$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/ER-SMPdGNgPN4517j9vYP4x2bpA.roa File: ER-SMPdGNgPN4517j9vYP4x2bpA.roa (raw, json) Hash identifier: 0iiozWeR1cp77SOP9ZrtAZ/P/kikzX3JtXhgjn7RIC8= Subject key identifier: 11:1F:92:30:F7:46:36:03:CD:E3:9D:7B:8F:DB:D8:3F:8C:76:6E:90 Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0EB8 Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/ER-SMPdGNgPN4517j9vYP4x2bpA.roa Signing time: Fri 22 Aug 2025 08:52:33 +0000 ROA not before: Fri 22 Aug 2025 08:52:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9416 IP address blocks: 119.14.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3768 (0xeb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 22 08:52:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=111F9230F7463603CDE39D7B8FDBD83F8C766E90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f6:c0:97:d4:5d:4d:a7:00:ed:77:01:da:7e: e7:55:39:fe:05:0a:ad:3d:13:a8:6b:c2:38:0a:29: b6:dc:48:00:eb:81:de:a9:49:87:cf:b6:97:0c:57: 96:07:73:76:bd:f6:c8:c2:df:77:a9:de:b5:f4:97: f9:e9:cd:d7:be:73:9f:c7:9e:d5:05:78:ed:d0:93: 74:69:f8:e8:bb:ad:71:6a:56:7f:d2:20:e4:8e:92: d6:8d:97:62:46:e0:47:36:26:dd:bb:e1:0c:ab:66: 99:48:ad:78:80:9d:35:82:03:95:dc:10:c2:47:b1: 64:2f:c4:17:75:c4:a1:77:07:ff:12:35:a5:22:b7: 04:fb:ff:2e:40:4b:d5:27:0b:e5:96:b5:c8:41:3b: a9:1a:39:8e:b4:56:3b:9c:8e:51:82:2d:17:31:62: 76:14:bb:7c:78:7b:71:d8:7c:bf:80:f1:8d:f6:00: 2d:db:1e:18:28:58:af:8d:53:f4:c8:61:0f:6d:cc: eb:f5:30:c9:79:86:f8:87:cb:3c:1f:e1:59:53:08: ee:4e:1d:b5:ca:56:36:67:1d:e0:84:93:d5:9c:49: 4b:81:52:45:0f:49:5c:fa:62:92:d6:09:f8:41:12: c6:40:60:68:59:f5:a3:8c:51:e9:84:c3:38:7c:4e: 8c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1F:92:30:F7:46:36:03:CD:E3:9D:7B:8F:DB:D8:3F:8C:76:6E:90 X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/ER-SMPdGNgPN4517j9vYP4x2bpA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.14.128.0/17 Signature Algorithm: sha256WithRSAEncryption 1a:1e:df:8e:3b:4b:93:7c:0a:b6:70:81:e4:d4:a8:fd:2c:02: 85:5b:b5:43:3b:3f:b9:2c:63:5b:cb:11:83:6f:de:36:41:31: 03:82:92:c4:52:db:1d:b6:07:3a:b1:41:dc:ac:0d:73:2b:25: 91:70:45:be:10:6c:20:ce:49:b1:67:4c:0a:e4:bc:af:b2:24: 8e:8f:f3:69:a5:cc:46:45:c5:55:a6:12:81:b7:1a:84:cf:3e: 83:40:fa:5a:d1:f7:6e:46:80:40:23:bb:25:cf:d9:d8:7a:5e: 79:d7:c1:0d:09:29:96:0c:64:9a:06:71:6f:a7:49:3e:27:27: 9a:5b:77:97:10:55:5d:6e:9e:20:4f:9e:e7:78:96:47:da:16: 2c:3f:e7:8d:d3:58:c7:8e:31:76:dc:af:d8:9f:dd:75:ee:ca: 80:5f:35:3d:14:7f:98:0d:7a:b0:6c:51:ea:bb:ca:bf:85:84: fd:ad:ea:9e:75:14:71:c4:97:30:be:25:48:4a:e0:d3:3a:ed: 3f:c2:90:92:a8:f4:e3:61:59:06:e0:40:68:75:fe:c8:75:53: 47:b3:f2:ce:fd:b0:e2:e5:39:72:92:53:07:cb:e8:f7:7e:d7: 69:ea:3e:1a:1a:06:12:12:30:0a:ff:4e:1e:17:f5:b2:ec:73: 3b:13:ea:d1 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDrgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNTA4MjIw ODUyMzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDExMUY5MjMwRjc0NjM2 MDNDREUzOUQ3QjhGREJEODNGOEM3NjZFOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDn9sCX1F1NpwDtdwHafudVOf4FCq09E6hrwjgKKbbcSADrgd6p SYfPtpcMV5YHc3a99sjC33ep3rX0l/npzde+c5/HntUFeO3Qk3Rp+Oi7rXFqVn/S IOSOktaNl2JG4Ec2Jt274QyrZplIrXiAnTWCA5XcEMJHsWQvxBd1xKF3B/8SNaUi twT7/y5AS9UnC+WWtchBO6kaOY60VjucjlGCLRcxYnYUu3x4e3HYfL+A8Y32AC3b HhgoWK+NU/TIYQ9tzOv1MMl5hviHyzwf4VlTCO5OHbXKVjZnHeCEk9WcSUuBUkUP SVz6YpLWCfhBEsZAYGhZ9aOMUemEwzh8Toz1AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUER+SMPdGNgPN4517j9vYP4x2bpAwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL0VSLVNNUGRHTmdQTjQ1MTdq OXZZUDR4MmJwQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3 DoAwDQYJKoZIhvcNAQELBQADggEBABoe3447S5N8CrZwgeTUqP0sAoVbtUM7P7ks Y1vLEYNv3jZBMQOCksRS2x22BzqxQdysDXMrJZFwRb4QbCDOSbFnTArkvK+yJI6P 82mlzEZFxVWmEoG3GoTPPoNA+lrR925GgEAjuyXP2dh6XnnXwQ0JKZYMZJoGcW+n ST4nJ5pbd5cQVV1uniBPnud4lkfaFiw/543TWMeOMXbcr9if3XXuyoBfNT0Uf5gN erBsUeq7yr+FhP2t6p51FHHElzC+JUhK4NM67T/CkJKo9ONhWQbgQGh1/sh1U0ez 8s79sOLlOXKSUwfL6Pd+12nqPhoaBhISMAr/Th4X9bLsczsT6tE= -----END CERTIFICATE-----Generated at Fri Oct 24 19:24:55 2025 by rpki-client