$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/QBY9jSEUNRXsT6PVGckwA3xDO-A.roa File: QBY9jSEUNRXsT6PVGckwA3xDO-A.roa (raw, json) Hash identifier: NqX7AiZ9KxOLwnhqpQCe8/0rFm249OltZCMzMPsJGFU= Subject key identifier: 40:16:3D:8D:21:14:35:15:EC:4F:A3:D5:19:C9:30:03:7C:43:3B:E0 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1432 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/QBY9jSEUNRXsT6PVGckwA3xDO-A.roa Signing time: Fri 22 Aug 2025 08:57:39 +0000 ROA not before: Fri 22 Aug 2025 08:57:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17408 IP address blocks: 113.21.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 18:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5170 (0x1432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=40163D8D21143515EC4FA3D519C930037C433BE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a0:cd:c1:99:12:4c:b1:51:92:92:98:f9:c9: 36:98:3a:ba:5d:76:01:06:ca:99:ab:0c:45:3b:9a: 60:7f:a9:03:a5:cd:73:15:7f:30:ed:7e:ba:44:14: 4d:37:31:a8:e4:aa:08:1f:30:0f:d8:82:b6:ef:e2: d8:60:62:2a:69:dc:04:94:e6:06:0a:bd:00:22:eb: a0:f3:71:30:f8:79:5b:ad:f4:18:b1:de:18:2d:49: 15:2a:e5:02:17:02:7e:c9:7d:1c:36:c0:70:19:51: 0b:b9:44:24:b3:de:83:56:0e:76:b7:07:4b:84:76: 33:72:4c:34:6c:f3:42:70:80:6e:cf:39:fd:26:c7: dc:58:1f:22:de:52:8e:ba:72:c0:e5:21:f2:29:ac: d2:54:5f:1b:16:84:58:25:65:30:5d:9b:2e:13:96: a8:79:e5:60:d7:b1:08:21:08:66:e6:aa:a6:3b:0b: 53:82:c6:c1:d0:39:8c:68:bd:bf:76:43:36:c9:72: c1:90:41:3a:3c:b7:2b:de:3b:1a:6f:ab:17:b9:f2: be:bf:57:46:01:00:53:58:49:b8:86:a2:8e:88:be: a7:3a:6e:95:24:95:26:14:8b:17:61:81:e4:48:ca: 38:0b:fa:7d:95:5b:ed:a4:5d:32:70:8f:f2:2f:0d: ae:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:16:3D:8D:21:14:35:15:EC:4F:A3:D5:19:C9:30:03:7C:43:3B:E0 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/QBY9jSEUNRXsT6PVGckwA3xDO-A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.21.90.0/24 Signature Algorithm: sha256WithRSAEncryption 85:4d:56:86:0b:94:34:9f:9c:2e:ed:de:38:b4:9a:f8:ea:af: a6:45:af:ae:72:89:d0:63:0a:07:6b:e6:a2:1d:2e:44:83:68: 7f:d3:e6:fb:2e:d6:f4:59:30:38:9c:b9:50:b9:7d:64:2e:34: 1e:68:37:55:ba:5f:bb:48:f8:ae:f8:0a:eb:5f:ad:5c:a9:cd: ef:26:67:e2:8f:94:a0:73:58:9e:02:9e:84:0c:14:7a:79:51: 9c:4e:3f:5e:34:e5:99:97:f7:4c:fc:41:7a:f3:de:0f:30:63: 19:11:ea:c1:19:f4:e7:d9:cc:f1:55:60:c8:af:37:3a:8f:c9: 5d:48:5e:d4:4c:77:be:a6:39:60:99:95:0d:95:5f:37:ab:02: 2a:fc:c3:64:99:d4:3d:39:3f:1e:26:19:7b:63:da:79:b6:40: a4:c3:ff:86:97:f0:5b:5f:79:26:e8:53:c5:18:ab:7e:5a:59: 34:44:87:87:be:aa:20:66:11:6d:f4:ca:38:bf:28:6d:70:33: 11:38:6b:c9:c8:ea:c8:c2:d5:1a:f9:0c:d4:af:57:57:99:82: 17:93:57:4d:07:7d:8a:8e:2a:b8:c1:4e:a5:07:09:a6:95:d0: 36:44:8d:3b:36:34:b7:42:24:c8:ad:d6:10:e4:02:c1:25:1f: dc:7d:9c:72 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFDIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQwMTYzRDhEMjExNDM1 MTVFQzRGQTNENTE5QzkzMDAzN0M0MzNCRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCcoM3BmRJMsVGSkpj5yTaYOrpddgEGypmrDEU7mmB/qQOlzXMV fzDtfrpEFE03MajkqggfMA/Ygrbv4thgYipp3ASU5gYKvQAi66DzcTD4eVut9Bix 3hgtSRUq5QIXAn7JfRw2wHAZUQu5RCSz3oNWDna3B0uEdjNyTDRs80JwgG7POf0m x9xYHyLeUo66csDlIfIprNJUXxsWhFglZTBdmy4Tlqh55WDXsQghCGbmqqY7C1OC xsHQOYxovb92QzbJcsGQQTo8tyveOxpvqxe58r6/V0YBAFNYSbiGoo6Ivqc6bpUk lSYUixdhgeRIyjgL+n2VW+2kXTJwj/IvDa4jAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUQBY9jSEUNRXsT6PVGckwA3xDO+AwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9RQlk5alNFVU5SWHNU NlBWR2Nrd0EzeERPLUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAcRVaMA0GCSqGSIb3DQEBCwUAA4IBAQCFTVaGC5Q0n5wu7d44tJr46q+mRa+u conQYwoHa+aiHS5Eg2h/0+b7Ltb0WTA4nLlQuX1kLjQeaDdVul+7SPiu+ArrX61c qc3vJmfij5Sgc1ieAp6EDBR6eVGcTj9eNOWZl/dM/EF6894PMGMZEerBGfTn2czx VWDIrzc6j8ldSF7UTHe+pjlgmZUNlV83qwIq/MNkmdQ9OT8eJhl7Y9p5tkCkw/+G l/BbX3km6FPFGKt+Wlk0RIeHvqogZhFt9Mo4vyhtcDMROGvJyOrIwtUa+QzUr1dX mYIXk1dNB32Kjiq4wU6lBwmmldA2RI07NjS3QiTIrdYQ5ALBJR/cfZxy -----END CERTIFICATE-----Generated at Sun Sep 7 16:22:41 2025 by rpki-client