$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/H3DO5w7k6VNBLK6Z_pov-DzbgtU.roa File: H3DO5w7k6VNBLK6Z_pov-DzbgtU.roa (raw, json) Hash identifier: vfC/nwTMrdWmv96v7NIwzqgPPk9MQ7008kPJq/18dNg= Subject key identifier: 1F:70:CE:E7:0E:E4:E9:53:41:2C:AE:99:FE:9A:2F:F8:3C:DB:82:D5 Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0EB9 Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/H3DO5w7k6VNBLK6Z_pov-DzbgtU.roa Signing time: Fri 22 Aug 2025 08:52:33 +0000 ROA not before: Fri 22 Aug 2025 08:52:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18042 IP address blocks: 123.252.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3769 (0xeb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 22 08:52:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1F70CEE70EE4E953412CAE99FE9A2FF83CDB82D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3f:72:3e:be:ee:57:6d:44:49:cd:74:87:e7: 93:26:1c:2a:0a:27:d2:72:95:67:df:a7:42:c0:08: 27:3c:bc:a7:9c:99:3a:c9:da:3e:fb:f3:ee:3e:fe: 6a:e3:f6:00:11:4c:52:68:44:00:1e:e1:5f:08:74: a4:16:a8:67:88:6c:a0:34:f3:9b:cd:43:af:20:7b: 2c:87:85:b0:b4:c6:45:3a:28:fa:c7:f7:40:91:d3: 7d:95:3a:39:9b:7b:aa:f7:00:f0:e5:d5:2c:b9:7e: ab:23:c7:52:34:9c:49:3d:86:0e:c7:2e:03:87:5d: 0e:09:16:41:e3:f6:c2:8f:f5:94:e3:56:65:a3:5e: 4a:87:f7:44:37:79:57:ac:fb:30:45:b7:00:53:9e: 43:41:df:65:8f:1d:73:f8:57:6c:71:01:28:2a:fd: b7:fd:6c:d6:00:20:68:f3:c1:9b:90:db:cc:94:0e: 97:25:65:d2:85:57:75:ef:d3:3e:c8:1d:01:37:e1: f7:65:84:b1:cd:d5:49:74:6f:75:90:86:12:de:26: 62:62:02:19:dd:75:43:e5:6d:f5:87:a8:2d:9e:c5: a0:8c:59:2d:4b:e5:7d:be:db:60:9a:60:bd:8a:73: 4e:ac:16:48:3f:6f:99:6b:c8:34:ed:63:90:0f:6d: 28:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:70:CE:E7:0E:E4:E9:53:41:2C:AE:99:FE:9A:2F:F8:3C:DB:82:D5 X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/H3DO5w7k6VNBLK6Z_pov-DzbgtU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 123.252.0.0/17 Signature Algorithm: sha256WithRSAEncryption 42:2f:e1:19:ba:d7:1c:4e:a0:55:d6:81:42:a9:3d:13:90:bd: f9:60:9a:79:c3:64:3c:c7:54:49:db:9a:86:5a:1f:dc:9f:b9: 86:d4:42:a0:f9:f9:d4:21:b3:78:a5:0a:05:98:52:13:bc:2a: f3:46:4c:70:6b:e8:f7:93:29:a2:b1:97:ba:f8:88:81:02:31: 21:50:3d:96:fe:f8:80:90:fd:42:da:a6:f0:01:0b:b6:f1:bb: 86:a6:32:bd:2a:80:a7:73:63:35:bc:e8:98:19:e2:d0:83:b4: 74:83:df:56:68:fe:8c:a4:52:52:33:89:c2:1e:80:62:2e:cd: 6d:94:a7:1d:ee:5c:7b:04:6b:0a:95:38:6f:e5:af:fd:7d:ae: 4c:d4:a4:3b:5f:06:db:f4:c8:12:df:73:2a:f2:ed:66:20:72: e6:34:a8:93:e9:a0:f2:04:00:57:cb:7b:ad:5f:d0:42:eb:fa: e7:dc:76:49:25:0c:b9:c9:68:bc:43:94:b6:29:53:76:ee:20: 3e:05:d4:fd:48:16:21:c8:95:34:86:84:27:0b:ba:69:91:3b: 0d:6b:f7:4b:28:7d:73:9d:be:8c:01:79:08:8a:5b:37:b8:98: e4:16:b9:ce:54:82:2e:d0:cb:7b:4a:0d:5d:7a:42:9c:9c:2d: 3c:2d:db:27 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDrkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNTA4MjIw ODUyMzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFGNzBDRUU3MEVFNEU5 NTM0MTJDQUU5OUZFOUEyRkY4M0NEQjgyRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYP3I+vu5XbURJzXSH55MmHCoKJ9JylWffp0LACCc8vKecmTrJ 2j778+4+/mrj9gARTFJoRAAe4V8IdKQWqGeIbKA085vNQ68geyyHhbC0xkU6KPrH 90CR032VOjmbe6r3APDl1Sy5fqsjx1I0nEk9hg7HLgOHXQ4JFkHj9sKP9ZTjVmWj XkqH90Q3eVes+zBFtwBTnkNB32WPHXP4V2xxASgq/bf9bNYAIGjzwZuQ28yUDpcl ZdKFV3Xv0z7IHQE34fdlhLHN1Ul0b3WQhhLeJmJiAhnddUPlbfWHqC2exaCMWS1L 5X2+22CaYL2Kc06sFkg/b5lryDTtY5APbSiVAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUH3DO5w7k6VNBLK6Z/pov+DzbgtUwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL0gzRE81dzdrNlZOQkxLNlpf cG92LUR6Ymd0VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd7 /AAwDQYJKoZIhvcNAQELBQADggEBAEIv4Rm61xxOoFXWgUKpPROQvflgmnnDZDzH VEnbmoZaH9yfuYbUQqD5+dQhs3ilCgWYUhO8KvNGTHBr6PeTKaKxl7r4iIECMSFQ PZb++ICQ/ULapvABC7bxu4amMr0qgKdzYzW86JgZ4tCDtHSD31Zo/oykUlIzicIe gGIuzW2Upx3uXHsEawqVOG/lr/19rkzUpDtfBtv0yBLfcyry7WYgcuY0qJPpoPIE AFfLe61f0ELr+ufcdkklDLnJaLxDlLYpU3buID4F1P1IFiHIlTSGhCcLummROw1r 90sofXOdvowBeQiKWze4mOQWuc5Ugi7Qy3tKDV16QpycLTwt2yc= -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:46 2025 by rpki-client