$ rpki-client -vvf rpkica.twnic.tw/rpki/BESTBASIS/0/3130332e362e3132362e302f32332d3332203d3e20313331313439.roa File: 3130332e362e3132362e302f32332d3332203d3e20313331313439.roa (raw, json) Hash identifier: lHrkC3JHZwSMosCVLrge69PjEFVk3qgvY9qe4jsf15s= Subject key identifier: C5:67:BC:DF:AA:8D:8E:6C:2E:6B:01:5C:86:B4:F9:0B:91:67:2D:12 Certificate issuer: /CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5 Certificate serial: 7D4E964056E702C050DB22306D52CF4A9B71179C Authority key identifier: 4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/3130332e362e3132362e302f32332d3332203d3e20313331313439.roa Signing time: Mon 11 May 2026 17:32:12 +0000 ROA not before: Mon 11 May 2026 17:27:12 +0000 ROA not after: Mon 10 May 2027 17:32:12 +0000 asID: 131149 IP address blocks: 103.6.126.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4e:96:40:56:e7:02:c0:50:db:22:30:6d:52:cf:4a:9b:71:17:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5 Validity Not Before: May 11 17:27:12 2026 GMT Not After : May 10 17:32:12 2027 GMT Subject: CN=C567BCDFAA8D8E6C2E6B015C86B4F90B91672D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8c:c1:21:5d:10:9d:0f:c7:22:a6:15:1d:a3: bc:2f:b0:ef:71:e0:39:63:75:1c:96:99:45:61:60: 00:a5:23:cc:1e:68:17:32:34:35:d1:b1:13:30:e0: c6:62:01:a4:bd:43:3e:9c:a8:fb:e9:70:8c:4c:f9: cc:9a:68:28:3a:dd:ea:e6:00:d2:f5:8f:bb:e5:fa: 64:a9:31:f5:68:3f:74:69:42:1f:f5:6e:61:13:a1: 7c:d3:32:10:5d:70:b7:a2:30:7a:11:e6:46:58:69: 79:a2:8b:24:46:6b:1c:11:3d:42:c1:9c:df:4a:90: d7:e4:41:3a:d2:58:be:44:7d:19:7e:48:13:28:4d: fe:40:9d:2c:b7:5b:9f:9d:d1:aa:09:56:8f:4a:8f: 5f:da:5b:56:25:9d:85:4e:3e:c5:7d:ca:26:79:d4: 20:fe:c0:05:f8:59:0f:52:e7:b2:d3:4a:5c:2e:a5: 6c:a6:5a:d4:2b:24:7c:22:3a:cd:65:f1:20:42:d2: 93:27:8f:8f:37:76:4b:89:99:b5:0a:86:79:dd:18: 61:60:4c:1a:88:a6:e5:b3:30:ca:5e:f1:19:e5:a5: 38:93:12:27:17:15:72:ab:0e:15:6a:35:f0:6c:2e: 25:94:c9:58:70:34:ed:8d:a3:c2:9e:39:b2:ec:33: bf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:67:BC:DF:AA:8D:8E:6C:2E:6B:01:5C:86:B4:F9:0B:91:67:2D:12 X509v3 Authority Key Identifier: keyid:4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/3130332e362e3132362e302f32332d3332203d3e20313331313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.6.126.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:0e:e2:1c:38:a4:19:18:8a:48:ef:83:78:37:63:ad:fa:86: 58:e6:79:6e:e0:9a:b0:8c:d9:a9:b1:25:ec:e4:21:24:44:8d: ae:b4:96:4a:82:6a:dc:de:71:78:d6:b0:b2:bf:d4:b8:23:5e: 74:f1:33:e0:d1:cf:3e:f7:f2:fb:02:81:7c:c0:4c:bf:2c:34: 66:fc:a1:bc:eb:01:06:52:35:40:ef:7e:0b:b5:46:32:e8:10: 71:e0:81:52:a3:78:cc:ea:b3:d4:64:97:02:73:8f:6f:a0:4f: 10:dd:f8:ff:28:00:ae:cf:2c:cc:3a:20:e6:b8:eb:24:04:4f: 5d:e6:e6:af:7e:f9:af:74:06:4b:9a:74:05:0a:18:9e:45:6a: 4d:82:7d:cd:8c:ea:bf:0d:44:9e:b0:f3:de:ba:13:65:8b:91: 79:b4:9d:b5:f3:7c:b4:3e:d0:85:d6:4a:02:8b:87:51:a0:75: e5:46:71:e7:78:c8:d1:23:df:89:50:dd:b2:e7:31:0d:83:ff: 07:e4:e9:a8:3e:c8:ec:86:57:29:7f:d6:d9:7f:03:b6:42:c9: 0e:ea:8e:c5:5a:29:4e:da:7b:fd:87:ca:88:5b:70:5c:ad:01: 01:31:df:81:92:c4:ef:db:8e:26:bb:07:47:8d:35:02:44:13: 4c:3b:c0:63 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUfU6WQFbnAsBQ2yIwbVLPSptxF5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3 NzM2NDNENTAeFw0yNjA1MTExNzI3MTJaFw0yNzA1MTAxNzMyMTJaMDMxMTAvBgNV BAMTKEM1NjdCQ0RGQUE4RDhFNkMyRTZCMDE1Qzg2QjRGOTBCOTE2NzJEMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCujMEhXRCdD8ciphUdo7wvsO9x 4DljdRyWmUVhYAClI8weaBcyNDXRsRMw4MZiAaS9Qz6cqPvpcIxM+cyaaCg63erm ANL1j7vl+mSpMfVoP3RpQh/1bmEToXzTMhBdcLeiMHoR5kZYaXmiiyRGaxwRPULB nN9KkNfkQTrSWL5EfRl+SBMoTf5AnSy3W5+d0aoJVo9Kj1/aW1YlnYVOPsV9yiZ5 1CD+wAX4WQ9S57LTSlwupWymWtQrJHwiOs1l8SBC0pMnj483dkuJmbUKhnndGGFg TBqIpuWzMMpe8RnlpTiTEicXFXKrDhVqNfBsLiWUyVhwNO2No8KeObLsM7/3AgMB AAGjggHpMIIB5TAdBgNVHQ4EFgQUxWe836qNjmwuawFchrT5C5FnLRIwHwYDVR0j BBgwFoAUT7RZXYaX/Rq30hbeB566WXc2Q9UwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVEJB U0lTLzAvNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3NzM2NDNENS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RkI0NTk1RDg2OTdGRDFBQjdEMjE2REUw NzlFQkE1OTc3MzY0M0Q1LmNlcjB/BggrBgEFBQcBCwRzMHEwbwYIKwYBBQUHMAuG Y3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVEJBU0lTLzAvMzEzMDMz MmUzNjJlMzEzMjM2MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzEzMzMxMzEzNDM5 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQBZwZ+MA0GCSqGSIb3DQEBCwUAA4IBAQBdDuIcOKQZGIpI74N4 N2Ot+oZY5nlu4JqwjNmpsSXs5CEkRI2utJZKgmrc3nF41rCyv9S4I1508TPg0c8+ 9/L7AoF8wEy/LDRm/KG86wEGUjVA734LtUYy6BBx4IFSo3jM6rPUZJcCc49voE8Q 3fj/KACuzyzMOiDmuOskBE9d5uavfvmvdAZLmnQFChieRWpNgn3NjOq/DUSesPPe uhNli5F5tJ2183y0PtCF1koCi4dRoHXlRnHneMjRI9+JUN2y5zENg/8H5OmoPsjs hlcpf9bZfwO2QskO6o7FWilO2nv9h8qIW3BcrQEBMd+BksTv244muwdHjTUCRBNM O8Bj -----END CERTIFICATE-----Generated at Wed May 13 21:08:47 2026 by rpki-client