$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eIbrA2UlGqvf-yvlMkZo80HGy-g.roa File: eIbrA2UlGqvf-yvlMkZo80HGy-g.roa (raw, json) Hash identifier: Tt15asHYzhbpvb/M1ydLvYVU/YFxVop+IMIc9bbO5Ls= Subject key identifier: 78:86:EB:03:65:25:1A:AB:DF:FB:2B:E5:32:46:68:F3:41:C6:CB:E8 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13D2 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eIbrA2UlGqvf-yvlMkZo80HGy-g.roa Signing time: Fri 22 Aug 2025 08:57:18 +0000 ROA not before: Fri 22 Aug 2025 08:57:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 150.116.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5074 (0x13d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7886EB0365251AABDFFB2BE5324668F341C6CBE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c2:f7:a2:ca:b5:49:c8:e9:f1:42:4f:ed:49: 28:5d:07:ff:6c:de:82:5c:e9:1d:83:50:a3:b6:aa: 0d:6f:49:9d:25:61:7e:31:93:1e:8e:2f:4e:0e:97: 72:79:e2:43:07:0b:70:60:a1:b6:aa:c4:6b:61:8d: df:92:3f:d1:5a:73:d0:6a:04:ea:83:4e:e2:9c:3d: 5d:f5:cb:fc:26:b5:6b:3d:ce:27:5d:d5:60:4d:92: e7:66:b0:0c:34:95:cf:1d:ec:70:4b:2e:8c:b5:08: ce:be:f7:a4:5c:7c:cb:b5:33:2c:c8:ee:9a:e2:b2: 0a:11:2e:1c:d0:b7:a2:99:26:1d:5e:6f:ee:40:52: c8:0f:1c:83:8b:90:68:bf:e9:2f:4f:75:b0:28:80: 2a:17:2e:8c:44:21:4b:94:9b:e4:89:7c:46:aa:60: ad:2a:68:1a:95:b0:51:6c:94:a0:f3:45:89:22:92: 55:e6:32:27:34:77:b3:38:c6:84:58:b5:c2:9d:b0: 5d:00:89:ba:1d:b4:9a:01:7e:35:58:12:f3:cd:83: f1:56:20:e9:71:8a:25:cc:ab:4a:d3:e0:ca:6b:49: 8d:a0:14:99:f3:fd:e6:89:96:5a:ac:24:2a:2e:f4: 8d:37:d0:b0:1d:d4:51:ce:52:86:da:6e:74:40:cc: b4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:86:EB:03:65:25:1A:AB:DF:FB:2B:E5:32:46:68:F3:41:C6:CB:E8 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eIbrA2UlGqvf-yvlMkZo80HGy-g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.240.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:40:80:0d:76:b7:a3:f3:df:c3:63:99:9f:33:82:06:4a:21: 74:c5:cd:90:49:0a:bb:56:a3:88:fc:1f:12:32:7a:c8:ed:f7: 36:2a:4d:21:cf:13:98:cc:9e:fe:b0:e7:aa:e1:06:22:7d:93: 9c:ad:ad:26:ee:61:8c:6a:76:f7:4a:25:44:b1:a2:58:86:25: 8b:cb:01:54:52:fc:19:31:7d:20:c0:84:bb:99:7e:2b:f2:a4: 31:4e:b7:29:a9:1d:20:4f:f2:71:d9:d4:d9:02:5c:d0:8a:02: 02:50:a1:9b:cd:08:36:52:2c:ef:4a:f8:0d:58:90:3f:92:99: 9b:ba:7d:28:6c:b9:fe:4e:e8:49:dc:e6:c9:2e:6b:2c:85:d5: cd:2f:40:9d:ea:3f:a3:87:c0:8f:88:1a:6e:21:aa:43:f2:e1: 0b:a1:f3:6c:d8:85:b6:0e:a4:37:6e:2c:54:03:60:98:3b:bb: 72:11:bc:d8:36:39:40:52:1a:26:3f:59:d7:71:e8:50:95:7f: f0:17:35:d6:7f:d9:11:f3:c6:12:31:dc:c7:f9:b2:4c:11:c0: bd:64:1e:46:d6:ca:91:f3:d7:11:17:7c:8b:84:f2:c6:ac:2d: 5c:ef:f7:e4:45:bd:8b:48:c5:47:ad:e0:a2:4b:9b:6d:b2:a7: a3:f6:85:2f -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE9IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc4ODZFQjAzNjUyNTFB QUJERkZCMkJFNTMyNDY2OEYzNDFDNkNCRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkwveiyrVJyOnxQk/tSShdB/9s3oJc6R2DUKO2qg1vSZ0lYX4x kx6OL04Ol3J54kMHC3BgobaqxGthjd+SP9Fac9BqBOqDTuKcPV31y/wmtWs9zidd 1WBNkudmsAw0lc8d7HBLLoy1CM6+96RcfMu1MyzI7prisgoRLhzQt6KZJh1eb+5A UsgPHIOLkGi/6S9PdbAogCoXLoxEIUuUm+SJfEaqYK0qaBqVsFFslKDzRYkiklXm Mic0d7M4xoRYtcKdsF0AibodtJoBfjVYEvPNg/FWIOlxiiXMq0rT4MprSY2gFJnz /eaJllqsJCou9I030LAd1FHOUobabnRAzLTfAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUeIbrA2UlGqvf+yvlMkZo80HGy+gwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9lSWJyQTJVbEdxdmYt eXZsTWtabzgwSEd5LWcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnTwMA0GCSqGSIb3DQEBCwUAA4IBAQAtQIANdrej89/DY5mfM4IGSiF0xc2Q SQq7VqOI/B8SMnrI7fc2Kk0hzxOYzJ7+sOeq4QYifZOcra0m7mGManb3SiVEsaJY hiWLywFUUvwZMX0gwIS7mX4r8qQxTrcpqR0gT/Jx2dTZAlzQigICUKGbzQg2Uizv SvgNWJA/kpmbun0obLn+TuhJ3ObJLmsshdXNL0Cd6j+jh8CPiBpuIapD8uELofNs 2IW2DqQ3bixUA2CYO7tyEbzYNjlAUhomP1nXcehQlX/wFzXWf9kR88YSMdzH+bJM EcC9ZB5G1sqR89cRF3yLhPLGrC1c7/fkRb2LSMVHreCiS5ttsqej9oUv -----END CERTIFICATE-----Generated at Sat Sep 6 13:50:55 2025 by rpki-client