$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/bMpeVQP-kzw83qiD5YkBf8q1_8k.roa File: bMpeVQP-kzw83qiD5YkBf8q1_8k.roa (raw, json) Hash identifier: fz8zYQRwkk8KmOpekBCQUiZjIgW5+bLY1F0GYuahmj0= Subject key identifier: 6C:CA:5E:55:03:FE:93:3C:3C:DE:A8:83:E5:89:01:7F:CA:B5:FF:C9 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13FB Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/bMpeVQP-kzw83qiD5YkBf8q1_8k.roa Signing time: Fri 22 Aug 2025 08:57:27 +0000 ROA not before: Fri 22 Aug 2025 08:57:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 150.116.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5115 (0x13fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6CCA5E5503FE933C3CDEA883E589017FCAB5FFC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dc:0d:eb:18:6c:5c:3a:c0:96:9c:56:b1:b2: d1:29:a7:9d:94:64:58:2e:21:c1:37:a1:66:0b:08: 48:c0:ae:27:0d:e5:2e:88:0d:b8:11:c0:53:99:f9: 58:36:9c:ae:46:44:a0:b2:a0:b6:19:ab:81:59:10: 84:0d:96:02:91:3f:77:f0:6f:df:d5:0a:ac:b7:4f: 26:30:f4:83:24:29:41:a5:f3:fa:cd:46:20:6f:94: 4f:f3:05:8d:04:1e:83:37:8b:c6:63:f1:05:9d:3c: 99:fb:13:54:6a:bf:4e:d0:4f:c0:86:cc:44:4f:b5: b0:08:ed:9f:2c:9b:97:82:41:15:ea:56:a4:ca:f4: 92:bf:22:ff:2b:d5:49:59:71:55:ea:81:4b:64:5e: 02:c8:3b:41:b3:bc:b9:0f:46:df:ba:c1:c3:09:58: 09:9a:9f:6f:78:f6:86:28:ee:1b:e5:29:0a:cc:7a: a8:b1:5f:23:f4:b0:2e:1b:8d:dd:fd:39:43:cc:93: 08:91:53:69:c9:66:95:32:97:5d:12:ea:ce:3b:7f: 90:10:1d:87:ec:36:57:bf:8b:c3:f8:d3:65:50:21: 61:ce:ec:78:07:4b:a1:dc:3d:71:db:7b:ce:cf:a1: 40:bc:e4:2f:82:39:81:d3:78:26:5d:b1:22:28:cd: 13:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CA:5E:55:03:FE:93:3C:3C:DE:A8:83:E5:89:01:7F:CA:B5:FF:C9 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/bMpeVQP-kzw83qiD5YkBf8q1_8k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.84.0/22 Signature Algorithm: sha256WithRSAEncryption 93:65:a0:95:f0:e8:42:f2:b0:a1:9e:03:6a:49:42:0c:df:16: 8d:4d:6a:cf:f4:d8:15:00:87:32:1e:03:eb:a3:ae:50:1a:ad: 9b:cd:45:ba:47:ca:06:3a:5c:09:5f:b3:fe:63:21:38:cf:db: 54:8c:10:00:8d:07:f6:da:72:7f:12:29:51:21:c2:a2:15:4c: d8:b3:6d:b0:3c:83:b0:ae:18:52:43:d0:c0:04:e5:64:f8:9f: fc:b1:63:a1:df:df:36:15:e9:1f:de:78:b5:1a:17:65:8c:9c: 6b:29:be:a3:9e:71:f0:2d:5b:9a:54:8e:e4:fa:01:b0:d2:7b: c8:2e:62:a4:c4:23:ac:9d:02:0d:a7:a0:08:ea:99:c9:09:38: 17:67:8c:1e:3b:a8:8b:1b:ec:48:ea:26:b8:ce:1b:b8:b7:a8: 44:92:5c:43:60:18:42:a1:11:31:5b:38:08:9f:b3:5b:04:e2: 69:b9:82:05:87:40:d5:0c:e7:02:fa:05:39:5e:5f:d2:e6:53: b5:79:00:31:ba:07:33:1e:80:46:d4:2e:95:a7:eb:70:d0:c1: 19:59:50:2e:97:f2:7e:79:76:e2:c1:20:b8:0b:64:85:42:4a: 46:ed:07:06:dc:04:67:49:b0:2d:5d:6b:e8:1d:f5:ed:f4:9f: 8e:10:cd:d1 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE/swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZDQ0E1RTU1MDNGRTkz M0MzQ0RFQTg4M0U1ODkwMTdGQ0FCNUZGQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCh3A3rGGxcOsCWnFaxstEpp52UZFguIcE3oWYLCEjAricN5S6I DbgRwFOZ+Vg2nK5GRKCyoLYZq4FZEIQNlgKRP3fwb9/VCqy3TyYw9IMkKUGl8/rN RiBvlE/zBY0EHoM3i8Zj8QWdPJn7E1Rqv07QT8CGzERPtbAI7Z8sm5eCQRXqVqTK 9JK/Iv8r1UlZcVXqgUtkXgLIO0GzvLkPRt+6wcMJWAman2949oYo7hvlKQrMeqix XyP0sC4bjd39OUPMkwiRU2nJZpUyl10S6s47f5AQHYfsNle/i8P402VQIWHO7HgH S6HcPXHbe87PoUC85C+COYHTeCZdsSIozRODAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUbMpeVQP+kzw83qiD5YkBf8q1/8kwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9iTXBlVlFQLWt6dzgz cWlENVlrQmY4cTFfOGsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQClnRUMA0GCSqGSIb3DQEBCwUAA4IBAQCTZaCV8OhC8rChngNqSUIM3xaNTWrP 9NgVAIcyHgPro65QGq2bzUW6R8oGOlwJX7P+YyE4z9tUjBAAjQf22nJ/EilRIcKi FUzYs22wPIOwrhhSQ9DABOVk+J/8sWOh3982Fekf3ni1GhdljJxrKb6jnnHwLVua VI7k+gGw0nvILmKkxCOsnQINp6AI6pnJCTgXZ4weO6iLG+xI6ia4zhu4t6hEklxD YBhCoRExWzgIn7NbBOJpuYIFh0DVDOcC+gU5Xl/S5lO1eQAxugczHoBG1C6Vp+tw 0MEZWVAul/J+eXbiwSC4C2SFQkpG7QcG3ARnSbAtXWvoHfXt9J+OEM3R -----END CERTIFICATE-----Generated at Sat Sep 6 13:55:13 2025 by rpki-client