$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/alVsMHeCnYaoJROwhodu-apwaKY.roa File: alVsMHeCnYaoJROwhodu-apwaKY.roa (raw, json) Hash identifier: ZLrkArR7oeKI5LxvQrtY3UybG5LyvaZ+5NxHDBg5Bp0= Subject key identifier: 6A:55:6C:30:77:82:9D:86:A8:25:13:B0:86:87:6E:F9:AA:70:68:A6 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13C8 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/alVsMHeCnYaoJROwhodu-apwaKY.roa Signing time: Fri 22 Aug 2025 08:57:16 +0000 ROA not before: Fri 22 Aug 2025 08:57:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 150.116.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5064 (0x13c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6A556C3077829D86A82513B086876EF9AA7068A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:77:d1:64:53:18:b0:05:d2:3c:de:93:c4:7e: 4a:af:e6:ab:01:79:df:85:d5:9b:81:70:ec:b5:62: e1:c2:1d:82:f2:27:bb:38:4a:b9:3b:23:c0:ad:cb: 72:66:eb:68:3f:d0:39:39:eb:53:39:46:0b:bb:60: aa:77:ac:80:d8:c3:b5:26:29:fb:39:a3:83:a8:35: cd:ea:3e:40:4f:d3:85:38:02:09:f0:44:61:d4:35: e5:7a:2d:ed:b1:8e:68:3d:72:9f:c4:5e:03:26:bb: d4:57:34:be:37:83:47:e9:7f:34:1a:04:5a:c6:aa: 63:d7:96:9a:6e:e0:64:52:53:f4:c2:ad:8e:28:a0: 6b:80:5d:5d:43:f0:69:fe:29:eb:f4:c0:00:a0:9b: 59:ff:24:f9:6a:5f:83:c8:8c:94:fb:58:e9:67:7e: 84:90:ad:e1:85:e6:b9:a0:4a:5d:69:2e:ca:4b:46: a8:fd:d6:86:3d:6e:59:47:fe:5d:4a:17:68:00:72: 79:75:fa:f8:27:4f:81:64:7f:e1:bf:30:79:8f:40: a1:d5:86:2b:38:0a:9b:f6:05:02:0c:58:2f:d9:c4: be:86:e7:60:89:89:39:80:07:f3:6e:c0:a6:83:34: 9e:1f:f9:f1:f7:5b:cb:9d:e4:73:02:be:91:7e:a0: 3d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:55:6C:30:77:82:9D:86:A8:25:13:B0:86:87:6E:F9:AA:70:68:A6 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/alVsMHeCnYaoJROwhodu-apwaKY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.192.0/18 Signature Algorithm: sha256WithRSAEncryption 66:c8:99:dd:a5:00:49:9c:a8:de:47:f9:c1:7d:43:77:f0:66: 03:0c:d9:f5:66:35:24:a8:63:39:c8:87:1e:61:b7:80:de:9e: 42:d5:25:33:b2:eb:68:c4:68:49:22:19:72:10:19:2a:39:94: 41:5d:e0:80:d6:79:1f:71:60:a4:ad:c4:d5:9f:24:46:46:cc: e7:a4:33:23:8f:48:4a:1b:39:0d:2b:8e:7a:cf:c6:e6:03:34: 0e:12:2f:ee:34:b7:68:b7:7d:6f:96:3d:67:ff:b6:17:38:ac: 3c:ac:1c:59:38:c3:8b:4a:a4:4b:6e:75:0e:53:a8:29:5d:16: 8a:44:0a:92:9a:9f:ee:e9:3c:54:e8:ea:8b:f8:91:4b:36:2d: 1a:8a:78:9d:36:b0:16:f5:a3:37:64:ec:69:f1:02:c0:d1:b5: 08:05:e1:78:4f:e5:72:49:db:c4:b3:b5:42:3b:c0:ba:29:39: 80:f2:84:91:1d:39:4a:37:77:35:df:8f:0c:44:33:9d:7c:d3: 58:c0:6a:dc:ac:77:bf:01:ee:4c:fa:3f:48:33:ef:67:f2:94: 32:c4:06:cd:72:cd:6b:8a:ff:b9:c0:51:f7:f6:3c:6e:25:43: 9b:cd:7e:fc:80:10:d0:1f:b5:cc:3d:64:d5:c4:aa:52:b1:0d: df:70:97:45 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZBNTU2QzMwNzc4MjlE ODZBODI1MTNCMDg2ODc2RUY5QUE3MDY4QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjd9FkUxiwBdI83pPEfkqv5qsBed+F1ZuBcOy1YuHCHYLyJ7s4 Srk7I8Cty3Jm62g/0Dk561M5Rgu7YKp3rIDYw7UmKfs5o4OoNc3qPkBP04U4Agnw RGHUNeV6Le2xjmg9cp/EXgMmu9RXNL43g0fpfzQaBFrGqmPXlppu4GRSU/TCrY4o oGuAXV1D8Gn+Kev0wACgm1n/JPlqX4PIjJT7WOlnfoSQreGF5rmgSl1pLspLRqj9 1oY9bllH/l1KF2gAcnl1+vgnT4Fkf+G/MHmPQKHVhis4Cpv2BQIMWC/ZxL6G52CJ iTmAB/NuwKaDNJ4f+fH3W8ud5HMCvpF+oD2JAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUalVsMHeCnYaoJROwhodu+apwaKYwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9hbFZzTUhlQ25ZYW9K Uk93aG9kdS1hcHdhS1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQGlnTAMA0GCSqGSIb3DQEBCwUAA4IBAQBmyJndpQBJnKjeR/nBfUN38GYDDNn1 ZjUkqGM5yIceYbeA3p5C1SUzsutoxGhJIhlyEBkqOZRBXeCA1nkfcWCkrcTVnyRG RsznpDMjj0hKGzkNK456z8bmAzQOEi/uNLdot31vlj1n/7YXOKw8rBxZOMOLSqRL bnUOU6gpXRaKRAqSmp/u6TxU6OqL+JFLNi0ainidNrAW9aM3ZOxp8QLA0bUIBeF4 T+VySdvEs7VCO8C6KTmA8oSRHTlKN3c1348MRDOdfNNYwGrcrHe/Ae5M+j9IM+9n 8pQyxAbNcs1riv+5wFH39jxuJUObzX78gBDQH7XMPWTVxKpSsQ3fcJdF -----END CERTIFICATE-----Generated at Sat Sep 6 13:51:33 2025 by rpki-client