$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/AS131679.roa File: AS131679.roa (raw, json) Hash identifier: 6mj45n+S14x8Auj47CBs2oJIMsIx+FSo8DsZGgXj5jI= Subject key identifier: 30:7E:C3:11:9D:B6:08:35:EB:02:36:FE:76:FC:17:77:2A:DF:07:A2 Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Certificate serial: 7C8D4C13C61FBD96FC9571E29CE3E98004F9B5D1 Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS131679.roa Signing time: Tue 07 Jul 2026 00:43:49 +0000 ROA not before: Tue 07 Jul 2026 00:38:49 +0000 ROA not after: Tue 06 Jul 2027 00:43:49 +0000 asID: 131679 IP address blocks: 150.116.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8d:4c:13:c6:1f:bd:96:fc:95:71:e2:9c:e3:e9:80:04:f9:b5:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Validity Not Before: Jul 7 00:38:49 2026 GMT Not After : Jul 6 00:43:49 2027 GMT Subject: CN=307EC3119DB60835EB0236FE76FC17772ADF07A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5f:cf:89:cd:19:ad:3c:e7:09:29:25:97:b0: 69:52:fb:ef:87:b3:ac:b2:0f:ab:e2:e5:52:f6:9c: d4:bc:37:05:67:6e:1f:8c:83:a7:d3:b6:c8:ae:bf: 06:d5:8e:f2:73:13:bc:7b:b7:6c:a5:aa:a5:20:81: ee:58:14:a5:35:3c:2f:17:66:96:3b:7a:bf:f8:7c: d8:fb:e6:d2:90:44:fe:0f:88:70:c0:f3:9c:39:5b: 3c:1c:2a:00:45:4a:65:23:13:4d:00:8e:53:53:08: 2f:b4:25:da:6e:9f:0f:8e:ed:76:8a:52:2c:9e:c2: f7:9b:44:2f:ac:06:59:51:b6:2b:52:d8:33:68:16: 0f:85:55:c9:4f:69:9c:25:58:a5:1d:42:ab:20:be: 0e:84:97:25:f5:00:9e:be:27:b8:91:af:df:f5:73: d9:40:23:7d:e6:18:40:21:3f:78:52:33:2c:a8:5a: e5:46:15:67:54:ed:6b:16:47:ae:6a:47:d6:45:b4: cb:85:09:5b:11:49:2f:19:2d:96:4b:d8:da:71:b6: 9c:15:5e:50:d9:d5:90:b1:87:4c:b0:25:2c:48:b9: 5b:89:c2:d3:54:66:77:2e:d3:a3:b3:c5:2b:7b:9a: f0:1f:1e:8d:02:e5:1e:70:b4:b4:e6:3b:33:0a:73: d4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7E:C3:11:9D:B6:08:35:EB:02:36:FE:76:FC:17:77:2A:DF:07:A2 X509v3 Authority Key Identifier: keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS131679.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.116.80.0/24 Signature Algorithm: sha256WithRSAEncryption bf:6e:b1:d9:f3:66:94:1c:9e:9a:a2:9d:b9:18:2f:82:57:01: 71:35:87:65:d0:b7:7c:0d:91:28:c0:d8:4c:94:d5:f0:aa:ad: 4a:5b:0c:d3:ad:ce:69:6b:8c:53:58:a1:55:1b:76:98:8e:85: 88:dc:6d:89:2a:0a:8d:16:e9:14:70:f8:11:0d:1b:db:7c:38: 3f:c9:80:ed:b5:26:0c:04:17:84:d4:b5:a2:34:41:34:ae:f3: 02:b0:98:90:94:99:91:90:6f:73:58:e0:69:46:fe:60:37:99: 60:9e:bf:c9:c7:a7:fb:db:74:31:f5:51:aa:1e:13:39:1d:b8: 93:ec:e9:b5:13:01:24:f4:c8:8e:e0:be:7e:75:57:54:e2:12: 9e:25:c8:8a:64:bc:28:da:6b:a7:1a:58:01:42:14:15:c7:ef: f6:f4:58:b9:34:df:b3:42:a8:d4:85:fc:a3:18:55:54:c9:fe: 6a:13:84:91:99:cb:e8:b6:fa:d7:94:8e:c6:76:b5:73:17:1f: e5:31:15:17:15:e3:38:73:4f:d3:00:07:e1:51:35:08:26:45: 86:0d:ef:4e:0b:7e:7c:98:ea:58:63:88:fc:8d:b2:29:2d:d0: c3:ca:5c:9e:b2:88:89:71:ea:a3:f0:83:33:97:74:06:e9:91: a1:ec:35:25 -----BEGIN CERTIFICATE----- MIIErzCCA5egAwIBAgIUfI1ME8YfvZb8lXHinOPpgAT5tdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz RDFGMDMxNDAeFw0yNjA3MDcwMDM4NDlaFw0yNzA3MDYwMDQzNDlaMDMxMTAvBgNV BAMTKDMwN0VDMzExOURCNjA4MzVFQjAyMzZGRTc2RkMxNzc3MkFERjA3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXX8+JzRmtPOcJKSWXsGlS+++H s6yyD6vi5VL2nNS8NwVnbh+Mg6fTtsiuvwbVjvJzE7x7t2ylqqUgge5YFKU1PC8X ZpY7er/4fNj75tKQRP4PiHDA85w5WzwcKgBFSmUjE00AjlNTCC+0Jdpunw+O7XaK UiyewvebRC+sBllRtitS2DNoFg+FVclPaZwlWKUdQqsgvg6ElyX1AJ6+J7iRr9/1 c9lAI33mGEAhP3hSMyyoWuVGFWdU7WsWR65qR9ZFtMuFCVsRSS8ZLZZL2NpxtpwV XlDZ1ZCxh0ywJSxIuVuJwtNUZncu06OzxSt7mvAfHo0C5R5wtLTmOzMKc9SBAgMB AAGjggG5MIIBtTAdBgNVHQ4EFgQUMH7DEZ22CDXrAjb+dvwXdyrfB6IwHwYDVR0j BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx QzZENzM1M0QxRjAzMTQuY2VyMFAGCCsGAQUFBwELBEQwQjBABggrBgEFBQcwC4Y0 cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wL0FTMTMxNjc5 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQAlnRQMA0GCSqGSIb3DQEBCwUAA4IBAQC/brHZ82aUHJ6aop25 GC+CVwFxNYdl0Ld8DZEowNhMlNXwqq1KWwzTrc5pa4xTWKFVG3aYjoWI3G2JKgqN FukUcPgRDRvbfDg/yYDttSYMBBeE1LWiNEE0rvMCsJiQlJmRkG9zWOBpRv5gN5lg nr/Jx6f723Qx9VGqHhM5HbiT7Om1EwEk9MiO4L5+dVdU4hKeJciKZLwo2munGlgB QhQVx+/29Fi5NN+zQqjUhfyjGFVUyf5qE4SRmcvotvrXlI7GdrVzFx/lMRUXFeM4 c0/TAAfhUTUIJkWGDe9OC358mOpYY4j8jbIpLdDDylyesoiJceqj8IMzl3QG6ZGh 7DUl -----END CERTIFICATE-----Generated at Fri Jul 24 09:37:42 2026 by rpki-client