$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/R98OHS3cQVPe9-rpOqIewF2QnJA.roa File: R98OHS3cQVPe9-rpOqIewF2QnJA.roa (raw, json) Hash identifier: hKiSI8Q2IgsIN99gNu/aj6lzpTlN+ihBfsEzXDXrxFo= Subject key identifier: 47:DF:0E:1D:2D:DC:41:53:DE:F7:EA:E9:3A:A2:1E:C0:5D:90:9C:90 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13F4 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/R98OHS3cQVPe9-rpOqIewF2QnJA.roa Signing time: Fri 22 Aug 2025 08:57:26 +0000 ROA not before: Fri 22 Aug 2025 08:57:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131607 IP address blocks: 150.117.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 18:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5108 (0x13f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=47DF0E1D2DDC4153DEF7EAE93AA21EC05D909C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:39:95:e8:66:80:8f:15:56:e8:8e:f2:ad:5c: 4a:db:a5:0e:6a:59:70:11:c8:d0:e5:ce:00:af:7e: d2:77:ab:3e:21:45:ac:63:ba:19:68:83:d9:9b:81: 9b:1c:98:4e:4f:1a:c5:75:f6:c0:b4:35:ca:a7:b0: 8a:75:db:59:40:49:87:0f:c8:57:c3:f8:f8:07:f3: 00:f8:9d:34:3f:53:c1:eb:61:f9:9c:25:71:16:e5: f4:32:6f:09:e6:32:72:57:23:d2:e0:8f:f8:e0:a5: 7b:76:d1:a3:a3:91:89:0c:8e:ea:e2:b1:af:6d:ef: fb:25:96:30:eb:0c:b4:59:6d:c1:fd:27:99:9a:57: 96:e7:35:a2:15:da:81:1a:3e:d6:e9:c7:18:f2:34: 73:49:f0:2a:3f:2e:3c:18:98:40:3b:f8:5c:12:35: 18:7e:12:73:2e:0f:2c:f2:90:32:63:af:64:98:cf: e6:81:97:03:db:6b:17:13:d1:c9:1c:3f:6b:15:b9: ff:f8:9b:52:9a:57:3a:ef:e1:f6:58:cb:a7:4a:0b: 11:9d:10:71:9f:35:77:49:5f:d4:16:ea:ad:4f:53: b8:2f:13:f7:87:4a:bf:55:58:8c:a9:66:92:68:db: 14:b1:65:03:65:2f:f2:da:6d:75:d9:f4:0b:a0:6e: b7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DF:0E:1D:2D:DC:41:53:DE:F7:EA:E9:3A:A2:1E:C0:5D:90:9C:90 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/R98OHS3cQVPe9-rpOqIewF2QnJA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.176.0/20 Signature Algorithm: sha256WithRSAEncryption 9c:f3:96:d1:d6:b2:35:af:26:c6:01:ef:72:82:21:78:6e:64: 79:89:b2:4c:66:12:37:9f:0c:db:42:d0:e7:b3:3d:ea:5f:c6: 95:a3:7d:12:a0:29:47:2d:2d:6f:15:03:58:41:44:b8:b7:8b: f0:fb:63:2d:e3:d2:73:35:89:02:2e:d4:a2:e8:04:03:4f:f0: be:32:2b:8a:69:e1:3c:a3:68:b7:a4:19:d3:ac:c7:c4:94:0a: 90:6b:96:4b:0a:db:d8:1e:c8:72:cf:a1:1b:a8:6e:90:6b:36: 0b:8b:4a:49:ff:8c:8a:d9:e2:47:ab:18:0f:f6:20:03:b2:3b: c0:57:1f:05:7f:09:eb:22:bc:55:ad:ce:a8:87:04:c3:a9:29: 4f:c9:0e:92:4a:76:1e:da:18:51:d1:ee:d0:89:9e:55:5b:cb: ea:0f:2c:66:e3:bc:9c:dd:85:af:07:f1:a6:6e:10:71:a8:70: 91:cd:bc:86:7a:1f:a1:02:bd:26:3f:d1:9a:a4:e7:bb:6d:31: 97:eb:17:f3:bd:6f:b1:38:38:b2:ab:af:c8:a1:71:66:5a:05: e6:81:35:8e:5d:9e:bf:46:eb:f1:8f:ff:92:29:11:ec:57:b3: 85:7f:de:4d:97:32:bb:61:21:93:76:9a:a3:c8:f5:f2:86:49: d2:e5:1c:9c -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE/QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ3REYwRTFEMkREQzQx NTNERUY3RUFFOTNBQTIxRUMwNUQ5MDlDOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXOZXoZoCPFVbojvKtXErbpQ5qWXARyNDlzgCvftJ3qz4hRaxj uhlog9mbgZscmE5PGsV19sC0NcqnsIp121lASYcPyFfD+PgH8wD4nTQ/U8HrYfmc JXEW5fQybwnmMnJXI9Lgj/jgpXt20aOjkYkMjurisa9t7/slljDrDLRZbcH9J5ma V5bnNaIV2oEaPtbpxxjyNHNJ8Co/LjwYmEA7+FwSNRh+EnMuDyzykDJjr2SYz+aB lwPbaxcT0ckcP2sVuf/4m1KaVzrv4fZYy6dKCxGdEHGfNXdJX9QW6q1PU7gvE/eH Sr9VWIypZpJo2xSxZQNlL/LabXXZ9AugbrfrAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUR98OHS3cQVPe9+rpOqIewF2QnJAwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9SOThPSFMzY1FWUGU5 LXJwT3FJZXdGMlFuSkEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnWwMA0GCSqGSIb3DQEBCwUAA4IBAQCc85bR1rI1rybGAe9ygiF4bmR5ibJM ZhI3nwzbQtDnsz3qX8aVo30SoClHLS1vFQNYQUS4t4vw+2Mt49JzNYkCLtSi6AQD T/C+MiuKaeE8o2i3pBnTrMfElAqQa5ZLCtvYHshyz6EbqG6QazYLi0pJ/4yK2eJH qxgP9iADsjvAVx8FfwnrIrxVrc6ohwTDqSlPyQ6SSnYe2hhR0e7QiZ5VW8vqDyxm 47yc3YWvB/GmbhBxqHCRzbyGeh+hAr0mP9GapOe7bTGX6xfzvW+xODiyq6/IoXFm WgXmgTWOXZ6/Ruvxj/+SKRHsV7OFf95NlzK7YSGTdpqjyPXyhknS5Ryc -----END CERTIFICATE-----Generated at Sun Sep 7 16:22:40 2025 by rpki-client