$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/b4RDp8oyvXQuBslDHT1IrEkr5Nk.roa File: b4RDp8oyvXQuBslDHT1IrEkr5Nk.roa (raw, json) Hash identifier: BX5ezr3cgbn1mNhIBY0QB3SKPqUvKNmDsvCUIOs02c0= Subject key identifier: 6F:84:43:A7:CA:32:BD:74:2E:06:C9:43:1D:3D:48:AC:49:2B:E4:D9 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1410 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/b4RDp8oyvXQuBslDHT1IrEkr5Nk.roa Signing time: Fri 22 Aug 2025 08:57:31 +0000 ROA not before: Fri 22 Aug 2025 08:57:31 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18419 IP address blocks: 118.150.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5136 (0x1410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:31 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6F8443A7CA32BD742E06C9431D3D48AC492BE4D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:45:19:ac:54:de:3e:c5:2f:8e:e0:0e:d5:cf: fd:6e:23:47:a8:b5:79:a2:ca:8b:59:ef:b3:5f:da: 8b:00:5f:f0:6e:98:75:7b:c9:24:cf:23:5f:7c:ea: d4:e2:81:4b:89:d0:21:e7:79:fe:db:8f:74:b6:1b: 57:02:33:51:ff:54:c6:6f:ba:5e:d5:18:5a:00:b2: 82:d9:d7:4f:5d:fd:c0:94:fd:45:08:cc:4e:f7:c4: ba:21:63:a2:77:66:2d:41:59:7b:0a:ba:9c:ab:b7: f1:05:0e:fb:fd:4d:0f:1a:89:ab:90:9e:01:9b:68: a1:de:6e:a1:b7:4b:72:b5:84:1c:4e:5d:91:8e:41: 28:7d:4c:3b:01:68:5b:a9:f2:41:5d:66:2c:70:95: fd:ff:32:7a:f9:67:f6:44:fc:1b:3f:bb:26:ea:9e: 3a:77:82:9e:42:00:66:f1:ab:ec:a7:a3:16:90:ff: 0f:e1:3e:3a:00:6a:77:85:3e:bb:bd:e9:22:d8:49: 3b:20:a4:72:23:f0:ee:db:2e:a5:04:5f:dd:42:f3: 6c:7d:d5:0a:99:00:08:8e:4a:c8:0f:28:4e:9f:3e: 76:35:1a:65:67:11:98:5f:97:43:81:a0:d4:fd:96: 55:55:44:cf:2c:a3:f3:86:3c:f5:f9:37:6e:52:52: 04:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:84:43:A7:CA:32:BD:74:2E:06:C9:43:1D:3D:48:AC:49:2B:E4:D9 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/b4RDp8oyvXQuBslDHT1IrEkr5Nk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 118.150.252.0/22 Signature Algorithm: sha256WithRSAEncryption 90:0f:26:7b:4c:86:2f:1c:d3:71:59:77:86:9e:df:2b:95:e7: 59:d1:0b:00:d6:07:b2:a5:c3:0a:7a:49:91:83:6c:7f:2e:fc: ae:62:e1:1a:31:48:29:21:2b:2e:68:5e:21:d4:e3:13:19:3c: 06:d2:e8:ce:24:cf:0e:f8:90:73:ba:97:8d:5a:74:df:19:b9: be:21:dc:ab:70:9f:d8:73:e5:88:0a:b6:51:f6:b4:3e:19:72: 00:88:29:2f:c0:e2:b4:d7:3d:2f:e2:2f:fb:c8:0f:02:44:93: d6:8b:6b:9d:05:28:d3:56:77:d5:e4:c2:51:bd:87:56:8c:0e: b2:e3:de:c7:25:3d:f6:9d:b9:cc:01:46:f8:f6:ed:16:dd:7d: 48:ae:00:ab:dc:92:5d:0a:fe:c1:ba:1b:eb:dc:0d:8d:32:76: ab:3c:f9:a6:1a:fc:ba:76:31:8b:ed:24:51:4b:61:95:99:7d: 80:80:5f:45:51:4c:3d:8a:f9:4a:08:b5:da:d6:c9:1e:74:f6: 19:55:bf:86:50:62:a5:ad:d7:c2:a9:5c:2a:31:93:0d:8a:9b: 2e:d2:c8:a7:17:05:b4:a4:d8:ee:dd:9e:d5:de:a1:09:39:19: 96:91:97:88:9e:1b:97:4e:46:ff:0f:8b:b5:f4:82:9b:7a:34: ef:98:14:97 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZGODQ0M0E3Q0EzMkJE NzQyRTA2Qzk0MzFEM0Q0OEFDNDkyQkU0RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDqRRmsVN4+xS+O4A7Vz/1uI0eotXmiyotZ77Nf2osAX/BumHV7 ySTPI1986tTigUuJ0CHnef7bj3S2G1cCM1H/VMZvul7VGFoAsoLZ109d/cCU/UUI zE73xLohY6J3Zi1BWXsKupyrt/EFDvv9TQ8aiauQngGbaKHebqG3S3K1hBxOXZGO QSh9TDsBaFup8kFdZixwlf3/Mnr5Z/ZE/Bs/uybqnjp3gp5CAGbxq+ynoxaQ/w/h PjoAaneFPru96SLYSTsgpHIj8O7bLqUEX91C82x91QqZAAiOSsgPKE6fPnY1GmVn EZhfl0OBoNT9llVVRM8so/OGPPX5N25SUgTRAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUb4RDp8oyvXQuBslDHT1IrEkr5NkwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9iNFJEcDhveXZYUXVC c2xESFQxSXJFa3I1Tmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCdpb8MA0GCSqGSIb3DQEBCwUAA4IBAQCQDyZ7TIYvHNNxWXeGnt8rledZ0QsA 1geypcMKekmRg2x/LvyuYuEaMUgpISsuaF4h1OMTGTwG0ujOJM8O+JBzupeNWnTf Gbm+IdyrcJ/Yc+WICrZR9rQ+GXIAiCkvwOK01z0v4i/7yA8CRJPWi2udBSjTVnfV 5MJRvYdWjA6y497HJT32nbnMAUb49u0W3X1IrgCr3JJdCv7Buhvr3A2NMnarPPmm Gvy6djGL7SRRS2GVmX2AgF9FUUw9ivlKCLXa1skedPYZVb+GUGKlrdfCqVwqMZMN ipsu0sinFwW0pNju3Z7V3qEJORmWkZeInhuXTkb/D4u19IKbejTvmBSX -----END CERTIFICATE-----Generated at Sat Sep 6 12:08:07 2025 by rpki-client