$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/4XNPF_1nF6Ng2AQQ_Nz6hsTh1hQ.roa File: 4XNPF_1nF6Ng2AQQ_Nz6hsTh1hQ.roa (raw, json) Hash identifier: VZjRlQxuqk4LD4pAw6Rii3AS/uiQQBhLeHbfWkfSyXQ= Subject key identifier: E1:73:4F:17:FD:67:17:A3:60:D8:04:10:FC:DC:FA:86:C4:E1:D6:14 Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0EA4 Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/4XNPF_1nF6Ng2AQQ_Nz6hsTh1hQ.roa Signing time: Fri 22 Aug 2025 08:52:28 +0000 ROA not before: Fri 22 Aug 2025 08:52:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18042 IP address blocks: 203.118.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3748 (0xea4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 22 08:52:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E1734F17FD6717A360D80410FCDCFA86C4E1D614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:50:47:7e:29:58:cd:1f:e5:2b:22:74:38: f6:0b:72:a7:6e:98:e5:42:ce:9e:08:92:65:2f:9d: 9e:8e:9e:21:6a:00:18:2b:b3:e4:0e:62:3d:f0:69: 24:27:fa:fd:05:65:d9:7c:eb:b8:07:4c:aa:6f:e5: e7:7a:f8:ca:f0:87:69:27:5b:2f:5a:56:1e:9b:28: dc:76:46:d0:e9:e1:e1:a7:91:4f:f1:0c:e3:c7:41: b3:8a:00:73:95:16:31:16:63:fc:a6:db:1c:be:12: ff:5d:6b:0d:ee:a2:e7:e3:13:d8:89:9a:e6:7e:eb: fa:62:bd:97:4d:a2:f2:d4:85:4d:76:cc:ee:ab:c4: fa:cd:57:c2:e6:8c:a7:b1:31:53:b7:55:c9:22:48: 3d:32:ac:da:3b:eb:09:18:c7:48:d3:c2:b8:4d:cb: e5:5a:36:2e:71:cf:3b:69:12:7f:f7:ec:eb:e2:a8: 4a:bd:65:54:99:82:de:c2:db:5a:15:3a:5e:ee:f9: 18:58:3f:b7:b5:6c:1c:a0:18:14:6a:cf:fc:c5:83: 3a:b4:95:e7:15:c6:90:e8:33:bb:c4:9b:02:50:64: 9b:c6:62:b6:89:d4:ed:1f:b6:4b:1e:d2:a9:66:38: 03:f6:99:68:9e:0e:39:1c:ee:6f:e2:fb:bc:68:04: 30:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:73:4F:17:FD:67:17:A3:60:D8:04:10:FC:DC:FA:86:C4:E1:D6:14 X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/4XNPF_1nF6Ng2AQQ_Nz6hsTh1hQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.118.224.0/20 Signature Algorithm: sha256WithRSAEncryption 81:6b:0a:38:2b:f7:32:68:9a:d7:85:89:ee:d6:24:1d:a3:7d: 2b:d5:6c:d1:1c:d3:ab:1d:19:a2:7e:8c:65:60:c3:f0:6e:03: f3:9e:8c:d9:a4:3f:1e:8d:cd:0f:10:e4:f0:26:1c:fa:1a:d5: 34:c2:15:54:55:fe:65:75:76:37:aa:be:d9:c1:2f:64:e5:33: 42:0f:36:0a:22:95:24:21:bf:37:d7:5b:47:e4:dc:4e:96:9b: a5:94:4c:80:4f:aa:7c:0f:a7:55:73:0d:c1:c7:ea:3e:47:a9: 79:ee:40:7e:52:25:2e:08:f1:b6:93:fa:c4:48:3a:a8:0b:19: 00:34:03:df:63:39:41:23:81:47:c7:ba:5f:e0:4d:c5:1c:b3: 95:c4:94:ff:69:ea:41:7c:26:a5:af:dd:eb:57:3d:06:13:63: 31:bd:7d:df:a0:75:0b:25:b2:16:28:85:cc:c3:27:62:e4:ac: 4e:b6:14:93:9f:32:f0:10:df:47:82:87:3e:36:12:31:d1:f9: bb:db:17:31:cf:53:7d:5e:cc:7e:ae:2e:65:8b:02:c3:54:b4: 9b:2f:0d:3a:9e:88:c4:25:ee:99:66:8f:69:4c:66:ec:0e:e6: 0f:0d:9d:2f:90:05:ec:1b:ef:4d:98:09:24:fc:ec:c6:3c:79: 18:4c:cb:ca -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNTA4MjIw ODUyMjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEUxNzM0RjE3RkQ2NzE3 QTM2MEQ4MDQxMEZDRENGQTg2QzRFMUQ2MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCulBHfilYzR/lKyJ0OPYLcqdumOVCzp4IkmUvnZ6OniFqABgr s+QOYj3waSQn+v0FZdl867gHTKpv5ed6+Mrwh2knWy9aVh6bKNx2RtDp4eGnkU/x DOPHQbOKAHOVFjEWY/ym2xy+Ev9daw3uoufjE9iJmuZ+6/pivZdNovLUhU12zO6r xPrNV8LmjKexMVO3VckiSD0yrNo76wkYx0jTwrhNy+VaNi5xzztpEn/37OviqEq9 ZVSZgt7C21oVOl7u+RhYP7e1bBygGBRqz/zFgzq0lecVxpDoM7vEmwJQZJvGYraJ 1O0ftkse0qlmOAP2mWieDjkc7m/i+7xoBDBbAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQU4XNPF/1nF6Ng2AQQ/Nz6hsTh1hQwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HLzRYTlBGXzFuRjZOZzJBUVFf Tno2aHNUaDFoUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATL duAwDQYJKoZIhvcNAQELBQADggEBAIFrCjgr9zJomteFie7WJB2jfSvVbNEc06sd GaJ+jGVgw/BuA/OejNmkPx6NzQ8Q5PAmHPoa1TTCFVRV/mV1djeqvtnBL2TlM0IP NgoilSQhvzfXW0fk3E6Wm6WUTIBPqnwPp1VzDcHH6j5HqXnuQH5SJS4I8baT+sRI OqgLGQA0A99jOUEjgUfHul/gTcUcs5XElP9p6kF8JqWv3etXPQYTYzG9fd+gdQsl shYohczDJ2LkrE62FJOfMvAQ30eChz42EjHR+bvbFzHPU31ezH6uLmWLAsNUtJsv DTqeiMQl7plmj2lMZuwO5g8NnS+QBewb702YCST87MY8eRhMy8o= -----END CERTIFICATE-----Generated at Sun Aug 24 09:44:52 2025 by rpki-client