$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JCdbheYoSG2zxxDA4VgPh9dKBXs.roa File: JCdbheYoSG2zxxDA4VgPh9dKBXs.roa (raw, json) Hash identifier: uUjfOZjlKr9DI37CLEuEvvHFzdLz/jxPVaxoLf6s4xk= Subject key identifier: 24:27:5B:85:E6:28:48:6D:B3:C7:10:C0:E1:58:0F:87:D7:4A:05:7B Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1424 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JCdbheYoSG2zxxDA4VgPh9dKBXs.roa Signing time: Fri 22 Aug 2025 08:57:36 +0000 ROA not before: Fri 22 Aug 2025 08:57:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 150.116.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5156 (0x1424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=24275B85E628486DB3C710C0E1580F87D74A057B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:09:5a:e0:b7:72:f3:dd:28:5e:42:d1:d2: c3:67:f0:11:9f:01:44:0a:9c:bd:1c:f7:0c:c1:5a: ed:8f:24:32:28:99:63:bb:b6:e6:1a:fd:93:44:57: 85:cd:73:97:fa:ac:0c:42:58:e8:3d:3c:f9:87:ad: bb:be:c1:31:87:f1:d7:7d:9c:7b:8d:69:0f:b8:a8: 0d:52:d0:e5:f9:04:a9:13:3d:47:70:da:f7:93:ad: 1e:29:4d:aa:e1:cc:46:8b:be:71:56:20:93:94:5e: a4:d5:85:c7:ef:0a:de:bf:b7:b7:71:17:e9:36:6e: d2:9d:63:e9:53:59:be:73:d7:01:e5:70:84:ef:1b: 9f:7d:fc:91:c7:ad:c2:36:b8:20:d8:b0:a9:be:4f: 45:30:56:e3:7c:0d:dd:a6:8a:10:4f:9b:80:95:03: 7e:ab:ff:87:ae:61:3e:14:60:b5:54:09:f4:63:b3: aa:31:56:e5:81:19:86:86:1c:1b:25:6d:ab:91:3e: 23:b1:0d:5d:b3:76:c5:20:fe:72:b4:11:7c:74:1a: 79:03:9b:ae:28:48:57:b2:9b:dc:03:da:96:9a:38: 96:c8:8f:28:18:37:61:9b:0a:81:e6:d4:53:0b:25: fd:70:00:55:d2:ff:02:96:c4:11:48:e8:ce:8e:2f: 95:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:27:5B:85:E6:28:48:6D:B3:C7:10:C0:E1:58:0F:87:D7:4A:05:7B X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JCdbheYoSG2zxxDA4VgPh9dKBXs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.128.0/17 Signature Algorithm: sha256WithRSAEncryption a0:8e:f1:ca:4f:38:37:a4:74:7b:5d:5d:05:22:a1:54:d4:5b: 78:bf:7e:f8:fb:6b:ca:04:fa:70:6a:69:53:ed:78:ba:94:a2: 9a:02:a3:28:22:21:16:67:cf:9c:9f:e8:86:91:4e:7a:aa:e3: e5:bc:bc:c2:dd:5e:91:4e:4a:8b:e7:2b:61:3e:65:94:2a:56: 18:ed:df:cf:69:8a:b9:30:c3:2f:6c:b6:df:30:15:a2:11:bb: 03:c7:e4:4f:24:74:b5:84:e0:0d:e8:4b:f7:01:9a:f5:a6:8b: 59:55:5b:78:3f:d7:15:3c:2d:46:c5:83:f6:29:1b:ef:52:0d: 41:d2:0f:27:d4:3a:73:6f:0e:6c:44:2c:1e:d1:78:9c:6c:af: 39:89:b2:97:42:ee:74:72:19:0b:55:fe:79:e4:85:a3:b5:48: a1:4b:78:a1:2a:d2:7d:34:93:39:2c:48:6a:af:4b:27:bf:76: a3:92:72:50:28:b3:41:a0:c7:c9:42:70:c8:8c:ef:4d:13:39: 5b:28:ce:bf:a2:b8:c6:4c:ad:72:c4:bc:32:eb:aa:01:f4:09: 19:bd:43:cd:fb:ec:1c:ca:76:54:c7:ba:b8:ce:1e:3f:c7:40: 07:b4:b1:7e:db:33:0e:1c:4a:b6:4b:d9:d2:66:9b:1d:90:b3: de:e6:6b:aa -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFCQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI0Mjc1Qjg1RTYyODQ4 NkRCM0M3MTBDMEUxNTgwRjg3RDc0QTA1N0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJYAla4Ldy890oXkLR0sNn8BGfAUQKnL0c9wzBWu2PJDIomWO7 tuYa/ZNEV4XNc5f6rAxCWOg9PPmHrbu+wTGH8dd9nHuNaQ+4qA1S0OX5BKkTPUdw 2veTrR4pTarhzEaLvnFWIJOUXqTVhcfvCt6/t7dxF+k2btKdY+lTWb5z1wHlcITv G599/JHHrcI2uCDYsKm+T0UwVuN8Dd2mihBPm4CVA36r/4euYT4UYLVUCfRjs6ox VuWBGYaGHBslbauRPiOxDV2zdsUg/nK0EXx0GnkDm64oSFeym9wD2paaOJbIjygY N2GbCoHm1FMLJf1wAFXS/wKWxBFI6M6OL5V5AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUJCdbheYoSG2zxxDA4VgPh9dKBXswHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9KQ2RiaGVZb1NHMnp4 eERBNFZnUGg5ZEtCWHMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQHlnSAMA0GCSqGSIb3DQEBCwUAA4IBAQCgjvHKTzg3pHR7XV0FIqFU1Ft4v374 +2vKBPpwamlT7Xi6lKKaAqMoIiEWZ8+cn+iGkU56quPlvLzC3V6RTkqL5ythPmWU KlYY7d/PaYq5MMMvbLbfMBWiEbsDx+RPJHS1hOAN6Ev3AZr1potZVVt4P9cVPC1G xYP2KRvvUg1B0g8n1Dpzbw5sRCwe0XicbK85ibKXQu50chkLVf555IWjtUihS3ih KtJ9NJM5LEhqr0snv3ajknJQKLNBoMfJQnDIjO9NEzlbKM6/orjGTK1yxLwy66oB 9AkZvUPN++wcynZUx7q4zh4/x0AHtLF+2zMOHEq2S9nSZpsdkLPe5muq -----END CERTIFICATE-----Generated at Sat Sep 6 13:48:17 2025 by rpki-client