$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Fi2Vb9d4VKjN3sHJykP1Y74w-tA.roa File: Fi2Vb9d4VKjN3sHJykP1Y74w-tA.roa (raw, json) Hash identifier: m3IF72kSEWutBNYdTIwi0ojSMqt/qMNJrG88RnXIx6k= Subject key identifier: 16:2D:95:6F:D7:78:54:A8:CD:DE:C1:C9:CA:43:F5:63:BE:30:FA:D0 Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0EB4 Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Fi2Vb9d4VKjN3sHJykP1Y74w-tA.roa Signing time: Fri 22 Aug 2025 08:52:32 +0000 ROA not before: Fri 22 Aug 2025 08:52:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9416 IP address blocks: 122.99.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3764 (0xeb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 22 08:52:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=162D956FD77854A8CDDEC1C9CA43F563BE30FAD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e7:fc:57:2a:d3:79:b1:40:ef:97:ff:0f:d7: 36:84:ef:9c:b7:9b:0d:0d:1a:bd:6b:0a:85:1f:be: 9d:45:e6:1b:87:81:91:f3:21:38:0a:b5:2b:f5:e6: 99:9e:5a:ce:2c:7c:79:c4:dd:7c:ca:fa:28:f2:4e: a2:38:6b:6f:a0:88:b9:1d:29:6f:31:8c:51:79:86: 82:f7:f5:eb:2d:1c:a2:ca:71:04:00:c2:87:bf:9c: 2a:11:a3:5b:c0:ad:80:94:43:45:71:d7:e6:d1:45: 84:a9:b9:97:c2:44:66:be:89:33:22:45:91:7a:57: d1:c5:d1:b8:18:4b:0b:cb:ce:70:8d:64:85:30:ab: 87:04:65:cb:80:7b:ed:ec:4a:2a:f1:af:ab:d9:8e: cd:7b:c2:19:43:0e:54:1b:4b:ec:07:bf:22:82:d7: d9:f9:12:6a:72:43:21:94:95:55:4c:b1:d4:00:c4: cc:29:80:27:78:43:e2:1e:65:51:fe:3f:1e:00:8f: a3:0d:48:ae:ed:0c:47:b7:3a:3e:af:b8:6c:da:05: cd:cf:00:f2:4b:79:99:f1:42:42:50:5f:8f:cf:e1: 92:10:53:8b:43:03:cb:a6:8c:8d:42:64:e2:43:80: 08:4a:86:f7:7c:78:85:f7:1b:cd:e4:fa:3a:ba:84: 30:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2D:95:6F:D7:78:54:A8:CD:DE:C1:C9:CA:43:F5:63:BE:30:FA:D0 X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/Fi2Vb9d4VKjN3sHJykP1Y74w-tA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.99.0.0/18 Signature Algorithm: sha256WithRSAEncryption ad:54:da:56:67:be:bc:25:1d:59:ac:b8:df:8e:16:c5:8a:49: 55:c6:55:99:ee:c3:e3:b6:e7:11:fe:75:56:b5:9a:e1:bc:1e: a9:c9:8f:dc:55:f7:ed:b3:77:e2:d6:23:e4:69:5b:56:19:75: f3:1e:b2:b7:c2:82:16:73:dc:f8:44:9f:1e:96:db:45:15:1c: c6:5e:03:14:40:f5:0f:25:cb:85:eb:93:7f:43:de:10:ad:64: 6c:e6:c7:c9:dd:c8:30:48:92:e6:00:7a:f5:8b:20:8b:d5:e6: d8:b9:2c:23:2c:5e:e0:36:b3:a7:dc:e6:91:06:5a:44:e6:1b: 31:a7:ed:c3:05:b9:e2:ae:17:da:9c:d4:88:78:40:18:fd:b8: 96:65:b3:db:a4:ff:10:b5:16:a0:9b:95:7c:0f:14:5f:8d:c3: ed:2b:8b:93:b9:c9:53:51:7e:2f:12:d8:bc:93:e6:ff:4b:62: ce:c6:a9:7f:8f:28:9b:97:54:96:79:d6:0b:bf:68:32:b6:2a: ea:cf:62:0a:9c:e8:0c:d9:0a:3b:4e:3c:5a:e9:40:0e:48:11: 51:fb:16:82:17:73:59:ad:51:9b:57:97:9e:a3:09:fa:d6:d9: 2f:7f:c8:de:20:2a:9e:0f:ae:7c:06:34:36:01:9a:d0:f1:49: 78:49:e2:11 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDrQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNTA4MjIw ODUyMzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDE2MkQ5NTZGRDc3ODU0 QThDRERFQzFDOUNBNDNGNTYzQkUzMEZBRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQ5/xXKtN5sUDvl/8P1zaE75y3mw0NGr1rCoUfvp1F5huHgZHz ITgKtSv15pmeWs4sfHnE3XzK+ijyTqI4a2+giLkdKW8xjFF5hoL39estHKLKcQQA woe/nCoRo1vArYCUQ0Vx1+bRRYSpuZfCRGa+iTMiRZF6V9HF0bgYSwvLznCNZIUw q4cEZcuAe+3sSirxr6vZjs17whlDDlQbS+wHvyKC19n5EmpyQyGUlVVMsdQAxMwp gCd4Q+IeZVH+Px4Aj6MNSK7tDEe3Oj6vuGzaBc3PAPJLeZnxQkJQX4/P4ZIQU4tD A8umjI1CZOJDgAhKhvd8eIX3G83k+jq6hDAFAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUFi2Vb9d4VKjN3sHJykP1Y74w+tAwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL0ZpMlZiOWQ0VktqTjNzSEp5 a1AxWTc0dy10QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6 YwAwDQYJKoZIhvcNAQELBQADggEBAK1U2lZnvrwlHVmsuN+OFsWKSVXGVZnuw+O2 5xH+dVa1muG8HqnJj9xV9+2zd+LWI+RpW1YZdfMesrfCghZz3PhEnx6W20UVHMZe AxRA9Q8ly4Xrk39D3hCtZGzmx8ndyDBIkuYAevWLIIvV5ti5LCMsXuA2s6fc5pEG WkTmGzGn7cMFueKuF9qc1Ih4QBj9uJZls9uk/xC1FqCblXwPFF+Nw+0ri5O5yVNR fi8S2LyT5v9LYs7GqX+PKJuXVJZ51gu/aDK2KurPYgqc6AzZCjtOPFrpQA5IEVH7 FoIXc1mtUZtXl56jCfrW2S9/yN4gKp4PrnwGNDYBmtDxSXhJ4hE= -----END CERTIFICATE-----Generated at Sun Aug 24 07:43:04 2025 by rpki-client