$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S590tDPTYA1ha28LUvr3nPSIsSk.roa File: S590tDPTYA1ha28LUvr3nPSIsSk.roa (raw, json) Hash identifier: 4de7pMTDe1IBtupv7VYijUVRpjG3IzhvH5pxaruunOY= Subject key identifier: 4B:9F:74:B4:33:D3:60:0D:61:6B:6F:0B:52:FA:F7:9C:F4:88:B1:29 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13D1 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S590tDPTYA1ha28LUvr3nPSIsSk.roa Signing time: Fri 22 Aug 2025 08:57:18 +0000 ROA not before: Fri 22 Aug 2025 08:57:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 150.116.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5073 (0x13d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4B9F74B433D3600D616B6F0B52FAF79CF488B129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:f6:82:59:a0:7d:98:90:0c:67:61:cf:de: c4:f2:ae:72:6c:ed:38:c0:ab:cb:76:35:37:23:a9: 4a:2a:61:65:7d:86:b8:c4:92:87:76:41:8d:ed:bb: 27:d3:8d:58:b3:07:99:bc:ae:dd:7a:19:ef:75:02: 4c:10:70:37:35:bd:c6:ac:f1:17:71:5c:df:b6:f5: 6a:66:31:fd:a9:0f:62:9f:f7:24:a9:06:a0:8a:f4: 84:bf:88:46:12:38:8b:a3:9e:83:b5:e1:65:22:b4: 78:0a:2e:f5:6d:cf:55:9e:4e:08:18:33:ae:e5:d7: 74:ec:78:76:d9:39:4f:14:ea:eb:73:4c:59:77:ba: d1:15:55:9a:7d:50:4f:5e:cb:3f:d2:cb:84:23:98: 50:e4:61:a1:69:4f:f1:2f:ae:1a:22:ef:29:61:70: a2:60:93:cf:69:ee:4d:8d:3f:bd:0d:29:dc:f9:a5: 00:5b:30:8d:18:f0:d6:b5:62:99:e4:53:49:d2:4b: 2f:2f:23:59:fc:65:8d:87:86:13:a1:17:fc:2b:87: f8:7d:45:13:0f:dc:dd:a3:63:a7:4c:e8:66:46:0f: 47:5a:ae:c6:19:8c:6e:ff:d4:23:4d:71:bc:61:6c: 15:46:8f:c5:1c:c0:c3:c9:c7:14:20:e7:01:3a:a9: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9F:74:B4:33:D3:60:0D:61:6B:6F:0B:52:FA:F7:9C:F4:88:B1:29 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/S590tDPTYA1ha28LUvr3nPSIsSk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.239.0/24 Signature Algorithm: sha256WithRSAEncryption 80:e9:cc:36:46:32:24:71:2b:df:9a:01:9e:04:cc:07:70:f7: 1f:de:8f:0b:b6:38:ce:c2:c0:06:90:85:15:b1:a3:c2:8a:a2: 7a:4e:d0:8a:74:6b:2f:26:96:46:79:4e:9e:0b:6c:f0:35:0f: 0e:36:72:41:92:83:bd:1c:f5:a4:83:3c:fc:9d:03:4a:1d:96: 1e:8f:68:77:7c:fa:9e:fc:e9:3b:c3:87:d3:46:61:dd:3d:d1: 99:f9:76:a0:cd:8c:22:37:7e:d1:19:8b:a1:69:bc:62:0f:20: 21:c8:69:b4:e6:09:52:e2:a0:17:53:a5:c4:f8:a7:7a:b6:c0: 46:18:11:c4:7d:d7:dc:19:96:96:e5:1a:20:d3:97:64:56:4d: 7b:0a:e1:09:4a:a8:a5:be:3a:98:83:1d:ce:40:9f:c7:cf:c3: 80:c5:de:fe:49:1b:de:a2:af:ff:9f:72:c6:13:70:05:a2:fa: 9f:b3:dc:52:58:16:21:af:c7:8e:ee:fa:8c:46:9d:f3:01:ac: 47:dd:5a:77:a0:fc:e8:e3:73:e5:e5:84:98:3b:6f:2f:34:b4: 72:b9:66:f4:84:c3:9e:3b:a5:76:f5:11:17:de:e6:1b:fc:f3: 5e:85:a6:ba:b1:a9:7e:7f:ab:e7:91:25:2d:be:cc:04:65:df: 04:97:85:b3 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE9EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRCOUY3NEI0MzNEMzYw MEQ2MTZCNkYwQjUyRkFGNzlDRjQ4OEIxMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCz6faCWaB9mJAMZ2HP3sTyrnJs7TjAq8t2NTcjqUoqYWV9hrjE kod2QY3tuyfTjVizB5m8rt16Ge91AkwQcDc1vcas8RdxXN+29WpmMf2pD2Kf9ySp BqCK9IS/iEYSOIujnoO14WUitHgKLvVtz1WeTggYM67l13TseHbZOU8U6utzTFl3 utEVVZp9UE9eyz/Sy4QjmFDkYaFpT/Evrhoi7ylhcKJgk89p7k2NP70NKdz5pQBb MI0Y8Na1YpnkU0nSSy8vI1n8ZY2HhhOhF/wrh/h9RRMP3N2jY6dM6GZGD0darsYZ jG7/1CNNcbxhbBVGj8UcwMPJxxQg5wE6qQ85AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUS590tDPTYA1ha28LUvr3nPSIsSkwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9TNTkwdERQVFlBMWhh MjhMVXZyM25QU0lzU2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnTvMA0GCSqGSIb3DQEBCwUAA4IBAQCA6cw2RjIkcSvfmgGeBMwHcPcf3o8L tjjOwsAGkIUVsaPCiqJ6TtCKdGsvJpZGeU6eC2zwNQ8ONnJBkoO9HPWkgzz8nQNK HZYej2h3fPqe/Ok7w4fTRmHdPdGZ+XagzYwiN37RGYuhabxiDyAhyGm05glS4qAX U6XE+Kd6tsBGGBHEfdfcGZaW5Rog05dkVk17CuEJSqilvjqYgx3OQJ/Hz8OAxd7+ SRveoq//n3LGE3AFovqfs9xSWBYhr8eO7vqMRp3zAaxH3Vp3oPzo43Pl5YSYO28v NLRyuWb0hMOeO6V29REX3uYb/PNehaa6sal+f6vnkSUtvswEZd8El4Wz -----END CERTIFICATE-----Generated at Sat Sep 6 13:47:44 2025 by rpki-client