$ rpki-client -vvf rpkica.twnic.tw/rpki/BHIS/1/3135312e3135382e372e302f32342d3234203d3e20333936393832.roa File: 3135312e3135382e372e302f32342d3234203d3e20333936393832.roa (raw, json) Hash identifier: CiRNyIUTHDtjTklbG45WKUEv5VbhmGe28aKTdsZW1mc= Subject key identifier: 0D:DD:EC:80:4C:E6:E3:F0:2F:B2:86:47:FE:B8:FC:4B:1E:C5:0D:F0 Certificate issuer: /CN=9F397B838061280C2F2A887AC9D64012310492D8 Certificate serial: 42A469746AC530249B4DEF037DCC0695C125FE94 Authority key identifier: 9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BHIS/1/3135312e3135382e372e302f32342d3234203d3e20333936393832.roa Signing time: Wed 24 Jun 2026 08:23:51 +0000 ROA not before: Wed 24 Jun 2026 08:18:51 +0000 ROA not after: Wed 23 Jun 2027 08:23:51 +0000 asID: 396982 IP address blocks: 151.158.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 Jul 2026 00:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a4:69:74:6a:c5:30:24:9b:4d:ef:03:7d:cc:06:95:c1:25:fe:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F397B838061280C2F2A887AC9D64012310492D8 Validity Not Before: Jun 24 08:18:51 2026 GMT Not After : Jun 23 08:23:51 2027 GMT Subject: CN=0DDDEC804CE6E3F02FB28647FEB8FC4B1EC50DF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:55:94:3a:d6:17:ef:f2:a3:be:11:40:73:08: 01:8a:30:c0:25:fe:cc:12:af:59:cc:05:87:5c:de: 9c:ed:22:64:42:c0:21:5d:bd:27:11:23:38:de:be: c2:ca:69:94:c1:12:e0:b4:a8:02:70:a4:1a:2b:ce: f0:be:1a:b4:04:b8:bb:8b:b9:55:3c:e3:71:ae:f9: 67:2f:7f:83:fd:f6:1d:d8:a6:30:9d:0d:37:63:b4: 6c:a4:f1:5f:29:f4:b2:ce:b4:3a:2c:73:04:1b:e1: e1:80:d1:31:eb:85:44:77:3b:60:95:d4:3d:46:d5: 78:86:01:1d:20:a7:18:65:e1:fb:c8:09:02:45:6d: 16:88:7e:8d:14:22:e9:80:2f:ff:ec:63:6a:7a:25: 16:8f:20:e2:29:8f:87:23:5f:53:13:5f:a1:7f:14: 6c:30:5f:a3:f7:f3:da:b2:25:27:2a:ca:21:fa:21: fe:f9:f9:b5:ea:db:95:66:d2:3e:1a:02:49:f7:b1: b3:44:1d:36:57:3b:0c:bc:59:c5:6c:d3:ae:1f:00: 1f:7a:49:13:ee:f4:08:5f:f0:63:bd:de:6d:cc:85: fe:ef:09:8a:9d:c0:ba:f0:8a:b1:6b:60:e3:8b:4d: 6c:92:9e:2c:80:b7:97:07:d1:ec:6f:fb:ca:67:c9: 3b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DD:EC:80:4C:E6:E3:F0:2F:B2:86:47:FE:B8:FC:4B:1E:C5:0D:F0 X509v3 Authority Key Identifier: keyid:9F:39:7B:83:80:61:28:0C:2F:2A:88:7A:C9:D6:40:12:31:04:92:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/9F397B838061280C2F2A887AC9D64012310492D8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/9F397B838061280C2F2A887AC9D64012310492D8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BHIS/1/3135312e3135382e372e302f32342d3234203d3e20333936393832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.7.0/24 Signature Algorithm: sha256WithRSAEncryption 99:65:01:41:34:da:a4:f1:b8:3e:0d:d9:8a:74:f7:30:12:c5: 5e:b6:57:cf:a1:bc:85:0a:a8:04:d9:d3:0a:7c:10:69:17:d2: da:18:0c:c9:da:b6:37:24:6d:8f:10:c8:6d:72:c7:3b:f1:37: 8b:c7:96:82:b2:b4:6d:a8:15:db:23:f5:f0:c7:81:9c:67:f2: 9d:d2:db:61:dd:21:84:c6:c0:36:82:8b:3b:c8:87:e0:69:d2: f4:99:d9:0b:8d:50:26:73:a7:90:f4:88:0b:32:05:6e:26:0b: d0:ed:78:25:69:52:8c:d6:ee:ac:ff:5c:e5:88:29:18:02:cb: bd:cc:95:93:b6:7e:9b:ab:f1:38:97:93:ac:a7:d2:6c:6b:e8: 98:79:7e:0e:fe:6b:c5:cb:ed:4a:34:1f:2b:b2:82:47:6e:0a: ed:e3:22:18:f3:c1:c9:2c:78:9e:e3:20:fc:6e:6a:f7:d3:e6: cf:35:82:5f:e6:00:d2:e1:b4:f0:18:7f:8b:20:d8:5a:e5:c3: 76:35:9f:a8:e7:7c:19:b6:e3:31:c6:52:f5:f3:de:24:0f:ba: b3:b2:6d:ab:7f:2f:36:49:2f:08:6b:67:6c:ba:c4:53:4a:60: fd:77:4d:0a:26:66:69:42:52:c4:70:e8:f3:d7:18:50:e9:c6: 5c:59:a2:1c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUQqRpdGrFMCSbTe8DfcwGlcEl/pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQwMTIz MTA0OTJEODAeFw0yNjA2MjQwODE4NTFaFw0yNzA2MjMwODIzNTFaMDMxMTAvBgNV BAMTKDBERERFQzgwNENFNkUzRjAyRkIyODY0N0ZFQjhGQzRCMUVDNTBERjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOVZQ61hfv8qO+EUBzCAGKMMAl /swSr1nMBYdc3pztImRCwCFdvScRIzjevsLKaZTBEuC0qAJwpBorzvC+GrQEuLuL uVU843Gu+Wcvf4P99h3YpjCdDTdjtGyk8V8p9LLOtDoscwQb4eGA0THrhUR3O2CV 1D1G1XiGAR0gpxhl4fvICQJFbRaIfo0UIumAL//sY2p6JRaPIOIpj4cjX1MTX6F/ FGwwX6P389qyJScqyiH6If75+bXq25Vm0j4aAkn3sbNEHTZXOwy8WcVs064fAB96 SRPu9Ahf8GO93m3Mhf7vCYqdwLrwirFrYOOLTWySniyAt5cH0exv+8pnyTtDAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUDd3sgEzm4/AvsoZH/rj8Sx7FDfAwHwYDVR0j BBgwFoAUnzl7g4BhKAwvKoh6ydZAEjEEktgwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkhJUy8x LzlGMzk3QjgzODA2MTI4MEMyRjJBODg3QUM5RDY0MDEyMzEwNDkyRDguY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzMvOUYzOTdCODM4MDYxMjgwQzJGMkE4ODdBQzlENjQw MTIzMTA0OTJEOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JISVMvMS8zMTM1MzEyZTMxMzUzODJl MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzYzOTM4MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACXngcwDQYJKoZIhvcNAQELBQADggEBAJllAUE02qTxuD4N2Yp09zASxV62V8+h vIUKqATZ0wp8EGkX0toYDMnatjckbY8QyG1yxzvxN4vHloKytG2oFdsj9fDHgZxn 8p3S22HdIYTGwDaCizvIh+Bp0vSZ2QuNUCZzp5D0iAsyBW4mC9DteCVpUozW7qz/ XOWIKRgCy73MlZO2fpur8TiXk6yn0mxr6Jh5fg7+a8XL7Uo0HyuygkduCu3jIhjz wckseJ7jIPxuavfT5s81gl/mANLhtPAYf4sg2Frlw3Y1n6jnfBm24zHGUvXz3iQP urOybat/LzZJLwhrZ2y6xFNKYP13TQomZmlCUsRw6PPXGFDpxlxZohw= -----END CERTIFICATE-----Generated at Wed Jul 8 17:33:37 2026 by rpki-client