$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/oGneb8aXn7SBU53PI7E5OBRLmtE.roa File: oGneb8aXn7SBU53PI7E5OBRLmtE.roa (raw, json) Hash identifier: ORbzXJXqO43JWxZICMbHvf59B8A3WKjOTLMSPBLde+M= Subject key identifier: A0:69:DE:6F:C6:97:9F:B4:81:53:9D:CF:23:B1:39:38:14:4B:9A:D1 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13FD Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/oGneb8aXn7SBU53PI7E5OBRLmtE.roa Signing time: Fri 22 Aug 2025 08:57:28 +0000 ROA not before: Fri 22 Aug 2025 08:57:28 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17408 IP address blocks: 150.117.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 18:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5117 (0x13fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:28 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A069DE6FC6979FB481539DCF23B13938144B9AD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:1a:1c:39:8e:93:3a:5e:dd:70:53:ed:77: a4:dc:84:ee:72:39:c0:9d:47:99:b7:d0:3b:ba:57: a8:6e:65:67:84:58:33:8f:22:51:fa:6e:67:3f:89: 28:04:93:0a:dc:ed:58:63:60:c1:49:ff:56:d8:46: fb:db:b4:14:d3:9c:d9:1e:22:41:59:eb:81:b5:4c: 59:b8:fd:6d:f2:4f:b8:01:f9:16:ac:b7:67:bf:e5: 40:69:78:ed:5d:26:8f:1d:bf:7d:10:ea:04:fb:99: 0e:32:48:1c:56:45:78:40:2d:d6:94:7e:36:85:b0: 0c:b3:7a:5f:20:df:6e:f4:48:93:00:8e:de:86:11: be:82:5a:a7:03:bc:82:9c:3e:cf:cd:62:41:df:42: 37:48:b5:c0:fa:57:94:62:a1:5c:e0:56:04:37:c6: 4f:37:49:e5:ca:18:32:ea:b6:24:7a:aa:d5:3f:0a: d5:43:58:76:63:0c:03:79:66:04:6f:cb:9b:1c:79: 51:34:52:ec:e0:32:9c:03:b5:12:0e:d5:36:18:7a: 57:7e:d8:e4:23:70:54:e3:b3:97:63:c3:39:2d:1a: 7e:16:35:8b:20:20:bb:4b:47:54:b9:f7:ea:7c:c9: 8f:06:53:a5:cf:f1:3e:30:5c:33:66:7b:57:29:0c: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:69:DE:6F:C6:97:9F:B4:81:53:9D:CF:23:B1:39:38:14:4B:9A:D1 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/oGneb8aXn7SBU53PI7E5OBRLmtE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.128.0/19 Signature Algorithm: sha256WithRSAEncryption 25:80:cf:8e:bb:60:20:4c:2a:43:09:08:1a:23:43:e8:42:7f: 07:71:40:ac:c2:f2:e8:45:47:b6:28:5a:18:fb:77:b7:33:b3: 25:69:df:02:b0:bf:4d:24:b1:34:d8:c4:bf:bb:82:99:02:43: 4a:1e:e3:b1:d1:93:00:60:16:45:4d:59:43:6c:90:3b:95:0e: 5d:8f:1e:ba:35:87:f7:df:ba:bb:ae:7e:f5:da:46:7a:fa:f5: 4a:92:45:1e:da:14:2c:4e:07:33:70:90:ca:3b:d2:02:ad:8d: 20:40:53:15:b4:ef:33:91:75:83:1f:b8:60:db:ef:21:8e:8a: 92:68:3f:db:d7:fd:4c:76:07:ec:ce:b0:e2:f8:77:28:18:e6: 52:58:5a:e9:2c:b0:16:e1:6b:3e:6f:1d:c5:18:ce:b3:be:81: 2f:4b:a8:70:6a:83:87:a7:fa:c7:ab:51:f1:08:3f:0a:73:ad: 3b:69:e5:0e:c9:3c:e3:cb:38:22:bc:8a:c8:6e:0c:1c:ef:57: ba:23:56:35:fd:77:0e:09:b0:67:08:6b:5b:43:39:e2:5a:25: e5:e4:7b:f1:33:89:c4:8c:cc:c4:db:2e:f7:56:2d:61:5d:d9: 6b:30:8b:87:bb:30:77:50:c0:25:1b:63:3b:84:a9:73:8d:5c: 64:54:7a:72 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MjhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEwNjlERTZGQzY5NzlG QjQ4MTUzOURDRjIzQjEzOTM4MTQ0QjlBRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnVhocOY6TOl7dcFPtd6TchO5yOcCdR5m30Du6V6huZWeEWDOP IlH6bmc/iSgEkwrc7VhjYMFJ/1bYRvvbtBTTnNkeIkFZ64G1TFm4/W3yT7gB+Ras t2e/5UBpeO1dJo8dv30Q6gT7mQ4ySBxWRXhALdaUfjaFsAyzel8g3270SJMAjt6G Eb6CWqcDvIKcPs/NYkHfQjdItcD6V5RioVzgVgQ3xk83SeXKGDLqtiR6qtU/CtVD WHZjDAN5ZgRvy5sceVE0UuzgMpwDtRIO1TYYeld+2OQjcFTjs5djwzktGn4WNYsg ILtLR1S59+p8yY8GU6XP8T4wXDNme1cpDERzAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUoGneb8aXn7SBU53PI7E5OBRLmtEwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9vR25lYjhhWG43U0JV NTNQSTdFNU9CUkxtdEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFlnWAMA0GCSqGSIb3DQEBCwUAA4IBAQAlgM+Ou2AgTCpDCQgaI0PoQn8HcUCs wvLoRUe2KFoY+3e3M7Mlad8CsL9NJLE02MS/u4KZAkNKHuOx0ZMAYBZFTVlDbJA7 lQ5djx66NYf337q7rn712kZ6+vVKkkUe2hQsTgczcJDKO9ICrY0gQFMVtO8zkXWD H7hg2+8hjoqSaD/b1/1MdgfszrDi+HcoGOZSWFrpLLAW4Ws+bx3FGM6zvoEvS6hw aoOHp/rHq1HxCD8Kc607aeUOyTzjyzgivIrIbgwc71e6I1Y1/XcOCbBnCGtbQzni WiXl5HvxM4nEjMzE2y73Vi1hXdlrMIuHuzB3UMAlG2M7hKlzjVxkVHpy -----END CERTIFICATE-----Generated at Sun Sep 7 16:22:46 2025 by rpki-client