$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JRsNGB-atczDenkSQIGDI3WkFw0.roa File: JRsNGB-atczDenkSQIGDI3WkFw0.roa (raw, json) Hash identifier: 3p3BstsfduopN/NRL4i7Nv7AxRao6whJpn8i7v5YxJ0= Subject key identifier: 25:1B:0D:18:1F:9A:B5:CC:C3:7A:79:12:40:81:83:23:75:A4:17:0D Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1423 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JRsNGB-atczDenkSQIGDI3WkFw0.roa Signing time: Fri 22 Aug 2025 08:57:35 +0000 ROA not before: Fri 22 Aug 2025 08:57:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18046 IP address blocks: 150.116.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 13:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5155 (0x1423) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=251B0D181F9AB5CCC37A79124081832375A4170D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6d:63:4e:08:38:f1:72:f5:83:e1:5e:b0:6d: 3a:f2:75:a6:ad:05:38:c4:a8:e6:bc:b7:7b:2b:05: 42:ae:d6:88:1d:54:7f:97:7a:91:35:25:7f:91:c5: 96:ff:20:d7:4d:fb:20:69:f5:59:5e:9d:9d:a1:b0: 52:41:2f:96:6f:6d:3d:61:64:0f:3e:b1:e9:35:58: 32:f9:a1:9d:98:5f:71:9b:55:3d:4e:87:ef:f6:5a: 5d:bf:0b:70:71:5f:d2:84:57:e7:e9:cc:d6:0c:59: 0a:f5:95:0d:d2:50:d2:d2:20:4c:97:d5:42:f7:0d: cd:66:3a:5a:63:e0:de:42:45:92:5f:d6:0a:d1:3a: da:e5:41:e5:38:ab:4c:83:8e:d3:ca:8f:e9:9c:ec: eb:a4:22:bf:7c:e5:77:38:c6:0e:b5:69:15:6f:f2: ae:65:78:0e:8c:d8:c8:72:e1:47:3a:8e:0b:bd:76: 52:c2:d3:fa:b0:b2:2e:ec:dc:1c:73:33:7b:99:59: cd:ed:fd:f3:c9:2f:38:2a:7f:0b:99:bc:79:ed:d3: 8c:5b:45:02:dd:7a:5c:b7:01:8c:68:38:df:8a:08: 97:e8:ad:5b:c2:cb:18:53:c0:2d:a1:37:28:ae:d2: 3a:8a:f6:cd:06:8e:51:5e:e7:5b:14:c8:fa:24:2e: 16:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1B:0D:18:1F:9A:B5:CC:C3:7A:79:12:40:81:83:23:75:A4:17:0D X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/JRsNGB-atczDenkSQIGDI3WkFw0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.16.0/20 Signature Algorithm: sha256WithRSAEncryption 96:04:ff:15:0b:4f:69:26:a3:32:5f:92:b3:70:94:e9:f6:8f: 0b:d0:ae:f5:15:3d:e7:84:43:67:2c:4d:14:9b:aa:5d:9d:69: 33:a2:65:03:3a:c8:c8:9e:a5:14:ac:91:66:93:08:36:66:11: d7:72:89:ec:2c:9e:5b:89:b2:c4:6d:43:8d:35:83:e8:ee:f1: fa:da:1c:a0:81:e1:94:e0:69:89:97:d9:0a:7f:a2:56:e8:89: 4b:f9:1d:78:22:fb:f5:07:e6:f1:3f:b7:4c:d7:98:05:18:af: 03:d3:b6:6c:3c:f3:21:7b:05:1d:c2:be:db:9e:8b:9b:0f:58: 69:fb:b5:91:46:3e:95:ee:46:2d:c5:d9:d1:f8:7d:07:46:6c: e3:9c:1e:c9:8e:a7:7a:fa:dd:27:5d:56:af:2f:eb:f8:c6:99: 8e:d3:9f:c1:a7:bb:c4:73:01:2c:f6:d5:9b:fc:48:26:9f:92: 88:da:57:bc:e2:e8:f4:e4:e2:d9:58:f5:03:07:fe:e8:aa:e2: c1:77:1d:ab:5f:82:38:f8:ef:43:b7:50:9b:bc:a9:83:0c:b4: e7:b4:d8:c6:26:18:42:66:44:c8:81:fb:fa:a5:18:72:1d:b2: af:5f:ff:4b:c9:0b:bf:68:15:d5:8f:24:17:0e:cf:54:91:fd: d2:9a:1d:8d -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFCMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI1MUIwRDE4MUY5QUI1 Q0NDMzdBNzkxMjQwODE4MzIzNzVBNDE3MEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5bWNOCDjxcvWD4V6wbTrydaatBTjEqOa8t3srBUKu1ogdVH+X epE1JX+RxZb/INdN+yBp9VlenZ2hsFJBL5ZvbT1hZA8+sek1WDL5oZ2YX3GbVT1O h+/2Wl2/C3BxX9KEV+fpzNYMWQr1lQ3SUNLSIEyX1UL3Dc1mOlpj4N5CRZJf1grR OtrlQeU4q0yDjtPKj+mc7OukIr985Xc4xg61aRVv8q5leA6M2Mhy4Uc6jgu9dlLC 0/qwsi7s3BxzM3uZWc3t/fPJLzgqfwuZvHnt04xbRQLdely3AYxoON+KCJforVvC yxhTwC2hNyiu0jqK9s0GjlFe51sUyPokLhaHAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUJRsNGB+atczDenkSQIGDI3WkFw0wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9KUnNOR0ItYXRjekRl bmtTUUlHREkzV2tGdzAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnQQMA0GCSqGSIb3DQEBCwUAA4IBAQCWBP8VC09pJqMyX5KzcJTp9o8L0K71 FT3nhENnLE0Um6pdnWkzomUDOsjInqUUrJFmkwg2ZhHXconsLJ5bibLEbUONNYPo 7vH62hyggeGU4GmJl9kKf6JW6IlL+R14Ivv1B+bxP7dM15gFGK8D07ZsPPMhewUd wr7bnoubD1hp+7WRRj6V7kYtxdnR+H0HRmzjnB7Jjqd6+t0nXVavL+v4xpmO05/B p7vEcwEs9tWb/Egmn5KI2le84uj05OLZWPUDB/7oquLBdx2rX4I4+O9Dt1CbvKmD DLTntNjGJhhCZkTIgfv6pRhyHbKvX/9LyQu/aBXVjyQXDs9Ukf3Smh2N -----END CERTIFICATE-----Generated at Sun Sep 7 12:45:09 2025 by rpki-client