$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lv82g7qdGjA3w05YTg_W8WrSEW8.roa File: lv82g7qdGjA3w05YTg_W8WrSEW8.roa (raw, json) Hash identifier: v+9uVRFZF3hBhEfOxreQMfnYmxwEifVjtlptKqjU2RM= Subject key identifier: 96:FF:36:83:BA:9D:1A:30:37:C3:4E:58:4E:0F:D6:F1:6A:D2:11:6F Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 13D6 Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lv82g7qdGjA3w05YTg_W8WrSEW8.roa Signing time: Fri 22 Aug 2025 08:57:19 +0000 ROA not before: Fri 22 Aug 2025 08:57:19 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131627 IP address blocks: 150.116.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5078 (0x13d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:19 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=96FF3683BA9D1A3037C34E584E0FD6F16AD2116F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:a8:38:94:d6:47:65:a8:d7:d9:25:13:29: cd:74:87:a1:7e:44:be:4d:37:e6:3c:2f:63:10:bc: 5d:23:57:a8:8b:3f:9b:dc:d8:e1:87:95:c5:a6:3b: db:e2:28:e9:21:c4:f4:b2:60:e4:73:f5:e6:df:5c: 39:ad:e4:f3:99:7d:a0:4d:93:25:91:9d:b6:82:ab: d6:b7:fb:99:c2:a7:f2:09:2d:10:ea:06:b9:32:b5: f5:64:0b:a0:39:fd:a9:20:19:36:83:29:23:98:4b: 9e:fd:78:62:7d:2d:02:e4:14:63:f1:5b:b7:00:c5: 35:0c:d6:d1:1c:ca:60:77:e2:2a:72:cd:fe:ee:bc: 17:c8:ac:55:d7:38:3b:22:45:f6:4c:f0:d9:3b:0b: 63:09:61:92:d2:57:f7:ab:40:04:02:7b:d0:df:ff: c3:b8:10:1a:cb:38:de:d3:37:dd:05:0f:79:b0:5e: 54:ae:2e:cd:81:b3:b7:04:e5:2a:bc:50:8a:c3:89: 1e:54:15:03:5e:92:44:ce:0a:17:77:ce:36:6a:fa: 05:fe:42:3f:65:9d:b8:54:fc:6f:16:0b:40:9d:de: b8:83:e6:37:7c:4c:bc:0a:e1:1b:a3:43:6f:be:a1: 80:f3:ec:14:a6:c7:b7:92:53:a3:12:d6:b6:fb:b4: 9e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FF:36:83:BA:9D:1A:30:37:C3:4E:58:4E:0F:D6:F1:6A:D2:11:6F X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/lv82g7qdGjA3w05YTg_W8WrSEW8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.116.32.0/20 Signature Algorithm: sha256WithRSAEncryption 5b:69:a2:eb:68:e2:9d:b3:94:6d:61:27:1c:1c:9f:ba:fd:ec: 0a:66:c2:2b:89:02:66:8b:1a:e4:b1:1d:bd:4f:66:3a:d2:87: 8c:96:58:31:2b:52:38:5f:d8:20:0e:68:3b:41:d8:05:2d:a5: 61:ba:ed:d6:68:e8:d1:41:cc:f9:f7:d1:2c:3f:69:93:a7:d2: c7:1d:77:04:1b:b7:4d:a7:a9:7d:39:38:ca:44:d3:47:cf:65: de:8c:1a:a7:b4:61:02:c6:8d:b0:3b:5c:6a:cf:d8:be:19:cc: 34:f6:06:2a:c4:20:b9:fb:ed:67:86:33:2c:99:a8:0a:24:02: f8:7e:45:1d:60:a1:cb:d2:60:30:ab:9d:96:3e:06:96:2f:30: dc:1b:19:f0:4f:0c:40:37:26:5c:05:62:ed:26:a4:6b:97:35: 89:11:84:13:e6:5d:0f:25:3a:9a:cb:d6:17:54:1b:78:a4:97: 0c:ba:7e:e1:e2:e6:1b:21:58:69:cb:2c:aa:17:67:86:a9:e5: 77:16:f1:82:d4:67:37:15:70:d6:bf:26:74:84:68:3d:39:50: a1:f9:a0:74:44:4b:f2:c7:ba:33:fe:d1:5c:89:ee:91:f5:dc: b3:d7:69:9c:a5:28:4c:3f:91:61:40:ac:75:b3:b9:90:5e:49: be:75:d4:53 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICE9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDk2RkYzNjgzQkE5RDFB MzAzN0MzNEU1ODRFMEZENkYxNkFEMjExNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCgTqg4lNZHZajX2SUTKc10h6F+RL5NN+Y8L2MQvF0jV6iLP5vc 2OGHlcWmO9viKOkhxPSyYORz9ebfXDmt5POZfaBNkyWRnbaCq9a3+5nCp/IJLRDq BrkytfVkC6A5/akgGTaDKSOYS579eGJ9LQLkFGPxW7cAxTUM1tEcymB34ipyzf7u vBfIrFXXODsiRfZM8Nk7C2MJYZLSV/erQAQCe9Df/8O4EBrLON7TN90FD3mwXlSu Ls2Bs7cE5Sq8UIrDiR5UFQNekkTOChd3zjZq+gX+Qj9lnbhU/G8WC0Cd3riD5jd8 TLwK4RujQ2++oYDz7BSmx7eSU6MS1rb7tJ61AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUlv82g7qdGjA3w05YTg/W8WrSEW8wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9sdjgyZzdxZEdqQTN3 MDVZVGdfVzhXclNFVzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQElnQgMA0GCSqGSIb3DQEBCwUAA4IBAQBbaaLraOKds5RtYSccHJ+6/ewKZsIr iQJmixrksR29T2Y60oeMllgxK1I4X9ggDmg7QdgFLaVhuu3WaOjRQcz599EsP2mT p9LHHXcEG7dNp6l9OTjKRNNHz2XejBqntGECxo2wO1xqz9i+Gcw09gYqxCC5++1n hjMsmagKJAL4fkUdYKHL0mAwq52WPgaWLzDcGxnwTwxANyZcBWLtJqRrlzWJEYQT 5l0PJTqay9YXVBt4pJcMun7h4uYbIVhpyyyqF2eGqeV3FvGC1Gc3FXDWvyZ0hGg9 OVCh+aB0REvyx7oz/tFcie6R9dyz12mcpShMP5FhQKx1s7mQXkm+ddRT -----END CERTIFICATE-----Generated at Wed Nov 5 19:58:43 2025 by rpki-client