$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/H7efflK5EG9lO_Q5k6DopWVTt3g.roa File: H7efflK5EG9lO_Q5k6DopWVTt3g.roa (raw, json) Hash identifier: GvP8qBZm5i63ZHLIWnrgFo7LzUE757qMIfhcKPO7V90= Subject key identifier: 1F:B7:9F:7E:52:B9:10:6F:65:3B:F4:39:93:A0:E8:A5:65:53:B7:78 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13E7 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/H7efflK5EG9lO_Q5k6DopWVTt3g.roa Signing time: Fri 22 Aug 2025 08:57:23 +0000 ROA not before: Fri 22 Aug 2025 08:57:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 63199 IP address blocks: 150.116.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5095 (0x13e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1FB79F7E52B9106F653BF43993A0E8A56553B778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e9:f1:57:9c:ea:82:6e:e4:43:be:63:77:54: df:81:c0:25:8c:3e:3e:4d:ce:d4:6b:a2:45:cd:15: 0a:8c:1d:53:dc:b9:d4:8a:8e:8e:12:54:58:04:da: 68:f0:22:26:bf:c7:5a:5d:9d:29:1f:60:d7:50:2d: 75:ef:c6:64:a2:25:72:70:f2:f1:89:cc:d9:42:30: 4e:21:ea:26:1f:73:4e:32:11:a6:80:e0:2e:0e:b9: 07:65:15:e9:30:b7:d5:6e:07:33:13:d3:1e:5a:56: b3:e7:ee:8f:8e:a5:09:c6:34:9b:85:ae:10:bf:45: 5b:12:0e:ee:79:45:21:89:e8:23:0a:27:b5:10:71: ce:5e:e2:3e:49:99:61:22:32:71:b0:61:d2:07:a4: 53:9f:a5:8f:ad:4f:cd:f9:5a:cc:14:57:bb:ba:95: fb:6b:a2:a7:2a:f9:a8:12:e3:63:0d:d7:31:c2:f9: c5:85:05:37:9c:85:d6:80:f2:62:73:ff:f2:d3:b0: b5:b6:11:15:b8:28:e5:ae:80:94:1f:b7:ba:a4:0f: bf:f4:56:17:07:df:33:03:2a:f8:e3:e4:42:c2:75: ae:f2:c4:42:98:ab:f8:7c:24:62:84:09:4b:4f:00: 91:ce:0e:4c:2e:dc:ee:7c:48:32:96:32:57:42:09: cd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B7:9F:7E:52:B9:10:6F:65:3B:F4:39:93:A0:E8:A5:65:53:B7:78 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/H7efflK5EG9lO_Q5k6DopWVTt3g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.2.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:ba:88:47:91:f0:a4:95:a8:6a:9e:dc:3f:83:4a:13:40:38: 0a:64:98:00:b5:fc:14:1d:c4:6a:70:37:cb:3e:90:d5:fa:10: d9:b6:d4:21:86:5e:68:25:07:1d:4d:e8:d4:0e:8a:b9:8c:21: 2c:9b:6f:cf:8c:5a:2c:d4:62:46:90:de:79:39:6c:82:b7:c8: 68:26:ad:9d:b7:c8:66:a4:48:04:58:52:8f:aa:34:6f:23:79: bc:50:f4:82:93:64:62:85:2a:27:65:6e:e3:e3:2d:cc:b3:f7: 2c:2d:68:45:ac:58:67:81:7d:1d:4d:1f:1c:49:b0:d9:cc:a8: 8d:75:64:bc:8b:73:d3:05:36:42:94:fe:66:4a:9c:e4:79:39: cb:15:7a:17:f6:e9:e1:61:0f:59:74:54:38:c8:f6:5c:9c:68: 28:97:ea:3d:a7:0b:0e:c4:2b:2b:51:ec:0a:ec:cb:bd:79:f3: 5d:25:2b:7a:c1:92:29:3c:36:92:60:dc:64:f8:bb:b4:1b:71: 59:bc:eb:07:a4:2a:2c:ab:09:f7:50:1b:24:9d:98:b9:8e:d9: 10:58:26:8f:f8:2f:6f:98:9e:ef:d6:64:23:a0:38:2a:c3:9f: 99:96:2b:b2:e4:f3:87:e1:f0:e5:6f:c0:c1:cf:a0:6d:c1:5f: 37:c8:12:2c -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE+cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFGQjc5RjdFNTJCOTEw NkY2NTNCRjQzOTkzQTBFOEE1NjU1M0I3NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCl6fFXnOqCbuRDvmN3VN+BwCWMPj5NztRrokXNFQqMHVPcudSK jo4SVFgE2mjwIia/x1pdnSkfYNdQLXXvxmSiJXJw8vGJzNlCME4h6iYfc04yEaaA 4C4OuQdlFekwt9VuBzMT0x5aVrPn7o+OpQnGNJuFrhC/RVsSDu55RSGJ6CMKJ7UQ cc5e4j5JmWEiMnGwYdIHpFOfpY+tT835WswUV7u6lftroqcq+agS42MN1zHC+cWF BTechdaA8mJz//LTsLW2ERW4KOWugJQft7qkD7/0VhcH3zMDKvjj5ELCda7yxEKY q/h8JGKECUtPAJHODkwu3O58SDKWMldCCc0XAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUH7efflK5EG9lO/Q5k6DopWVTt3gwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9IN2VmZmxLNUVHOWxP X1E1azZEb3BXVlR0M2cucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBlnQCMA0GCSqGSIb3DQEBCwUAA4IBAQCNuohHkfCklahqntw/g0oTQDgKZJgA tfwUHcRqcDfLPpDV+hDZttQhhl5oJQcdTejUDoq5jCEsm2/PjFos1GJGkN55OWyC t8hoJq2dt8hmpEgEWFKPqjRvI3m8UPSCk2RihSonZW7j4y3Ms/csLWhFrFhngX0d TR8cSbDZzKiNdWS8i3PTBTZClP5mSpzkeTnLFXoX9unhYQ9ZdFQ4yPZcnGgol+o9 pwsOxCsrUewK7Mu9efNdJSt6wZIpPDaSYNxk+Lu0G3FZvOsHpCosqwn3UBsknZi5 jtkQWCaP+C9vmJ7v1mQjoDgqw5+Zliuy5POH4fDlb8DBz6BtwV83yBIs -----END CERTIFICATE-----Generated at Wed Nov 5 02:12:51 2025 by rpki-client