$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/CAOMfKMbZrwlukCzERXURcDempE.roa File: CAOMfKMbZrwlukCzERXURcDempE.roa (raw, json) Hash identifier: L/lVrojvadikUhzZuJJyUWDOitAPwgitmDNRn7Kwvco= Subject key identifier: 08:03:8C:7C:A3:1B:66:BC:25:BA:40:B3:11:15:D4:45:C0:DE:9A:91 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13C0 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/CAOMfKMbZrwlukCzERXURcDempE.roa Signing time: Fri 22 Aug 2025 08:57:15 +0000 ROA not before: Fri 22 Aug 2025 08:57:15 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 63199 IP address blocks: 150.116.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5056 (0x13c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:15 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=08038C7CA31B66BC25BA40B31115D445C0DE9A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e3:49:16:0b:0d:cd:d9:be:d6:22:34:00:6a: ae:36:7b:5b:c0:48:31:63:10:91:cf:6c:52:70:5a: ec:04:83:9f:c4:eb:9a:8d:85:14:45:fa:39:52:69: 21:87:51:10:dc:24:92:6e:e1:22:63:cc:76:f7:70: 4d:5b:f0:55:a6:fd:6d:96:d9:07:68:4b:aa:9a:0b: e8:22:38:e6:ea:58:5d:23:08:24:45:d1:a7:5c:47: 3e:62:31:94:f2:de:cd:2a:61:87:72:b2:c7:1b:04: 19:f3:44:5d:f7:e9:32:76:b0:14:54:e3:47:ab:f4: e4:d9:2e:06:1e:9a:14:b6:1f:1a:e2:ce:1d:03:63: bf:f7:77:0d:57:d5:ac:1a:98:0a:33:5c:a1:25:85: ae:51:e3:ec:ac:b7:62:cb:68:21:61:c0:1d:e5:b3: 76:31:86:3a:9d:2f:0d:93:92:42:c5:52:9f:bb:ea: 2e:2f:a3:15:08:06:21:7c:1e:4c:be:23:bf:f8:1e: d7:d2:ae:74:d3:7a:d0:85:16:66:7d:5e:70:91:f1: ed:9a:c6:b1:34:0a:c3:98:27:12:24:1b:c0:20:e2: 12:47:af:91:38:71:ae:f3:df:09:5b:dc:89:29:93: 7b:da:9a:bd:b6:bf:d3:31:e9:6f:1c:21:53:a0:af: 5e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:03:8C:7C:A3:1B:66:BC:25:BA:40:B3:11:15:D4:45:C0:DE:9A:91 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/CAOMfKMbZrwlukCzERXURcDempE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.82.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:cb:9d:9d:64:bd:ef:3d:e9:61:b4:b2:01:f8:e5:e8:fb:ad: e3:f5:c3:ad:a9:76:bf:86:f6:ec:e1:df:16:b1:30:ca:22:d2: 83:a3:1f:48:06:73:e4:fb:db:12:8f:29:61:70:d7:63:5f:59: 0f:d5:8e:83:47:ba:e7:39:4c:63:f1:09:e6:8f:59:ab:f0:3d: 77:25:ce:e2:11:19:8a:0e:37:f7:cb:06:d8:17:94:fc:02:8a: 83:dc:fb:11:b1:b9:a8:f3:33:05:46:bb:08:a7:62:5d:ec:62: a5:fa:c5:f3:b6:be:af:04:48:c4:b5:66:be:e5:22:01:c0:54: e5:96:2c:e7:f1:81:3f:9d:71:43:30:bf:a6:a3:db:55:37:30: 3f:51:a4:04:6f:9d:1e:f2:e4:f7:57:68:5f:12:d3:54:ef:f4: 34:d2:e9:9a:ad:be:7d:63:16:6d:a0:83:88:b4:10:78:a9:7e: 4c:97:62:e1:bd:16:4c:b0:8f:79:7e:d3:6a:af:37:06:9a:0c: b4:94:ca:4b:ec:4e:41:4c:cd:5f:a1:88:81:ae:68:11:fb:2e: bf:56:1b:42:44:98:6f:8e:3e:85:e1:b9:43:d1:02:bd:51:74: 69:d3:1f:b2:ad:3f:80:f9:54:a9:2d:e5:35:71:af:5b:1a:a5: 89:88:b3:b4 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE8AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA4MDM4QzdDQTMxQjY2 QkMyNUJBNDBCMzExMTVENDQ1QzBERTlBOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD040kWCw3N2b7WIjQAaq42e1vASDFjEJHPbFJwWuwEg5/E65qN hRRF+jlSaSGHURDcJJJu4SJjzHb3cE1b8FWm/W2W2QdoS6qaC+giOObqWF0jCCRF 0adcRz5iMZTy3s0qYYdysscbBBnzRF336TJ2sBRU40er9OTZLgYemhS2Hxrizh0D Y7/3dw1X1awamAozXKElha5R4+yst2LLaCFhwB3ls3YxhjqdLw2TkkLFUp+76i4v oxUIBiF8Hky+I7/4HtfSrnTTetCFFmZ9XnCR8e2axrE0CsOYJxIkG8Ag4hJHr5E4 ca7z3wlb3Ikpk3vamr22v9Mx6W8cIVOgr15nAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUCAOMfKMbZrwlukCzERXURcDempEwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9DQU9NZktNYlpyd2x1 a0N6RVJYVVJjRGVtcEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnRSMA0GCSqGSIb3DQEBCwUAA4IBAQBPy52dZL3vPelhtLIB+OXo+63j9cOt qXa/hvbs4d8WsTDKItKDox9IBnPk+9sSjylhcNdjX1kP1Y6DR7rnOUxj8Qnmj1mr 8D13Jc7iERmKDjf3ywbYF5T8AoqD3PsRsbmo8zMFRrsIp2Jd7GKl+sXztr6vBEjE tWa+5SIBwFTllizn8YE/nXFDML+mo9tVNzA/UaQEb50e8uT3V2hfEtNU7/Q00uma rb59YxZtoIOItBB4qX5Ml2LhvRZMsI95ftNqrzcGmgy0lMpL7E5BTM1foYiBrmgR +y6/VhtCRJhvjj6F4blD0QK9UXRp0x+yrT+A+VSpLeU1ca9bGqWJiLO0 -----END CERTIFICATE-----Generated at Wed Nov 5 02:13:42 2025 by rpki-client