$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/c-dKErYb3oqnZTjpahscsCqB_f0.roa File: c-dKErYb3oqnZTjpahscsCqB_f0.roa (raw, json) Hash identifier: 6S+OcYWAszHK7dc+AlPkNu9GWmSB89vkI8rmtak8yuQ= Subject key identifier: 73:E7:4A:12:B6:1B:DE:8A:A7:65:38:E9:6A:1B:1C:B0:2A:81:FD:FD Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1401 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/c-dKErYb3oqnZTjpahscsCqB_f0.roa Signing time: Fri 22 Aug 2025 08:57:28 +0000 ROA not before: Fri 22 Aug 2025 08:57:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17408 IP address blocks: 113.21.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 18:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5121 (0x1401) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=73E74A12B61BDE8AA76538E96A1B1CB02A81FDFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4f:8e:d8:55:2e:69:e8:8a:e2:69:40:0c:93: ba:52:b2:47:0b:67:6e:90:d0:b3:e7:23:ed:88:7c: b1:3d:95:36:be:2c:5f:7c:0d:b6:76:a2:85:40:3c: ec:5a:54:72:38:e0:36:37:bb:f6:5e:04:c1:52:86: 3e:20:b6:d7:29:b1:5b:62:5d:3b:00:2d:41:9b:b8: 18:a4:16:9c:db:2e:e6:4e:ff:d4:3a:42:07:fa:f4: 06:f6:1f:0b:10:21:d1:3e:40:04:c2:da:f9:47:7b: 56:23:83:12:3d:14:d9:89:bf:d9:81:04:30:ae:6f: 59:58:3d:82:f7:b3:ea:66:e0:14:60:da:b1:0f:e5: cb:e2:18:22:12:54:5d:87:d7:1a:a5:f9:7b:0e:72: 2a:09:59:e4:a0:1f:4d:12:9f:66:b0:f5:8f:e1:22: 2e:bc:62:c1:76:85:c6:3a:4c:5d:d2:2c:02:ca:79: 66:fa:30:9b:a3:65:c3:8d:aa:ab:ef:34:f1:5b:6f: 40:3a:e4:33:7b:15:af:34:39:b9:7e:60:58:bc:fe: db:27:13:14:bf:08:68:43:35:b1:fe:48:b4:e2:9f: 38:92:72:1a:f9:3e:39:ba:4c:e8:1f:6f:a8:81:22: 83:e0:b1:3c:06:bd:0b:f0:fb:eb:14:32:89:9f:13: 1a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E7:4A:12:B6:1B:DE:8A:A7:65:38:E9:6A:1B:1C:B0:2A:81:FD:FD X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/c-dKErYb3oqnZTjpahscsCqB_f0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 113.21.95.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:bb:b8:01:6c:bc:2b:cb:02:bb:bb:eb:52:42:e3:bf:93:1c: 2d:e2:ba:71:18:7e:c4:71:b9:8e:3d:94:49:44:20:be:82:68: 8d:f5:3b:d8:09:35:b5:fb:f7:7b:a5:87:81:a2:f8:1c:4d:36: 74:9b:ea:a8:0c:a6:f7:13:fc:dc:d2:90:28:cd:21:59:2f:83: ad:ae:4f:47:ae:a1:53:f4:77:fe:18:fb:e8:51:43:25:40:6e: 00:e5:4c:e6:a3:a1:dd:42:23:50:00:95:6f:79:fe:0c:57:f7: 83:48:f4:87:31:41:85:d6:c1:43:ad:90:8c:43:4a:06:6b:5b: 5a:e6:69:d7:e8:48:96:4f:b8:6b:16:a9:e6:54:f1:b8:a5:d0: 64:44:64:24:b0:89:35:c8:7d:12:10:0e:5b:22:97:30:c0:26: 88:3b:3a:82:65:69:42:1c:5a:cf:27:d4:76:55:c8:92:3d:9a: f9:d1:cd:7e:ec:24:82:cd:e6:fa:48:4f:d2:43:37:6e:66:d3: c8:9d:a0:0c:1f:6c:e4:2a:cb:1d:4f:a5:21:0e:df:87:ab:2e: 39:0d:2d:25:7f:26:f7:d9:f5:11:2c:79:a1:53:ff:5b:eb:fa: 25:65:33:69:ad:eb:58:59:18:d4:ca:2c:08:16:f7:cf:a4:13: c9:1e:eb:94 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFAEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDczRTc0QTEyQjYxQkRF OEFBNzY1MzhFOTZBMUIxQ0IwMkE4MUZERkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtT47YVS5p6IriaUAMk7pSskcLZ26Q0LPnI+2IfLE9lTa+LF98 DbZ2ooVAPOxaVHI44DY3u/ZeBMFShj4gttcpsVtiXTsALUGbuBikFpzbLuZO/9Q6 Qgf69Ab2HwsQIdE+QATC2vlHe1YjgxI9FNmJv9mBBDCub1lYPYL3s+pm4BRg2rEP 5cviGCISVF2H1xql+XsOcioJWeSgH00Sn2aw9Y/hIi68YsF2hcY6TF3SLALKeWb6 MJujZcONqqvvNPFbb0A65DN7Fa80Obl+YFi8/tsnExS/CGhDNbH+SLTinziSchr5 Pjm6TOgfb6iBIoPgsTwGvQvw++sUMomfExqDAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUc+dKErYb3oqnZTjpahscsCqB/f0wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9jLWRLRXJZYjNvcW5a VGpwYWhzY3NDcUJfZjAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAcRVfMA0GCSqGSIb3DQEBCwUAA4IBAQBeu7gBbLwrywK7u+tSQuO/kxwt4rpx GH7EcbmOPZRJRCC+gmiN9TvYCTW1+/d7pYeBovgcTTZ0m+qoDKb3E/zc0pAozSFZ L4Otrk9HrqFT9Hf+GPvoUUMlQG4A5Uzmo6HdQiNQAJVvef4MV/eDSPSHMUGF1sFD rZCMQ0oGa1ta5mnX6EiWT7hrFqnmVPG4pdBkRGQksIk1yH0SEA5bIpcwwCaIOzqC ZWlCHFrPJ9R2VciSPZr50c1+7CSCzeb6SE/SQzduZtPInaAMH2zkKssdT6UhDt+H qy45DS0lfyb32fURLHmhU/9b6/olZTNpretYWRjUyiwIFvfPpBPJHuuU -----END CERTIFICATE-----Generated at Sun Sep 7 16:22:19 2025 by rpki-client