$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ymZMkQKU272dS-BHmzhmQ9ryin4.roa File: ymZMkQKU272dS-BHmzhmQ9ryin4.roa (raw, json) Hash identifier: eSCKJ6/aUhAF3mbrj6L/iNP22ns9YKaqWbwLYz++EgM= Subject key identifier: CA:66:4C:91:02:94:DB:BD:9D:4B:E0:47:9B:38:66:43:DA:F2:8A:7E Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1408 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ymZMkQKU272dS-BHmzhmQ9ryin4.roa Signing time: Fri 22 Aug 2025 08:57:30 +0000 ROA not before: Fri 22 Aug 2025 08:57:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131607 IP address blocks: 150.117.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 18:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5128 (0x1408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CA664C910294DBBD9D4BE0479B386643DAF28A7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:82:21:9f:76:9d:e0:62:34:5a:ce:d7:0a: d2:1f:27:a9:d0:d7:74:60:a9:f7:ed:a1:42:8e:bb: 52:e0:3c:40:2b:f7:68:ca:26:81:cf:af:81:54:05: 20:b5:77:7b:47:f2:9f:b4:05:84:63:97:6a:4d:7b: 8c:b4:85:f3:9e:ec:f4:f9:a5:cd:15:07:67:c1:b5: 20:57:95:f8:8c:b0:8f:99:4b:6a:79:02:8a:bb:ac: 42:e2:0b:89:95:3e:b5:7f:76:8e:cc:6d:3f:f1:f7: cf:9d:58:4e:0e:1a:87:dc:5c:8a:c8:d3:bc:ff:d1: d7:af:96:7f:a1:7e:fb:3a:f3:a0:7d:08:d0:16:fd: 65:06:f3:7c:c4:71:fc:8a:fc:dd:b8:e0:db:b3:de: bd:62:a1:8a:9d:f3:e4:10:91:14:fa:82:20:6c:70: 64:ae:c9:21:c3:0c:f1:7e:18:ea:a8:1e:ca:9d:33: de:a1:8a:db:6b:26:84:1f:44:eb:4c:8c:02:1b:86: 1c:0b:ec:c7:2b:41:81:43:4e:f3:9f:b2:af:19:3d: bb:6d:09:ba:ab:6e:26:85:71:46:68:37:cf:a8:0e: 99:b1:ab:b3:88:ef:90:86:6f:f3:3c:ff:61:50:0b: 42:77:55:b6:c6:2a:ac:6a:07:e4:c7:2c:68:00:4c: c7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:66:4C:91:02:94:DB:BD:9D:4B:E0:47:9B:38:66:43:DA:F2:8A:7E X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ymZMkQKU272dS-BHmzhmQ9ryin4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.168.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:fb:1b:73:80:b4:38:04:4e:32:c9:03:64:3e:45:cb:3e:57: f4:d7:2f:aa:48:32:e1:81:11:7d:57:ed:13:29:ae:69:bf:15: f6:7d:52:00:e1:d2:99:2a:4b:ee:c2:bb:3e:ce:85:90:ce:ee: 37:7d:f7:bd:eb:fa:2c:9d:c9:03:17:df:02:3f:39:ae:4f:be: d7:49:10:3a:9a:8d:6a:cd:bf:1d:e9:6d:49:b4:98:a2:87:be: 23:c7:fa:73:3d:ae:2e:44:75:e8:01:0d:0a:71:e2:2d:69:9e: 14:42:84:f4:9a:a1:ae:f0:89:d9:c0:a6:a8:e4:42:40:b0:60: 3f:af:03:d2:62:31:6f:ea:aa:29:a5:1f:d3:91:bb:57:47:9a: fb:60:51:c7:29:a8:a9:30:5d:48:50:8c:2a:c6:bb:8c:e7:69: 6e:70:43:8b:49:67:93:c7:40:7f:f8:a1:48:06:c2:a8:d5:dd: 6c:ec:b4:ef:ee:95:4a:c4:8b:53:05:3c:22:ee:5f:6a:30:57: f8:45:a4:29:d6:79:ef:99:f9:90:2e:25:ba:b8:7f:e9:62:90: ed:0e:9d:db:f2:90:3e:77:20:1b:56:7d:1d:58:1c:6a:ff:41: 2b:70:4c:52:b9:68:f4:8c:5e:65:da:2e:02:33:90:12:fc:30: 2d:df:ca:d4 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFAgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENBNjY0QzkxMDI5NERC QkQ5RDRCRTA0NzlCMzg2NjQzREFGMjhBN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4d4Ihn3ad4GI0Ws7XCtIfJ6nQ13RgqfftoUKOu1LgPEAr92jK JoHPr4FUBSC1d3tH8p+0BYRjl2pNe4y0hfOe7PT5pc0VB2fBtSBXlfiMsI+ZS2p5 Aoq7rELiC4mVPrV/do7MbT/x98+dWE4OGofcXIrI07z/0devln+hfvs686B9CNAW /WUG83zEcfyK/N244Nuz3r1ioYqd8+QQkRT6giBscGSuySHDDPF+GOqoHsqdM96h ittrJoQfROtMjAIbhhwL7McrQYFDTvOfsq8ZPbttCbqrbiaFcUZoN8+oDpmxq7OI 75CGb/M8/2FQC0J3VbbGKqxqB+THLGgATMfLAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUymZMkQKU272dS+BHmzhmQ9ryin4wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy95bVpNa1FLVTI3MmRT LUJIbXpobVE5cnlpbjQucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQDlnWoMA0GCSqGSIb3DQEBCwUAA4IBAQBO+xtzgLQ4BE4yyQNkPkXLPlf01y+q SDLhgRF9V+0TKa5pvxX2fVIA4dKZKkvuwrs+zoWQzu43ffe96/osnckDF98CPzmu T77XSRA6mo1qzb8d6W1JtJiih74jx/pzPa4uRHXoAQ0KceItaZ4UQoT0mqGu8InZ wKao5EJAsGA/rwPSYjFv6qoppR/TkbtXR5r7YFHHKaipMF1IUIwqxruM52lucEOL SWeTx0B/+KFIBsKo1d1s7LTv7pVKxItTBTwi7l9qMFf4RaQp1nnvmfmQLiW6uH/p YpDtDp3b8pA+dyAbVn0dWBxq/0ErcExSuWj0jF5l2i4CM5AS/DAt38rU -----END CERTIFICATE-----Generated at Sun Sep 7 16:22:42 2025 by rpki-client