$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/0Y0IRdPxl93KWuFhwExlsTUbhkQ.roa File: 0Y0IRdPxl93KWuFhwExlsTUbhkQ.roa (raw, json) Hash identifier: zV+Qd5641xdlNBzZtU5+5n2scmxG3VsNbWvaM7zr2jY= Subject key identifier: D1:8D:08:45:D3:F1:97:DD:CA:5A:E1:61:C0:4C:65:B1:35:1B:86:44 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13DD Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/0Y0IRdPxl93KWuFhwExlsTUbhkQ.roa Signing time: Fri 22 Aug 2025 08:57:21 +0000 ROA not before: Fri 22 Aug 2025 08:57:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17408 IP address blocks: 223.26.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5085 (0x13dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:21 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D18D0845D3F197DDCA5AE161C04C65B1351B8644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:3f:c6:fb:cb:20:36:5d:c6:47:24:f9:a7: 59:5a:72:7f:b6:81:98:1e:f7:8a:b9:2d:07:04:59: f3:c1:7b:04:b3:0f:eb:2a:3e:2d:23:21:d1:a5:da: 50:66:71:a7:6b:ce:7b:21:1e:0a:05:0e:0e:05:bc: 9e:60:7e:8c:69:ac:7c:85:eb:f1:3f:28:29:f6:6d: 4e:00:4f:ce:9d:b5:df:e1:d0:44:6a:92:0e:1d:b1: 74:70:3f:ee:5d:35:fa:4f:66:1a:d7:0e:cd:91:42: 15:89:76:44:39:b2:f9:b8:0f:ab:c9:9a:08:e6:a7: ec:71:f3:b7:80:55:26:83:be:26:b1:e3:57:4d:89: 7a:02:5d:cc:a1:b3:00:7d:13:20:7a:74:17:ec:e2: c8:a5:24:a8:1b:4a:2f:f5:58:35:af:c6:67:05:ca: 6e:ea:a6:60:90:cb:cc:22:54:c4:f5:3c:ed:8e:1d: 29:3c:01:86:9e:18:b1:0b:e8:4a:f6:f9:dd:8d:cc: 6b:a0:c7:9e:1b:4b:48:b0:f5:fe:4a:c6:a6:d1:95: 45:c7:0c:3e:dd:e6:09:df:f3:06:4c:8b:c9:ab:bd: 04:5d:41:7d:34:39:0c:36:5a:75:e1:f6:15:9c:ab: 79:78:7d:7e:26:ec:57:df:a8:d3:b9:b2:01:62:62: 42:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8D:08:45:D3:F1:97:DD:CA:5A:E1:61:C0:4C:65:B1:35:1B:86:44 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/0Y0IRdPxl93KWuFhwExlsTUbhkQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.26.70.0/23 Signature Algorithm: sha256WithRSAEncryption 65:29:6a:db:2f:00:11:06:fe:1f:8b:00:13:12:64:fe:a5:13: e4:0f:1b:83:3c:03:d6:20:ee:c5:5e:b4:1a:9a:69:5e:54:61: 35:10:d4:02:9b:9d:79:9d:14:83:d6:13:dd:2f:9f:1d:92:5c: d7:b0:e1:ff:e5:c2:82:7e:66:67:dd:53:d1:7d:bc:40:63:a5: 9b:7d:5b:1e:69:aa:4f:a9:0e:f3:70:ee:91:4f:01:5f:e8:b3: 6a:97:dd:83:15:b2:a5:32:0d:5b:f2:5e:b1:04:02:a4:49:55: 37:34:bc:74:c8:c7:3d:70:51:74:e3:13:78:25:1a:df:52:6c: e2:26:a0:b9:de:84:d4:ee:b6:c7:25:6c:d8:af:b3:b6:9f:e9: 1e:e5:e1:59:c2:d9:fc:38:d9:77:7a:ff:93:00:90:af:a7:a2: b4:e1:7d:17:2f:a9:49:f4:7c:f6:e1:38:7d:19:25:18:07:63: ef:62:f2:be:58:40:e2:45:ad:32:9e:2b:6f:41:f2:71:34:74: 46:52:18:64:74:6f:eb:4c:98:62:99:a6:c0:d0:51:4b:4c:66: f6:01:81:b9:af:41:22:78:20:e3:91:98:83:48:1f:2f:4f:94: 19:f7:c2:af:81:b0:c0:ce:20:96:fd:61:eb:92:44:fc:33:e3: 39:26:ca:fa -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE90wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQxOEQwODQ1RDNGMTk3 RERDQTVBRTE2MUMwNEM2NUIxMzUxQjg2NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/rD/G+8sgNl3GRyT5p1lacn+2gZge94q5LQcEWfPBewSzD+sq Pi0jIdGl2lBmcadrznshHgoFDg4FvJ5gfoxprHyF6/E/KCn2bU4AT86dtd/h0ERq kg4dsXRwP+5dNfpPZhrXDs2RQhWJdkQ5svm4D6vJmgjmp+xx87eAVSaDviax41dN iXoCXcyhswB9EyB6dBfs4silJKgbSi/1WDWvxmcFym7qpmCQy8wiVMT1PO2OHSk8 AYaeGLEL6Er2+d2NzGugx54bS0iw9f5KxqbRlUXHDD7d5gnf8wZMi8mrvQRdQX00 OQw2WnXh9hWcq3l4fX4m7FffqNO5sgFiYkIzAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU0Y0IRdPxl93KWuFhwExlsTUbhkQwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy8wWTBJUmRQeGw5M0tX dUZod0V4bHNUVWJoa1Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQB3xpGMA0GCSqGSIb3DQEBCwUAA4IBAQBlKWrbLwARBv4fiwATEmT+pRPkDxuD PAPWIO7FXrQammleVGE1ENQCm515nRSD1hPdL58dklzXsOH/5cKCfmZn3VPRfbxA Y6WbfVseaapPqQ7zcO6RTwFf6LNql92DFbKlMg1b8l6xBAKkSVU3NLx0yMc9cFF0 4xN4JRrfUmziJqC53oTU7rbHJWzYr7O2n+ke5eFZwtn8ONl3ev+TAJCvp6K04X0X L6lJ9Hz24Th9GSUYB2PvYvK+WEDiRa0ynitvQfJxNHRGUhhkdG/rTJhimabA0FFL TGb2AYG5r0EieCDjkZiDSB8vT5QZ98KvgbDAziCW/WHrkkT8M+M5Jsr6 -----END CERTIFICATE-----Generated at Wed Nov 5 03:12:57 2025 by rpki-client