$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8Nrs7yXg3GZ5aZS8pmuc41cNI1w.roa File: 8Nrs7yXg3GZ5aZS8pmuc41cNI1w.roa (raw, json) Hash identifier: 2IN1PzM+M4hoMtBD/5IapCQTmzjvNKOvP0sirGJcDVc= Subject key identifier: F0:DA:EC:EF:25:E0:DC:66:79:69:94:BC:A6:6B:9C:E3:57:0D:23:5C Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 141B Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8Nrs7yXg3GZ5aZS8pmuc41cNI1w.roa Signing time: Fri 22 Aug 2025 08:57:34 +0000 ROA not before: Fri 22 Aug 2025 08:57:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38851 IP address blocks: 103.5.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5147 (0x141b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F0DAECEF25E0DC66796994BCA66B9CE3570D235C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:54:fb:f8:cb:c7:c7:93:0a:21:ed:1e:43: fb:f7:d8:af:d8:e4:2f:1f:3f:f3:77:e1:3e:7e:aa: 5f:1b:18:9f:e6:8f:52:e2:8e:6c:52:21:16:a7:f7: 17:d9:ce:3b:a5:75:b0:d4:62:7c:33:ab:72:b8:5c: 39:c1:10:41:90:29:22:63:e1:0f:fd:01:51:55:72: a3:12:ff:49:9b:9f:87:a8:39:74:d2:33:6e:3f:12: 49:22:4a:60:ef:6f:e4:4d:35:ff:ec:c9:76:2d:f5: 41:ee:1b:35:38:fd:38:70:f7:90:35:7a:a2:90:e5: bd:ee:87:81:d7:76:48:d4:ae:29:89:a1:2e:5c:de: 42:c6:51:cf:01:8f:89:fe:22:89:b8:03:ff:6f:a0: 7b:31:31:2d:c9:93:c6:3d:7c:84:30:de:61:36:ec: 5f:04:8f:84:dc:8e:6b:89:f9:81:d9:5d:82:e8:e8: 94:4e:ce:5f:7b:17:47:cf:45:a8:5e:7f:22:f6:42: 31:65:a8:34:ba:19:b4:e2:3b:48:1b:c6:ef:d2:e4: 54:99:29:9e:62:98:41:4f:86:56:db:8c:4a:0a:1e: 82:21:11:c5:b3:72:34:3b:83:2c:15:9f:71:2c:69: c1:7b:08:a5:fc:f4:b1:97:71:a8:20:b8:e7:c2:ab: ba:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DA:EC:EF:25:E0:DC:66:79:69:94:BC:A6:6B:9C:E3:57:0D:23:5C X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8Nrs7yXg3GZ5aZS8pmuc41cNI1w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.5.100.0/22 Signature Algorithm: sha256WithRSAEncryption 41:9a:88:99:ea:95:14:5c:6c:2b:d6:fe:2e:81:49:7d:37:de: d0:f1:bd:3c:3c:f1:af:a8:34:d1:73:c5:07:6a:0e:fa:67:3f: a1:a6:ec:d4:9d:1b:58:76:53:58:ac:f2:44:65:48:b8:f0:4b: be:a4:64:58:df:30:b9:b3:10:1f:d8:15:13:b6:64:d3:50:c4: 82:a6:da:64:04:70:03:82:e8:20:97:fb:ca:b2:b0:5c:ab:37: a8:59:19:9a:c6:99:da:8b:0e:2f:3a:cc:ca:be:49:9d:cc:ff: e2:17:46:e5:00:c5:b1:21:93:81:c6:52:7e:71:b3:e2:dc:f8: 13:57:bf:a7:ed:ab:82:33:52:47:c2:c7:45:33:f8:6d:e4:a2: c2:be:94:bf:33:47:4e:52:81:8c:6f:2a:43:6d:7f:b1:5d:ca: 35:c5:da:e5:c9:5b:e9:26:0b:39:fb:b4:01:98:55:d6:73:1c: 08:c5:bb:03:a5:74:22:88:e3:a3:6e:f2:3a:8b:da:7d:49:5f: 25:77:f2:5b:5b:b1:9d:91:19:b1:99:e6:96:7a:c5:9a:91:1e: 78:11:66:b1:3c:70:7d:23:49:3c:d4:ea:c9:b7:73:de:2c:1f: 12:90:4b:9a:36:d9:22:09:1d:1a:ea:b9:e7:41:fd:8e:f0:cc: 93:bc:ae:87 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFBswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYwREFFQ0VGMjVFMERD NjY3OTY5OTRCQ0E2NkI5Q0UzNTcwRDIzNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvrVT7+MvHx5MKIe0eQ/v32K/Y5C8fP/N34T5+ql8bGJ/mj1Li jmxSIRan9xfZzjuldbDUYnwzq3K4XDnBEEGQKSJj4Q/9AVFVcqMS/0mbn4eoOXTS M24/EkkiSmDvb+RNNf/syXYt9UHuGzU4/Thw95A1eqKQ5b3uh4HXdkjUrimJoS5c 3kLGUc8Bj4n+Iom4A/9voHsxMS3Jk8Y9fIQw3mE27F8Ej4TcjmuJ+YHZXYLo6JRO zl97F0fPRahefyL2QjFlqDS6GbTiO0gbxu/S5FSZKZ5imEFPhlbbjEoKHoIhEcWz cjQ7gywVn3EsacF7CKX89LGXcagguOfCq7qLAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU8Nrs7yXg3GZ5aZS8pmuc41cNI1wwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy84TnJzN3lYZzNHWjVh WlM4cG11YzQxY05JMXcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZwVkMA0GCSqGSIb3DQEBCwUAA4IBAQBBmoiZ6pUUXGwr1v4ugUl9N97Q8b08 PPGvqDTRc8UHag76Zz+hpuzUnRtYdlNYrPJEZUi48Eu+pGRY3zC5sxAf2BUTtmTT UMSCptpkBHADguggl/vKsrBcqzeoWRmaxpnaiw4vOszKvkmdzP/iF0blAMWxIZOB xlJ+cbPi3PgTV7+n7auCM1JHwsdFM/ht5KLCvpS/M0dOUoGMbypDbX+xXco1xdrl yVvpJgs5+7QBmFXWcxwIxbsDpXQiiOOjbvI6i9p9SV8ld/JbW7GdkRmxmeaWesWa kR54EWaxPHB9I0k81OrJt3PeLB8SkEuaNtkiCR0a6rnnQf2O8MyTvK6H -----END CERTIFICATE-----Generated at Sun Aug 24 07:04:19 2025 by rpki-client