$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ICYmGaSfV-VFqkKSpTohpXApynM.roa File: ICYmGaSfV-VFqkKSpTohpXApynM.roa (raw, json) Hash identifier: X0V/PTBhX2sjY8jGuxODgE9CdnTlaaSOA7NINyt4xwk= Subject key identifier: 20:26:26:19:A4:9F:57:E5:45:AA:42:92:A5:3A:21:A5:70:29:CA:73 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13F6 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ICYmGaSfV-VFqkKSpTohpXApynM.roa Signing time: Fri 22 Aug 2025 08:57:26 +0000 ROA not before: Fri 22 Aug 2025 08:57:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 223.26.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5110 (0x13f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=20262619A49F57E545AA4292A53A21A57029CA73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:35:ab:a0:4c:1b:95:df:8b:32:38:9a:89: 96:1a:90:5b:41:3b:29:27:da:da:a4:0b:2b:5f:ea: 0f:49:40:f7:8c:2a:df:a9:d1:c8:08:56:00:96:67: e9:b8:34:59:5c:60:a7:72:bc:4f:56:b5:e8:d1:13: 4b:81:b8:67:31:82:be:36:b6:89:21:72:ba:11:df: 02:f7:04:ca:cc:17:c4:34:76:f3:23:c1:c3:48:6f: bd:6b:9f:96:08:d9:27:c0:f5:03:4c:b1:25:0e:82: ab:db:21:a9:59:bc:2e:39:ef:a7:d5:d3:01:75:95: e8:64:2f:9a:11:0f:42:7f:71:cb:64:90:2a:c4:c6: ca:a0:aa:d6:a2:03:e3:a1:d9:b8:c2:67:fe:1a:bf: 61:06:9c:b1:5d:50:aa:a6:2b:55:59:8d:69:a2:c5: de:1d:70:c7:d1:f4:eb:48:f4:a7:69:cb:18:2a:47: e9:74:5e:91:4d:c8:07:35:57:ab:39:d6:6d:18:14: ea:9f:90:63:a0:d3:b7:19:d7:70:ee:58:c7:ee:c9: fd:f5:49:d1:78:2e:80:1b:2f:55:18:1b:02:1f:1e: 85:10:e6:aa:5e:59:fe:58:39:3c:2a:27:d6:ec:13: cd:89:97:e5:6b:f0:56:f6:de:d3:8a:d6:8e:20:43: 5d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:26:26:19:A4:9F:57:E5:45:AA:42:92:A5:3A:21:A5:70:29:CA:73 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ICYmGaSfV-VFqkKSpTohpXApynM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.26.104.0/22 Signature Algorithm: sha256WithRSAEncryption 92:33:e6:c2:db:56:ab:9c:7f:df:7f:2d:a0:f8:48:22:b1:b3: 48:7e:fb:17:95:c0:dc:98:43:13:5f:85:c2:00:74:86:b5:b4: dc:09:bd:85:ce:9a:e5:25:f2:45:62:04:1c:83:4e:9b:52:56: 67:ce:32:1c:6c:bb:d1:a7:b3:48:ae:ee:1d:a8:fc:07:bb:47: 80:5d:9e:86:5a:2f:0e:75:a7:8f:8b:c0:a2:70:4c:f1:fd:20: 9a:24:ff:d6:39:4d:7c:b4:50:de:c6:2c:b6:1b:a9:68:18:1b: f3:4f:5b:00:be:8a:46:f5:0d:db:c7:e2:4e:c1:a3:7b:05:cc: a3:52:7c:11:f6:32:8b:2a:55:21:d6:81:5b:ba:d9:94:58:63: 8c:2c:21:0e:f4:b4:c1:c2:96:f1:97:d6:8f:81:ca:f6:54:02: 04:0f:1e:d2:22:86:fa:4d:62:47:78:c1:b3:8f:43:fd:c1:b9: 81:84:5f:bb:9b:eb:ca:f9:c0:8c:b3:88:0e:60:6d:be:e7:dc: d0:a6:7c:74:f0:f0:d3:fc:92:ae:5e:95:fd:b6:13:b6:c2:ff: 22:3a:ee:04:17:5c:57:07:db:91:ed:35:e4:61:f7:1b:18:3c: 0d:f6:c0:d3:4c:03:22:ee:ac:fd:dc:31:83:05:73:73:03:61: 9b:05:3a:11 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE/YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIwMjYyNjE5QTQ5RjU3 RTU0NUFBNDI5MkE1M0EyMUE1NzAyOUNBNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCJDWroEwbld+LMjiaiZYakFtBOykn2tqkCytf6g9JQPeMKt+p 0cgIVgCWZ+m4NFlcYKdyvE9WtejRE0uBuGcxgr42tokhcroR3wL3BMrMF8Q0dvMj wcNIb71rn5YI2SfA9QNMsSUOgqvbIalZvC4576fV0wF1lehkL5oRD0J/cctkkCrE xsqgqtaiA+Oh2bjCZ/4av2EGnLFdUKqmK1VZjWmixd4dcMfR9OtI9KdpyxgqR+l0 XpFNyAc1V6s51m0YFOqfkGOg07cZ13DuWMfuyf31SdF4LoAbL1UYGwIfHoUQ5qpe Wf5YOTwqJ9bsE82Jl+Vr8Fb23tOK1o4gQ11bAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUICYmGaSfV+VFqkKSpTohpXApynMwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9JQ1ltR2FTZlYtVkZx a0tTcFRvaHBYQXB5bk0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQC3xpoMA0GCSqGSIb3DQEBCwUAA4IBAQCSM+bC21arnH/ffy2g+EgisbNIfvsX lcDcmEMTX4XCAHSGtbTcCb2FzprlJfJFYgQcg06bUlZnzjIcbLvRp7NIru4dqPwH u0eAXZ6GWi8OdaePi8CicEzx/SCaJP/WOU18tFDexiy2G6loGBvzT1sAvopG9Q3b x+JOwaN7BcyjUnwR9jKLKlUh1oFbutmUWGOMLCEO9LTBwpbxl9aPgcr2VAIEDx7S Iob6TWJHeMGzj0P9wbmBhF+7m+vK+cCMs4gOYG2+59zQpnx08PDT/JKuXpX9thO2 wv8iOu4EF1xXB9uR7TXkYfcbGDwN9sDTTAMi7qz93DGDBXNzA2GbBToR -----END CERTIFICATE-----Generated at Sat Sep 6 13:48:16 2025 by rpki-client