$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHIEF-TW/0/AS131607.roa File: AS131607.roa (raw, json) Hash identifier: qrNu0POq+bNJkxsztrXiCASc0LuADaiidiXjmT1Z2H8= Subject key identifier: 27:D8:66:F6:F2:76:42:17:F7:57:50:60:4C:49:E5:17:D2:4F:98:5D Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Certificate serial: 7F32C7E70BAEE8D750CC525FDE08304DE3BE5C8C Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS131607.roa Signing time: Fri 02 Oct 2026 06:44:00 +0000 ROA not before: Fri 02 Oct 2026 06:39:00 +0000 ROA not after: Fri 01 Oct 2027 06:44:00 +0000 asID: 131607 IP address blocks: 150.117.56.0/21 maxlen: 24 150.117.64.0/20 maxlen: 24 150.117.80.0/20 maxlen: 24 150.117.96.0/20 maxlen: 24 150.117.168.0/21 maxlen: 24 150.117.176.0/20 maxlen: 24 150.117.192.0/19 maxlen: 24 150.117.192.0/20 maxlen: 24 150.117.208.0/20 maxlen: 24 150.117.224.0/21 maxlen: 24 203.163.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 10:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:32:c7:e7:0b:ae:e8:d7:50:cc:52:5f:de:08:30:4d:e3:be:5c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Validity Not Before: Oct 2 06:39:00 2026 GMT Not After : Oct 1 06:44:00 2027 GMT Subject: CN=27D866F6F2764217F75750604C49E517D24F985D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:0b:e1:7b:29:55:0d:66:9f:ac:cc:91:d0: cc:15:e2:7f:fb:1a:02:60:42:53:68:d4:ba:68:5c: 95:d0:6b:95:f0:ad:ef:e1:52:91:0a:74:3d:06:04: 0d:48:8c:57:d8:38:5c:63:aa:51:63:b9:25:7d:68: a4:55:f0:8e:5b:e2:c4:ec:6b:85:e9:2e:a5:4b:28: e4:f7:ff:69:ed:3e:3b:19:ca:2c:df:2d:4c:5e:e3: 0c:98:1e:3b:81:02:6a:d5:cc:ab:77:1b:85:e1:65: 99:3c:aa:f8:f3:81:1b:f4:33:c6:c5:75:99:1b:02: 49:f6:51:26:d3:ac:42:79:30:44:a4:cf:3f:1e:5d: 55:84:24:90:40:dc:1b:04:62:1c:86:63:b8:18:bc: 61:a3:e1:0a:1e:ca:59:a3:f3:58:a8:f2:db:db:97: fd:3b:6c:38:5d:5f:9d:f9:1d:12:98:36:e4:2d:12: 20:c2:c5:cc:2c:35:f9:d6:97:66:c4:29:39:42:da: 9b:91:dc:c8:84:6e:7a:1c:28:c3:21:5b:e2:52:19: 60:57:74:31:d5:24:10:52:0a:d7:08:36:0f:07:fa: 1e:3d:5a:bc:83:b9:59:23:96:6f:a8:4a:69:d0:5e: e7:c6:40:1c:d1:2e:67:23:b1:8c:04:54:e5:54:7d: fe:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D8:66:F6:F2:76:42:17:F7:57:50:60:4C:49:E5:17:D2:4F:98:5D X509v3 Authority Key Identifier: keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS131607.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.117.56.0-150.117.111.255 150.117.168.0-150.117.231.255 203.163.193.0/24 Signature Algorithm: sha256WithRSAEncryption 88:2b:33:03:f9:db:98:d0:cc:ab:2f:87:52:0f:cf:10:2b:85: e0:e2:39:96:3d:5c:e5:32:66:f0:a1:c8:55:5c:f8:24:1a:4a: 19:9a:f6:07:20:e3:79:3e:a5:9d:b3:07:89:f1:d6:ed:47:e7: 09:c6:6b:0e:47:4d:41:6c:97:43:fe:08:cb:85:27:a1:fb:0f: 68:86:90:c9:8c:19:1b:8d:ba:0c:64:b5:23:32:0b:64:47:7c: 17:12:54:f2:8f:f1:82:73:65:cb:8b:78:db:7d:ec:4a:15:21: e8:8d:e5:f2:9f:b7:64:8c:cb:b3:99:d8:d8:1c:18:49:54:6a: 02:9d:09:e5:f4:9e:42:5c:4b:5c:76:f3:53:8e:5e:86:4e:10: 8c:9c:2e:60:b9:61:b3:74:e6:01:e8:4f:56:24:a5:7d:17:ab: 88:86:e1:b0:38:35:91:96:cd:97:ab:78:8c:44:92:a8:69:fc: a2:ee:ad:58:de:aa:f0:6a:21:3a:e4:4c:f7:3d:7a:5c:66:e1: b1:3d:76:27:5f:cd:eb:d2:8b:3c:e4:1d:9e:f6:c4:17:79:b8: 65:68:4a:6f:90:5c:59:bb:7d:cd:ec:d5:c1:61:d3:db:21:65: 6f:29:6a:be:ef:a8:33:0c:f4:75:05:e6:e1:e1:b1:43:8e:7e: fb:4c:93:5c -----BEGIN CERTIFICATE----- MIIEyzCCA7OgAwIBAgIUfzLH5wuu6NdQzFJf3ggwTeO+XIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz RDFGMDMxNDAeFw0yNjEwMDIwNjM5MDBaFw0yNzEwMDEwNjQ0MDBaMDMxMTAvBgNV BAMTKDI3RDg2NkY2RjI3NjQyMTdGNzU3NTA2MDRDNDlFNTE3RDI0Rjk4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CAvheylVDWafrMyR0MwV4n/7 GgJgQlNo1LpoXJXQa5Xwre/hUpEKdD0GBA1IjFfYOFxjqlFjuSV9aKRV8I5b4sTs a4XpLqVLKOT3/2ntPjsZyizfLUxe4wyYHjuBAmrVzKt3G4XhZZk8qvjzgRv0M8bF dZkbAkn2USbTrEJ5MESkzz8eXVWEJJBA3BsEYhyGY7gYvGGj4Qoeylmj81io8tvb l/07bDhdX535HRKYNuQtEiDCxcwsNfnWl2bEKTlC2puR3MiEbnocKMMhW+JSGWBX dDHVJBBSCtcINg8H+h49WryDuVkjlm+oSmnQXufGQBzRLmcjsYwEVOVUff6/AgMB AAGjggHVMIIB0TAdBgNVHQ4EFgQUJ9hm9vJ2Qhf3V1BgTEnlF9JPmF0wHwYDVR0j BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx QzZENzM1M0QxRjAzMTQuY2VyMFAGCCsGAQUFBwELBEQwQjBABggrBgEFBQcwC4Y0 cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wL0FTMTMxNjA3 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCww KjAoBAIAATAiMAwDBAOWdTgDBASWdWAwDAMEA5Z1qAMEA5Z14AMEAMujwTANBgkq hkiG9w0BAQsFAAOCAQEAiCszA/nbmNDMqy+HUg/PECuF4OI5lj1c5TJm8KHIVVz4 JBpKGZr2ByDjeT6lnbMHifHW7UfnCcZrDkdNQWyXQ/4Iy4UnofsPaIaQyYwZG426 DGS1IzILZEd8FxJU8o/xgnNly4t4233sShUh6I3l8p+3ZIzLs5nY2BwYSVRqAp0J 5fSeQlxLXHbzU45ehk4QjJwuYLlhs3TmAehPViSlfReriIbhsDg1kZbNl6t4jESS qGn8ou6tWN6q8GohOuRM9z16XGbhsT12J1/N69KLPOQdnvbEF3m4ZWhKb5BcWbt9 zezVwWHT2yFlbylqvu+oMwz0dQXm4eGxQ45++0yTXA== -----END CERTIFICATE-----Generated at Fri Oct 2 14:52:54 2026 by rpki-client