$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/0JKRPVXkaWEqIEWp_aVJn9pTYx4.roa File: 0JKRPVXkaWEqIEWp_aVJn9pTYx4.roa (raw, json) Hash identifier: A9inhJYDkfDlnF+U6wZhu7m8+9NiUudsV8YhM/blXWE= Subject key identifier: D0:92:91:3D:55:E4:69:61:2A:20:45:A9:FD:A5:49:9F:DA:53:63:1E Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13CB Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/0JKRPVXkaWEqIEWp_aVJn9pTYx4.roa Signing time: Fri 22 Aug 2025 08:57:17 +0000 ROA not before: Fri 22 Aug 2025 08:57:17 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 10085 IP address blocks: 203.163.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 18:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5067 (0x13cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:17 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D092913D55E469612A2045A9FDA5499FDA53631E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:86:f1:f3:49:cd:6b:e2:a9:6d:12:5f:bc: 01:79:8b:d6:6a:48:41:d4:eb:d1:52:90:0d:a1:af: 14:d1:4c:8c:6a:5b:23:8a:de:e3:ba:4f:a5:10:b7: e7:50:b3:41:9d:af:46:fa:6f:df:6b:64:e7:8e:e3: 9f:d8:3c:66:03:97:b7:f2:6b:e5:51:86:8b:96:03: dc:77:25:48:ec:9b:60:d9:a5:ce:74:19:36:ec:c8: a0:9c:71:e1:a1:c1:c2:9e:fb:75:52:f4:ae:b4:bd: cb:06:3e:e7:4e:33:f6:ad:ff:6a:e2:71:6f:63:0f: 18:b2:21:19:2b:7a:21:65:11:50:67:51:7f:d3:ad: 0c:ad:78:7f:95:b9:e0:88:09:aa:a9:74:06:c2:c9: c2:e5:1b:3d:8d:8e:2d:a2:31:6c:05:ff:7a:7c:06: 39:7a:3b:a3:09:0b:8a:2b:de:93:e0:59:3b:be:4e: b7:61:24:00:86:5f:88:bb:67:78:cf:18:7a:5e:01: ad:8f:65:53:c7:bd:7f:9d:52:6c:40:2e:2c:87:d0: b7:e4:06:06:4e:8b:41:a2:ee:0f:4d:ba:0f:46:8e: 13:8f:56:00:10:f2:1c:cd:46:5f:40:40:a7:74:cb: b0:35:65:99:13:50:3c:12:73:f5:80:bd:68:63:f6: a8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:92:91:3D:55:E4:69:61:2A:20:45:A9:FD:A5:49:9F:DA:53:63:1E X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/0JKRPVXkaWEqIEWp_aVJn9pTYx4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.163.204.0/22 Signature Algorithm: sha256WithRSAEncryption 27:fc:a3:86:f2:b9:78:41:25:e1:90:8a:d1:d3:33:13:d6:72: e1:5f:f4:d8:0f:0b:b7:80:5c:e3:a9:f9:cf:d5:53:76:be:a3: ce:2b:44:bf:dd:de:9c:cd:8c:e2:e3:38:18:d0:f7:a8:61:e5: ec:bd:b0:da:58:a3:2d:74:bb:6c:2f:bb:9b:1c:69:b6:e4:b5: 8a:c0:62:00:6e:d8:7e:38:02:2d:93:ab:93:bb:2b:7b:8c:41: 57:96:f6:fa:41:c5:41:1c:f5:b6:d2:87:fa:63:95:b9:81:76: 82:ca:b6:f0:47:80:c4:1a:0e:d5:61:7f:a0:1b:e9:9a:64:57: 41:8a:76:bd:11:e5:d1:fc:b7:44:35:46:3d:5e:83:d6:60:ad: fe:f6:0c:c0:80:f5:21:7c:85:96:a7:da:c6:09:d1:09:e2:a9: b5:f3:45:1e:1d:ac:d5:d1:53:1e:8c:13:22:70:98:cd:94:67: 24:35:95:ad:ba:bb:f1:ba:10:64:83:03:24:ae:3d:38:f6:ef: 64:75:4e:ed:4f:b0:5e:1f:e6:a5:2b:ac:28:a6:6f:78:8a:16: c6:8d:6c:a3:4c:cb:97:1a:e4:f9:4a:bd:51:ca:ad:97:12:c5: b7:c2:8d:3a:c4:64:bf:3d:52:12:7e:69:b1:d9:96:3b:b1:d4: 04:1c:75:73 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQwOTI5MTNENTVFNDY5 NjEyQTIwNDVBOUZEQTU0OTlGREE1MzYzMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBzobx80nNa+KpbRJfvAF5i9ZqSEHU69FSkA2hrxTRTIxqWyOK 3uO6T6UQt+dQs0Gdr0b6b99rZOeO45/YPGYDl7fya+VRhouWA9x3JUjsm2DZpc50 GTbsyKCcceGhwcKe+3VS9K60vcsGPudOM/at/2ricW9jDxiyIRkreiFlEVBnUX/T rQyteH+VueCICaqpdAbCycLlGz2Nji2iMWwF/3p8Bjl6O6MJC4or3pPgWTu+Trdh JACGX4i7Z3jPGHpeAa2PZVPHvX+dUmxALiyH0LfkBgZOi0Gi7g9Nug9GjhOPVgAQ 8hzNRl9AQKd0y7A1ZZkTUDwSc/WAvWhj9qiNAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU0JKRPVXkaWEqIEWp/aVJn9pTYx4wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy8wSktSUFZYa2FXRXFJ RVdwX2FWSm45cFRZeDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCy6PMMA0GCSqGSIb3DQEBCwUAA4IBAQAn/KOG8rl4QSXhkIrR0zMT1nLhX/TY Dwu3gFzjqfnP1VN2vqPOK0S/3d6czYzi4zgY0PeoYeXsvbDaWKMtdLtsL7ubHGm2 5LWKwGIAbth+OAItk6uTuyt7jEFXlvb6QcVBHPW20of6Y5W5gXaCyrbwR4DEGg7V YX+gG+maZFdBina9EeXR/LdENUY9XoPWYK3+9gzAgPUhfIWWp9rGCdEJ4qm180Ue HazV0VMejBMicJjNlGckNZWturvxuhBkgwMkrj049u9kdU7tT7BeH+alK6wopm94 ihbGjWyjTMuXGuT5Sr1Ryq2XEsW3wo06xGS/PVISfmmx2ZY7sdQEHHVz -----END CERTIFICATE-----Generated at Sun Sep 7 16:22:42 2025 by rpki-client