$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/AS137263.roa File: AS137263.roa (raw, json) Hash identifier: aWDUIanQ1UTRiTJZIsgedPN0+uNT0/Vn7AOQa9to8VA= Subject key identifier: BF:D4:8C:DD:D2:5F:FE:2A:48:59:C7:A5:F6:FB:49:C4:43:16:50:DF Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Certificate serial: 6B56905F4A132E4EF222C08423184AFD5EB8FEF5 Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS137263.roa Signing time: Mon 11 May 2026 17:27:33 +0000 ROA not before: Mon 11 May 2026 17:22:33 +0000 ROA not after: Mon 10 May 2027 17:27:33 +0000 asID: 137263 IP address blocks: 113.21.92.0/24 maxlen: 24 150.116.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:56:90:5f:4a:13:2e:4e:f2:22:c0:84:23:18:4a:fd:5e:b8:fe:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Validity Not Before: May 11 17:22:33 2026 GMT Not After : May 10 17:27:33 2027 GMT Subject: CN=BFD48CDDD25FFE2A4859C7A5F6FB49C4431650DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:3f:4e:c4:48:64:43:e2:2b:3d:20:85:37: 6f:56:31:be:a1:43:b3:11:08:26:28:a5:e6:6f:98: 51:3a:48:51:2d:66:4b:65:3f:98:d3:94:cc:91:58: 84:32:8d:e1:16:a5:16:b8:e0:46:83:c7:66:6f:fa: 17:e5:3b:81:8c:ac:39:64:d8:1d:ca:3c:70:8d:6a: 5d:6d:de:b2:d1:93:90:e4:a3:18:81:91:ba:58:e7: 82:5d:a4:64:e3:36:f7:ad:84:50:75:4e:1d:39:67: 60:d7:63:b7:73:d6:bf:33:58:23:14:fd:3a:ca:c7: b5:e1:40:ec:b8:0c:51:d2:17:eb:49:eb:da:6c:c7: 80:75:0b:21:96:a5:69:a3:2c:a4:55:5e:82:2d:d0: 89:bc:b7:bd:16:3f:b6:4a:df:a9:92:b7:ac:7f:5b: 24:bd:4e:8d:6a:20:e8:b8:e6:d7:8c:96:b2:7a:07: 2d:94:81:61:1e:d2:01:87:5c:c6:4d:38:1c:f6:f4: f9:2a:19:7a:35:94:aa:0c:86:e5:44:ab:25:4d:2a: 32:1b:45:59:19:dc:06:2b:92:43:5f:e7:f4:f2:9d: 53:7e:a1:24:58:a3:13:28:d3:68:3e:d3:54:c5:d6: 76:9b:21:0b:30:f3:b6:3f:a9:a4:27:9f:df:61:40: 23:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D4:8C:DD:D2:5F:FE:2A:48:59:C7:A5:F6:FB:49:C4:43:16:50:DF X509v3 Authority Key Identifier: keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS137263.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.21.92.0/24 150.116.81.0/24 Signature Algorithm: sha256WithRSAEncryption c3:27:1e:7f:16:41:cf:93:eb:eb:1e:db:21:2b:3a:58:37:4d: ef:65:63:09:0d:fd:da:90:e0:22:86:55:25:11:aa:bd:c5:a0: ab:02:08:26:f6:91:21:06:d1:33:85:b0:ef:65:30:85:8f:1a: d6:05:94:d0:98:ed:68:cf:c7:fa:14:62:81:ce:ac:53:9c:b5: 3f:e6:c7:a0:3c:ed:d8:2a:55:22:90:fd:bb:ae:e1:fd:3a:88: ed:8e:0c:c8:c6:78:35:b1:9c:a4:88:9d:26:72:69:6f:d9:39: c3:0f:ad:cd:e2:5c:ee:44:a8:7c:bc:ec:c9:86:6a:b9:a5:13: f9:38:a8:47:c5:69:44:02:70:de:22:c7:95:44:b5:a2:11:47: 72:c0:a1:0e:c4:62:85:96:4d:f7:5a:73:83:86:8d:e3:c4:2a: 6a:d5:2e:1e:0e:4c:c1:35:71:54:ba:f2:06:11:8a:fa:ce:d5: d3:4c:ba:0a:6d:68:03:6b:79:af:05:19:77:ce:33:90:4c:6a: dc:82:d9:ed:e0:76:44:b6:b3:c6:08:fd:37:71:48:1f:82:d4: a5:74:c4:85:f3:66:4e:65:4f:dc:9c:8c:ad:c6:06:56:f1:9d: c3:bb:36:ca:91:ce:de:9a:47:46:00:2e:7c:52:ff:6c:55:99: 0a:2d:d3:3d -----BEGIN CERTIFICATE----- MIIEtTCCA52gAwIBAgIUa1aQX0oTLk7yIsCEIxhK/V64/vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz RDFGMDMxNDAeFw0yNjA1MTExNzIyMzNaFw0yNzA1MTAxNzI3MzNaMDMxMTAvBgNV BAMTKEJGRDQ4Q0RERDI1RkZFMkE0ODU5QzdBNUY2RkI0OUM0NDMxNjUwREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIpz9OxEhkQ+IrPSCFN29WMb6h Q7MRCCYopeZvmFE6SFEtZktlP5jTlMyRWIQyjeEWpRa44EaDx2Zv+hflO4GMrDlk 2B3KPHCNal1t3rLRk5DkoxiBkbpY54JdpGTjNvethFB1Th05Z2DXY7dz1r8zWCMU /TrKx7XhQOy4DFHSF+tJ69psx4B1CyGWpWmjLKRVXoIt0Im8t70WP7ZK36mSt6x/ WyS9To1qIOi45teMlrJ6By2UgWEe0gGHXMZNOBz29PkqGXo1lKoMhuVEqyVNKjIb RVkZ3AYrkkNf5/TynVN+oSRYoxMo02g+01TF1nabIQsw87Y/qaQnn99hQCP7AgMB AAGjggG/MIIBuzAdBgNVHQ4EFgQUv9SM3dJf/ipIWcel9vtJxEMWUN8wHwYDVR0j BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx QzZENzM1M0QxRjAzMTQuY2VyMFAGCCsGAQUFBwELBEQwQjBABggrBgEFBQcwC4Y0 cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wL0FTMTM3MjYz LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYw FDASBAIAATAMAwQAcRVcAwQAlnRRMA0GCSqGSIb3DQEBCwUAA4IBAQDDJx5/FkHP k+vrHtshKzpYN03vZWMJDf3akOAihlUlEaq9xaCrAggm9pEhBtEzhbDvZTCFjxrW BZTQmO1oz8f6FGKBzqxTnLU/5segPO3YKlUikP27ruH9OojtjgzIxng1sZykiJ0m cmlv2TnDD63N4lzuRKh8vOzJhmq5pRP5OKhHxWlEAnDeIseVRLWiEUdywKEOxGKF lk33WnODho3jxCpq1S4eDkzBNXFUuvIGEYr6ztXTTLoKbWgDa3mvBRl3zjOQTGrc gtnt4HZEtrPGCP03cUgfgtSldMSF82ZOZU/cnIytxgZW8Z3DuzbKkc7emkdGAC58 Uv9sVZkKLdM9 -----END CERTIFICATE-----Generated at Wed May 13 21:51:27 2026 by rpki-client