$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/636siyTF42530cYxfgeOIzVyg1g.roa File: 636siyTF42530cYxfgeOIzVyg1g.roa (raw, json) Hash identifier: h+QxaXqrqG9weAzHOKIgTuda+3StRcjN7U2vZsUrQ9w= Subject key identifier: EB:7E:AC:8B:24:C5:E3:6E:77:D1:C6:31:7E:07:8E:23:35:72:83:58 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1412 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/636siyTF42530cYxfgeOIzVyg1g.roa Signing time: Fri 22 Aug 2025 08:57:32 +0000 ROA not before: Fri 22 Aug 2025 08:57:32 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18419 IP address blocks: 118.150.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5138 (0x1412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:32 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=EB7EAC8B24C5E36E77D1C6317E078E2335728358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:91:f3:8b:a2:72:1d:94:37:74:95:86:41:ee: 83:75:c3:16:e1:ca:65:1c:f2:e3:9d:98:41:65:7e: 1b:d0:ea:71:46:88:54:d3:f6:06:5a:e4:2f:e5:21: c6:52:d6:ab:72:68:45:6d:0c:19:87:bc:de:47:74: 7a:11:43:33:77:3d:b3:ed:cb:be:61:0e:26:16:65: 3b:0e:7c:b7:1f:b7:ad:3d:dc:c4:e9:1e:0c:b9:cf: 8c:77:67:2c:6d:f6:fe:5f:e1:da:d7:96:60:74:1f: 21:32:07:f4:fe:26:c4:36:f7:58:17:0a:0c:08:7d: 57:97:2e:13:be:9d:d9:d2:85:29:d6:96:82:30:28: 57:e7:31:99:81:a3:9e:fd:0b:84:af:df:cd:74:8b: ee:c5:98:3b:1e:a4:64:b0:d6:92:3f:c1:14:e3:0d: 22:73:37:7b:52:34:28:ed:82:6e:a3:c4:60:e2:86: 8d:cb:fb:47:bc:e8:b9:8d:6b:d0:90:32:90:e3:1d: 93:89:e0:6f:f4:3b:f0:a0:0b:7c:3b:0f:c2:f0:33: 74:c3:94:ae:c6:ae:64:7f:f8:ae:ad:21:1c:bf:cf: 02:6c:0b:93:92:ba:7d:af:da:8d:09:26:ea:01:95: 42:b5:7c:4b:e7:b2:00:bb:f5:fc:84:bd:26:d2:91: f8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7E:AC:8B:24:C5:E3:6E:77:D1:C6:31:7E:07:8E:23:35:72:83:58 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/636siyTF42530cYxfgeOIzVyg1g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.150.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4a:2a:0e:11:a9:3d:d4:7b:b4:32:30:3d:3b:b6:fc:9a:0b:47: de:84:78:a0:69:7b:79:44:29:bb:d9:81:07:d5:a1:63:b7:0d: eb:0f:37:09:23:85:0a:24:0f:10:e8:5d:89:17:aa:76:2f:73: e3:3d:9f:c1:f0:ef:30:63:29:9c:d7:bc:5f:84:6b:24:a5:c6: 3d:74:a9:f8:01:3c:e6:85:a3:22:c6:86:55:b2:22:4b:65:8c: 73:15:be:55:bd:3a:c7:2d:f5:91:09:fc:1d:e3:5a:28:40:f0: 64:ba:03:58:f8:03:79:3d:a9:4c:83:cb:8c:81:87:3d:60:f7: 7c:80:d5:8a:d4:fd:4c:9e:66:a2:44:e5:2b:30:f8:63:15:aa: b2:f1:23:d8:72:0c:dd:5e:e1:34:c7:3b:c8:fc:dd:4c:9f:5d: ba:8d:a9:ce:40:2c:a2:36:1b:e1:4d:e4:60:28:68:00:4f:9d: 9c:92:2c:16:14:06:35:78:f5:29:ae:2d:48:ae:66:0f:e4:a2: 6d:30:b8:07:59:ff:a1:89:37:93:5e:dd:d6:3b:0c:ac:16:0b: 30:e0:8f:90:36:dc:6e:8d:d6:4f:e2:59:2e:85:ad:f8:ad:15: 61:e4:92:55:a2:53:08:f6:54:32:bb:84:a7:e1:f2:d5:e8:1a: 5d:6d:31:6b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICFBIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVCN0VBQzhCMjRDNUUz NkU3N0QxQzYzMTdFMDc4RTIzMzU3MjgzNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhkfOLonIdlDd0lYZB7oN1wxbhymUc8uOdmEFlfhvQ6nFGiFTT 9gZa5C/lIcZS1qtyaEVtDBmHvN5HdHoRQzN3PbPty75hDiYWZTsOfLcft6093MTp Hgy5z4x3Zyxt9v5f4drXlmB0HyEyB/T+JsQ291gXCgwIfVeXLhO+ndnShSnWloIw KFfnMZmBo579C4Sv3810i+7FmDsepGSw1pI/wRTjDSJzN3tSNCjtgm6jxGDiho3L +0e86LmNa9CQMpDjHZOJ4G/0O/CgC3w7D8LwM3TDlK7GrmR/+K6tIRy/zwJsC5OS un2v2o0JJuoBlUK1fEvnsgC79fyEvSbSkfhtAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQU636siyTF42530cYxfgeOIzVyg1gwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy82MzZzaXlURjQyNTMw Y1l4ZmdlT0l6VnlnMWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF AwMAdpYwDQYJKoZIhvcNAQELBQADggEBAEoqDhGpPdR7tDIwPTu2/JoLR96EeKBp e3lEKbvZgQfVoWO3DesPNwkjhQokDxDoXYkXqnYvc+M9n8Hw7zBjKZzXvF+EaySl xj10qfgBPOaFoyLGhlWyIktljHMVvlW9Osct9ZEJ/B3jWihA8GS6A1j4A3k9qUyD y4yBhz1g93yA1YrU/UyeZqJE5Ssw+GMVqrLxI9hyDN1e4TTHO8j83UyfXbqNqc5A LKI2G+FN5GAoaABPnZySLBYUBjV49SmuLUiuZg/kom0wuAdZ/6GJN5Ne3dY7DKwW CzDgj5A23G6N1k/iWS6FrfitFWHkklWiUwj2VDK7hKfh8tXoGl1tMWs= -----END CERTIFICATE-----Generated at Sat Sep 6 12:07:55 2025 by rpki-client