$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iWSkRoe5MiAVwGBYU-jn-TyodGQ.roa File: iWSkRoe5MiAVwGBYU-jn-TyodGQ.roa (raw, json) Hash identifier: 2m8zerMyu0ZilBzWL1/FBoFjW+ObNz4kaJd7Lgwb0d4= Subject key identifier: 89:64:A4:46:87:B9:32:20:15:C0:60:58:53:E8:E7:F9:3C:A8:74:64 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13E2 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iWSkRoe5MiAVwGBYU-jn-TyodGQ.roa Signing time: Fri 22 Aug 2025 08:57:22 +0000 ROA not before: Fri 22 Aug 2025 08:57:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 63199 IP address blocks: 150.116.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 13:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5090 (0x13e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=8964A44687B9322015C0605853E8E7F93CA87464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:d8:08:96:2b:81:80:1c:0e:db:63:85:50: 5a:80:9a:7e:c3:94:83:ab:09:63:d9:4a:e1:c2:15: 7e:6a:e8:82:d1:6d:2e:aa:98:f5:2b:9c:c8:4a:72: 55:1d:d3:81:a7:7a:49:c7:a4:0d:75:68:51:37:ad: 08:80:1e:35:c3:af:d9:68:41:ee:7c:f8:13:41:29: 96:89:fc:c1:40:35:ac:bb:9e:f5:25:dd:59:58:2b: 1c:4c:47:92:fb:ae:b1:16:cc:68:52:7b:3f:2e:56: 68:ab:be:60:7f:31:4f:1e:5d:65:8b:fb:bd:35:b3: 59:8f:b3:8f:5f:aa:ca:c2:78:c4:25:1b:62:cd:62: 10:d3:38:cd:5f:a8:b0:cd:65:12:ac:4c:d9:97:9b: e6:83:14:94:28:40:a6:72:a9:5c:28:d3:33:20:3a: 57:da:5d:2d:01:98:ee:be:4a:46:e1:c1:03:51:ec: dd:5c:a2:d1:5d:68:7c:7b:34:c8:c9:1d:db:2f:b0: 6c:ea:0e:26:7f:bd:32:df:09:b2:41:63:8c:41:81: 9d:af:6d:fa:4c:f4:61:c5:2c:32:06:b5:67:cb:a0: 23:42:2b:77:48:40:e0:47:46:e0:d3:d7:a8:d7:14: 8c:2e:c0:19:9d:40:2a:50:09:44:7c:37:1a:bd:5a: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:64:A4:46:87:B9:32:20:15:C0:60:58:53:E8:E7:F9:3C:A8:74:64 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/iWSkRoe5MiAVwGBYU-jn-TyodGQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.5.0/24 Signature Algorithm: sha256WithRSAEncryption b1:fc:42:76:8b:38:98:88:e2:8b:90:b1:38:04:54:2a:76:5e: 01:d1:19:03:93:ab:a8:de:ab:72:4e:82:12:f2:5f:18:17:dd: f8:3c:18:bf:c3:c5:0c:35:1c:8b:85:d1:ae:ed:e5:f0:75:cd: ca:fa:44:cc:72:2a:14:4b:b3:1d:2a:47:8d:07:99:2a:86:c3: 8e:92:82:d7:b2:95:6d:d6:3c:34:6a:c2:b6:fd:64:f6:ca:62: af:4c:52:b0:fe:66:3a:41:c9:33:5f:8d:27:19:34:3f:f7:51: 12:73:78:34:a5:a0:3e:77:06:a9:0e:8f:79:bb:75:6c:ba:b3: 78:12:9d:f6:72:7c:66:f6:52:b8:4d:aa:c0:c7:5a:a2:52:eb: 3e:f3:90:79:95:6d:88:2a:95:e0:39:4c:51:ab:ed:ea:c5:f1: 31:db:52:36:19:4c:25:90:4d:7f:d3:86:f7:6e:ea:2a:ba:bb: 1c:80:c4:e8:7b:3f:a7:e1:e6:be:b7:fa:d4:34:6f:c2:12:78: 36:84:af:bd:79:06:ad:10:f0:9f:0e:f8:67:fa:fe:34:65:a8: 04:d9:8e:37:24:ea:6c:67:a2:11:9b:92:c1:18:b0:0d:f4:ac: 0e:48:eb:87:e5:cb:2d:80:97:38:b0:24:77:b6:9b:37:66:97: f0:30:13:f1 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE+IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg5NjRBNDQ2ODdCOTMy MjAxNUMwNjA1ODUzRThFN0Y5M0NBODc0NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6+9gIliuBgBwO22OFUFqAmn7DlIOrCWPZSuHCFX5q6ILRbS6q mPUrnMhKclUd04GneknHpA11aFE3rQiAHjXDr9loQe58+BNBKZaJ/MFANay7nvUl 3VlYKxxMR5L7rrEWzGhSez8uVmirvmB/MU8eXWWL+701s1mPs49fqsrCeMQlG2LN YhDTOM1fqLDNZRKsTNmXm+aDFJQoQKZyqVwo0zMgOlfaXS0BmO6+SkbhwQNR7N1c otFdaHx7NMjJHdsvsGzqDiZ/vTLfCbJBY4xBgZ2vbfpM9GHFLDIGtWfLoCNCK3dI QOBHRuDT16jXFIwuwBmdQCpQCUR8Nxq9Wq7VAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUiWSkRoe5MiAVwGBYU+jn+TyodGQwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9pV1NrUm9lNU1pQVZ3 R0JZVS1qbi1UeW9kR1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnQFMA0GCSqGSIb3DQEBCwUAA4IBAQCx/EJ2iziYiOKLkLE4BFQqdl4B0RkD k6uo3qtyToIS8l8YF934PBi/w8UMNRyLhdGu7eXwdc3K+kTMcioUS7MdKkeNB5kq hsOOkoLXspVt1jw0asK2/WT2ymKvTFKw/mY6QckzX40nGTQ/91ESc3g0paA+dwap Do95u3VsurN4Ep32cnxm9lK4TarAx1qiUus+85B5lW2IKpXgOUxRq+3qxfEx21I2 GUwlkE1/04b3buoqurscgMToez+n4ea+t/rUNG/CEng2hK+9eQatEPCfDvhn+v40 ZagE2Y43JOpsZ6IRm5LBGLAN9KwOSOuH5cstgJc4sCR3tps3ZpfwMBPx -----END CERTIFICATE-----Generated at Sun Sep 7 12:45:03 2025 by rpki-client