$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eO663bVS3t1D-iUudsAWYbBk6nw.roa File: eO663bVS3t1D-iUudsAWYbBk6nw.roa (raw, json) Hash identifier: s2f6qMT5F4epxR4St5PQJYEOopfCA+ICv+xIzY6Z37Q= Subject key identifier: 78:EE:BA:DD:B5:52:DE:DD:43:FA:25:2E:76:C0:16:61:B0:64:EA:7C Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13C7 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eO663bVS3t1D-iUudsAWYbBk6nw.roa Signing time: Fri 22 Aug 2025 08:57:16 +0000 ROA not before: Fri 22 Aug 2025 08:57:16 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17651 IP address blocks: 150.116.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5063 (0x13c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:16 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=78EEBADDB552DEDD43FA252E76C01661B064EA7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7d:7d:d6:2f:dc:d5:e5:79:94:5f:5f:e6:36: 3d:dc:cd:6c:62:b6:90:9e:3e:09:f7:c7:21:6c:30: 9c:02:21:26:fe:e5:ca:05:e9:ae:14:cb:6e:92:89: 7a:b0:79:d4:45:3d:b1:8b:c1:38:89:72:9a:ed:c3: 13:21:4b:d2:5e:b2:72:c1:4b:98:8b:eb:d6:a7:5b: f9:50:ab:0d:bb:dd:6a:8f:4a:1c:8b:09:50:91:8d: e5:ae:2f:e0:39:c5:88:dc:bf:3b:88:9f:7c:ad:83: 7c:d8:f8:1d:1e:02:23:9c:32:47:f1:9d:3d:e1:23: 3c:7d:47:8d:a7:86:c7:34:83:81:dd:af:40:6f:fe: dd:85:12:5a:f1:92:c5:13:c8:e4:83:bd:77:6e:92: 22:94:59:1c:87:0c:8c:ea:12:82:aa:f4:c4:d6:8f: 91:69:3c:c0:1e:27:3d:c3:9a:24:b5:c4:8e:fe:11: 1d:d2:93:56:89:2f:75:8c:d1:95:a7:b4:19:2f:29: 10:e5:33:c3:b3:f3:7c:77:ed:dc:7d:15:79:2e:47: f6:0d:56:5d:7b:0c:e9:33:be:69:2d:81:6c:6d:e9: 91:29:34:2b:c7:7d:0d:b7:70:43:9a:85:69:ef:74: 1e:c6:69:ee:fd:c8:b0:5b:45:a9:42:0a:6d:bf:7f: 7c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EE:BA:DD:B5:52:DE:DD:43:FA:25:2E:76:C0:16:61:B0:64:EA:7C X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/eO663bVS3t1D-iUudsAWYbBk6nw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.116.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:92:be:21:f1:d4:19:ab:a3:c1:a7:7e:5a:9f:28:21:f2:75: f8:b6:a0:95:2a:b9:d6:71:55:6e:73:29:27:80:c8:5c:c6:7e: 5d:a6:da:15:08:18:16:c2:73:9a:71:a0:15:e9:33:a2:91:88: 11:5e:8a:1c:c4:71:9c:18:5d:a6:60:7e:21:22:aa:23:31:81: 6a:a8:17:27:ac:4b:2a:e2:23:67:cf:96:64:96:4f:10:43:51: 49:47:f5:73:aa:0e:20:23:98:16:f7:9b:cb:a1:67:b6:62:c9: b1:84:f9:a8:45:26:ac:42:d8:57:bd:d2:7f:e2:56:7d:44:02: 6d:b5:00:b2:ea:d7:e1:61:96:5e:7e:e8:af:e8:a0:25:ca:62: 97:46:6d:cc:18:c8:1b:18:dc:91:e1:d3:69:5c:d4:2a:2a:82: e8:e4:65:22:46:4b:ba:3f:eb:3f:a9:2e:08:58:51:ca:71:27: f1:d8:42:fa:7b:39:e0:20:0b:2e:49:a7:8d:c3:d1:9b:0e:44: 70:d0:ea:ad:64:5c:bf:21:b1:c3:08:ac:0e:27:79:81:03:46: 6e:38:19:66:ed:24:13:2e:7c:49:b2:94:e7:16:2f:7a:c9:74: 28:c0:45:fc:69:d5:01:da:e7:8f:8e:e8:56:b9:1e:79:32:0d: 48:bc:03:2c -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE8cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MTZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc4RUVCQUREQjU1MkRF REQ0M0ZBMjUyRTc2QzAxNjYxQjA2NEVBN0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCUfX3WL9zV5XmUX1/mNj3czWxitpCePgn3xyFsMJwCISb+5coF 6a4Uy26SiXqwedRFPbGLwTiJcprtwxMhS9JesnLBS5iL69anW/lQqw273WqPShyL CVCRjeWuL+A5xYjcvzuIn3ytg3zY+B0eAiOcMkfxnT3hIzx9R42nhsc0g4Hdr0Bv /t2FElrxksUTyOSDvXdukiKUWRyHDIzqEoKq9MTWj5FpPMAeJz3DmiS1xI7+ER3S k1aJL3WM0ZWntBkvKRDlM8Oz83x37dx9FXkuR/YNVl17DOkzvmktgWxt6ZEpNCvH fQ23cEOahWnvdB7Gae79yLBbRalCCm2/f3zHAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUeO663bVS3t1D+iUudsAWYbBk6nwwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9lTzY2M2JWUzN0MUQt aVV1ZHNBV1liQms2bncucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAlnR0MA0GCSqGSIb3DQEBCwUAA4IBAQAfkr4h8dQZq6PBp35anygh8nX4tqCV KrnWcVVucykngMhcxn5dptoVCBgWwnOacaAV6TOikYgRXoocxHGcGF2mYH4hIqoj MYFqqBcnrEsq4iNnz5Zklk8QQ1FJR/Vzqg4gI5gW95vLoWe2YsmxhPmoRSasQthX vdJ/4lZ9RAJttQCy6tfhYZZefuiv6KAlymKXRm3MGMgbGNyR4dNpXNQqKoLo5GUi Rku6P+s/qS4IWFHKcSfx2EL6ezngIAsuSaeNw9GbDkRw0OqtZFy/IbHDCKwOJ3mB A0ZuOBlm7SQTLnxJspTnFi96yXQowEX8adUB2uePjuhWuR55Mg1IvAMs -----END CERTIFICATE-----Generated at Wed Nov 5 21:25:00 2025 by rpki-client