$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/p-jwzLW_Nxohm2fkv9gD8p2GjEs.roa File: p-jwzLW_Nxohm2fkv9gD8p2GjEs.roa (raw, json) Hash identifier: tG+8OrcRm+D4SQIezh2X1SBrh/V49EbovvHxz+80//E= Subject key identifier: A7:E8:F0:CC:B5:BF:37:1A:21:9B:67:E4:BF:D8:03:F2:9D:86:8C:4B Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13E9 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/p-jwzLW_Nxohm2fkv9gD8p2GjEs.roa Signing time: Fri 22 Aug 2025 08:57:24 +0000 ROA not before: Fri 22 Aug 2025 08:57:24 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131607 IP address blocks: 150.117.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 18:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5097 (0x13e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:24 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A7E8F0CCB5BF371A219B67E4BFD803F29D868C4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d8:73:20:bd:70:1f:37:e4:88:1c:6e:72:8e: d4:0f:76:0a:67:56:19:ea:b8:29:b7:c8:a0:6d:55: ba:96:60:51:93:56:83:2c:79:c2:09:61:09:bb:d9: 3a:3f:ab:cc:72:80:30:c3:e1:fa:9e:ea:2b:55:88: ce:e6:2f:96:32:33:95:a9:21:bc:6e:d9:f3:03:e6: 27:08:95:84:31:88:5c:86:1c:0c:3e:11:be:56:70: 5d:0d:15:d9:f9:ea:db:3c:58:f0:1d:64:1c:91:a9: 94:1b:5e:02:92:3d:84:17:04:68:d6:51:ff:d1:58: b4:75:0e:17:f2:2d:92:14:f3:e7:5e:31:2a:27:63: 2c:9f:01:82:9d:fe:cf:50:c2:2e:1e:3d:99:38:d7: 96:6c:22:30:25:ac:42:e4:fb:bd:38:4b:a1:b8:76: 02:26:7c:c1:f0:3b:2e:ec:77:80:d7:79:98:e9:a9: e7:8c:ec:f4:41:49:4a:13:d5:06:93:b9:51:33:7b: 1c:45:e2:95:b4:bf:b5:7e:8e:17:9d:c9:6d:72:53: 02:d1:65:60:c6:d8:34:50:9a:d7:bf:9a:ba:8e:a1: 58:e0:19:6e:20:19:c1:bc:4c:cf:66:58:f2:47:28: b9:3f:8a:3c:51:fb:8a:5e:fc:ba:3e:80:f8:cc:9a: e8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E8:F0:CC:B5:BF:37:1A:21:9B:67:E4:BF:D8:03:F2:9D:86:8C:4B X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/p-jwzLW_Nxohm2fkv9gD8p2GjEs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.56.0/21 Signature Algorithm: sha256WithRSAEncryption b9:53:1d:de:08:05:40:e2:cb:8c:c2:ef:dd:b8:e3:9c:cc:8c: 34:f7:24:6a:e9:fb:57:1e:b6:c1:cc:7d:3c:43:a1:d5:e7:20: 3c:2f:dd:98:68:51:5c:8a:58:cc:24:90:49:6b:76:28:0a:cc: d3:fb:11:68:d1:a6:16:aa:69:d4:74:75:1d:80:60:ac:34:91: 92:37:a7:7a:c1:96:08:c6:55:5d:20:46:8e:dc:b2:11:00:2d: 5a:a9:42:6c:75:cb:cc:dc:a4:77:ad:37:5d:09:17:1f:d5:e9: 2b:47:27:32:e8:a1:89:08:bc:f9:1b:ef:65:2b:90:c6:ac:e8: b5:2b:7b:d7:47:34:6d:60:be:42:5e:41:90:63:b7:30:d1:e9: f0:81:ff:a6:42:d0:3a:0a:96:90:f9:25:85:f5:58:0d:79:cb: 48:50:60:51:f2:c4:52:a8:14:02:db:ee:d0:0c:f4:db:3a:5d: 1a:55:0d:10:9f:01:73:e7:3f:14:e5:ae:68:ac:60:9a:c2:7c: fd:17:5b:71:9d:0f:31:da:c2:b5:7b:ca:0f:da:ec:68:5c:e9: 7d:a0:ee:90:ad:80:19:a4:c1:59:51:50:58:c2:1f:64:a7:46: 3c:d1:dc:82:d1:cf:1f:64:68:61:e8:06:ed:e5:0c:3d:23:14: d2:bc:81:e2 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE+kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MjRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEE3RThGMENDQjVCRjM3 MUEyMTlCNjdFNEJGRDgwM0YyOUQ4NjhDNEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC2HMgvXAfN+SIHG5yjtQPdgpnVhnquCm3yKBtVbqWYFGTVoMs ecIJYQm72To/q8xygDDD4fqe6itViM7mL5YyM5WpIbxu2fMD5icIlYQxiFyGHAw+ Eb5WcF0NFdn56ts8WPAdZByRqZQbXgKSPYQXBGjWUf/RWLR1DhfyLZIU8+deMSon YyyfAYKd/s9Qwi4ePZk415ZsIjAlrELk+704S6G4dgImfMHwOy7sd4DXeZjpqeeM 7PRBSUoT1QaTuVEzexxF4pW0v7V+jhedyW1yUwLRZWDG2DRQmte/mrqOoVjgGW4g GcG8TM9mWPJHKLk/ijxR+4pe/Lo+gPjMmuhVAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUp+jwzLW/Nxohm2fkv9gD8p2GjEswHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9wLWp3ekxXX054b2ht MmZrdjlnRDhwMkdqRXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDlnU4MA0GCSqGSIb3DQEBCwUAA4IBAQC5Ux3eCAVA4suMwu/duOOczIw09yRq 6ftXHrbBzH08Q6HV5yA8L92YaFFciljMJJBJa3YoCszT+xFo0aYWqmnUdHUdgGCs NJGSN6d6wZYIxlVdIEaO3LIRAC1aqUJsdcvM3KR3rTddCRcf1ekrRycy6KGJCLz5 G+9lK5DGrOi1K3vXRzRtYL5CXkGQY7cw0enwgf+mQtA6CpaQ+SWF9VgNectIUGBR 8sRSqBQC2+7QDPTbOl0aVQ0QnwFz5z8U5a5orGCawnz9F1txnQ8x2sK1e8oP2uxo XOl9oO6QrYAZpMFZUVBYwh9kp0Y80dyC0c8fZGhh6Abt5Qw9IxTSvIHi -----END CERTIFICATE-----Generated at Sun Sep 7 16:22:43 2025 by rpki-client