$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/aDLSW8G9y84sYfEF3k4eqkaIHlk.roa File: aDLSW8G9y84sYfEF3k4eqkaIHlk.roa (raw, json) Hash identifier: ctskumdXtD7iinj2b5keWRLGCs7iufISx69sy01ozBg= Subject key identifier: 68:32:D2:5B:C1:BD:CB:CE:2C:61:F1:05:DE:4E:1E:AA:46:88:1E:59 Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0EAF Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/aDLSW8G9y84sYfEF3k4eqkaIHlk.roa Signing time: Fri 22 Aug 2025 08:52:31 +0000 ROA not before: Fri 22 Aug 2025 08:52:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9416 IP address blocks: 119.14.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3759 (0xeaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 22 08:52:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6832D25BC1BDCBCE2C61F105DE4E1EAA46881E59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c2:7a:cc:ad:a7:8a:0b:82:ea:ed:31:ae:22: 32:45:68:8c:22:45:69:37:f9:12:44:58:33:87:58: a4:a0:a9:2a:b3:96:7f:60:0c:a3:df:e0:13:49:b1: 22:b9:cb:d0:79:16:93:50:9d:55:86:94:2c:11:01: 37:db:52:45:8f:54:39:fb:39:8d:1e:1e:23:57:38: 7b:2a:8d:65:58:91:da:3d:0b:34:6b:d0:b2:e0:61: 1d:0d:40:9a:63:0f:a1:81:51:cc:6c:f8:e5:43:b0: 54:7f:cc:e0:ae:07:e7:4e:12:9c:79:06:d2:a7:d2: ef:c9:0b:e8:50:de:40:45:7b:78:0a:14:a6:e2:f7: 88:3b:6d:50:49:6d:aa:75:39:5a:52:7b:28:aa:de: 54:39:b7:53:78:69:e4:89:a8:0f:d2:25:78:98:78: 43:66:96:f6:20:c3:4c:87:6e:34:17:d1:d6:37:1c: 34:7d:01:bf:5f:c3:5f:16:1a:bb:82:e2:9b:8e:ef: 8f:74:e9:25:b4:50:3e:44:9c:74:69:bc:42:bb:10: 48:eb:18:c1:ff:39:3e:cb:7d:34:78:63:6d:d1:d1: 70:c1:f7:a2:99:b3:38:7f:e7:23:91:dd:9e:eb:b5: 7f:84:eb:1c:ea:c9:5a:9c:9d:e0:a2:7d:04:bd:ce: b6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:32:D2:5B:C1:BD:CB:CE:2C:61:F1:05:DE:4E:1E:AA:46:88:1E:59 X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/aDLSW8G9y84sYfEF3k4eqkaIHlk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 119.14.0.0/16 Signature Algorithm: sha256WithRSAEncryption 65:b5:97:6e:5e:0b:34:dc:45:a7:98:e6:38:22:72:a1:60:e6: 34:df:43:cf:7a:f2:0e:68:8a:86:09:b5:e6:09:be:4e:b4:b1: c4:d8:28:78:6c:9e:2a:4b:88:34:89:2a:c2:c3:b4:a6:48:b3: c0:1d:6f:88:d3:a1:83:77:3f:cb:a8:bf:a6:a1:3a:fc:7c:6c: bf:45:01:73:e8:27:c4:0e:c9:47:25:cb:be:0a:f0:ee:fd:bc: 9e:3e:ab:11:ad:4d:b9:ab:95:34:19:2b:c5:a8:cb:ea:b0:ed: c0:49:65:bd:b3:ef:6a:af:02:97:2c:d6:c6:e9:ff:58:11:76: 10:25:2a:24:4a:93:84:0e:5c:fe:d7:4b:e1:49:5e:50:95:7a: 0c:67:3d:c6:1e:7c:2d:33:5f:f0:70:15:49:e6:6b:3b:b0:0a: 3c:12:55:ae:5c:88:1d:8b:e1:65:80:56:0d:2d:58:04:53:05: 1d:2f:10:23:8b:a1:26:9a:8f:b2:49:7c:aa:dc:df:58:fb:58: 9e:4d:6c:a5:a5:9b:5f:78:17:40:f4:06:56:de:a6:90:be:fc: 75:e4:22:51:19:0f:e9:91:a5:43:74:d5:ff:df:b6:55:d2:1c: 3e:44:73:a0:e1:e4:fe:29:ee:98:53:6a:14:71:50:c0:00:69: 4d:17:79:7a -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgICDq8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNTA4MjIw ODUyMzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDY4MzJEMjVCQzFCRENC Q0UyQzYxRjEwNURFNEUxRUFBNDY4ODFFNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqwnrMraeKC4Lq7TGuIjJFaIwiRWk3+RJEWDOHWKSgqSqzln9g DKPf4BNJsSK5y9B5FpNQnVWGlCwRATfbUkWPVDn7OY0eHiNXOHsqjWVYkdo9CzRr 0LLgYR0NQJpjD6GBUcxs+OVDsFR/zOCuB+dOEpx5BtKn0u/JC+hQ3kBFe3gKFKbi 94g7bVBJbap1OVpSeyiq3lQ5t1N4aeSJqA/SJXiYeENmlvYgw0yHbjQX0dY3HDR9 Ab9fw18WGruC4puO74906SW0UD5EnHRpvEK7EEjrGMH/OT7LfTR4Y23R0XDB96KZ szh/5yOR3Z7rtX+E6xzqyVqcneCifQS9zrbTAgMBAAGjggHtMIIB6TAdBgNVHQ4E FgQUaDLSW8G9y84sYfEF3k4eqkaIHlkwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL2FETFNXOEc5eTg0c1lmRUYz azRlcWthSUhsay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwB3 DjANBgkqhkiG9w0BAQsFAAOCAQEAZbWXbl4LNNxFp5jmOCJyoWDmNN9Dz3ryDmiK hgm15gm+TrSxxNgoeGyeKkuINIkqwsO0pkizwB1viNOhg3c/y6i/pqE6/Hxsv0UB c+gnxA7JRyXLvgrw7v28nj6rEa1NuauVNBkrxajL6rDtwEllvbPvaq8ClyzWxun/ WBF2ECUqJEqThA5c/tdL4UleUJV6DGc9xh58LTNf8HAVSeZrO7AKPBJVrlyIHYvh ZYBWDS1YBFMFHS8QI4uhJpqPskl8qtzfWPtYnk1spaWbX3gXQPQGVt6mkL78deQi URkP6ZGlQ3TV/9+2VdIcPkRzoOHk/inumFNqFHFQwABpTRd5eg== -----END CERTIFICATE-----Generated at Fri Oct 24 19:21:30 2025 by rpki-client