$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/UVv3rkTVkWatLWiFGqvzKr2Wur8.roa File: UVv3rkTVkWatLWiFGqvzKr2Wur8.roa (raw, json) Hash identifier: t0udrcCRToyP2ZADTzP0dKkUUZhecML0vNJcj9uvE/k= Subject key identifier: 51:5B:F7:AE:44:D5:91:66:AD:2D:68:85:1A:AB:F3:2A:BD:96:BA:BF Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1431 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/UVv3rkTVkWatLWiFGqvzKr2Wur8.roa Signing time: Fri 22 Aug 2025 08:57:39 +0000 ROA not before: Fri 22 Aug 2025 08:57:39 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 142142 IP address blocks: 150.116.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5169 (0x1431) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:39 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=515BF7AE44D59166AD2D68851AABF32ABD96BABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:29:7b:ee:49:aa:6c:af:b7:d6:71:bf:20:03: fc:a8:9f:7b:36:1a:11:91:db:03:c2:94:5b:15:75: d3:c9:88:ef:b7:b1:3b:c6:cd:de:ba:67:09:a3:df: 5e:1c:62:7f:1f:2a:1a:ca:d9:ff:25:2b:92:36:61: 50:a5:b0:18:5f:43:9c:e2:86:73:01:19:d8:bb:4e: b5:29:9f:be:f9:ce:2a:1e:cb:96:45:38:56:cd:eb: 3a:12:ed:ec:99:44:62:13:83:c0:ba:f6:28:43:15: b5:8e:b7:cd:f1:18:67:c7:71:47:51:4b:ab:bf:9e: 6c:b2:ef:3b:be:7b:3d:85:10:e0:7c:70:16:15:b7: 55:ce:48:c1:14:ee:89:66:ee:f2:ed:c9:59:85:9e: 58:a7:a1:b0:b5:7f:97:da:a6:f4:ec:6a:89:05:2e: fc:7b:4f:70:3f:c5:00:92:3a:a6:66:7b:e9:02:3e: eb:62:f1:5c:c3:14:44:fb:ab:41:3e:ac:c1:b8:33: 72:52:93:f5:25:fc:6a:67:9f:da:15:95:a0:b9:72: e0:b2:ea:85:72:46:9e:62:0f:17:2f:5b:e5:1b:4c: ba:26:41:02:2a:19:22:c0:6f:98:d3:bf:f3:01:8f: a8:75:24:a1:b4:0a:fa:43:cb:df:b7:dc:c0:de:5a: 01:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5B:F7:AE:44:D5:91:66:AD:2D:68:85:1A:AB:F3:2A:BD:96:BA:BF X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/UVv3rkTVkWatLWiFGqvzKr2Wur8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.14.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:33:eb:98:8e:2b:fd:f3:3a:9a:26:09:a9:0a:7f:7e:71:b0: d8:f8:2f:a9:bc:14:48:a2:be:cc:90:f7:20:e1:0b:3c:15:39: d1:cb:d6:42:f9:63:9b:63:1b:35:2b:bf:83:74:18:32:62:66: 47:33:d3:08:23:71:fb:40:21:af:7e:1b:ed:9d:50:d8:1f:6e: 57:cf:2b:76:7e:ce:54:12:c5:05:a5:a3:a7:2e:b1:10:fb:ac: 81:8f:2c:11:7c:3e:4a:88:b3:27:ed:04:0e:17:ec:b0:6a:af: a9:a4:6a:7b:98:4a:43:62:30:70:ea:30:32:94:d5:2e:8d:6d: f2:13:b6:47:41:f1:68:4c:3b:c6:00:40:68:c6:f9:4c:b4:13: d1:f6:59:5f:53:cd:ec:7d:f9:a8:bc:8a:4c:44:31:6e:03:18: 62:b7:4b:1c:29:29:83:5d:91:24:7b:ca:cd:d1:3d:9f:0f:ee: c4:3a:25:f3:6d:c6:77:ae:19:de:e9:5a:d3:74:b1:8b:81:88: cc:fa:53:bd:ae:2c:92:58:a1:a4:3f:b4:85:2c:14:17:6e:f9: d3:af:11:fb:7f:c1:20:cd:e8:0e:ed:19:85:f1:dd:03:ec:c7: cb:7e:ac:ad:bb:ba:ba:11:de:f5:14:c2:40:07:89:c2:91:1a: 38:da:57:a3 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFDEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUxNUJGN0FFNDRENTkx NjZBRDJENjg4NTFBQUJGMzJBQkQ5NkJBQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKKXvuSapsr7fWcb8gA/yon3s2GhGR2wPClFsVddPJiO+3sTvG zd66Zwmj314cYn8fKhrK2f8lK5I2YVClsBhfQ5zihnMBGdi7TrUpn775zioey5ZF OFbN6zoS7eyZRGITg8C69ihDFbWOt83xGGfHcUdRS6u/nmyy7zu+ez2FEOB8cBYV t1XOSMEU7olm7vLtyVmFnlinobC1f5fapvTsaokFLvx7T3A/xQCSOqZme+kCPuti 8VzDFET7q0E+rMG4M3JSk/Ul/Gpnn9oVlaC5cuCy6oVyRp5iDxcvW+UbTLomQQIq GSLAb5jTv/MBj6h1JKG0CvpDy9+33MDeWgFLAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUUVv3rkTVkWatLWiFGqvzKr2Wur8wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9VVnYzcmtUVmtXYXRM V2lGR3F2ektyMld1cjgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBlnQOMA0GCSqGSIb3DQEBCwUAA4IBAQCLM+uYjiv98zqaJgmpCn9+cbDY+C+p vBRIor7MkPcg4Qs8FTnRy9ZC+WObYxs1K7+DdBgyYmZHM9MII3H7QCGvfhvtnVDY H25Xzyt2fs5UEsUFpaOnLrEQ+6yBjywRfD5KiLMn7QQOF+ywaq+ppGp7mEpDYjBw 6jAylNUujW3yE7ZHQfFoTDvGAEBoxvlMtBPR9llfU83sffmovIpMRDFuAxhit0sc KSmDXZEke8rN0T2fD+7EOiXzbcZ3rhne6VrTdLGLgYjM+lO9riySWKGkP7SFLBQX bvnTrxH7f8EgzegO7RmF8d0D7MfLfqytu7q6Ed71FMJAB4nCkRo42lej -----END CERTIFICATE-----Generated at Sun Aug 24 13:01:21 2025 by rpki-client