$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/kYjhBbyEGiIruuiL5RSddspy7aU.roa File: kYjhBbyEGiIruuiL5RSddspy7aU.roa (raw, json) Hash identifier: 0B7MUb2lgexBMbFMU9bYPhGfeHTqp1WgQmeMNJUAMe4= Subject key identifier: 91:88:E1:05:BC:84:1A:22:2B:BA:E8:8B:E5:14:9D:76:CA:72:ED:A5 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 1427 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/kYjhBbyEGiIruuiL5RSddspy7aU.roa Signing time: Fri 22 Aug 2025 08:57:36 +0000 ROA not before: Fri 22 Aug 2025 08:57:36 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 10085 IP address blocks: 223.26.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5159 (0x1427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:36 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9188E105BC841A222BBAE88BE5149D76CA72EDA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b6:ba:17:36:bb:d6:f2:5a:8b:01:51:b7:9c: a1:66:05:08:17:07:59:10:2f:3b:c6:7d:0f:18:43: 50:dd:cc:6f:7d:23:34:f2:af:fc:97:19:12:ab:e9: dc:c7:80:e2:3a:1b:e2:8f:1e:ac:a9:90:c7:0c:68: b8:71:03:87:74:10:7a:95:35:65:e7:7d:dc:1a:44: bd:48:18:67:62:e1:b3:3e:b2:13:12:26:24:92:1c: b2:eb:f0:ab:bb:0b:f3:15:a8:1c:54:72:17:4e:52: f1:82:ce:ce:7e:05:c4:86:0f:f8:db:2b:ce:99:03: 20:ed:63:9b:9e:e1:8f:20:09:41:b4:ad:6d:75:66: ae:2d:30:ea:87:70:2f:92:c8:4e:63:7b:2c:14:51: c1:f5:3b:d8:4a:5a:f7:7d:de:f6:a2:1b:0c:11:85: c3:9f:14:42:b8:8b:86:00:fd:ae:f7:43:06:70:72: ea:9b:5c:5c:2e:78:ab:a5:81:a2:09:59:61:ec:37: d3:e9:4a:c1:af:b2:a5:c4:9f:34:dc:1d:02:a4:95: 04:27:65:4e:3d:2d:c7:cb:0f:c4:7b:f0:50:b8:06: 59:b4:ab:22:21:2a:c1:34:c2:b0:43:fd:d2:c1:fe: 61:91:04:ae:c0:d3:5b:8b:be:b3:25:e7:77:20:a0: 8b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:88:E1:05:BC:84:1A:22:2B:BA:E8:8B:E5:14:9D:76:CA:72:ED:A5 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/kYjhBbyEGiIruuiL5RSddspy7aU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.26.92.0/22 Signature Algorithm: sha256WithRSAEncryption 48:fb:92:7b:cb:21:b4:2c:bd:94:5b:7d:25:5d:9c:43:8b:d1: 42:43:cf:4b:b7:22:63:a3:c9:40:22:ff:33:b5:71:ad:5e:3b: a0:9b:4f:a8:5c:c4:f9:77:a1:18:bd:49:5a:7c:ab:00:ed:26: 17:3e:eb:65:f9:9f:a7:1b:c9:40:75:18:23:b9:a3:0d:29:12: 79:a5:74:63:99:bb:5a:89:5f:e5:e5:5b:6e:63:72:e9:34:b2: 35:75:52:4d:47:6d:20:8b:1a:e7:ca:64:00:87:51:9d:90:f2: c2:45:46:66:36:9d:ab:08:66:b4:2e:35:6d:78:2f:b4:e7:e4: 93:14:ca:97:f6:bb:bd:0d:4f:c7:9f:36:0c:3d:de:d1:61:6c: 7b:ec:0e:01:c6:a9:23:fe:c3:47:f9:8b:89:e4:3d:a8:22:b2: 8b:a5:9a:42:0e:33:81:de:03:4f:c1:b9:3e:c5:7e:91:7e:83: 33:1b:f4:c3:06:bc:94:52:be:24:c9:7e:e4:86:59:ab:1c:b3: 07:d3:c8:3a:f8:0c:9e:e6:95:b3:d4:b0:40:d3:c5:0c:36:d1: 4b:d4:68:44:39:21:c5:f3:69:28:90:31:d0:50:d8:f2:48:0b: c7:ae:f5:9f:b0:2a:99:2f:8f:7e:88:99:0a:28:fa:38:28:5d: d4:06:dc:6e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFCcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkxODhFMTA1QkM4NDFB MjIyQkJBRTg4QkU1MTQ5RDc2Q0E3MkVEQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCitroXNrvW8lqLAVG3nKFmBQgXB1kQLzvGfQ8YQ1DdzG99IzTy r/yXGRKr6dzHgOI6G+KPHqypkMcMaLhxA4d0EHqVNWXnfdwaRL1IGGdi4bM+shMS JiSSHLLr8Ku7C/MVqBxUchdOUvGCzs5+BcSGD/jbK86ZAyDtY5ue4Y8gCUG0rW11 Zq4tMOqHcC+SyE5jeywUUcH1O9hKWvd93vaiGwwRhcOfFEK4i4YA/a73QwZwcuqb XFwueKulgaIJWWHsN9PpSsGvsqXEnzTcHQKklQQnZU49LcfLD8R78FC4Blm0qyIh KsE0wrBD/dLB/mGRBK7A01uLvrMl53cgoIuZAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUkYjhBbyEGiIruuiL5RSddspy7aUwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9rWWpoQmJ5RUdpSXJ1 dWlMNVJTZGRzcHk3YVUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQC3xpcMA0GCSqGSIb3DQEBCwUAA4IBAQBI+5J7yyG0LL2UW30lXZxDi9FCQ89L tyJjo8lAIv8ztXGtXjugm0+oXMT5d6EYvUlafKsA7SYXPutl+Z+nG8lAdRgjuaMN KRJ5pXRjmbtaiV/l5VtuY3LpNLI1dVJNR20gixrnymQAh1GdkPLCRUZmNp2rCGa0 LjVteC+05+STFMqX9ru9DU/HnzYMPd7RYWx77A4Bxqkj/sNH+YuJ5D2oIrKLpZpC DjOB3gNPwbk+xX6RfoMzG/TDBryUUr4kyX7khlmrHLMH08g6+Aye5pWz1LBA08UM NtFL1GhEOSHF82kokDHQUNjySAvHrvWfsCqZL49+iJkKKPo4KF3UBtxu -----END CERTIFICATE-----Generated at Wed Nov 5 20:27:02 2025 by rpki-client