$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OMltUUoC5Et7eLWQmMULf8bqRPQ.roa File: OMltUUoC5Et7eLWQmMULf8bqRPQ.roa (raw, json) Hash identifier: OHF2as4NW01UfzleS/AnevAlvoaUgDvzYR9Tuj2reQE= Subject key identifier: 38:C9:6D:51:4A:02:E4:4B:7B:78:B5:90:98:C5:0B:7F:C6:EA:44:F4 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13FE Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OMltUUoC5Et7eLWQmMULf8bqRPQ.roa Signing time: Fri 22 Aug 2025 08:57:28 +0000 ROA not before: Fri 22 Aug 2025 08:57:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 63199 IP address blocks: 150.116.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 13:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5118 (0x13fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=38C96D514A02E44B7B78B59098C50B7FC6EA44F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bf:a6:a1:b2:4d:d2:a0:46:6c:b0:92:15:65: b5:fc:e0:88:76:70:a0:5d:25:af:53:45:57:fe:62: 90:68:24:4c:09:43:43:eb:d0:55:55:21:58:cf:5d: 4d:0c:ca:3b:c6:b9:2b:4a:e3:91:42:b0:53:e9:3f: 99:cd:56:49:cf:d3:be:4a:76:78:3f:78:45:ee:38: b2:29:62:3f:3c:8b:bb:1f:51:b7:e1:88:fc:94:a2: 3e:68:40:59:74:a9:07:fa:05:96:c7:49:a5:92:33: 64:6b:75:9b:8f:c0:36:01:20:1b:03:74:56:d0:99: c1:8d:fe:1d:1f:71:90:9e:11:5c:5a:ac:2f:8a:bd: ca:94:d5:c3:16:58:9a:2f:86:6f:d5:fa:c2:a9:d6: 45:8b:98:dd:03:8e:f8:1b:f9:08:14:83:e5:94:d0: 7f:e7:e7:57:8a:0b:d0:29:27:f1:05:99:50:51:61: 51:3c:66:31:90:be:b6:ea:0c:70:74:e9:8a:c3:67: 2b:4f:18:2c:c3:70:47:7a:f5:08:72:5a:26:c9:e8: df:41:a5:98:81:cb:7c:98:f2:f5:dc:cf:b8:37:2b: 28:fe:5f:2b:dd:ba:7a:ab:6e:8d:d9:5d:34:b5:58: a3:58:db:1d:e6:ab:43:c1:7b:b2:6b:26:58:1b:ce: 72:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C9:6D:51:4A:02:E4:4B:7B:78:B5:90:98:C5:0B:7F:C6:EA:44:F4 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/OMltUUoC5Et7eLWQmMULf8bqRPQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.4.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:cc:b7:c8:cb:31:1d:0f:18:f3:36:e0:1e:8a:0f:34:4e:d8: 42:79:85:91:d3:12:f1:db:17:5a:39:98:8a:25:e5:d3:6d:75: fd:87:65:31:63:1d:6f:51:d0:b9:d3:27:21:44:2b:d4:72:77: e9:0f:2b:1e:88:49:aa:ab:66:64:e5:d8:7a:a1:96:75:1c:6f: a7:96:13:5c:d0:37:c1:1d:38:46:4e:b0:ea:e0:85:a5:96:0f: 9e:d0:03:a1:78:ce:5a:cd:fd:a8:f1:c0:43:63:87:a4:8f:11: 6d:12:cd:fa:ff:3a:b8:fe:ac:0b:88:88:b9:d0:05:d9:51:9f: b7:e3:e4:c9:d4:e9:5c:1a:45:37:26:a9:41:69:b1:1d:1f:20: 7e:a2:2e:e3:07:be:38:c6:b1:40:d8:06:e4:33:81:84:5b:7e: e9:20:58:59:66:c6:86:21:ee:56:d3:3c:4f:37:9a:c3:29:71: 6a:5a:e2:ee:84:5f:5f:53:db:9c:e1:1c:10:50:47:61:ef:14: 9c:bd:74:c1:ec:d5:ba:2b:f1:03:ce:43:5c:cb:64:b0:63:e1: 06:8b:4e:17:ff:df:73:1f:b0:e1:04:6a:ae:0f:2b:69:cc:43: 52:50:e3:ec:63:c5:7e:60:ab:8e:6a:a7:bf:df:b9:c3:93:89: 5d:8f:5d:9d -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE/4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM4Qzk2RDUxNEEwMkU0 NEI3Qjc4QjU5MDk4QzUwQjdGQzZFQTQ0RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtv6ahsk3SoEZssJIVZbX84Ih2cKBdJa9TRVf+YpBoJEwJQ0Pr 0FVVIVjPXU0MyjvGuStK45FCsFPpP5nNVknP075Kdng/eEXuOLIpYj88i7sfUbfh iPyUoj5oQFl0qQf6BZbHSaWSM2RrdZuPwDYBIBsDdFbQmcGN/h0fcZCeEVxarC+K vcqU1cMWWJovhm/V+sKp1kWLmN0Djvgb+QgUg+WU0H/n51eKC9ApJ/EFmVBRYVE8 ZjGQvrbqDHB06YrDZytPGCzDcEd69QhyWibJ6N9BpZiBy3yY8vXcz7g3Kyj+Xyvd unqrbo3ZXTS1WKNY2x3mq0PBe7JrJlgbznIJAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUOMltUUoC5Et7eLWQmMULf8bqRPQwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9PTWx0VVVvQzVFdDdl TFdRbU1VTGY4YnFSUFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnQEMA0GCSqGSIb3DQEBCwUAA4IBAQCdzLfIyzEdDxjzNuAeig80TthCeYWR 0xLx2xdaOZiKJeXTbXX9h2UxYx1vUdC50ychRCvUcnfpDyseiEmqq2Zk5dh6oZZ1 HG+nlhNc0DfBHThGTrDq4IWllg+e0AOheM5azf2o8cBDY4ekjxFtEs36/zq4/qwL iIi50AXZUZ+34+TJ1OlcGkU3JqlBabEdHyB+oi7jB744xrFA2AbkM4GEW37pIFhZ ZsaGIe5W0zxPN5rDKXFqWuLuhF9fU9uc4RwQUEdh7xScvXTB7NW6K/EDzkNcy2Sw Y+EGi04X/99zH7DhBGquDytpzENSUOPsY8V+YKuOaqe/37nDk4ldj12d -----END CERTIFICATE-----Generated at Sun Sep 7 12:45:10 2025 by rpki-client