$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/InsD7HEhbGjTtxxpw7p5Som8oGo.roa File: InsD7HEhbGjTtxxpw7p5Som8oGo.roa (raw, json) Hash identifier: K2vWo3nOSYAot/ixxJnQaxZwFwd9D0g0/HfFWtZoVJ8= Subject key identifier: 22:7B:03:EC:71:21:6C:68:D3:B7:1C:69:C3:BA:79:4A:89:BC:A0:6A Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1417 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/InsD7HEhbGjTtxxpw7p5Som8oGo.roa Signing time: Fri 22 Aug 2025 08:57:33 +0000 ROA not before: Fri 22 Aug 2025 08:57:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 57976 IP address blocks: 150.116.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 18:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5143 (0x1417) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=227B03EC71216C68D3B71C69C3BA794A89BCA06A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:d7:df:9e:f0:e7:f6:18:84:10:ec:bd:cd: 7d:67:be:84:64:88:54:97:59:a7:d1:81:58:fa:7d: 03:cf:9a:8c:ed:50:5f:bb:c8:80:38:1d:b1:ae:18: fe:41:d5:64:05:3e:30:d0:b0:5d:14:f2:db:58:fd: 14:f8:72:e0:11:f3:31:e8:86:ac:27:c1:38:10:96: df:63:d7:e1:6f:81:9d:11:1c:f5:98:4a:43:b4:55: b5:83:f3:1d:88:e1:2d:06:0c:80:c6:80:42:83:60: 13:d0:95:46:60:27:74:5f:e6:c2:57:01:d8:c3:25: 32:70:b0:d1:d4:13:1c:9f:81:74:4b:51:61:65:fe: 7b:83:ee:98:13:5a:21:29:41:de:22:06:04:e5:71: e2:e5:7d:19:be:50:b6:f4:60:62:b9:0c:94:da:87: 28:e1:af:9d:f7:d6:e3:3a:94:2d:ba:cb:59:27:9e: 5b:09:c9:c2:4c:7b:f4:46:c5:89:c2:6d:d4:d6:57: d3:50:e9:3d:bc:84:8a:7e:74:d0:7d:42:2f:0d:37: 98:0d:00:de:1e:1a:db:8f:f1:4f:29:5f:26:a0:99: 57:ee:03:ae:62:af:8b:4e:81:17:80:40:19:7e:ba: da:09:34:01:f2:81:40:50:54:4c:e1:8f:b2:a2:2d: c7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7B:03:EC:71:21:6C:68:D3:B7:1C:69:C3:BA:79:4A:89:BC:A0:6A X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/InsD7HEhbGjTtxxpw7p5Som8oGo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.9.0/24 Signature Algorithm: sha256WithRSAEncryption 87:2c:65:3b:a2:92:a0:0d:70:51:29:5b:60:26:ca:64:30:6f: 2b:5f:99:af:95:81:1f:e9:fe:f7:e0:0f:88:99:6a:a2:f0:4d: 01:c2:ed:c8:99:c1:c6:28:83:4a:6d:43:04:05:24:9b:de:6e: 42:3d:78:d6:50:69:81:b6:af:4c:6d:da:e2:cf:b9:7a:5d:37: f5:0b:79:2f:b4:9f:30:10:b3:28:a4:d7:76:97:37:0d:0b:ce: 45:c5:cd:bf:7c:7d:ab:4e:11:b5:cb:6c:7a:d6:ca:26:fe:9d: db:da:f0:ff:7d:ac:54:3c:a6:de:ca:54:cc:b2:af:ff:bc:4b: 8d:5b:17:4a:a0:03:1d:9f:df:fa:a5:a3:91:db:b7:64:86:9a: 35:34:0e:66:31:93:d7:6a:17:93:18:90:c5:b7:6e:74:3f:69: d4:6f:af:2c:ec:97:bb:f7:45:10:a7:b6:95:a7:2e:7a:7c:cf: a1:0a:f8:07:c1:5c:fa:a3:8b:bb:55:57:d7:55:19:7c:47:e8: 3e:e8:8a:2c:74:d2:3b:9a:dc:4f:e9:4c:7c:45:20:a0:85:26: 3e:75:cf:4a:e4:37:66:9f:b4:1d:0d:56:06:3c:d3:32:ef:88: a9:87:55:6f:f5:bb:01:53:c0:00:56:78:5d:db:c1:ea:34:27: 82:e1:c5:17 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFBcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIyN0IwM0VDNzEyMTZD NjhEM0I3MUM2OUMzQkE3OTRBODlCQ0EwNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGDdffnvDn9hiEEOy9zX1nvoRkiFSXWafRgVj6fQPPmoztUF+7 yIA4HbGuGP5B1WQFPjDQsF0U8ttY/RT4cuAR8zHohqwnwTgQlt9j1+FvgZ0RHPWY SkO0VbWD8x2I4S0GDIDGgEKDYBPQlUZgJ3Rf5sJXAdjDJTJwsNHUExyfgXRLUWFl /nuD7pgTWiEpQd4iBgTlceLlfRm+ULb0YGK5DJTahyjhr5331uM6lC26y1knnlsJ ycJMe/RGxYnCbdTWV9NQ6T28hIp+dNB9Qi8NN5gNAN4eGtuP8U8pXyagmVfuA65i r4tOgReAQBl+utoJNAHygUBQVEzhj7KiLcetAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUInsD7HEhbGjTtxxpw7p5Som8oGowHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9JbnNEN0hFaGJHalR0 eHhwdzdwNVNvbThvR28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnQJMA0GCSqGSIb3DQEBCwUAA4IBAQCHLGU7opKgDXBRKVtgJspkMG8rX5mv lYEf6f734A+ImWqi8E0Bwu3ImcHGKINKbUMEBSSb3m5CPXjWUGmBtq9Mbdriz7l6 XTf1C3kvtJ8wELMopNd2lzcNC85Fxc2/fH2rThG1y2x61som/p3b2vD/faxUPKbe ylTMsq//vEuNWxdKoAMdn9/6paOR27dkhpo1NA5mMZPXaheTGJDFt250P2nUb68s 7Je790UQp7aVpy56fM+hCvgHwVz6o4u7VVfXVRl8R+g+6IosdNI7mtxP6Ux8RSCg hSY+dc9K5Ddmn7QdDVYGPNMy74iph1Vv9bsBU8AAVnhd28HqNCeC4cUX -----END CERTIFICATE-----Generated at Sun Sep 7 16:22:43 2025 by rpki-client