$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8X4msiJMfh4k6PXD9hY7-ATH4Ak.roa File: 8X4msiJMfh4k6PXD9hY7-ATH4Ak.roa (raw, json) Hash identifier: 4ka286GyN67kjqt4pCwPQBKFeOa6dQszCNwhfoK+mas= Subject key identifier: F1:7E:26:B2:22:4C:7E:1E:24:E8:F5:C3:F6:16:3B:F8:04:C7:E0:09 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1404 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8X4msiJMfh4k6PXD9hY7-ATH4Ak.roa Signing time: Fri 22 Aug 2025 08:57:29 +0000 ROA not before: Fri 22 Aug 2025 08:57:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 150.116.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 09:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5124 (0x1404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F17E26B2224C7E1E24E8F5C3F6163BF804C7E009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:36:54:af:11:f3:79:65:dd:86:d8:11:49:2a: e5:da:38:95:56:d4:eb:3e:ac:07:bb:b3:14:6b:fb: 16:46:b9:67:ee:93:09:93:e4:de:01:90:58:22:18: bb:d4:f5:80:13:e3:81:48:d8:85:3f:58:07:d3:6b: 83:84:ff:c6:0e:86:3c:ea:5d:4f:3a:30:e6:5b:0f: ab:33:da:ca:bf:c1:46:ee:58:32:a9:eb:55:d8:7b: 90:0e:67:72:fd:65:22:a0:87:85:69:f9:a7:98:8e: 33:6d:85:a6:81:d7:5b:08:d4:ee:02:d8:f5:50:60: c7:75:6b:77:fe:2b:52:ee:79:64:1d:69:6c:0e:8b: 97:cb:6d:2c:35:8b:0d:d1:7e:de:d6:8d:97:6f:de: d2:ba:b4:bd:ce:d1:cf:c2:6f:c1:de:7e:01:40:a1: 92:72:a5:e0:00:c8:09:b4:5c:1f:03:b0:a6:0d:6e: 1b:ff:f6:d1:87:8c:e3:17:9a:39:35:d1:81:c1:d8: 7b:80:e1:cb:b1:be:4c:aa:92:3d:8f:4e:cf:9b:25: 41:03:08:3c:21:4f:36:f4:ff:c0:9f:fc:85:24:e2: c1:28:80:91:7d:65:7f:4d:e7:b8:f7:3e:59:8a:70: d0:7e:2f:b0:d3:b2:8f:a4:a7:3e:77:e9:a8:9d:e8: db:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7E:26:B2:22:4C:7E:1E:24:E8:F5:C3:F6:16:3B:F8:04:C7:E0:09 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8X4msiJMfh4k6PXD9hY7-ATH4Ak.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.160.0/19 Signature Algorithm: sha256WithRSAEncryption 27:cd:a8:44:c3:77:6e:d3:88:08:00:96:c6:c7:35:c0:9c:54: 56:7c:2d:55:e9:c7:32:ac:fc:a1:47:d8:d9:7f:59:a8:71:b8: 77:24:76:49:03:55:b3:c7:5e:18:82:73:45:53:fb:04:76:f7: b3:fe:12:89:b5:67:da:ac:39:79:25:f0:a8:14:4e:86:d0:5f: c6:f4:8f:c1:96:ef:9f:51:f0:2a:65:8d:ff:c1:f9:c4:16:53: 82:d0:57:3e:b9:6f:c4:cf:ee:3e:88:de:3f:19:aa:5f:71:2a: 75:3d:75:d9:d3:5c:ef:17:d3:b7:29:f7:58:53:a7:a7:1c:2c: 5d:a4:a1:a5:f3:4e:b6:4a:5b:c8:7b:f5:23:92:74:38:26:e8: 17:d7:45:62:12:7c:3c:68:3c:68:c1:c3:5f:f5:85:30:fe:22: 56:27:dd:3c:21:d2:01:68:58:90:f8:c9:38:f4:50:9a:eb:78: 96:d1:dc:06:3f:20:54:59:65:34:b7:6b:a3:58:1b:d1:19:de: 75:fe:8a:2a:05:35:ee:e9:21:e5:37:e9:8a:5c:b0:26:97:cf: 41:e6:58:8c:e0:7c:ae:d8:e4:0d:a9:1b:3a:f2:ad:4a:9a:56: 97:09:b7:96:8d:bf:d9:10:7d:90:a9:e1:47:3e:21:5c:1d:63: 3c:52:dd:d9 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFAQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYxN0UyNkIyMjI0QzdF MUUyNEU4RjVDM0Y2MTYzQkY4MDRDN0UwMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiNlSvEfN5Zd2G2BFJKuXaOJVW1Os+rAe7sxRr+xZGuWfukwmT 5N4BkFgiGLvU9YAT44FI2IU/WAfTa4OE/8YOhjzqXU86MOZbD6sz2sq/wUbuWDKp 61XYe5AOZ3L9ZSKgh4Vp+aeYjjNthaaB11sI1O4C2PVQYMd1a3f+K1LueWQdaWwO i5fLbSw1iw3Rft7WjZdv3tK6tL3O0c/Cb8HefgFAoZJypeAAyAm0XB8DsKYNbhv/ 9tGHjOMXmjk10YHB2HuA4cuxvkyqkj2PTs+bJUEDCDwhTzb0/8Cf/IUk4sEogJF9 ZX9N57j3PlmKcNB+L7DTso+kpz536aid6NtfAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU8X4msiJMfh4k6PXD9hY7+ATH4AkwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy84WDRtc2lKTWZoNGs2 UFhEOWhZNy1BVEg0QWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQFlnSgMA0GCSqGSIb3DQEBCwUAA4IBAQAnzahEw3du04gIAJbGxzXAnFRWfC1V 6ccyrPyhR9jZf1mocbh3JHZJA1Wzx14YgnNFU/sEdvez/hKJtWfarDl5JfCoFE6G 0F/G9I/Blu+fUfAqZY3/wfnEFlOC0Fc+uW/Ez+4+iN4/GapfcSp1PXXZ01zvF9O3 KfdYU6enHCxdpKGl8062SlvIe/UjknQ4JugX10ViEnw8aDxowcNf9YUw/iJWJ908 IdIBaFiQ+Mk49FCa63iW0dwGPyBUWWU0t2ujWBvRGd51/ooqBTXu6SHlN+mKXLAm l89B5liM4Hyu2OQNqRs68q1KmlaXCbeWjb/ZEH2QqeFHPiFcHWM8Ut3Z -----END CERTIFICATE-----Generated at Thu Nov 6 06:04:05 2025 by rpki-client