$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGXI/EGKl5CYR7Wo7MTVry6m0RiGIszQ.roa File: EGKl5CYR7Wo7MTVry6m0RiGIszQ.roa (raw, json) Hash identifier: N1oxQKaruPhZdubEt3F+SP4Er0o2oeS8aWzvn/bDc9s= Subject key identifier: 10:62:A5:E4:26:11:ED:6A:3B:31:35:6B:CB:A9:B4:46:21:88:B3:34 Certificate issuer: /CN=38BFB30C72CA9548F796CC3D4FB6006B883E2701 Certificate serial: 0303 Authority key identifier: 38:BF:B3:0C:72:CA:95:48:F7:96:CC:3D:4F:B6:00:6B:88:3E:27:01 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/EGKl5CYR7Wo7MTVry6m0RiGIszQ.roa Signing time: Mon 30 Mar 2026 10:52:06 +0000 ROA not before: Mon 30 Mar 2026 10:52:06 +0000 ROA not after: Fri 30 Oct 2026 15:30:19 +0000 asID: 18416 IP address blocks: 138.252.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 06 Apr 2026 15:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 771 (0x303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38BFB30C72CA9548F796CC3D4FB6006B883E2701 Validity Not Before: Mar 30 10:52:06 2026 GMT Not After : Oct 30 15:30:19 2026 GMT Subject: CN=1062A5E42611ED6A3B31356BCBA9B4462188B334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7c:3e:d4:0c:71:8e:c8:10:e1:be:1e:74:05: 80:34:c1:dc:67:2b:c4:8a:e4:c1:13:9c:ae:da:27: 0d:a7:25:e8:26:dc:7f:cc:6e:21:c5:77:d6:ff:61: 30:b3:55:d7:9a:e3:0b:83:d2:a7:d6:56:42:cc:7f: 91:9e:b2:aa:5d:34:27:0d:3b:10:42:e9:6a:75:a2: dd:f1:61:8a:0b:cd:9e:f7:2b:b5:22:52:9f:5a:78: 5b:86:d1:87:99:9c:da:46:79:88:13:c7:94:f0:6c: c6:3f:a1:24:cf:29:ce:69:5c:3d:d0:0b:4b:08:c1: 39:af:16:2e:a4:1f:c0:88:e2:c3:e0:f2:47:09:59: cf:b3:87:cb:d7:79:f9:bd:19:b2:26:ad:2e:b4:f2: 03:df:6a:f3:ac:95:f2:83:e9:3e:92:69:2e:06:04: e3:f9:6a:a4:64:77:ec:3a:96:3a:35:b8:62:40:15: 37:59:1e:37:ff:80:c7:61:a9:e7:42:85:1a:4d:74: 57:b8:8f:5b:d7:11:39:8c:ce:c7:b6:2b:3b:8d:5f: b5:3b:1c:ef:04:d9:ce:24:24:c9:67:61:a4:52:b0: 0f:33:b6:f8:1e:e0:d3:76:77:0d:79:ee:2c:58:44: 58:22:6b:51:fb:08:3d:d2:ac:51:34:90:cc:2a:ca: 61:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:62:A5:E4:26:11:ED:6A:3B:31:35:6B:CB:A9:B4:46:21:88:B3:34 X509v3 Authority Key Identifier: keyid:38:BF:B3:0C:72:CA:95:48:F7:96:CC:3D:4F:B6:00:6B:88:3E:27:01 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/EGKl5CYR7Wo7MTVry6m0RiGIszQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 138.252.116.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:ed:14:43:dc:c9:ad:3e:67:24:12:f7:69:45:65:d1:2f:50: 8d:11:90:ea:f9:3a:d8:4b:a4:8c:2d:dc:bf:cd:98:d1:79:88: d8:45:24:d1:c9:10:a2:0d:94:f1:99:b4:2d:c8:73:4f:f6:b4: 4b:db:8e:5c:af:c0:18:ad:5b:aa:88:e2:c9:a1:37:49:04:bf: 35:d8:f1:00:fc:c3:ad:45:c0:b4:1f:11:a3:88:32:fe:10:c5: e5:39:11:ad:96:ad:11:2c:07:c3:6a:df:5b:d7:d2:cb:26:16: fd:09:0e:5a:21:83:37:a9:9c:42:33:a7:ab:6c:1c:7a:2a:10: ac:11:ee:3d:1b:32:8c:ce:b0:d6:7f:c1:84:b4:05:35:a4:4e: 27:f9:d0:72:fb:c2:8e:02:1b:e1:5b:65:d8:10:44:18:1a:59: ec:13:d6:23:09:5e:59:b9:4d:27:2b:b1:b5:e6:76:1d:8e:ff: 54:8c:30:24:96:0d:1e:38:ba:af:7d:a7:3b:da:da:8c:b8:67: 25:e0:5a:50:89:75:44:38:85:2a:9c:2e:fc:b0:37:73:f9:15: 84:a0:c3:bb:f1:01:85:d6:56:e1:34:b5:a4:f9:81:08:ee:12: 4f:c1:56:96:43:a7:54:35:6f:c0:ab:ae:d5:28:0a:b9:29:4e: c8:b6:df:30 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzhC RkIzMEM3MkNBOTU0OEY3OTZDQzNENEZCNjAwNkI4ODNFMjcwMTAeFw0yNjAzMzAx MDUyMDZaFw0yNjEwMzAxNTMwMTlaMDMxMTAvBgNVBAMTKDEwNjJBNUU0MjYxMUVE NkEzQjMxMzU2QkNCQTlCNDQ2MjE4OEIzMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtfD7UDHGOyBDhvh50BYA0wdxnK8SK5METnK7aJw2nJegm3H/M biHFd9b/YTCzVdea4wuD0qfWVkLMf5GesqpdNCcNOxBC6Wp1ot3xYYoLzZ73K7Ui Up9aeFuG0YeZnNpGeYgTx5TwbMY/oSTPKc5pXD3QC0sIwTmvFi6kH8CI4sPg8kcJ Wc+zh8vXefm9GbImrS608gPfavOslfKD6T6SaS4GBOP5aqRkd+w6ljo1uGJAFTdZ Hjf/gMdhqedChRpNdFe4j1vXETmMzse2KzuNX7U7HO8E2c4kJMlnYaRSsA8ztvge 4NN2dw157ixYRFgia1H7CD3SrFE0kMwqymGpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUEGKl5CYR7Wo7MTVry6m0RiGIszQwHwYDVR0jBBgwFoAUOL+zDHLKlUj3lsw9 T7YAa4g+JwEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1hJ L09MLXpESExLbFVqM2xzdzlUN1lBYTRnLUp3RS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvT0wtekRITEtsVWozbHN3OVQ3WUFhNGctSndFLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1hJL0VHS2w1Q1lSN1dvN01UVnJ5 Nm0wUmlHSXN6US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGK /HQwDQYJKoZIhvcNAQELBQADggEBAI/tFEPcya0+ZyQS92lFZdEvUI0RkOr5OthL pIwt3L/NmNF5iNhFJNHJEKINlPGZtC3Ic0/2tEvbjlyvwBitW6qI4smhN0kEvzXY 8QD8w61FwLQfEaOIMv4QxeU5Ea2WrREsB8Nq31vX0ssmFv0JDlohgzepnEIzp6ts HHoqEKwR7j0bMozOsNZ/wYS0BTWkTif50HL7wo4CG+FbZdgQRBgaWewT1iMJXlm5 TScrsbXmdh2O/1SMMCSWDR44uq99pzva2oy4ZyXgWlCJdUQ4hSqcLvywN3P5FYSg w7vxAYXWVuE0taT5gQjuEk/BVpZDp1Q1b8CrrtUoCrkpTsi23zA= -----END CERTIFICATE-----Generated at Mon Apr 6 15:00:00 2026 by rpki-client