$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vN6uKcvzwfo18uTfQAESIec52Uc.roa File: vN6uKcvzwfo18uTfQAESIec52Uc.roa (raw, json) Hash identifier: WnQDtdf83XXd56iGBptAVjJjN+Upf86ZiLD1RmQ6Rps= Subject key identifier: BC:DE:AE:29:CB:F3:C1:FA:35:F2:E4:DF:40:01:12:21:E7:39:D9:47 Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Certificate serial: 141A Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vN6uKcvzwfo18uTfQAESIec52Uc.roa Signing time: Fri 22 Aug 2025 08:57:33 +0000 ROA not before: Fri 22 Aug 2025 08:57:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18186 IP address blocks: 223.26.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5146 (0x141a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76 Validity Not Before: Aug 22 08:57:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BCDEAE29CBF3C1FA35F2E4DF40011221E739D947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:20:3c:44:15:97:43:77:4d:af:bf:89:c1: 5a:c3:01:4a:9c:ab:c0:1b:e5:17:aa:70:50:ff:01: 52:ef:10:e7:1b:48:53:45:b3:d0:14:08:e4:f1:3a: 29:26:bf:fc:bd:37:e8:8a:74:d9:ed:92:7b:93:d0: d4:52:a2:57:f0:ad:56:7a:e8:f7:95:94:0b:ef:df: fe:1c:31:3f:51:a7:e8:a2:11:a0:46:86:25:b4:c7: 5b:9e:d5:be:f9:67:12:47:da:93:9e:38:3f:e7:31: 4f:23:60:7e:6f:61:03:53:13:d3:4f:6f:34:da:15: e6:ab:e3:56:04:d7:7e:42:71:dd:01:dc:98:d1:ec: 2f:aa:8d:d1:d8:d1:a2:25:6e:74:ec:d4:73:36:3a: 61:93:f4:6b:f5:7b:7e:72:f5:39:3f:d2:06:75:43: 2b:04:90:35:ea:2f:ce:4d:b2:09:20:90:69:75:c6: c1:c8:4e:b2:5d:cd:7d:c0:d9:f3:ef:54:45:77:e6: 77:c8:f1:3c:df:c3:84:e8:7d:bb:45:19:5e:1f:86: e8:11:7d:97:c6:ca:64:e3:35:43:d1:bc:e6:a2:6c: 3c:8c:4e:ca:c3:37:a2:45:a6:24:c6:f0:13:7a:00: a0:9c:4c:04:28:1c:43:a7:de:41:0c:ec:18:ef:4f: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DE:AE:29:CB:F3:C1:FA:35:F2:E4:DF:40:01:12:21:E7:39:D9:47 X509v3 Authority Key Identifier: keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/vN6uKcvzwfo18uTfQAESIec52Uc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.26.76.0/22 Signature Algorithm: sha256WithRSAEncryption 69:fb:a1:ce:94:93:c5:af:00:b5:79:91:62:17:42:71:35:1a: 63:ee:3e:e5:f4:d9:df:d6:e0:ff:90:7f:69:7e:ae:8e:22:77: 7c:2a:f3:19:18:a9:88:81:ea:56:d6:e2:e6:9f:cf:3f:bc:d5: 83:d5:3c:c8:67:fb:2b:d9:38:ac:2a:0f:92:8b:3c:e9:17:d7: 2a:7b:7c:9e:e2:1d:8b:d5:bd:31:35:86:ea:46:12:8b:3e:e4: bc:e3:71:9c:bb:eb:f6:6f:d7:c3:d7:46:1f:67:c9:ac:10:03: 76:bd:d5:30:00:e9:fb:d5:09:8a:6a:6a:e5:88:0b:33:d6:86: 26:69:2b:2d:a2:18:44:d8:c0:e9:a9:93:09:46:e1:ff:45:45: b4:2d:19:49:3b:a4:8a:37:d8:02:ab:6f:1b:2d:98:a7:d4:f3: a9:eb:04:cc:1a:b5:b0:21:5c:ac:b6:40:cd:b2:89:e8:89:db: 92:64:b6:64:9c:78:e7:5b:30:9d:82:82:5a:a4:04:f6:1a:ca: 4d:0b:bc:ec:fc:66:12:0b:7f:57:40:91:db:cb:f0:68:0e:67: 55:80:be:ba:4c:2c:c1:19:97:ad:09:6f:d5:c4:8f:8b:e3:6e: 97:a9:3c:23:d0:c5:54:ee:25:2b:af:b5:6b:60:3c:93:a8:94: 12:24:81:ad -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICFBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yNTA4MjIw ODU3MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJDREVBRTI5Q0JGM0Mx RkEzNUYyRTRERjQwMDExMjIxRTczOUQ5NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4RyA8RBWXQ3dNr7+JwVrDAUqcq8Ab5ReqcFD/AVLvEOcbSFNF s9AUCOTxOikmv/y9N+iKdNntknuT0NRSolfwrVZ66PeVlAvv3/4cMT9Rp+iiEaBG hiW0x1ue1b75ZxJH2pOeOD/nMU8jYH5vYQNTE9NPbzTaFear41YE135Ccd0B3JjR 7C+qjdHY0aIlbnTs1HM2OmGT9Gv1e35y9Tk/0gZ1QysEkDXqL85NsgkgkGl1xsHI TrJdzX3A2fPvVEV35nfI8Tzfw4TofbtFGV4fhugRfZfGymTjNUPRvOaibDyMTsrD N6JFpiTG8BN6AKCcTAQoHEOn3kEM7BjvT5CNAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUvN6uKcvzwfo18uTfQAESIec52UcwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy92TjZ1S2N2endmbzE4 dVRmUUFFU0llYzUyVWMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQC3xpMMA0GCSqGSIb3DQEBCwUAA4IBAQBp+6HOlJPFrwC1eZFiF0JxNRpj7j7l 9Nnf1uD/kH9pfq6OInd8KvMZGKmIgepW1uLmn88/vNWD1TzIZ/sr2TisKg+Sizzp F9cqe3ye4h2L1b0xNYbqRhKLPuS843Gcu+v2b9fD10YfZ8msEAN2vdUwAOn71QmK amrliAsz1oYmaSstohhE2MDpqZMJRuH/RUW0LRlJO6SKN9gCq28bLZin1POp6wTM GrWwIVystkDNsonoiduSZLZknHjnWzCdgoJapAT2GspNC7zs/GYSC39XQJHby/Bo DmdVgL66TCzBGZetCW/VxI+L426XqTwj0MVU7iUrr7VrYDyTqJQSJIGt -----END CERTIFICATE-----Generated at Wed Nov 5 03:07:17 2025 by rpki-client