$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vSiLfr5INY8TAF_QyYp2ZLNUuH4.roa File: vSiLfr5INY8TAF_QyYp2ZLNUuH4.roa (raw, json) Hash identifier: wJGc10rA0NNQZR9wAiE20dtKCHyLWltNrhdy8QWRPwY= Subject key identifier: BD:28:8B:7E:BE:48:35:8F:13:00:5F:D0:C9:8A:76:64:B3:54:B8:7E Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 141E Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vSiLfr5INY8TAF_QyYp2ZLNUuH4.roa Signing time: Fri 22 Aug 2025 08:57:34 +0000 ROA not before: Fri 22 Aug 2025 08:57:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131273 IP address blocks: 150.116.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 13:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5150 (0x141e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BD288B7EBE48358F13005FD0C98A7664B354B87E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:22:61:cf:00:ad:d7:f6:6d:cc:43:d0:4d:60: 76:e5:9b:4a:17:57:67:92:4a:b8:93:d4:c9:70:bd: f3:6d:b8:4f:d4:0a:aa:03:5c:95:e0:6f:8d:75:6f: 21:dc:b0:d4:0a:4a:09:dc:b6:8d:1a:12:74:38:6b: 76:47:45:84:08:80:3f:40:df:92:fc:7b:da:8a:08: 70:d4:e9:df:05:5b:8a:e1:19:3f:36:2e:32:7c:0c: c7:e5:09:3e:69:7f:3e:1e:cc:af:f0:10:80:5f:d1: ad:f8:3b:71:2c:c8:c9:72:86:0d:ac:f3:e0:b5:33: 98:2d:69:b2:f2:11:be:d0:19:c0:d6:89:32:95:03: 28:d9:3c:aa:1f:6d:47:5d:f6:52:18:61:aa:ab:0e: df:87:90:39:84:43:5f:9e:3b:30:7f:07:13:b4:f8: 45:c0:be:d9:4e:9c:78:b9:a9:86:d5:ea:72:64:08: f9:c3:07:34:e3:5e:16:e1:ce:27:72:2e:c0:ad:c5: 71:38:ea:ee:11:30:3c:cd:45:52:b5:2d:5c:bc:13: 8d:52:71:84:af:99:7a:0b:3e:bc:92:d8:cf:96:1a: ba:56:84:94:fb:aa:90:24:e0:e7:ee:24:0d:c6:0a: f6:53:7c:b3:64:59:11:2b:f4:88:6c:cc:0b:9b:4a: d5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:28:8B:7E:BE:48:35:8F:13:00:5F:D0:C9:8A:76:64:B3:54:B8:7E X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vSiLfr5INY8TAF_QyYp2ZLNUuH4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.80.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:04:98:49:c3:00:77:16:88:1b:80:63:20:b0:df:1e:9c:68: 23:8e:75:ff:50:6c:e2:33:8e:f6:8b:f6:ca:3e:b7:59:92:52: e3:fb:d7:6e:17:65:6b:20:e1:c0:34:ca:c9:fb:a9:64:db:da: 84:72:b0:73:8a:f3:82:31:16:ed:92:6d:08:47:15:9b:73:1d: da:cf:0e:a9:16:e9:85:fb:98:b8:a3:14:e5:2e:0e:e3:39:2b: ad:ed:01:6d:52:33:0d:c9:76:54:c5:4c:18:81:97:b4:8e:92: 79:67:1f:c6:0d:b5:86:1b:a3:4a:6e:83:72:c1:25:a5:c0:9e: ae:ed:2d:ac:0d:8a:b9:50:e6:7a:66:56:1b:61:30:6e:3f:4d: 8f:69:f5:62:2d:6c:f4:d6:55:b8:8d:b9:76:4d:e8:71:21:9c: 78:f9:14:67:fe:72:0f:d3:78:82:54:44:17:bb:b3:64:ad:08: 77:e3:71:0d:46:e0:be:89:09:ca:dc:5c:50:6a:eb:cf:1c:95: 59:a8:c3:00:0f:76:fd:3e:fe:c8:d7:55:65:c5:00:8f:d6:46: b7:08:d7:a9:19:0f:24:05:1c:63:66:26:ac:e2:ec:fb:88:42: c6:ee:79:10:06:2d:61:c7:f7:3c:ed:92:a3:3d:7e:56:bc:62: b2:2e:b7:30 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFB4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJEMjg4QjdFQkU0ODM1 OEYxMzAwNUZEMEM5OEE3NjY0QjM1NEI4N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmImHPAK3X9m3MQ9BNYHblm0oXV2eSSriT1MlwvfNtuE/UCqoD XJXgb411byHcsNQKSgncto0aEnQ4a3ZHRYQIgD9A35L8e9qKCHDU6d8FW4rhGT82 LjJ8DMflCT5pfz4ezK/wEIBf0a34O3EsyMlyhg2s8+C1M5gtabLyEb7QGcDWiTKV AyjZPKofbUdd9lIYYaqrDt+HkDmEQ1+eOzB/BxO0+EXAvtlOnHi5qYbV6nJkCPnD BzTjXhbhzidyLsCtxXE46u4RMDzNRVK1LVy8E41ScYSvmXoLPryS2M+WGrpWhJT7 qpAk4OfuJA3GCvZTfLNkWREr9IhszAubStXFAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUvSiLfr5INY8TAF/QyYp2ZLNUuH4wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy92U2lMZnI1SU5ZOFRB Rl9ReVlwMlpMTlV1SDQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnRQMA0GCSqGSIb3DQEBCwUAA4IBAQAKBJhJwwB3FogbgGMgsN8enGgjjnX/ UGziM472i/bKPrdZklLj+9duF2VrIOHANMrJ+6lk29qEcrBzivOCMRbtkm0IRxWb cx3azw6pFumF+5i4oxTlLg7jOSut7QFtUjMNyXZUxUwYgZe0jpJ5Zx/GDbWGG6NK boNywSWlwJ6u7S2sDYq5UOZ6ZlYbYTBuP02PafViLWz01lW4jbl2TehxIZx4+RRn /nIP03iCVEQXu7NkrQh343ENRuC+iQnK3FxQauvPHJVZqMMAD3b9Pv7I11VlxQCP 1ka3CNepGQ8kBRxjZias4uz7iELG7nkQBi1hx/c87ZKjPX5WvGKyLrcw -----END CERTIFICATE-----Generated at Sun Sep 7 12:45:18 2025 by rpki-client