$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/h0_-Gnk0PhogNGo8su2sqEvDZEA.roa File: h0_-Gnk0PhogNGo8su2sqEvDZEA.roa (raw, json) Hash identifier: dEdn7VTUaDJcZr8AgH6sPgTeGnc+zdUIOc8vfnZT/fA= Subject key identifier: 87:4F:FE:1A:79:34:3E:1A:20:34:6A:3C:B2:ED:AC:A8:4B:C3:64:40 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13BD Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/h0_-Gnk0PhogNGo8su2sqEvDZEA.roa Signing time: Fri 22 Aug 2025 08:57:13 +0000 ROA not before: Fri 22 Aug 2025 08:57:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 150.116.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5053 (0x13bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=874FFE1A79343E1A20346A3CB2EDACA84BC36440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:8a:0c:74:14:ff:5c:3d:41:19:5e:02:5d: 96:21:20:77:ce:43:9f:b0:50:eb:9c:4b:66:2c:c0: 56:bb:27:ef:49:c2:79:ad:11:af:fa:72:56:55:8e: 7b:52:3b:62:a3:41:0c:6f:11:d7:f8:4a:72:10:51: 02:a1:96:d3:0c:9f:16:28:ac:07:9b:19:b2:e1:83: de:b9:53:db:f0:a8:87:e1:2e:c1:52:cb:24:34:fc: 70:b7:44:7a:b9:9e:be:2b:ac:44:a2:f5:c3:a9:d6: c4:98:60:54:e3:e9:f1:7f:3b:61:4c:9d:cb:15:32: fb:20:1c:f8:f3:14:36:87:a5:38:40:e4:81:94:3c: 0f:b2:09:42:d3:35:ff:52:63:bb:cb:d2:3a:a8:4c: f7:18:e2:63:0b:57:ec:3d:0c:3f:7d:42:a1:18:9a: 3f:aa:63:63:37:18:10:93:cb:9b:aa:f6:ab:35:e4: 40:d3:44:c6:04:dc:21:61:69:4e:05:4e:38:67:1a: 2c:d0:cc:a0:41:55:f9:96:23:ac:03:cd:3f:25:f6: 08:80:e4:78:e6:68:d8:8b:67:1d:2f:ea:ea:04:be: 79:e6:e0:29:56:09:68:5b:eb:7f:0d:14:ff:73:a7: a8:40:88:5d:85:e9:d3:82:98:33:6a:17:0b:b7:4b: e2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4F:FE:1A:79:34:3E:1A:20:34:6A:3C:B2:ED:AC:A8:4B:C3:64:40 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/h0_-Gnk0PhogNGo8su2sqEvDZEA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.144.0/20 Signature Algorithm: sha256WithRSAEncryption 4c:a6:c4:5a:ce:ce:2d:4d:63:9d:7b:1d:e7:8a:01:30:ea:00: e7:61:21:4b:e4:21:c9:c1:ee:6e:a0:b3:88:68:74:96:16:12: 07:a8:5c:5b:31:46:4b:5b:68:56:2d:c3:17:97:23:95:37:6a: 00:7a:a3:e5:8c:53:10:73:ab:37:13:a5:2e:b8:0b:b5:f6:09: c7:91:92:ef:01:90:c5:80:42:02:d8:9c:0d:2c:f8:0c:1f:db: c1:51:69:6d:d7:79:16:fc:88:e7:ea:f9:cd:59:74:93:a0:32: 8b:5a:2a:b7:a1:30:34:07:5f:e5:da:d1:e1:34:b5:65:2c:22: 93:cf:fd:17:af:5b:9f:74:89:e6:fe:b1:2a:8b:b1:b3:43:62: 64:74:7a:c6:5e:3f:bc:2d:1b:61:80:ac:e1:64:11:e7:3d:cb: b9:ae:af:d3:15:b1:f1:98:04:64:11:0e:aa:95:e1:5a:87:c5: 9b:3e:43:62:d8:58:97:ca:b7:20:de:f1:d2:8e:cb:d0:99:fa: 28:bd:76:35:64:57:0b:52:80:f0:22:56:c5:d6:83:71:3e:9c: 58:d5:e4:6c:1d:59:ee:51:f9:48:55:c7:c8:e4:31:d2:74:99: 6a:d9:cf:08:45:b3:95:d9:19:ff:e4:05:f6:21:d1:5f:ad:61: a1:e1:57:4a -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE70wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg3NEZGRTFBNzkzNDNF MUEyMDM0NkEzQ0IyRURBQ0E4NEJDMzY0NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClm4oMdBT/XD1BGV4CXZYhIHfOQ5+wUOucS2YswFa7J+9Jwnmt Ea/6clZVjntSO2KjQQxvEdf4SnIQUQKhltMMnxYorAebGbLhg965U9vwqIfhLsFS yyQ0/HC3RHq5nr4rrESi9cOp1sSYYFTj6fF/O2FMncsVMvsgHPjzFDaHpThA5IGU PA+yCULTNf9SY7vL0jqoTPcY4mMLV+w9DD99QqEYmj+qY2M3GBCTy5uq9qs15EDT RMYE3CFhaU4FTjhnGizQzKBBVfmWI6wDzT8l9giA5HjmaNiLZx0v6uoEvnnm4ClW CWhb638NFP9zp6hAiF2F6dOCmDNqFwu3S+IhAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUh0/+Gnk0PhogNGo8su2sqEvDZEAwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9oMF8tR25rMFBob2dO R284c3Uyc3FFdkRaRUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnSQMA0GCSqGSIb3DQEBCwUAA4IBAQBMpsRazs4tTWOdex3nigEw6gDnYSFL 5CHJwe5uoLOIaHSWFhIHqFxbMUZLW2hWLcMXlyOVN2oAeqPljFMQc6s3E6UuuAu1 9gnHkZLvAZDFgEIC2JwNLPgMH9vBUWlt13kW/Ijn6vnNWXSToDKLWiq3oTA0B1/l 2tHhNLVlLCKTz/0Xr1ufdInm/rEqi7GzQ2JkdHrGXj+8LRthgKzhZBHnPcu5rq/T FbHxmARkEQ6qleFah8WbPkNi2FiXyrcg3vHSjsvQmfoovXY1ZFcLUoDwIlbF1oNx PpxY1eRsHVnuUflIVcfI5DHSdJlq2c8IRbOV2Rn/5AX2IdFfrWGh4VdK -----END CERTIFICATE-----Generated at Sat Sep 6 13:55:12 2025 by rpki-client