$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/q2q5YsPb0iYcqaMr5dNLdqpVb6U.roa File: q2q5YsPb0iYcqaMr5dNLdqpVb6U.roa (raw, json) Hash identifier: 3yt9/I+15s8MBHGYvjHIxIahcvpL6udxf5f4T4KBPl0= Subject key identifier: AB:6A:B9:62:C3:DB:D2:26:1C:A9:A3:2B:E5:D3:4B:76:AA:55:6F:A5 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1419 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/q2q5YsPb0iYcqaMr5dNLdqpVb6U.roa Signing time: Fri 22 Aug 2025 08:57:33 +0000 ROA not before: Fri 22 Aug 2025 08:57:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18419 IP address blocks: 150.117.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5145 (0x1419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=AB6AB962C3DBD2261CA9A32BE5D34B76AA556FA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:f5:d6:70:03:1f:88:9d:77:9b:96:94:e8: ea:0c:18:bd:47:c0:d5:12:08:e7:99:3e:3d:10:d8: 08:d4:fe:6b:a5:0d:73:64:21:fb:cd:c6:41:34:29: 40:9b:76:41:59:84:d7:6d:bf:5c:83:0e:08:b6:12: 97:04:a0:b9:51:01:67:76:e3:c9:61:fe:1d:49:c9: 20:de:ea:6f:7f:02:7e:de:27:40:63:36:b4:b2:3c: f5:db:17:cf:52:0e:43:73:28:91:34:f1:35:35:70: 9a:a5:63:bc:f1:83:4b:9c:00:e1:44:8f:1f:cd:f7: ad:05:e3:9f:c0:ef:87:26:f8:d7:ae:7c:82:72:57: 86:3a:1a:87:08:93:43:81:62:90:a9:3a:07:66:69: a1:b4:eb:78:f4:33:ec:34:d2:c3:26:68:44:f6:cd: 28:06:d1:c9:38:69:9f:76:6f:38:e7:e9:8e:96:f0: fd:70:1a:5d:37:f3:3f:eb:34:90:6d:da:22:63:ef: 5e:03:d6:63:08:1f:7a:65:d0:4b:e7:5c:1a:21:0e: c2:2c:34:02:61:26:49:33:a0:80:b6:a6:c9:20:b2: 0a:1b:aa:5d:86:85:6a:8b:36:c6:82:fe:e9:a8:61: 59:2b:22:b3:64:42:4e:f1:32:74:b1:4a:54:d2:4c: dd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6A:B9:62:C3:DB:D2:26:1C:A9:A3:2B:E5:D3:4B:76:AA:55:6F:A5 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/q2q5YsPb0iYcqaMr5dNLdqpVb6U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.48.0/21 Signature Algorithm: sha256WithRSAEncryption 3d:a3:23:3b:79:a6:58:6f:cb:86:f3:76:61:64:6d:a5:df:83: 16:ec:e5:89:45:14:d9:05:17:8d:47:9a:c4:64:d5:11:19:bf: bf:66:23:20:19:34:76:cb:e4:e3:da:66:58:a1:c3:70:c8:d4: 04:aa:7e:5d:2c:a7:30:cc:42:0a:7c:69:ce:06:02:e9:93:1d: 2a:d1:4d:50:40:b3:05:aa:38:29:0f:e7:d2:67:a0:63:fb:ba: 05:a7:0d:0f:71:d9:cd:95:30:7e:c8:f2:05:dd:d7:c7:76:01: ce:5f:46:41:91:53:37:98:93:58:ef:0e:c5:b7:3b:1b:f9:f7: fb:57:79:85:2c:db:95:fc:7a:a9:53:96:5d:ed:ae:4b:e0:c8: e1:36:b5:94:67:0b:7b:fd:19:75:3a:b0:9e:4a:12:b5:57:1f: 40:a4:86:2a:7f:9b:15:96:a5:2d:d7:7b:3a:73:05:30:2c:20: 7a:32:e3:f8:c6:be:8e:85:ce:a6:17:8e:7d:a8:ff:c0:a3:93: a2:f1:f6:07:ab:67:c2:1e:c6:39:56:13:37:b9:17:3b:ea:8e: 24:c3:51:b0:8e:6d:1a:90:9e:05:a3:6b:e1:24:c8:dd:73:8d: fe:3b:ea:1e:2f:91:07:e0:f7:01:dd:0b:4b:a3:73:0a:98:11: c2:a5:a8:77 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFBkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFCNkFCOTYyQzNEQkQy MjYxQ0E5QTMyQkU1RDM0Qjc2QUE1NTZGQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUEvXWcAMfiJ13m5aU6OoMGL1HwNUSCOeZPj0Q2AjU/mulDXNk IfvNxkE0KUCbdkFZhNdtv1yDDgi2EpcEoLlRAWd248lh/h1JySDe6m9/An7eJ0Bj NrSyPPXbF89SDkNzKJE08TU1cJqlY7zxg0ucAOFEjx/N960F45/A74cm+NeufIJy V4Y6GocIk0OBYpCpOgdmaaG063j0M+w00sMmaET2zSgG0ck4aZ92bzjn6Y6W8P1w Gl038z/rNJBt2iJj714D1mMIH3pl0EvnXBohDsIsNAJhJkkzoIC2pskgsgobql2G hWqLNsaC/umoYVkrIrNkQk7xMnSxSlTSTN2BAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUq2q5YsPb0iYcqaMr5dNLdqpVb6UwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9xMnE1WXNQYjBpWWNx YU1yNWROTGRxcFZiNlUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDlnUwMA0GCSqGSIb3DQEBCwUAA4IBAQA9oyM7eaZYb8uG83ZhZG2l34MW7OWJ RRTZBReNR5rEZNURGb+/ZiMgGTR2y+Tj2mZYocNwyNQEqn5dLKcwzEIKfGnOBgLp kx0q0U1QQLMFqjgpD+fSZ6Bj+7oFpw0PcdnNlTB+yPIF3dfHdgHOX0ZBkVM3mJNY 7w7Ftzsb+ff7V3mFLNuV/HqpU5Zd7a5L4MjhNrWUZwt7/Rl1OrCeShK1Vx9ApIYq f5sVlqUt13s6cwUwLCB6MuP4xr6Ohc6mF459qP/Ao5Oi8fYHq2fCHsY5VhM3uRc7 6o4kw1Gwjm0akJ4Fo2vhJMjdc43+O+oeL5EH4PcB3QtLo3MKmBHCpah3 -----END CERTIFICATE-----Generated at Sat Sep 6 12:08:03 2025 by rpki-client