$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dI-aG49oDvqO-KvKjnjiVzMGd7I.roa File: dI-aG49oDvqO-KvKjnjiVzMGd7I.roa (raw, json) Hash identifier: 4jVPU7fp37pKPm0DOaif+IYy2PTelN3lihRKv8+hUe0= Subject key identifier: 74:8F:9A:1B:8F:68:0E:FA:8E:F8:AB:CA:8E:78:E2:57:33:06:77:B2 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13B3 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dI-aG49oDvqO-KvKjnjiVzMGd7I.roa Signing time: Wed 13 Aug 2025 07:41:22 +0000 ROA not before: Wed 13 Aug 2025 07:41:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 139750 IP address blocks: 150.116.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 Aug 2025 23:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5043 (0x13b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 13 07:41:22 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=748F9A1B8F680EFA8EF8ABCA8E78E257330677B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2e:d6:a1:c2:49:a4:b4:94:4a:d5:dc:68:e1: 1e:a6:c9:77:37:47:a6:dd:cf:a9:cb:80:f2:c6:c8: d7:a6:da:91:f5:f5:36:d4:c3:2e:eb:c8:1e:f6:d0: 2e:5c:f0:90:b1:9f:21:78:b2:e5:bb:71:fc:35:61: d5:f6:42:12:bd:af:0b:4a:5d:56:cb:bf:65:f3:79: 09:de:88:83:1c:2a:a1:b0:0f:87:ba:7a:63:f4:6d: 2a:70:ef:9f:e8:bf:48:42:d6:ad:ec:46:75:de:a4: 8b:10:cf:4a:dd:76:92:28:c0:e5:f5:17:42:10:1b: 48:ee:9e:30:eb:12:0f:5f:18:df:dc:ef:9a:fc:18: 4e:a3:4e:2c:8e:b1:95:74:30:e8:40:c2:2c:fa:a0: d7:14:d1:c8:16:b6:f1:1b:26:cb:cc:d9:c1:c4:54: 50:c2:0f:8c:a9:3b:62:1b:2f:37:8f:f1:96:71:0f: d1:f6:72:bb:96:4a:4d:cb:34:8e:81:20:4a:ac:d3: dc:d3:b6:06:77:f5:a6:13:b1:40:98:a1:d6:22:91: 06:54:1c:51:3f:69:90:63:24:e3:d0:ea:9e:b7:2c: 36:19:49:59:1e:c1:e3:83:00:8f:47:e6:37:67:57: 16:e4:92:14:c4:13:2a:fe:16:32:c0:c9:4f:30:d1: 3f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8F:9A:1B:8F:68:0E:FA:8E:F8:AB:CA:8E:78:E2:57:33:06:77:B2 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/dI-aG49oDvqO-KvKjnjiVzMGd7I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.10.0/24 Signature Algorithm: sha256WithRSAEncryption a7:a8:b5:d2:48:71:6e:aa:db:78:9b:ba:8b:db:3c:63:c5:37: b5:97:c4:39:c2:e8:52:69:78:a0:00:c6:e1:19:26:a6:ab:c5: e7:74:5b:ff:73:e8:1d:5a:54:e2:0e:74:1d:9f:3d:ac:0a:c9: 8b:6f:23:f4:50:30:ba:79:35:b9:b7:fb:1e:f7:bd:85:76:2e: 64:e6:c4:49:e0:5f:06:6a:7f:a4:4f:00:e6:b7:41:d3:60:f1: 16:e4:4d:c9:12:f0:78:f0:07:f7:ec:36:be:08:b1:a2:31:34: 6f:9f:1c:e9:c3:39:d0:67:52:87:07:dd:45:c1:31:1e:04:d4: 5c:26:a0:5a:3c:41:ff:14:12:77:d8:95:cf:c5:3d:b4:aa:2f: 47:91:2f:ce:bc:13:23:e2:ef:d6:f5:84:9e:42:8c:bc:88:31: 57:7c:4f:50:44:97:1e:c9:42:62:38:f5:4b:35:9c:41:38:37: 4b:cb:ef:64:e1:3d:ab:8d:60:2e:92:76:f2:2a:d9:b8:c1:99: bc:a0:32:34:68:0f:a0:f5:5c:d3:c5:20:fc:78:a5:90:99:db: 74:53:03:37:60:42:be:17:7f:f5:01:91:41:c0:31:7d:4e:2b: 20:28:17:d1:b2:d4:90:ea:1a:07:9b:bb:66:52:53:26:c4:15: 70:48:b3:75 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE7MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MTMw NzQxMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDc0OEY5QTFCOEY2ODBF RkE4RUY4QUJDQThFNzhFMjU3MzMwNjc3QjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDhLtahwkmktJRK1dxo4R6myXc3R6bdz6nLgPLGyNem2pH19TbU wy7ryB720C5c8JCxnyF4suW7cfw1YdX2QhK9rwtKXVbLv2XzeQneiIMcKqGwD4e6 emP0bSpw75/ov0hC1q3sRnXepIsQz0rddpIowOX1F0IQG0junjDrEg9fGN/c75r8 GE6jTiyOsZV0MOhAwiz6oNcU0cgWtvEbJsvM2cHEVFDCD4ypO2IbLzeP8ZZxD9H2 cruWSk3LNI6BIEqs09zTtgZ39aYTsUCYodYikQZUHFE/aZBjJOPQ6p63LDYZSVke weODAI9H5jdnVxbkkhTEEyr+FjLAyU8w0T/LAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUdI+aG49oDvqO+KvKjnjiVzMGd7IwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9kSS1hRzQ5b0R2cU8t S3ZLam5qaVZ6TUdkN0kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnQKMA0GCSqGSIb3DQEBCwUAA4IBAQCnqLXSSHFuqtt4m7qL2zxjxTe1l8Q5 wuhSaXigAMbhGSamq8XndFv/c+gdWlTiDnQdnz2sCsmLbyP0UDC6eTW5t/se972F di5k5sRJ4F8Gan+kTwDmt0HTYPEW5E3JEvB48Af37Da+CLGiMTRvnxzpwznQZ1KH B91FwTEeBNRcJqBaPEH/FBJ32JXPxT20qi9HkS/OvBMj4u/W9YSeQoy8iDFXfE9Q RJceyUJiOPVLNZxBODdLy+9k4T2rjWAuknbyKtm4wZm8oDI0aA+g9VzTxSD8eKWQ mdt0UwM3YEK+F3/1AZFBwDF9TisgKBfRstSQ6hoHm7tmUlMmxBVwSLN1 -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:57 2025 by rpki-client