$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/av56uK5mKD1HH-RxQn7MM4IRIGU.roa File: av56uK5mKD1HH-RxQn7MM4IRIGU.roa (raw, json) Hash identifier: Z4PrL8KxSW3o6CGOQdWgh0HCCoZc7zjPZAxLPPgAuK0= Subject key identifier: 6A:FE:7A:B8:AE:66:28:3D:47:1F:E4:71:42:7E:CC:33:82:11:20:65 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13F8 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/av56uK5mKD1HH-RxQn7MM4IRIGU.roa Signing time: Fri 22 Aug 2025 08:57:26 +0000 ROA not before: Fri 22 Aug 2025 08:57:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 150.116.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5112 (0x13f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6AFE7AB8AE66283D471FE471427ECC3382112065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5e:a0:32:77:b2:ed:1d:a7:a7:15:77:82:2f: 2d:0a:d3:6c:a9:2a:00:ff:fc:da:ca:49:5a:9e:ed: 6d:3a:70:d8:64:02:57:88:1b:3a:6e:a1:07:d7:9a: 04:bc:f9:4f:e3:e6:3e:b1:41:dc:9a:69:87:0e:a0: 53:c1:f9:1a:b9:7d:ad:6d:13:ea:70:d0:58:c8:cd: ab:38:71:1d:53:ac:1b:e2:f4:2f:12:33:2f:bf:e6: 3a:77:66:1b:13:e3:30:5f:76:0c:46:50:41:a4:84: 9d:60:68:58:a7:53:f9:a8:c2:7f:1b:50:75:45:39: ee:8d:32:be:77:06:d2:4e:e0:cb:00:81:d2:30:7f: 1e:c3:3b:46:ea:00:f7:0d:8d:ea:71:44:55:63:21: 7e:af:36:e9:a3:f4:03:e3:8b:9b:98:30:37:69:b3: 50:40:98:f2:ef:1d:94:16:3a:b9:ec:cf:00:92:71: da:20:0d:ab:c4:16:4d:82:2d:32:32:fe:b0:ce:55: d4:ec:9d:e7:5e:72:04:a4:1b:29:3f:22:13:b9:e9: 65:48:0c:bc:fd:9c:00:2f:e3:38:9b:f9:b6:56:69: 96:35:be:3c:3b:8b:3e:58:da:38:9c:d5:8a:3f:2c: 54:6a:23:40:fc:7a:ad:9d:17:db:8b:39:2e:da:8c: 59:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FE:7A:B8:AE:66:28:3D:47:1F:E4:71:42:7E:CC:33:82:11:20:65 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/av56uK5mKD1HH-RxQn7MM4IRIGU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.176.0/20 Signature Algorithm: sha256WithRSAEncryption a7:d9:07:b2:75:ab:fe:e2:d8:42:58:64:05:77:fc:3f:58:1f: 4d:fa:ff:8c:ac:f7:d2:ca:2e:2f:dd:9f:80:b8:59:96:af:ab: 6c:5b:e6:23:e4:3f:fa:ff:b0:45:a9:6c:27:82:85:0f:3b:fb: db:87:2e:0d:7f:e1:ab:8b:7c:47:dc:be:b1:de:8d:49:97:4b: ce:72:8a:59:c6:1d:a9:d6:75:c6:33:11:a5:cf:90:10:a6:fc: a6:47:16:48:c3:1f:fe:52:a1:6b:ee:9a:56:32:66:b3:58:a1: 3f:09:8c:e6:4c:2d:ab:89:bc:89:dd:b8:4b:22:47:18:f0:ba: e0:bf:c9:58:70:ab:e9:88:44:c7:83:21:2a:6a:eb:4c:0b:a3: 23:37:88:04:3e:da:93:4b:2b:ea:66:64:f1:c2:99:d7:68:0f: 35:4f:eb:b8:96:04:43:4b:f1:63:fd:4a:55:e6:90:e9:7f:ce: 5f:cc:2f:51:d7:81:e9:ea:ff:98:6b:fc:b5:60:16:9a:67:58: 80:b4:6e:62:52:be:c8:e1:3b:e1:60:e8:05:d3:6f:03:a6:31: 30:1d:be:9d:f8:bd:87:11:6b:ba:89:58:d1:e3:ef:59:72:03: 95:2b:4e:81:38:00:c8:f7:19:99:89:50:e4:ef:72:50:54:3c: 94:01:03:6b -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE/gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZBRkU3QUI4QUU2NjI4 M0Q0NzFGRTQ3MTQyN0VDQzMzODIxMTIwNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjXqAyd7LtHaenFXeCLy0K02ypKgD//NrKSVqe7W06cNhkAleI GzpuoQfXmgS8+U/j5j6xQdyaaYcOoFPB+Rq5fa1tE+pw0FjIzas4cR1TrBvi9C8S My+/5jp3ZhsT4zBfdgxGUEGkhJ1gaFinU/mown8bUHVFOe6NMr53BtJO4MsAgdIw fx7DO0bqAPcNjepxRFVjIX6vNumj9APji5uYMDdps1BAmPLvHZQWOrnszwCScdog DavEFk2CLTIy/rDOVdTsnedecgSkGyk/IhO56WVIDLz9nAAv4zib+bZWaZY1vjw7 iz5Y2jic1Yo/LFRqI0D8eq2dF9uLOS7ajFkBAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUav56uK5mKD1HH+RxQn7MM4IRIGUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9hdjU2dUs1bUtEMUhI LVJ4UW43TU00SVJJR1Uucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnSwMA0GCSqGSIb3DQEBCwUAA4IBAQCn2Qeydav+4thCWGQFd/w/WB9N+v+M rPfSyi4v3Z+AuFmWr6tsW+Yj5D/6/7BFqWwngoUPO/vbhy4Nf+Gri3xH3L6x3o1J l0vOcopZxh2p1nXGMxGlz5AQpvymRxZIwx/+UqFr7ppWMmazWKE/CYzmTC2ribyJ 3bhLIkcY8Lrgv8lYcKvpiETHgyEqautMC6MjN4gEPtqTSyvqZmTxwpnXaA81T+u4 lgRDS/Fj/UpV5pDpf85fzC9R14Hp6v+Ya/y1YBaaZ1iAtG5iUr7I4TvhYOgF028D pjEwHb6d+L2HEWu6iVjR4+9ZcgOVK06BOADI9xmZiVDk73JQVDyUAQNr -----END CERTIFICATE-----Generated at Sat Sep 6 13:50:34 2025 by rpki-client