$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cQaX-tFa0o1URxaO_8CGQXwbJZI.roa File: cQaX-tFa0o1URxaO_8CGQXwbJZI.roa (raw, json) Hash identifier: qXEKpwPqQubMfAYTiA2fg47Ja97T0pJ2QmHzQ0zhpPk= Subject key identifier: 71:06:97:FA:D1:5A:D2:8D:54:47:16:8E:FF:C0:86:41:7C:1B:25:92 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13F5 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cQaX-tFa0o1URxaO_8CGQXwbJZI.roa Signing time: Fri 22 Aug 2025 08:57:26 +0000 ROA not before: Fri 22 Aug 2025 08:57:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 150.116.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5109 (0x13f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=710697FAD15AD28D5447168EFFC086417C1B2592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:9e:1b:5b:46:fa:c2:0c:df:cb:86:08:f5: d4:36:e4:2b:7d:d2:da:c4:ce:6d:ac:c6:60:9c:ce: c4:57:eb:76:1a:19:b9:b0:c8:e3:92:88:86:e8:35: 3e:61:92:87:32:e5:ac:2b:80:ac:85:df:5d:3c:90: c2:0b:65:10:c1:f5:8c:f6:f5:bb:72:46:fd:eb:67: ab:8a:d5:cd:ac:b7:15:bc:b0:7d:84:7d:e1:46:6a: 97:21:03:48:a0:f4:f5:09:a8:eb:77:bf:ff:d3:b7: 07:5d:5b:5e:81:a7:80:6b:31:68:48:9f:42:fe:ea: 64:75:e4:a4:e1:03:20:5b:41:bf:d2:83:07:3d:41: cd:89:54:e4:91:92:f1:35:f5:3c:b3:fb:0d:3e:3e: 83:c1:3b:29:ba:5e:bf:75:ca:f8:2b:9a:c6:7a:70: 0b:1f:a0:64:af:6a:dd:b2:7c:9c:30:13:fe:28:a7: b4:69:16:8a:d8:5a:fc:5d:70:9a:55:9c:a3:b7:d7: fa:d5:bc:1f:58:34:5a:cb:da:e6:a0:83:55:86:6c: 4e:dd:a5:a8:41:00:11:31:c6:3e:10:68:7e:3a:4a: 8e:5f:69:ed:3a:df:4a:05:00:7e:b4:b5:00:a7:52: ac:49:4d:ca:19:6b:ef:b3:20:32:6b:9b:1d:d2:cd: 21:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:06:97:FA:D1:5A:D2:8D:54:47:16:8E:FF:C0:86:41:7C:1B:25:92 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/cQaX-tFa0o1URxaO_8CGQXwbJZI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.172.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:6e:6a:9b:ef:84:93:ed:84:ce:de:95:a1:76:47:6a:7e:79: d9:66:55:dd:50:80:c5:dc:8b:db:97:65:b2:71:76:9e:22:fc: 8e:60:3f:a3:38:1b:25:2d:4c:19:b8:9c:f9:6a:56:57:a7:01: 1e:fb:b5:80:28:41:7f:93:1c:ff:78:17:a1:3f:40:74:1c:c8: bf:dd:46:3e:2a:2d:9e:24:70:5d:cf:1a:b7:e7:18:f9:4a:e0: ce:d8:7e:8a:77:1c:c6:11:14:81:2e:b8:df:9b:7e:ee:e5:7c: b6:f2:26:d6:e4:89:62:b4:f4:56:ed:28:0d:77:1b:5d:62:87: ef:bb:bc:2c:5a:90:b3:ce:2d:5b:12:95:a7:86:f8:3d:89:1a: f9:e9:78:18:7a:e0:20:0a:c7:3d:52:e6:cc:65:3b:11:3d:ae: 5b:6b:cf:ca:bf:e1:c6:40:d2:96:53:02:13:eb:e3:c5:d7:16: 92:5a:c6:47:0d:2a:93:69:49:fe:4c:15:33:d1:b3:33:56:09: 8e:bb:e5:1f:53:f5:df:b9:97:c4:43:41:53:1f:f2:1d:e4:65: 7b:48:6d:b5:bf:b4:88:ea:06:48:f1:bf:cc:9e:d5:dd:2d:78: 1e:37:93:36:cb:b1:cc:68:17:58:0f:76:c9:19:cd:0a:af:76: 2d:b4:49:87 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE/UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDcxMDY5N0ZBRDE1QUQy OEQ1NDQ3MTY4RUZGQzA4NjQxN0MxQjI1OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqmp4bW0b6wgzfy4YI9dQ25Ct90trEzm2sxmCczsRX63YaGbmw yOOSiIboNT5hkocy5awrgKyF3108kMILZRDB9Yz29btyRv3rZ6uK1c2stxW8sH2E feFGapchA0ig9PUJqOt3v//TtwddW16Bp4BrMWhIn0L+6mR15KThAyBbQb/Sgwc9 Qc2JVOSRkvE19Tyz+w0+PoPBOym6Xr91yvgrmsZ6cAsfoGSvat2yfJwwE/4op7Rp ForYWvxdcJpVnKO31/rVvB9YNFrL2uagg1WGbE7dpahBABExxj4QaH46So5fae06 30oFAH60tQCnUqxJTcoZa++zIDJrmx3SzSExAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUcQaX+tFa0o1URxaO/8CGQXwbJZIwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9jUWFYLXRGYTBvMVVS eGFPXzhDR1FYd2JKWkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQClnSsMA0GCSqGSIb3DQEBCwUAA4IBAQB8bmqb74ST7YTO3pWhdkdqfnnZZlXd UIDF3Ivbl2WycXaeIvyOYD+jOBslLUwZuJz5alZXpwEe+7WAKEF/kxz/eBehP0B0 HMi/3UY+Ki2eJHBdzxq35xj5SuDO2H6KdxzGERSBLrjfm37u5Xy28ibW5IlitPRW 7SgNdxtdYofvu7wsWpCzzi1bEpWnhvg9iRr56XgYeuAgCsc9UubMZTsRPa5ba8/K v+HGQNKWUwIT6+PF1xaSWsZHDSqTaUn+TBUz0bMzVgmOu+UfU/XfuZfEQ0FTH/Id 5GV7SG21v7SI6gZI8b/MntXdLXgeN5M2y7HMaBdYD3bJGc0Kr3YttEmH -----END CERTIFICATE-----Generated at Wed Nov 5 19:56:45 2025 by rpki-client