$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eJxYBOuYz22JJPgBRsthigMO0gk.roa File: eJxYBOuYz22JJPgBRsthigMO0gk.roa (raw, json) Hash identifier: gfXZxAgdD4AVNi+mCqG2SZKCGAOEiqSyKK6nmO+0WK4= Subject key identifier: 78:9C:58:04:EB:98:CF:6D:89:24:F8:01:46:CB:61:8A:03:0E:D2:09 Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0EB2 Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eJxYBOuYz22JJPgBRsthigMO0gk.roa Signing time: Fri 22 Aug 2025 08:52:32 +0000 ROA not before: Fri 22 Aug 2025 08:52:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18042 IP address blocks: 220.157.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3762 (0xeb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 22 08:52:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=789C5804EB98CF6D8924F80146CB618A030ED209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b7:d2:af:ee:ec:9c:0d:3c:7e:dd:b7:a3:0e: 01:71:a8:44:cf:d3:f5:eb:69:8e:c6:b0:8e:e0:63: e1:9c:28:75:3a:ed:8f:99:05:bf:16:22:e0:eb:a9: 89:50:cf:7b:f7:d2:86:ff:31:1c:18:7f:59:d1:c1: b6:9d:e6:b3:d4:2d:c4:bb:a4:56:77:f8:34:7c:85: 4e:34:cc:a3:75:98:39:ef:46:d3:24:bb:0e:ff:5c: 4e:a5:95:12:cb:2b:b6:ab:90:df:9f:63:2e:e6:a6: 40:35:eb:a0:db:0a:4f:25:dc:ef:1a:c7:89:75:ae: 30:fc:6d:e0:1c:62:9f:b1:ed:d4:f9:a7:50:e1:4a: c1:56:e8:20:f5:de:4e:9d:f8:7a:26:27:31:c7:77: ad:9b:6a:f7:e4:c6:b0:71:6e:d1:38:a2:74:18:b1: a7:74:53:d7:08:5e:bf:04:f2:fe:5e:38:35:55:d7: 24:e3:dc:55:07:63:79:20:d6:a7:30:eb:5d:7f:e2: a2:5b:29:49:5c:db:5e:08:79:74:82:b3:2a:c5:dc: 78:00:27:70:c7:a7:d4:e7:af:ed:ca:12:c2:a6:04: 07:7a:8b:dd:28:e9:7d:f2:a5:b3:03:31:4f:0c:f6: 56:04:c8:37:e4:a7:88:f2:8d:e8:ef:79:a8:90:42: 4b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9C:58:04:EB:98:CF:6D:89:24:F8:01:46:CB:61:8A:03:0E:D2:09 X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eJxYBOuYz22JJPgBRsthigMO0gk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 220.157.112.0/20 Signature Algorithm: sha256WithRSAEncryption 3e:d4:f8:cc:e4:13:1b:a8:cd:1c:8e:97:5e:68:cc:d5:04:ea: 53:71:0c:79:ef:79:1a:3a:71:d8:78:08:de:b9:76:0b:64:86: 7e:4e:9c:96:5d:75:46:48:bb:2b:b2:de:45:a8:64:81:1f:22: ba:89:00:f4:bd:68:48:a3:74:e7:6e:69:70:91:68:71:bb:17: 48:80:19:d1:16:e4:fa:41:8d:7d:a4:f1:f7:98:c5:b4:da:9c: 2c:0e:55:d8:df:33:cd:f5:6b:98:9e:ff:d6:57:af:ea:f4:3a: 7a:af:28:1a:2e:3f:2f:45:f1:c3:c1:0b:82:f0:5e:79:55:28: 05:65:6e:26:d7:f9:68:2d:8e:68:7f:96:d3:39:5c:e1:4d:f9: 6f:9c:a3:35:18:26:ac:29:19:b5:13:da:c5:2b:d5:89:12:e8: e7:24:a8:02:aa:0b:58:16:5a:a1:01:34:f8:8d:81:1f:8b:82: ba:d6:52:ed:24:fc:8c:7b:d9:61:25:f8:94:73:0c:6c:ac:d3: f7:55:bb:2a:fc:0e:e8:08:26:46:52:ad:96:af:d6:b4:19:e3: 9e:c6:01:d4:11:e4:9c:a5:2f:49:de:94:b1:0e:44:4e:89:6b: ed:49:93:d2:3c:0d:e0:b1:7c:19:c1:47:75:a9:16:08:43:bf: c1:94:4d:ab -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDrIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNTA4MjIw ODUyMzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc4OUM1ODA0RUI5OENG NkQ4OTI0RjgwMTQ2Q0I2MThBMDMwRUQyMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQt9Kv7uycDTx+3bejDgFxqETP0/XraY7GsI7gY+GcKHU67Y+Z Bb8WIuDrqYlQz3v30ob/MRwYf1nRwbad5rPULcS7pFZ3+DR8hU40zKN1mDnvRtMk uw7/XE6llRLLK7arkN+fYy7mpkA166DbCk8l3O8ax4l1rjD8beAcYp+x7dT5p1Dh SsFW6CD13k6d+HomJzHHd62bavfkxrBxbtE4onQYsad0U9cIXr8E8v5eODVV1yTj 3FUHY3kg1qcw611/4qJbKUlc214IeXSCsyrF3HgAJ3DHp9Tnr+3KEsKmBAd6i90o 6X3ypbMDMU8M9lYEyDfkp4jyjejveaiQQkvtAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeJxYBOuYz22JJPgBRsthigMO0gkwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL2VKeFlCT3VZejIySkpQZ0JS c3RoaWdNTzBnay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATc nXAwDQYJKoZIhvcNAQELBQADggEBAD7U+MzkExuozRyOl15ozNUE6lNxDHnveRo6 cdh4CN65dgtkhn5OnJZddUZIuyuy3kWoZIEfIrqJAPS9aEijdOduaXCRaHG7F0iA GdEW5PpBjX2k8feYxbTanCwOVdjfM831a5ie/9ZXr+r0OnqvKBouPy9F8cPBC4Lw XnlVKAVlbibX+Wgtjmh/ltM5XOFN+W+cozUYJqwpGbUT2sUr1YkS6OckqAKqC1gW WqEBNPiNgR+LgrrWUu0k/Ix72WEl+JRzDGys0/dVuyr8DugIJkZSrZav1rQZ457G AdQR5JylL0nelLEORE6Ja+1Jk9I8DeCxfBnBR3WpFghDv8GUTas= -----END CERTIFICATE-----Generated at Sun Aug 24 09:44:48 2025 by rpki-client