$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/rmGjxoFGyivv95aLnkG5sRd74yU.roa File: rmGjxoFGyivv95aLnkG5sRd74yU.roa (raw, json) Hash identifier: JYg151bQmrajPMUuu2WN3NSDKytSX43Uli66ziBnHlQ= Subject key identifier: AE:61:A3:C6:81:46:CA:2B:EF:F7:96:8B:9E:41:B9:B1:17:7B:E3:25 Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0EB1 Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/rmGjxoFGyivv95aLnkG5sRd74yU.roa Signing time: Fri 22 Aug 2025 08:52:32 +0000 ROA not before: Fri 22 Aug 2025 08:52:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9416 IP address blocks: 123.252.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3761 (0xeb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 22 08:52:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AE61A3C68146CA2BEFF7968B9E41B9B1177BE325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:85:88:6e:67:f3:8f:41:5c:a3:e4:28:88:41: d7:1c:80:54:06:22:7a:c6:02:37:3d:6e:08:b5:a0: 3e:05:ac:2e:9f:74:b1:5f:70:fe:b0:71:33:ca:64: f9:e8:bc:04:eb:62:73:c6:47:92:7a:bc:a0:4b:77: 8b:e0:59:85:4b:68:fd:38:43:2b:fe:ad:7a:e4:ba: 3d:03:d6:03:03:9c:e6:7d:4b:41:03:c2:79:64:2c: 33:e5:ef:fb:8a:4c:e5:e8:e9:cc:90:37:57:a2:1a: b8:15:c0:9a:53:3f:25:23:8a:bc:78:32:40:eb:0f: 69:cf:20:78:d1:6b:a3:23:ae:10:04:a8:76:19:8d: c9:56:6d:d8:49:45:0e:b6:00:96:db:30:19:15:42: 87:4c:54:1e:39:c5:dd:dc:0b:d2:8e:91:f5:53:8b: e6:cb:18:3f:34:8a:34:f1:77:ad:54:20:a2:01:88: 60:80:7a:4f:7b:f0:e7:93:cc:36:0a:79:59:1a:e5: 74:40:22:b8:29:02:c2:5e:ff:e8:87:75:14:98:cc: a1:32:32:00:25:11:8f:1d:02:82:fd:ad:7f:7b:a1: 39:6b:ef:6b:f4:30:53:77:0c:6e:16:cb:64:f8:f9: 40:4e:ab:27:ad:39:8e:2a:05:d5:1f:3a:5c:98:41: 30:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:61:A3:C6:81:46:CA:2B:EF:F7:96:8B:9E:41:B9:B1:17:7B:E3:25 X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/rmGjxoFGyivv95aLnkG5sRd74yU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.252.0.0/18 Signature Algorithm: sha256WithRSAEncryption 0d:ba:d2:c5:69:7a:aa:5f:62:76:4a:a9:1c:d8:86:e2:f4:a6: 8a:f0:38:8f:24:8f:20:61:33:04:16:47:56:57:9d:50:4d:61: 80:65:de:03:91:0b:28:d9:12:c4:8d:0f:19:dd:a2:6f:99:95: 7f:7b:36:bb:0f:f9:0f:ba:ba:40:09:c9:ae:7d:1f:a3:19:29: 90:1b:cc:ea:1d:9f:b4:0c:85:1e:3e:72:a4:c0:ca:8b:56:e3: 4a:13:5f:a3:ad:1d:34:7f:8c:40:e9:0b:e8:f2:e1:37:1c:a5: eb:d0:4b:71:97:60:bb:85:9f:92:3b:25:8f:f8:17:94:90:46: 3c:be:79:4b:f6:2f:2e:c2:87:75:65:3d:2b:cc:b4:25:08:f2: 47:ad:56:56:fd:cc:39:ef:d9:ae:12:66:aa:67:9d:74:e0:63: ba:da:c3:57:93:ea:c2:78:dc:bd:45:90:1f:21:42:26:6c:2c: 14:b8:63:99:4c:1d:41:ea:7a:d1:09:a7:f9:11:c8:71:38:dd: 2d:07:0c:0f:05:10:d4:f6:73:93:09:02:2c:b0:3a:b6:2e:89: 4d:6b:d4:a3:f4:47:13:e4:2a:71:9c:d7:3e:72:e6:fc:59:91: e2:81:80:96:a4:02:e3:fb:8d:ee:d3:5b:8f:cb:2f:dd:6f:86: cc:a1:e3:20 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDrEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNTA4MjIw ODUyMzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFFNjFBM0M2ODE0NkNB MkJFRkY3OTY4QjlFNDFCOUIxMTc3QkUzMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHhYhuZ/OPQVyj5CiIQdccgFQGInrGAjc9bgi1oD4FrC6fdLFf cP6wcTPKZPnovATrYnPGR5J6vKBLd4vgWYVLaP04Qyv+rXrkuj0D1gMDnOZ9S0ED wnlkLDPl7/uKTOXo6cyQN1eiGrgVwJpTPyUjirx4MkDrD2nPIHjRa6MjrhAEqHYZ jclWbdhJRQ62AJbbMBkVQodMVB45xd3cC9KOkfVTi+bLGD80ijTxd61UIKIBiGCA ek978OeTzDYKeVka5XRAIrgpAsJe/+iHdRSYzKEyMgAlEY8dAoL9rX97oTlr72v0 MFN3DG4Wy2T4+UBOqyetOY4qBdUfOlyYQTCTAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUrmGjxoFGyivv95aLnkG5sRd74yUwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL3JtR2p4b0ZHeWl2djk1YUxu a0c1c1JkNzR5VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ7 /AAwDQYJKoZIhvcNAQELBQADggEBAA260sVpeqpfYnZKqRzYhuL0porwOI8kjyBh MwQWR1ZXnVBNYYBl3gORCyjZEsSNDxndom+ZlX97NrsP+Q+6ukAJya59H6MZKZAb zOodn7QMhR4+cqTAyotW40oTX6OtHTR/jEDpC+jy4TccpevQS3GXYLuFn5I7JY/4 F5SQRjy+eUv2Ly7Ch3VlPSvMtCUI8ketVlb9zDnv2a4SZqpnnXTgY7raw1eT6sJ4 3L1FkB8hQiZsLBS4Y5lMHUHqetEJp/kRyHE43S0HDA8FENT2c5MJAiywOrYuiU1r 1KP0RxPkKnGc1z5y5vxZkeKBgJakAuP7je7TW4/LL91vhsyh4yA= -----END CERTIFICATE-----Generated at Sun Aug 24 09:44:45 2025 by rpki-client