$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/AS131273.roa File: AS131273.roa (raw, json) Hash identifier: 7DQdSW74ZlUm8cX5Tb5xd4EbJNzHTY4LBV+VnF78EEw= Subject key identifier: A5:6D:01:77:9C:5F:D9:CD:04:55:8F:5D:9F:0E:E1:E0:6F:30:B3:AE Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Certificate serial: 34138DE25EF754EC3D633EDF6332270BD353A904 Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS131273.roa Signing time: Mon 11 May 2026 17:17:32 +0000 ROA not before: Mon 11 May 2026 17:12:32 +0000 ROA not after: Mon 10 May 2027 17:17:32 +0000 asID: 131273 IP address blocks: 150.116.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:13:8d:e2:5e:f7:54:ec:3d:63:3e:df:63:32:27:0b:d3:53:a9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Validity Not Before: May 11 17:12:32 2026 GMT Not After : May 10 17:17:32 2027 GMT Subject: CN=A56D01779C5FD9CD04558F5D9F0EE1E06F30B3AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7e:67:e9:ac:c4:cc:2b:79:5a:13:ab:89:35: 68:df:19:27:50:a6:94:cf:66:5c:e1:a2:2f:d3:d7: 79:9c:ba:09:06:2a:91:8e:5a:ee:43:c3:eb:4f:6b: 60:0d:a7:f7:49:f7:81:78:90:24:6c:c2:91:97:00: 22:ca:26:cb:7c:a6:ab:0d:72:39:e2:99:c7:dd:00: e7:6a:d1:d7:de:e8:12:8b:63:d0:6e:8d:79:e4:dc: 07:24:25:fb:16:7e:f9:34:51:8a:fa:71:e7:c0:4c: 88:12:51:37:34:0c:a3:ea:fa:3f:2f:9a:1a:c0:df: 0b:4d:ef:0b:8b:d4:6b:72:b0:ef:c7:04:e6:80:15: 60:ed:df:cd:b1:f2:08:fb:95:e0:d4:3c:fb:1f:d8: 6a:7c:8d:04:76:fc:9b:7e:29:6c:35:a8:aa:d1:b1: ed:db:cf:ce:a9:de:0f:d2:82:da:8a:4d:08:d1:3b: 40:4b:99:02:0b:2e:e0:79:a6:03:ec:4e:e7:a0:75: f8:0f:c2:25:cd:05:65:8b:fa:71:19:a4:64:e5:94: 6c:4f:6d:a9:6e:f7:b0:7b:41:97:29:b5:f1:1c:86: ee:2c:26:51:15:e6:46:16:26:f1:b3:80:b5:70:a4: 35:1c:c3:a6:cb:8c:cb:9b:4e:4e:50:15:ce:43:88: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6D:01:77:9C:5F:D9:CD:04:55:8F:5D:9F:0E:E1:E0:6F:30:B3:AE X509v3 Authority Key Identifier: keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS131273.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.116.80.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:38:1c:52:29:83:ff:40:44:b1:7c:84:f9:79:17:d6:3e:cc: eb:e8:50:c1:94:30:72:3e:3e:b3:74:0a:2e:fa:bf:ed:bb:85: 08:6b:bd:25:1a:ba:3b:cb:0f:57:52:0c:a6:75:97:9c:f4:cc: e2:2a:cb:47:45:d0:af:ab:2a:90:a3:29:6b:a9:ba:a0:a1:81: fc:21:57:ec:4c:1d:65:a7:b0:e4:12:44:43:42:e2:5a:25:2b: 12:b8:f9:bd:f2:4c:ce:bf:1f:bc:ed:b7:c8:d5:06:89:da:c2: 69:fb:33:45:f2:1a:99:5b:91:7c:c6:f0:fa:6e:a8:f8:7d:25: 3f:e5:cb:36:0f:17:24:56:02:06:f0:70:e2:6f:93:72:93:91: f4:b7:7e:6e:b3:63:b5:24:99:c2:1d:7e:b2:d1:62:d1:4a:34: b4:d4:ef:fa:24:63:32:b0:b0:ea:b2:d1:af:52:16:cc:f4:38: b5:a7:ee:13:47:67:9a:40:c4:d9:1f:82:eb:05:55:2d:83:ae: d5:55:88:c3:17:f6:a3:2a:89:2b:e8:47:63:fe:f9:fa:d2:34: 1e:12:0f:ff:c0:48:79:d5:52:24:f2:82:3d:1c:ff:3a:7d:bb: 1e:ee:47:36:c4:10:b5:2d:3f:e5:62:b5:04:97:fd:9e:1f:54: fc:35:bf:fa -----BEGIN CERTIFICATE----- MIIErzCCA5egAwIBAgIUNBON4l73VOw9Yz7fYzInC9NTqQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz RDFGMDMxNDAeFw0yNjA1MTExNzEyMzJaFw0yNzA1MTAxNzE3MzJaMDMxMTAvBgNV BAMTKEE1NkQwMTc3OUM1RkQ5Q0QwNDU1OEY1RDlGMEVFMUUwNkYzMEIzQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZfmfprMTMK3laE6uJNWjfGSdQ ppTPZlzhoi/T13mcugkGKpGOWu5Dw+tPa2ANp/dJ94F4kCRswpGXACLKJst8pqsN cjnimcfdAOdq0dfe6BKLY9BujXnk3AckJfsWfvk0UYr6cefATIgSUTc0DKPq+j8v mhrA3wtN7wuL1GtysO/HBOaAFWDt382x8gj7leDUPPsf2Gp8jQR2/Jt+KWw1qKrR se3bz86p3g/SgtqKTQjRO0BLmQILLuB5pgPsTuegdfgPwiXNBWWL+nEZpGTllGxP balu97B7QZcptfEchu4sJlEV5kYWJvGzgLVwpDUcw6bLjMubTk5QFc5DiFwpAgMB AAGjggG5MIIBtTAdBgNVHQ4EFgQUpW0Bd5xf2c0EVY9dnw7h4G8ws64wHwYDVR0j BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx QzZENzM1M0QxRjAzMTQuY2VyMFAGCCsGAQUFBwELBEQwQjBABggrBgEFBQcwC4Y0 cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wL0FTMTMxMjcz LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQAlnRQMA0GCSqGSIb3DQEBCwUAA4IBAQCeOBxSKYP/QESxfIT5 eRfWPszr6FDBlDByPj6zdAou+r/tu4UIa70lGro7yw9XUgymdZec9MziKstHRdCv qyqQoylrqbqgoYH8IVfsTB1lp7DkEkRDQuJaJSsSuPm98kzOvx+87bfI1QaJ2sJp +zNF8hqZW5F8xvD6bqj4fSU/5cs2DxckVgIG8HDib5Nyk5H0t35us2O1JJnCHX6y 0WLRSjS01O/6JGMysLDqstGvUhbM9Di1p+4TR2eaQMTZH4LrBVUtg67VVYjDF/aj Kokr6Edj/vn60jQeEg//wEh51VIk8oI9HP86fbse7kc2xBC1LT/lYrUEl/2eH1T8 Nb/6 -----END CERTIFICATE-----Generated at Wed May 13 21:51:23 2026 by rpki-client