$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/AS142142.roa File: AS142142.roa (raw, json) Hash identifier: pokumrqQLiP5EznNsihZXJPNru+bvHtowcf10P8h1jM= Subject key identifier: 1C:CC:78:BC:E7:C5:BE:E1:99:11:11:4C:0D:5C:56:F3:9A:A5:B4:73 Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Certificate serial: 47D20477BDF1E9A46AA51365D182A333A55D68F7 Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS142142.roa Signing time: Mon 18 May 2026 10:00:37 +0000 ROA not before: Mon 18 May 2026 09:55:37 +0000 ROA not after: Mon 17 May 2027 10:00:37 +0000 asID: 142142 IP address blocks: 150.116.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d2:04:77:bd:f1:e9:a4:6a:a5:13:65:d1:82:a3:33:a5:5d:68:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Validity Not Before: May 18 09:55:37 2026 GMT Not After : May 17 10:00:37 2027 GMT Subject: CN=1CCC78BCE7C5BEE19911114C0D5C56F39AA5B473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:eb:80:12:a3:b5:54:b6:bc:e5:00:81:67:da: 0b:e6:8d:c4:25:c7:93:2b:5b:de:88:fa:0e:27:20: 21:5c:9e:7f:f2:b7:39:03:7d:cc:ca:0b:76:72:4d: e3:d5:d0:2a:d5:ef:fb:9b:e8:f7:7d:1e:f0:10:d6: 8c:86:08:e0:1f:c0:ff:f2:79:ea:52:89:3c:41:a2: e4:80:47:26:2d:54:4c:ab:7e:3b:47:05:d6:0b:37: 3a:45:6b:39:ff:07:a6:e9:76:75:2c:a6:71:bf:8c: 88:a3:42:a4:59:f0:44:1f:c4:25:be:0e:b8:d3:90: 2c:2e:47:16:bc:a6:c1:59:80:61:40:13:65:1c:e0: 13:a4:1f:91:b6:5c:dd:2e:01:db:fb:89:5b:45:01: 2e:5e:2a:67:dc:31:05:e4:be:ad:b7:7c:ab:14:31: b4:8d:66:0b:f7:5e:89:5f:79:c8:69:ab:da:89:39: a2:5c:4d:96:6c:f4:74:ad:72:93:a8:98:8f:c9:50: 18:37:97:8c:da:ac:a6:0d:1f:dc:6e:3d:1b:32:32: 1f:63:65:c6:c6:82:8b:ae:e8:2f:4f:37:76:27:84: 6c:8e:c8:c8:30:0b:92:f4:29:03:cf:bb:d8:72:00: be:b1:43:48:de:0a:01:21:d3:34:5b:51:ca:85:88: 2b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CC:78:BC:E7:C5:BE:E1:99:11:11:4C:0D:5C:56:F3:9A:A5:B4:73 X509v3 Authority Key Identifier: keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS142142.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.116.14.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:c4:bc:ea:ad:fb:73:95:74:81:9b:67:da:ca:12:b8:ed:63: 5d:00:91:df:26:56:b2:2a:d6:35:f4:f8:66:61:74:ad:b4:31: a8:f1:65:fc:b1:00:08:4d:c9:b7:1b:87:8a:f1:aa:c4:b8:04: 71:d3:05:d9:c0:14:81:db:0f:76:18:b4:29:43:7e:90:3e:59: 19:91:ca:54:6e:48:d3:8f:96:1c:5b:53:c0:0e:e1:d0:25:0d: 4c:56:98:03:ec:ea:1b:39:78:ac:e6:c6:c5:44:c5:dc:9b:76: 9f:0a:4b:16:05:1d:d1:4a:91:51:85:e5:dc:83:01:cb:ab:26: 5c:46:39:80:30:c0:2d:a8:6f:59:be:c9:31:f9:8c:88:f0:fd: 40:a4:69:01:a6:f1:49:0e:5d:f7:c5:d8:51:c7:5a:c4:08:4c: 4e:9f:85:95:8c:d2:83:1a:93:11:d6:a0:b9:a7:99:f4:4e:b5: 68:32:fd:17:81:1f:74:2f:33:9f:92:80:0b:f7:68:d2:30:6f: e7:16:7d:a8:b7:29:b3:fc:94:12:ad:59:66:65:81:63:b4:da: 32:67:cc:84:8d:14:d5:94:df:f4:36:d0:92:b3:33:66:87:57: 56:e3:f5:00:e7:c8:bf:4c:18:e7:cf:9e:f4:40:3b:d9:e1:cc: 97:f6:9e:05 -----BEGIN CERTIFICATE----- MIIErzCCA5egAwIBAgIUR9IEd73x6aRqpRNl0YKjM6VdaPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz RDFGMDMxNDAeFw0yNjA1MTgwOTU1MzdaFw0yNzA1MTcxMDAwMzdaMDMxMTAvBgNV BAMTKDFDQ0M3OEJDRTdDNUJFRTE5OTExMTE0QzBENUM1NkYzOUFBNUI0NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ64ASo7VUtrzlAIFn2gvmjcQl x5MrW96I+g4nICFcnn/ytzkDfczKC3ZyTePV0CrV7/ub6Pd9HvAQ1oyGCOAfwP/y eepSiTxBouSARyYtVEyrfjtHBdYLNzpFazn/B6bpdnUspnG/jIijQqRZ8EQfxCW+ DrjTkCwuRxa8psFZgGFAE2Uc4BOkH5G2XN0uAdv7iVtFAS5eKmfcMQXkvq23fKsU MbSNZgv3Xolfechpq9qJOaJcTZZs9HStcpOomI/JUBg3l4zarKYNH9xuPRsyMh9j ZcbGgouu6C9PN3YnhGyOyMgwC5L0KQPPu9hyAL6xQ0jeCgEh0zRbUcqFiCtfAgMB AAGjggG5MIIBtTAdBgNVHQ4EFgQUHMx4vOfFvuGZERFMDVxW85qltHMwHwYDVR0j BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx QzZENzM1M0QxRjAzMTQuY2VyMFAGCCsGAQUFBwELBEQwQjBABggrBgEFBQcwC4Y0 cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wL0FTMTQyMTQy LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQBlnQOMA0GCSqGSIb3DQEBCwUAA4IBAQCKxLzqrftzlXSBm2fa yhK47WNdAJHfJlayKtY19PhmYXSttDGo8WX8sQAITcm3G4eK8arEuARx0wXZwBSB 2w92GLQpQ36QPlkZkcpUbkjTj5YcW1PADuHQJQ1MVpgD7OobOXis5sbFRMXcm3af CksWBR3RSpFRheXcgwHLqyZcRjmAMMAtqG9Zvskx+YyI8P1ApGkBpvFJDl33xdhR x1rECExOn4WVjNKDGpMR1qC5p5n0TrVoMv0XgR90LzOfkoAL92jSMG/nFn2otymz /JQSrVlmZYFjtNoyZ8yEjRTVlN/0NtCSszNmh1dW4/UA58i/TBjnz570QDvZ4cyX 9p4F -----END CERTIFICATE-----Generated at Sat Jun 13 09:03:19 2026 by rpki-client