$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/0qHe-JE4mE2xeOd1cwSAc3DIWEo.roa File: 0qHe-JE4mE2xeOd1cwSAc3DIWEo.roa (raw, json) Hash identifier: 1fPnDTlKbDFn7WQlSE9VEPxgI/9yVONDoqbUC+4V2yo= Subject key identifier: D2:A1:DE:F8:91:38:98:4D:B1:78:E7:75:73:04:80:73:70:C8:58:4A Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1434 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/0qHe-JE4mE2xeOd1cwSAc3DIWEo.roa Signing time: Fri 22 Aug 2025 08:57:39 +0000 ROA not before: Fri 22 Aug 2025 08:57:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 63199 IP address blocks: 203.163.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 13:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5172 (0x1434) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D2A1DEF89138984DB178E7757304807370C8584A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3f:6b:bf:fc:cc:c2:c6:03:b6:42:da:1f:48: 40:9a:a4:21:d8:6c:03:8b:4a:c3:02:f7:9e:b5:ad: 43:a8:3e:aa:40:f8:5f:3e:6a:f5:73:43:a5:f4:cd: ec:45:65:e8:2f:32:d4:26:62:d8:33:db:2c:ec:c4: 60:ba:dd:e0:fb:2e:7a:74:22:47:45:09:57:41:dc: 94:99:67:e4:f3:a1:be:59:51:87:13:4a:89:24:2d: d7:0e:a9:48:fa:17:8a:59:5e:54:68:08:ce:d1:74: f6:a9:c1:db:a7:f4:0b:8a:0f:60:29:bc:a9:b4:38: 69:0d:02:98:6d:06:cb:fd:9d:df:49:9b:e7:08:e4: 29:60:66:f1:a2:86:18:2a:60:48:43:99:b5:d2:1e: 40:33:d1:da:3a:f3:2b:5d:fa:41:d8:11:dd:a4:fb: e3:b9:4e:b9:01:31:0d:0e:d8:5c:4f:c2:5a:9e:7c: 08:10:5a:66:0c:1e:57:29:7d:68:0a:86:10:28:4c: 9d:66:9b:04:49:8c:94:cf:11:5a:17:00:0b:6a:51: 89:1a:41:56:08:9c:86:eb:47:70:a4:1d:13:45:98: 15:74:d5:b8:0a:71:54:26:1e:d0:6b:22:08:11:ad: 30:2f:84:ee:df:42:62:0e:8a:84:9a:14:91:60:57: 4d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A1:DE:F8:91:38:98:4D:B1:78:E7:75:73:04:80:73:70:C8:58:4A X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/0qHe-JE4mE2xeOd1cwSAc3DIWEo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.163.216.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:fc:c3:a3:40:29:3c:2d:67:d5:bf:02:51:e4:22:5b:5c:8a: 6e:e2:67:0c:2d:63:df:fc:04:a7:b2:b5:18:fe:c3:b5:71:64: e0:7b:e3:86:2a:21:0b:a3:89:45:af:d2:fd:7b:3d:ff:ef:1b: 79:a2:32:b0:6c:17:9e:30:b1:0b:63:46:08:e4:4b:ed:85:04: df:35:75:e8:54:07:3e:22:f4:42:0c:1b:39:fa:ff:69:45:ae: 5d:cf:83:be:a8:34:be:fc:6f:96:c3:28:ec:1d:30:8f:05:97: 47:c5:7e:05:ba:8f:e5:77:67:47:35:91:9a:1f:dd:e8:d5:d2: f8:4e:6f:64:64:46:9a:98:99:6d:de:19:cb:c6:21:3e:b8:c5: 24:dc:a7:1c:09:33:28:cf:d2:ef:9b:06:d0:70:7b:06:6b:a3: 30:1d:3d:71:4b:5a:57:f8:a7:29:7a:27:dc:68:27:86:36:da: 09:dc:9b:0c:01:63:cc:70:0e:7d:6f:4f:02:87:e2:04:c0:99: 1c:64:ac:8f:00:e5:c9:5b:60:41:22:b8:2b:80:8a:b2:58:eb: 58:ef:a3:a4:ac:37:95:9f:48:cb:d7:4a:e3:72:8e:67:0f:82: ba:28:6e:26:d1:be:ab:de:af:cd:b0:31:0a:b6:63:b5:73:96: 03:f1:c0:21 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFDQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQyQTFERUY4OTEzODk4 NERCMTc4RTc3NTczMDQ4MDczNzBDODU4NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjP2u//MzCxgO2QtofSECapCHYbAOLSsMC9561rUOoPqpA+F8+ avVzQ6X0zexFZegvMtQmYtgz2yzsxGC63eD7Lnp0IkdFCVdB3JSZZ+Tzob5ZUYcT SokkLdcOqUj6F4pZXlRoCM7RdPapwdun9AuKD2ApvKm0OGkNAphtBsv9nd9Jm+cI 5ClgZvGihhgqYEhDmbXSHkAz0do68ytd+kHYEd2k++O5TrkBMQ0O2FxPwlqefAgQ WmYMHlcpfWgKhhAoTJ1mmwRJjJTPEVoXAAtqUYkaQVYInIbrR3CkHRNFmBV01bgK cVQmHtBrIggRrTAvhO7fQmIOioSaFJFgV03BAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU0qHe+JE4mE2xeOd1cwSAc3DIWEowHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy8wcUhlLUpFNG1FMnhl T2QxY3dTQWMzRElXRW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAy6PYMA0GCSqGSIb3DQEBCwUAA4IBAQBL/MOjQCk8LWfVvwJR5CJbXIpu4mcM LWPf/ASnsrUY/sO1cWTge+OGKiELo4lFr9L9ez3/7xt5ojKwbBeeMLELY0YI5Evt hQTfNXXoVAc+IvRCDBs5+v9pRa5dz4O+qDS+/G+WwyjsHTCPBZdHxX4Fuo/ld2dH NZGaH93o1dL4Tm9kZEaamJlt3hnLxiE+uMUk3KccCTMoz9LvmwbQcHsGa6MwHT1x S1pX+KcpeifcaCeGNtoJ3JsMAWPMcA59b08Ch+IEwJkcZKyPAOXJW2BBIrgrgIqy WOtY76OkrDeVn0jL10rjco5nD4K6KG4m0b6r3q/NsDEKtmO1c5YD8cAh -----END CERTIFICATE-----Generated at Sun Sep 7 12:41:44 2025 by rpki-client