$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/C4uLlF5Ciya9aKOGPjTIwmPl5-o.roa File: C4uLlF5Ciya9aKOGPjTIwmPl5-o.roa (raw, json) Hash identifier: VQTyMiK7U/oIqQKxzt2MtmuXMCUZ98OG30aavS1L7UI= Subject key identifier: 0B:8B:8B:94:5E:42:8B:26:BD:68:A3:86:3E:34:C8:C2:63:E5:E7:EA Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0EBB Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/C4uLlF5Ciya9aKOGPjTIwmPl5-o.roa Signing time: Fri 22 Aug 2025 08:52:34 +0000 ROA not before: Fri 22 Aug 2025 08:52:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9416 IP address blocks: 202.151.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3771 (0xebb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 22 08:52:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0B8B8B945E428B26BD68A3863E34C8C263E5E7EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:43:f3:26:6d:16:72:1e:ea:46:61:55:e6:61: f3:50:a4:14:0e:a5:30:10:1e:10:1c:26:df:77:9d: 6f:aa:3d:62:df:c2:7b:1b:0d:30:52:62:c9:80:82: fe:6b:14:5b:4e:29:c1:b3:9f:43:a5:57:82:8d:17: f7:4d:33:4a:f1:da:a2:41:14:4f:36:e3:9f:49:20: 0b:67:e4:4d:a2:58:74:a3:f2:c7:a9:7e:3e:bf:41: ec:1d:8f:9c:be:20:3c:69:6a:99:b3:51:6e:78:ad: 37:90:a8:de:a2:45:44:05:a5:86:51:6b:2d:ef:e0: 90:93:50:c8:f2:9a:8a:9c:f5:30:bc:d7:f2:98:b3: f3:28:52:7c:c0:8a:36:3c:be:0d:c5:17:ef:b5:03: a0:94:90:b1:1d:b1:0c:43:a0:33:9a:68:e7:da:52: b1:ee:41:43:b3:51:8e:a9:6b:9f:01:27:93:44:c5: b3:76:c9:7a:84:41:73:c0:cf:87:89:6c:28:d2:88: 66:86:5f:a4:61:cb:b8:0e:b9:c0:9b:91:fc:92:28: 10:07:db:1f:ed:90:29:ab:17:12:44:f6:92:d8:a4: e5:08:8c:eb:d9:83:8a:23:80:12:57:bd:bf:90:f2: 2f:61:3c:fa:61:0c:90:b6:af:2f:bb:b6:64:69:a5: 71:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8B:8B:94:5E:42:8B:26:BD:68:A3:86:3E:34:C8:C2:63:E5:E7:EA X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/C4uLlF5Ciya9aKOGPjTIwmPl5-o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.151.48.0/20 Signature Algorithm: sha256WithRSAEncryption af:02:32:fa:de:be:67:de:64:bf:a2:8f:cf:42:2f:50:69:da: 3a:73:b1:22:95:29:13:23:4e:90:b5:94:46:ac:58:a8:47:63: 00:74:91:f2:5b:87:e4:c9:fe:8e:04:6d:eb:8f:db:18:26:01: e4:eb:23:d0:33:00:00:05:72:dd:a7:03:79:1f:1f:45:de:90: fd:40:32:f4:d4:00:b9:a4:ba:ad:88:22:c3:4c:1b:8a:5a:7c: 3e:da:a6:e2:a5:7f:8b:47:0c:87:06:d0:94:82:29:8f:6d:f8: 9b:e8:db:e0:fb:c7:ba:e0:d7:dd:49:21:e7:3c:f3:52:5b:3d: 06:24:5d:97:50:31:c1:46:20:4f:be:f6:55:c8:02:61:d3:66: 25:df:d0:97:03:82:18:a4:2f:7a:c0:6c:c8:f9:c4:dd:78:e4: b0:11:96:8d:c9:e2:f0:62:e6:8b:91:05:4b:06:be:06:c9:72: c0:e0:60:9e:28:9e:31:77:ca:c9:3c:aa:9d:ea:0a:56:82:69: 9d:14:e2:c2:a5:15:5c:b5:07:4b:8f:4b:8f:2e:91:f7:4d:30: 9f:a5:7b:f9:4c:41:88:e7:21:c8:71:7d:19:96:4a:27:04:64: 9b:2d:91:c5:32:d0:94:77:6f:b0:2e:2a:b1:d8:c4:05:60:37: 89:33:31:b9 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDrswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNTA4MjIw ODUyMzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBCOEI4Qjk0NUU0MjhC MjZCRDY4QTM4NjNFMzRDOEMyNjNFNUU3RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBQ/MmbRZyHupGYVXmYfNQpBQOpTAQHhAcJt93nW+qPWLfwnsb DTBSYsmAgv5rFFtOKcGzn0OlV4KNF/dNM0rx2qJBFE82459JIAtn5E2iWHSj8sep fj6/Qewdj5y+IDxpapmzUW54rTeQqN6iRUQFpYZRay3v4JCTUMjymoqc9TC81/KY s/MoUnzAijY8vg3FF++1A6CUkLEdsQxDoDOaaOfaUrHuQUOzUY6pa58BJ5NExbN2 yXqEQXPAz4eJbCjSiGaGX6Rhy7gOucCbkfySKBAH2x/tkCmrFxJE9pLYpOUIjOvZ g4ojgBJXvb+Q8i9hPPphDJC2ry+7tmRppXGBAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUC4uLlF5Ciya9aKOGPjTIwmPl5+owHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL0M0dUxsRjVDaXlhOWFLT0dQ alRJd21QbDUtby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATK lzAwDQYJKoZIhvcNAQELBQADggEBAK8CMvrevmfeZL+ij89CL1Bp2jpzsSKVKRMj TpC1lEasWKhHYwB0kfJbh+TJ/o4EbeuP2xgmAeTrI9AzAAAFct2nA3kfH0XekP1A MvTUALmkuq2IIsNMG4pafD7apuKlf4tHDIcG0JSCKY9t+Jvo2+D7x7rg191JIec8 81JbPQYkXZdQMcFGIE++9lXIAmHTZiXf0JcDghikL3rAbMj5xN145LARlo3J4vBi 5ouRBUsGvgbJcsDgYJ4onjF3ysk8qp3qClaCaZ0U4sKlFVy1B0uPS48ukfdNMJ+l e/lMQYjnIchxfRmWSicEZJstkcUy0JR3b7AuKrHYxAVgN4kzMbk= -----END CERTIFICATE-----Generated at Sun Aug 24 07:42:14 2025 by rpki-client