1pIVFlUdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3 DgAwDQYJKoZIhvcNAQELBQADggEBAJi7/f4WBCXxfsDeU1lulm+U31o3pv6qsJHX 5W1+72lo91jyCVD8iTEhnjHDYsLfxqImBHm8jBEBjPRiJ/YpErV5BEj9M+hlQ6DI DQTWLdzUYERv8wy5nBzuUgyp6IzlIWKtE+EMFZVQvIclkot0Rer5gWUsyKKVgXl4 HdiPtbuHmYRm8g3lU/lEuzKunCw1A+89NJ9lHbwOIXX2wwZFSSsypb91y2xjPIma DsEsre4gIEovB8bN3Fe0RXkgrbnDyn44YTdrUlVhlRrd6LMWmCbWB1/0hTgFGgMB 0MqsTa8+KJp61cfeHNstOlqah3sIXmf04QwgHhUb1lCvkRfje4I= -----END CERTIFICATE-----Generated at Sun Aug 24 07:43:07 2025 by rpki-client