$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1i47zkJaYF49Zcrj_qtsZBhflpg.roa File: 1i47zkJaYF49Zcrj_qtsZBhflpg.roa (raw, json) Hash identifier: 0DNUDZ3YQnWRgCKuCj1bn0Ervf8LUGh/agyDxeqdQSk= Subject key identifier: D6:2E:3B:CE:42:5A:60:5E:3D:65:CA:E3:FE:AB:6C:64:18:5F:96:98 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13CF Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1i47zkJaYF49Zcrj_qtsZBhflpg.roa Signing time: Fri 22 Aug 2025 08:57:18 +0000 ROA not before: Fri 22 Aug 2025 08:57:18 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 150.117.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5071 (0x13cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:18 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D62E3BCE425A605E3D65CAE3FEAB6C64185F9698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:be:f0:6c:b0:13:b6:80:01:3b:10:69:79:77: 41:a4:48:23:e5:02:e4:4e:4d:bd:51:4b:e2:44:52: 19:ef:a6:14:0a:18:ea:96:c7:9c:34:b3:5b:4f:ff: 09:35:f0:f0:2c:66:36:16:71:88:a9:1e:44:1e:b0: 01:1d:17:02:1f:ee:f6:16:c5:3c:b6:5d:74:73:34: 6e:fc:f6:ff:21:bf:6c:8e:9c:61:83:39:24:b0:df: 0d:a0:66:b0:01:6d:14:8d:d5:8a:27:15:82:16:35: 68:d0:f0:86:97:e1:85:18:db:91:18:02:2d:8f:b4: db:87:16:11:25:d1:6e:ae:85:4e:9a:46:d0:93:17: 82:9d:6f:d4:26:dc:61:a4:82:db:db:04:54:84:6e: 93:a7:15:73:68:ca:c2:7f:a5:88:3e:70:81:3f:80: 67:2b:92:ab:db:d9:ba:2f:24:bc:eb:d1:34:7e:fd: 41:fa:bc:82:69:dc:cf:6e:69:ac:44:9a:f1:8f:54: 66:1a:4d:59:0b:cf:7e:0b:3b:5d:8a:ee:76:73:f3: 2d:a1:3d:f8:eb:23:1f:73:93:b2:3f:e1:3b:e4:c0: 02:a3:4f:bd:f8:bc:36:d6:7a:65:45:77:fd:e9:4e: 7d:f5:02:f3:7d:28:f6:c2:60:25:dd:7a:35:38:ac: 1d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2E:3B:CE:42:5A:60:5E:3D:65:CA:E3:FE:AB:6C:64:18:5F:96:98 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/1i47zkJaYF49Zcrj_qtsZBhflpg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.117.128.0/19 Signature Algorithm: sha256WithRSAEncryption 65:f3:49:ba:ce:ce:3c:94:e2:4d:5f:ea:31:79:52:5c:ce:9d: 0e:bb:3e:82:1f:44:4f:80:09:51:a1:83:3f:3b:3c:d5:7d:20: d6:ee:ed:06:74:49:85:a5:22:07:4b:22:92:d2:7f:ab:07:da: 1c:52:58:8e:ca:a4:32:61:ef:bd:12:a8:bd:50:c6:e9:0a:31: d3:ea:f0:f5:4f:9b:bf:38:fc:4d:e4:0c:9c:0b:c4:b4:f3:17: c9:19:75:7e:df:77:03:be:42:67:d3:5f:88:b9:47:4b:32:fe: 47:73:f3:1d:6c:50:12:d0:2d:5f:88:2b:c8:07:8c:cf:b2:92: 4b:28:1c:15:ca:27:ac:1f:6a:2a:c5:f0:50:13:7c:47:c5:51: 1c:f7:fa:46:4e:26:be:d3:f6:7b:69:97:7a:32:6b:6f:48:23: 41:0f:00:2a:78:9c:84:1b:86:e9:0a:9c:74:d2:60:61:74:b5: 22:74:7e:d9:52:13:dc:48:15:91:01:53:54:97:87:98:a4:1b: 67:3f:7e:d4:ea:f7:e3:22:93:79:91:8c:b2:11:18:d1:bf:78: 89:44:cf:b3:f7:49:9a:a9:fd:87:99:04:bb:3e:18:c8:24:8c: fd:08:64:05:2d:3d:97:69:2c:49:42:00:aa:65:08:48:44:e4: 2b:af:c4:80 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE88wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ2MkUzQkNFNDI1QTYw NUUzRDY1Q0FFM0ZFQUI2QzY0MTg1Rjk2OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZvvBssBO2gAE7EGl5d0GkSCPlAuROTb1RS+JEUhnvphQKGOqW x5w0s1tP/wk18PAsZjYWcYipHkQesAEdFwIf7vYWxTy2XXRzNG789v8hv2yOnGGD OSSw3w2gZrABbRSN1YonFYIWNWjQ8IaX4YUY25EYAi2PtNuHFhEl0W6uhU6aRtCT F4Kdb9Qm3GGkgtvbBFSEbpOnFXNoysJ/pYg+cIE/gGcrkqvb2bovJLzr0TR+/UH6 vIJp3M9uaaxEmvGPVGYaTVkLz34LO12K7nZz8y2hPfjrIx9zk7I/4TvkwAKjT734 vDbWemVFd/3pTn31AvN9KPbCYCXdejU4rB1DAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU1i47zkJaYF49Zcrj/qtsZBhflpgwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy8xaTQ3emtKYVlGNDla Y3JqX3F0c1pCaGZscGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFlnWAMA0GCSqGSIb3DQEBCwUAA4IBAQBl80m6zs48lOJNX+oxeVJczp0Ouz6C H0RPgAlRoYM/OzzVfSDW7u0GdEmFpSIHSyKS0n+rB9ocUliOyqQyYe+9Eqi9UMbp CjHT6vD1T5u/OPxN5AycC8S08xfJGXV+33cDvkJn01+IuUdLMv5Hc/MdbFAS0C1f iCvIB4zPspJLKBwVyiesH2oqxfBQE3xHxVEc9/pGTia+0/Z7aZd6MmtvSCNBDwAq eJyEG4bpCpx00mBhdLUidH7ZUhPcSBWRAVNUl4eYpBtnP37U6vfjIpN5kYyyERjR v3iJRM+z90maqf2HmQS7PhjIJIz9CGQFLT2XaSxJQgCqZQhIROQrr8SA -----END CERTIFICATE-----Generated at Wed Nov 5 21:24:14 2025 by rpki-client