$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eRoPsh_05MVIVXLPIVJj48qmcnQ.roa File: eRoPsh_05MVIVXLPIVJj48qmcnQ.roa (raw, json) Hash identifier: 9kmFnyWJjXzk07Q4/J0BtYegTq7TeNCpcDtK2ThMpWE= Subject key identifier: 79:1A:0F:B2:1F:F4:E4:C5:48:55:72:CF:21:52:63:E3:CA:A6:72:74 Certificate issuer: /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Certificate serial: 0EB5 Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eRoPsh_05MVIVXLPIVJj48qmcnQ.roa Signing time: Fri 22 Aug 2025 08:52:32 +0000 ROA not before: Fri 22 Aug 2025 08:52:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18042 IP address blocks: 115.43.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3765 (0xeb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929 Validity Not Before: Aug 22 08:52:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=791A0FB21FF4E4C5485572CF215263E3CAA67274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:91:3e:ec:14:f7:52:e0:26:e8:c7:13:2e:1e: f4:00:6c:e5:1c:11:a5:57:84:27:ef:cf:aa:a0:ed: 4b:e3:d1:b3:84:03:d1:92:db:4b:6f:d6:d7:40:12: e8:8e:f1:00:90:63:ab:3e:53:51:69:4f:19:76:8c: df:62:52:36:4d:25:b7:69:97:83:b3:ba:d1:5b:54: b2:b3:10:af:26:fa:ad:3c:d2:54:18:d5:dd:95:9c: ac:2c:4b:8d:6e:52:d2:e4:e3:b5:ec:c5:9e:04:0a: 54:b6:57:d8:a4:26:04:7d:43:96:27:73:24:30:7a: a4:27:d4:31:1b:1b:6d:3e:89:19:54:64:81:26:ba: 3e:b0:95:91:28:0a:bb:a8:03:25:ad:d8:d2:66:e9: 64:08:1c:fa:b2:ae:51:fb:7b:9d:ce:66:c8:33:32: bf:53:f1:df:b5:7e:3c:b5:fe:fd:de:99:1b:ad:53: 02:5e:3e:0e:1f:4e:e0:09:0c:5f:22:16:c6:0b:34: 13:b8:ba:75:f4:d3:5c:a4:24:53:c2:59:e2:2c:e3: 76:1a:5a:ca:f1:6b:6a:16:08:3b:66:1c:8d:14:c4: e2:1f:76:40:4e:ee:2c:78:b4:86:fa:4f:b1:37:d3: a8:a7:42:6c:35:1d:80:42:e3:6e:d0:87:c8:5a:af: 31:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1A:0F:B2:1F:F4:E4:C5:48:55:72:CF:21:52:63:E3:CA:A6:72:74 X509v3 Authority Key Identifier: keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/eRoPsh_05MVIVXLPIVJj48qmcnQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 115.43.0.0/17 Signature Algorithm: sha256WithRSAEncryption 6f:7c:eb:5a:43:b9:a5:fa:2a:8d:42:a5:e4:29:58:92:e2:b5: 94:78:86:a9:f3:21:06:ea:05:c0:17:6a:73:74:90:18:d3:f2: 65:47:b8:0e:9b:76:de:ab:b3:ce:37:51:dd:9b:44:7f:f4:00: b5:73:07:47:62:92:56:44:07:b2:98:31:ff:52:ae:0d:fc:90: 62:aa:2a:01:55:58:6f:0d:ea:f6:9f:a9:fb:b6:02:a1:36:82: dd:29:fe:a6:f2:ee:64:e0:af:5b:50:5f:dd:40:50:aa:1e:ee: 7e:41:f1:02:17:a4:a1:be:75:8b:ca:e0:df:63:1c:a7:49:14: 9f:55:a2:b4:81:66:0f:57:18:fc:a2:5f:24:75:88:40:07:57: 03:0a:7c:77:5d:85:f0:de:c6:83:76:6a:c8:31:39:7e:96:1d: 29:b9:3b:29:b9:2f:f0:bf:68:a2:31:a5:80:d1:99:71:aa:dc: d8:34:74:9a:f4:ee:28:b7:cf:21:4b:00:a5:44:e1:09:48:ab: 59:f5:a4:e1:17:46:46:ff:4b:1a:9b:a3:68:e2:7d:d6:be:91: 07:e2:57:3d:1c:73:cc:6c:33:33:87:ed:99:6e:52:0f:88:5c: a6:48:ab:26:28:21:2f:31:62:00:71:35:a4:63:f1:35:f8:cb: 8f:eb:f6:01 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICDrUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTk5 QkJFMTMxREY1RDM0NkYyNzYyN0NDNEY4RkE5RkI1NzU4MTkyOTAeFw0yNTA4MjIw ODUyMzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc5MUEwRkIyMUZGNEU0 QzU0ODU1NzJDRjIxNTI2M0UzQ0FBNjcyNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWkT7sFPdS4CboxxMuHvQAbOUcEaVXhCfvz6qg7Uvj0bOEA9GS 20tv1tdAEuiO8QCQY6s+U1FpTxl2jN9iUjZNJbdpl4OzutFbVLKzEK8m+q080lQY 1d2VnKwsS41uUtLk47XsxZ4EClS2V9ikJgR9Q5YncyQweqQn1DEbG20+iRlUZIEm uj6wlZEoCruoAyWt2NJm6WQIHPqyrlH7e53OZsgzMr9T8d+1fjy1/v3emRutUwJe Pg4fTuAJDF8iFsYLNBO4unX001ykJFPCWeIs43YaWsrxa2oWCDtmHI0UxOIfdkBO 7ix4tIb6T7E306inQmw1HYBC427Qh8harzGXAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUeRoPsh/05MVIVXLPIVJj48qmcnQwHwYDVR0jBBgwFoAUmZu+Ex3100bydifM T4+p+1dYGSkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5H L21adS1FeDMxMDBieWRpZk1UNC1wLTFkWUdTay5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvbVp1LUV4MzEwMGJ5ZGlmTVQ0LXAtMWRZR1NrLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0UtSU5HL2VSb1BzaF8wNU1WSVZYTFBJ VkpqNDhxbWNuUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAdz KwAwDQYJKoZIhvcNAQELBQADggEBAG9861pDuaX6Ko1CpeQpWJLitZR4hqnzIQbq BcAXanN0kBjT8mVHuA6bdt6rs843Ud2bRH/0ALVzB0diklZEB7KYMf9Srg38kGKq KgFVWG8N6vafqfu2AqE2gt0p/qby7mTgr1tQX91AUKoe7n5B8QIXpKG+dYvK4N9j HKdJFJ9VorSBZg9XGPyiXyR1iEAHVwMKfHddhfDexoN2asgxOX6WHSm5Oym5L/C/ aKIxpYDRmXGq3Ng0dJr07ii3zyFLAKVE4QlIq1n1pOEXRkb/Sxqbo2jifda+kQfi Vz0cc8xsMzOH7ZluUg+IXKZIqyYoIS8xYgBxNaRj8TX4y4/r9gE= -----END CERTIFICATE-----Generated at Fri Oct 24 19:27:21 2025 by rpki-client