$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/KeEv1a3cK6Uy8x3vvtD6JuVyx0s.roa File: KeEv1a3cK6Uy8x3vvtD6JuVyx0s.roa (raw, json) Hash identifier: HDAP0p1s+g/rBYIuRwxgRd52AcMdANrslW48+uC6UtA= Subject key identifier: 29:E1:2F:D5:AD:DC:2B:A5:32:F3:1D:EF:BE:D0:FA:26:E5:72:C7:4B Certificate issuer: /CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718 Certificate serial: 017B Authority key identifier: EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/KeEv1a3cK6Uy8x3vvtD6JuVyx0s.roa Signing time: Fri 22 Aug 2025 08:57:03 +0000 ROA not before: Fri 22 Aug 2025 08:57:03 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 32595 IP address blocks: 160.30.98.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 13:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE1941C37BD1E2CF12512F98AB366C29DA79B718 Validity Not Before: Aug 22 08:57:03 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=29E12FD5ADDC2BA532F31DEFBED0FA26E572C74B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:88:68:25:02:4f:97:44:10:30:90:7a:d3: f1:ea:94:77:4c:be:97:14:5f:0f:e9:cf:08:1c:55: 43:5b:5d:cf:fd:f6:f8:ed:47:dd:ef:8c:3f:84:c5: 0c:7b:1c:91:e6:a9:a0:61:ee:44:5e:6f:48:52:6f: 4d:d6:1e:90:e9:60:be:2b:83:80:ee:f7:5b:6b:f9: b6:25:0f:e8:1f:72:d8:1d:56:1c:7b:60:70:ce:01: aa:1a:a1:5e:c8:66:9c:81:ac:a4:23:ad:9a:85:79: df:1a:f6:fa:68:45:81:ac:ba:c7:a7:fb:92:4d:7f: f8:56:71:32:a4:2d:65:81:d5:c5:47:f3:81:a0:b8: 32:6a:27:01:a3:0b:4f:1a:ac:da:61:cc:37:b6:a4: 23:97:af:46:19:b4:84:42:1d:61:88:75:66:01:57: 97:fa:8f:1f:bc:c1:f8:84:ae:8c:26:8b:28:14:e5: 0c:0b:fd:3d:99:c9:40:3f:55:fc:c4:a9:a7:b0:de: fc:7d:67:d1:b0:23:6d:75:9d:84:6c:96:0b:89:c0: d6:5d:f0:53:d7:9c:57:94:bd:37:a6:ce:f0:9c:00: 90:f8:c3:b0:6f:a2:ea:22:95:5e:3e:e8:f0:92:20: 24:e4:d6:a7:54:c5:91:bb:71:d6:5b:4e:08:00:64: 02:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E1:2F:D5:AD:DC:2B:A5:32:F3:1D:EF:BE:D0:FA:26:E5:72:C7:4B X509v3 Authority Key Identifier: keyid:EE:19:41:C3:7B:D1:E2:CF:12:51:2F:98:AB:36:6C:29:DA:79:B7:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/7hlBw3vR4s8SUS-YqzZsKdp5txg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7hlBw3vR4s8SUS-YqzZsKdp5txg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIMPLE/KeEv1a3cK6Uy8x3vvtD6JuVyx0s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 160.30.98.0/23 Signature Algorithm: sha256WithRSAEncryption 82:bc:0e:b6:ca:9a:dc:13:9e:31:4a:23:c1:ba:cd:74:5e:91: 6d:32:49:fc:12:cf:39:4e:79:80:76:e0:18:1a:04:b6:e3:08: 28:b8:50:56:90:69:5e:be:41:61:03:b2:66:e5:79:fd:7b:96: 7d:15:54:88:52:4c:57:23:cf:00:17:1a:7e:39:68:5b:0d:fa: a1:fc:d4:f8:f3:f4:31:fa:2d:c6:32:5c:76:73:20:8e:e3:cc: 73:31:40:e9:ae:45:a2:97:82:ad:f7:b3:4f:45:bf:e8:49:7e: 8d:ed:4b:10:3a:b9:92:bd:62:39:9b:83:f1:84:53:17:2b:98: dd:8f:0e:d8:67:e1:35:68:05:94:e3:26:6b:7d:f7:bb:7f:22: 87:08:07:36:60:64:76:39:c4:04:b0:e1:ed:40:60:59:33:bf: d4:c9:52:73:cc:b5:db:73:7f:19:2e:aa:51:d8:b8:85:79:d4: 2a:31:05:6d:44:a0:4f:e4:f2:72:f9:78:f0:0d:ba:d1:a6:93: 5f:e8:20:44:51:20:e1:2a:7f:0a:25:e3:8a:8c:b0:31:55:a6: 19:5c:00:8c:f4:f2:a4:5b:38:aa:2d:9e:a3:3d:76:d5:2f:6c: fd:6b:bf:35:de:6e:87:48:bd:38:f1:7b:77:5e:3c:13:89:b4: 4c:b4:1d:e7 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICAXswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUUx OTQxQzM3QkQxRTJDRjEyNTEyRjk4QUIzNjZDMjlEQTc5QjcxODAeFw0yNTA4MjIw ODU3MDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI5RTEyRkQ1QUREQzJC QTUzMkYzMURFRkJFRDBGQTI2RTU3MkM3NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCl0YhoJQJPl0QQMJB60/HqlHdMvpcUXw/pzwgcVUNbXc/99vjt R93vjD+ExQx7HJHmqaBh7kReb0hSb03WHpDpYL4rg4Du91tr+bYlD+gfctgdVhx7 YHDOAaoaoV7IZpyBrKQjrZqFed8a9vpoRYGsusen+5JNf/hWcTKkLWWB1cVH84Gg uDJqJwGjC08arNphzDe2pCOXr0YZtIRCHWGIdWYBV5f6jx+8wfiErowmiygU5QwL /T2ZyUA/VfzEqaew3vx9Z9GwI211nYRslguJwNZd8FPXnFeUvTemzvCcAJD4w7Bv ouoilV4+6PCSICTk1qdUxZG7cdZbTggAZAI3AgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUKeEv1a3cK6Uy8x3vvtD6JuVyx0swHwYDVR0jBBgwFoAU7hlBw3vR4s8SUS+Y qzZsKdp5txgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lNUExF LzdobEJ3M3ZSNHM4U1VTLVlxelpzS2RwNXR4Zy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvN2hsQnczdlI0czhTVVMtWXF6WnNLZHA1dHhnLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0lNUExFL0tlRXYxYTNjSzZVeTh4M3Z2 dEQ2SnVWeXgwcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGg HmIwDQYJKoZIhvcNAQELBQADggEBAIK8DrbKmtwTnjFKI8G6zXRekW0ySfwSzzlO eYB24BgaBLbjCCi4UFaQaV6+QWEDsmblef17ln0VVIhSTFcjzwAXGn45aFsN+qH8 1Pjz9DH6LcYyXHZzII7jzHMxQOmuRaKXgq33s09Fv+hJfo3tSxA6uZK9Yjmbg/GE UxcrmN2PDthn4TVoBZTjJmt997t/IocIBzZgZHY5xASw4e1AYFkzv9TJUnPMtdtz fxkuqlHYuIV51CoxBW1EoE/k8nL5ePANutGmk1/oIERRIOEqfwol44qMsDFVphlc AIz08qRbOKotnqM9dtUvbP1rvzXebodIvTjxe3dePBOJtEy0Hec= -----END CERTIFICATE-----Generated at Sat Oct 25 12:40:42 2025 by rpki-client