$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/X8qGz-XfuhM_JflGITKEkS_k3NY.roa File: X8qGz-XfuhM_JflGITKEkS_k3NY.roa (raw, json) Hash identifier: qBdwB+1rn2Y66JYzwNFUBQymGYzT97YHZu3obxDqgUs= Subject key identifier: 5F:CA:86:CF:E5:DF:BA:13:3F:25:F9:46:21:32:84:91:2F:E4:DC:D6 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13F2 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/X8qGz-XfuhM_JflGITKEkS_k3NY.roa Signing time: Fri 22 Aug 2025 08:57:25 +0000 ROA not before: Fri 22 Aug 2025 08:57:25 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 137263 IP address blocks: 113.21.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Sep 2025 02:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5106 (0x13f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:25 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5FCA86CFE5DFBA133F25F946213284912FE4DCD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:65:eb:21:34:ab:ab:8f:3e:18:d8:ba:83:ca: 9a:4f:48:c4:40:de:bd:18:2f:b4:2a:d1:d1:5c:2a: 68:5a:cd:03:c3:c7:87:b8:b2:f2:0c:72:c4:3b:3a: 88:61:e4:03:e4:a4:c2:c1:49:04:29:80:f4:e2:bd: f1:ae:78:d8:00:7f:d0:38:83:44:ea:ea:f8:c7:c3: 5b:1c:c9:14:25:ad:c6:68:91:22:24:de:04:2e:2d: 8e:1e:e8:69:b9:25:d5:1f:9a:99:5e:44:a7:47:ee: d8:1e:f0:b7:21:45:29:79:90:20:cd:1f:30:b2:b9: 91:3e:b0:9f:58:99:30:75:52:c5:f9:86:0e:9c:b7: 42:e8:1a:30:b1:b0:74:54:d6:f8:74:e5:2f:08:49: 67:a3:fd:ba:c8:8e:81:77:fb:81:c7:16:0d:50:9f: 96:81:9d:ef:fb:fc:4b:5f:a8:d1:88:25:4f:18:cb: 1d:19:34:b9:0a:e3:25:60:b7:66:95:09:4f:85:b6: 51:4a:fe:f8:9e:92:85:ae:9d:9b:6d:32:db:e9:d8: 9f:24:f2:06:b4:2d:ab:6c:23:4c:ff:1d:bb:bc:4b: b2:0a:66:ae:f6:01:9b:78:0e:28:0f:95:1c:36:93: 16:f2:14:26:38:ee:40:ec:ea:ea:f6:e8:a9:4e:24: 0c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CA:86:CF:E5:DF:BA:13:3F:25:F9:46:21:32:84:91:2F:E4:DC:D6 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/X8qGz-XfuhM_JflGITKEkS_k3NY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.21.92.0/24 Signature Algorithm: sha256WithRSAEncryption 93:99:ad:0d:1b:0d:a4:a0:6c:16:10:ea:e2:c6:6a:b7:07:ba: c6:ce:87:12:23:a7:81:b2:5e:19:79:ee:30:54:cd:da:66:7a: 4b:06:27:bb:6b:fb:75:2f:17:6e:fb:06:52:2d:99:e1:22:02: 93:c9:80:82:01:b7:47:1d:96:54:32:fe:a4:e6:81:c2:53:5c: 0b:74:54:14:40:01:8b:12:7b:83:d1:dc:26:2e:fa:12:c7:c7: 26:24:fc:df:7d:38:2c:5d:91:eb:a4:c5:8d:85:97:a9:57:48: cf:78:11:dd:07:6c:18:b4:dc:66:e1:70:47:9c:a0:01:a7:ed: ea:bd:c0:8b:ed:42:d8:35:db:84:c4:f6:6f:54:48:78:92:d0: 18:b9:5b:8d:dc:cb:9f:ab:a2:5c:64:f7:5a:bd:fb:0f:d4:aa: 01:20:ce:8e:c6:57:a0:ea:f9:c6:a7:08:33:d3:e2:ea:6b:3c: 61:47:a6:ec:d0:bb:f6:00:68:4d:cc:04:8d:4f:19:da:c9:37: 8d:19:ff:08:68:ae:52:01:15:a6:b3:ed:44:93:d9:0c:bd:b4: f8:39:7e:97:f6:95:d3:2d:63:43:f1:3a:44:52:e6:d8:87:75: 98:ea:6f:15:0d:46:32:a8:b0:18:cc:ca:88:fd:5c:f5:bd:a6: 6f:21:95:ef -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE/IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MjVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVGQ0E4NkNGRTVERkJB MTMzRjI1Rjk0NjIxMzI4NDkxMkZFNERDRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKZeshNKurjz4Y2LqDyppPSMRA3r0YL7Qq0dFcKmhazQPDx4e4 svIMcsQ7Oohh5APkpMLBSQQpgPTivfGueNgAf9A4g0Tq6vjHw1scyRQlrcZokSIk 3gQuLY4e6Gm5JdUfmpleRKdH7tge8LchRSl5kCDNHzCyuZE+sJ9YmTB1UsX5hg6c t0LoGjCxsHRU1vh05S8ISWej/brIjoF3+4HHFg1Qn5aBne/7/EtfqNGIJU8Yyx0Z NLkK4yVgt2aVCU+FtlFK/viekoWunZttMtvp2J8k8ga0LatsI0z/Hbu8S7IKZq72 AZt4DigPlRw2kxbyFCY47kDs6ur26KlOJAxdAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUX8qGz+XfuhM/JflGITKEkS/k3NYwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9YOHFHei1YZnVoTV9K ZmxHSVRLRWtTX2szTlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAcRVcMA0GCSqGSIb3DQEBCwUAA4IBAQCTma0NGw2koGwWEOrixmq3B7rGzocS I6eBsl4Zee4wVM3aZnpLBie7a/t1Lxdu+wZSLZnhIgKTyYCCAbdHHZZUMv6k5oHC U1wLdFQUQAGLEnuD0dwmLvoSx8cmJPzffTgsXZHrpMWNhZepV0jPeBHdB2wYtNxm 4XBHnKABp+3qvcCL7ULYNduExPZvVEh4ktAYuVuN3Mufq6JcZPdavfsP1KoBIM6O xleg6vnGpwgz0+LqazxhR6bs0Lv2AGhNzASNTxnayTeNGf8IaK5SARWms+1Ek9kM vbT4OX6X9pXTLWND8TpEUubYh3WY6m8VDUYyqLAYzMqI/Vz1vaZvIZXv -----END CERTIFICATE-----Generated at Thu Sep 4 00:10:16 2025 by rpki-client