$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5WA7WrYDOED1QC11HgRU36_9h3o.roa File: 5WA7WrYDOED1QC11HgRU36_9h3o.roa (raw, json) Hash identifier: CNCfzZwBuvQ1iDSdpht+5ki69juQAMtYfOhu7fdaenI= Subject key identifier: E5:60:3B:5A:B6:03:38:40:F5:40:2D:75:1E:04:54:DF:AF:FD:87:7A Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 141D Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5WA7WrYDOED1QC11HgRU36_9h3o.roa Signing time: Fri 22 Aug 2025 08:57:34 +0000 ROA not before: Fri 22 Aug 2025 08:57:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 10133 IP address blocks: 2406:d400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5149 (0x141d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E5603B5AB6033840F5402D751E0454DFAFFD877A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:a0:96:b6:2f:ee:83:04:2a:52:1d:82:9d: 5b:f6:dd:81:a6:41:26:6b:b8:c0:02:f0:85:ab:7b: 8d:84:af:8d:ce:27:aa:b3:0d:8b:b4:b6:89:47:ca: dc:78:97:bc:78:76:75:f7:e2:7d:17:ca:55:1c:ee: c5:c5:22:9e:7e:c1:08:70:e4:6a:1a:e2:c8:0e:b8: 08:c6:bf:2b:cb:59:ff:76:45:d8:2f:b7:71:dd:ed: 30:e9:29:59:c1:c6:2d:81:37:02:ce:62:71:1d:09: 0e:72:3a:af:31:13:89:5e:42:79:79:ad:e2:68:d8: 51:7b:50:ac:7b:61:d4:f7:2e:18:ad:19:02:88:2b: b0:7e:a9:f0:99:dc:27:9b:a8:36:29:5c:d1:34:7e: 97:30:76:36:9f:a5:40:67:12:2d:b1:89:e9:f5:07: 1e:5e:b4:d8:b8:8b:86:58:9d:9f:7f:2b:8f:89:32: fa:2e:d9:1a:0a:38:94:c3:18:a0:77:6f:f0:bd:d9: 01:9c:c7:5d:19:98:42:64:16:9a:a2:40:8e:39:7a: 3b:8b:a0:c6:40:c9:bc:84:81:24:4d:a7:90:c8:57: 99:cc:5b:d5:4b:e0:8d:32:7c:18:c0:bb:4c:d7:20: aa:f9:a9:67:8c:69:e3:ff:59:40:71:29:34:99:57: f1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:60:3B:5A:B6:03:38:40:F5:40:2D:75:1E:04:54:DF:AF:FD:87:7A X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/5WA7WrYDOED1QC11HgRU36_9h3o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:d400::/32 Signature Algorithm: sha256WithRSAEncryption 5f:64:55:4d:49:6d:b4:02:c0:71:6a:c2:80:7d:65:2a:55:e4: be:01:1b:cb:0c:33:16:ec:f5:20:5e:62:e0:df:ec:7f:ea:40: 50:d9:b7:b8:a4:07:70:02:99:1d:ac:a8:c1:d7:c9:df:f2:f9: 55:db:e4:12:d1:9e:85:71:14:94:81:7d:1d:aa:27:eb:34:02: 04:92:b6:4f:19:b9:d9:44:ce:42:1e:d2:8a:80:91:af:c7:d1: 57:6a:7d:0d:ed:b0:a2:a4:77:56:99:7e:5e:c3:08:d8:44:ec: 33:6a:de:a3:84:61:78:31:17:3d:b6:ad:32:01:91:76:fb:8f: 40:4f:fb:c6:43:1d:45:17:d9:83:80:77:e2:97:a1:70:7b:23: bb:61:8a:eb:11:cd:4c:ca:b7:14:43:cc:f4:e6:18:9d:be:64: 13:ff:05:26:ac:0e:5c:50:ca:46:44:a8:80:f1:dc:32:c7:34: dc:5a:93:e1:63:df:26:2c:0a:cd:2c:7e:e4:97:6e:79:19:d1: d0:8f:32:fa:8c:82:bc:8c:88:83:72:ac:35:fd:61:a0:9c:38: 41:3c:e6:48:55:84:e6:20:05:9d:7b:71:e6:43:e5:c2:4d:a8: 12:aa:79:89:f3:1d:c4:58:6a:e0:8c:ae:7c:5e:d5:ff:81:f6: b9:e5:08:ec -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFB0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU1NjAzQjVBQjYwMzM4 NDBGNTQwMkQ3NTFFMDQ1NERGQUZGRDg3N0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9hqCWti/ugwQqUh2CnVv23YGmQSZruMAC8IWre42Er43OJ6qz DYu0tolHytx4l7x4dnX34n0XylUc7sXFIp5+wQhw5Goa4sgOuAjGvyvLWf92Rdgv t3Hd7TDpKVnBxi2BNwLOYnEdCQ5yOq8xE4leQnl5reJo2FF7UKx7YdT3LhitGQKI K7B+qfCZ3CebqDYpXNE0fpcwdjafpUBnEi2xien1Bx5etNi4i4ZYnZ9/K4+JMvou 2RoKOJTDGKB3b/C92QGcx10ZmEJkFpqiQI45ejuLoMZAybyEgSRNp5DIV5nMW9VL 4I0yfBjAu0zXIKr5qWeMaeP/WUBxKTSZV/HxAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU5WA7WrYDOED1QC11HgRU36/9h3owHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy81V0E3V3JZRE9FRDFR QzExSGdSVTM2XzloM28ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAbUADANBgkqhkiG9w0BAQsFAAOCAQEAX2RVTUlttALAcWrCgH1lKlXkvgEb ywwzFuz1IF5i4N/sf+pAUNm3uKQHcAKZHayowdfJ3/L5VdvkEtGehXEUlIF9Haon 6zQCBJK2Txm52UTOQh7SioCRr8fRV2p9De2woqR3Vpl+XsMI2ETsM2reo4RheDEX PbatMgGRdvuPQE/7xkMdRRfZg4B34pehcHsju2GK6xHNTMq3FEPM9OYYnb5kE/8F JqwOXFDKRkSogPHcMsc03FqT4WPfJiwKzSx+5JdueRnR0I8y+oyCvIyIg3KsNf1h oJw4QTzmSFWE5iAFnXtx5kPlwk2oEqp5ifMdxFhq4IyufF7V/4H2ueUI7A== -----END CERTIFICATE-----Generated at Sun Aug 24 05:33:27 2025 by rpki-client