$ rpki-client -vvf rpkica.twnic.tw/rpki/CATVISP/0/3130332e3233332e36382e302f32322d3234203d3e20313331363733.roa File: 3130332e3233332e36382e302f32322d3234203d3e20313331363733.roa (raw, json) Hash identifier: IQqTvMCBIJY6Msoqpe6u+k/x2PQIXfWBUEMY1IOks9o= Subject key identifier: DE:BA:36:1C:AC:A6:EB:41:23:D6:E0:35:6C:9B:36:62:F5:6A:85:1D Certificate issuer: /CN=F1F518BDB5085DA9DAA281C529D23491A72DA248 Certificate serial: 5C4AF988F8557C3E58A4255D04FDD30EE0F50BA3 Authority key identifier: F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CATVISP/0/3130332e3233332e36382e302f32322d3234203d3e20313331363733.roa Signing time: Mon 11 May 2026 17:57:24 +0000 ROA not before: Mon 11 May 2026 17:52:24 +0000 ROA not after: Mon 10 May 2027 17:57:24 +0000 asID: 131673 IP address blocks: 103.233.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.crl rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:4a:f9:88:f8:55:7c:3e:58:a4:25:5d:04:fd:d3:0e:e0:f5:0b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1F518BDB5085DA9DAA281C529D23491A72DA248 Validity Not Before: May 11 17:52:24 2026 GMT Not After : May 10 17:57:24 2027 GMT Subject: CN=DEBA361CACA6EB4123D6E0356C9B3662F56A851D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4f:e5:8b:cc:ee:ad:9e:ac:d5:66:2b:cf:5c: aa:a4:d7:42:90:31:b2:51:92:72:f7:b1:7c:e9:c1: 8d:b7:9b:7d:a4:5e:4f:6d:ea:e5:5e:87:56:00:a4: be:6b:dd:83:ad:0e:6d:a3:ab:42:ab:d4:49:0b:22: f1:88:a3:df:d4:8d:ac:e7:f1:71:cf:4b:b3:ec:62: 17:34:1b:e7:4a:d5:43:94:3c:b2:e8:a2:51:d1:72: da:4b:ee:d1:fa:31:57:da:43:77:54:ce:95:52:db: 00:fe:f2:6d:2e:a0:10:6c:d5:db:af:ad:9e:d4:e7: f2:fb:c8:5f:d2:99:1e:e9:46:b2:ff:cb:02:58:a8: 76:74:8e:4b:71:52:7a:ce:25:ff:30:ad:af:e7:ef: cf:4d:19:04:c8:95:be:83:76:14:22:61:d5:18:ee: 9f:2c:4f:35:9f:7f:13:7d:48:6e:a4:ad:d6:47:c1: 09:c2:d9:69:95:29:66:74:8b:c9:1c:be:46:10:bd: 1d:30:2a:a9:09:58:9f:51:ae:17:6f:78:e5:64:38: 6f:00:05:23:3e:b2:a2:f4:90:4c:cc:b8:6d:af:78: d1:df:9f:a7:6a:29:2f:40:ad:b1:91:49:72:55:98: d3:72:84:af:ca:67:bd:ca:bf:dd:02:5e:8f:9c:dd: 20:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BA:36:1C:AC:A6:EB:41:23:D6:E0:35:6C:9B:36:62:F5:6A:85:1D X509v3 Authority Key Identifier: keyid:F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/3130332e3233332e36382e302f32322d3234203d3e20313331363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.233.68.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:dc:77:7f:a5:22:4f:19:f6:a3:55:77:7e:f2:8d:ab:59:e5: 92:05:9b:b9:f8:fe:ea:e6:b8:2e:d5:96:db:69:52:3e:2e:74: d8:26:a7:9f:6f:2e:ac:b3:d6:57:38:ff:d7:85:1e:e1:94:9a: 74:1a:ef:b5:e0:a7:08:73:1c:b2:64:19:15:0d:6f:d7:68:b6: 02:ca:b1:ec:b5:e3:84:06:44:1a:46:d0:ef:44:35:05:2f:05: 45:a1:56:02:f7:30:f4:17:7e:35:65:0d:5f:92:bd:7a:56:70: ec:77:c6:78:cd:4a:f8:69:a2:e3:76:e6:82:a5:5e:8c:d2:51: 5a:66:e1:c1:06:6c:60:1e:75:d4:a5:c5:cb:81:ac:48:fe:22: fd:d3:8e:53:fd:2c:e2:fa:65:e2:8c:22:cc:7e:2e:94:49:58: 9f:32:50:bb:53:30:92:43:59:95:42:df:75:4f:ff:f4:81:22: c6:dc:a7:ab:83:4d:ea:35:5e:68:93:8d:0e:37:b4:25:5e:ac: 5a:7c:42:84:35:1d:8a:50:f5:b8:d1:da:5b:e5:ab:12:ee:b0: 3e:78:f5:9e:76:ee:c8:d4:d7:b9:5e:c7:02:12:3a:39:15:8f: 64:af:bf:fa:05:ac:9e:05:83:28:57:91:b9:f4:81:d2:73:43: 3d:1a:47:f5 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUXEr5iPhVfD5YpCVdBP3TDuD1C6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFGNTE4QkRCNTA4NURBOURBQTI4MUM1MjlEMjM0OTFB NzJEQTI0ODAeFw0yNjA1MTExNzUyMjRaFw0yNzA1MTAxNzU3MjRaMDMxMTAvBgNV BAMTKERFQkEzNjFDQUNBNkVCNDEyM0Q2RTAzNTZDOUIzNjYyRjU2QTg1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHT+WLzO6tnqzVZivPXKqk10KQ MbJRknL3sXzpwY23m32kXk9t6uVeh1YApL5r3YOtDm2jq0Kr1EkLIvGIo9/Ujazn 8XHPS7PsYhc0G+dK1UOUPLLoolHRctpL7tH6MVfaQ3dUzpVS2wD+8m0uoBBs1duv rZ7U5/L7yF/SmR7pRrL/ywJYqHZ0jktxUnrOJf8wra/n789NGQTIlb6DdhQiYdUY 7p8sTzWffxN9SG6krdZHwQnC2WmVKWZ0i8kcvkYQvR0wKqkJWJ9RrhdveOVkOG8A BSM+sqL0kEzMuG2veNHfn6dqKS9ArbGRSXJVmNNyhK/KZ73Kv90CXo+c3SChAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQU3ro2HKym60Ej1uA1bJs2YvVqhR0wHwYDVR0j BBgwFoAU8fUYvbUIXanaooHFKdI0kactokgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUVklT UC8wL0YxRjUxOEJEQjUwODVEQTlEQUEyODFDNTI5RDIzNDkxQTcyREEyNDguY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvRjFGNTE4QkRCNTA4NURBOURBQTI4MUM1MjlE MjM0OTFBNzJEQTI0OC5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NBVFZJU1AvMC8zMTMwMzMyZTMy MzMzMzJlMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMTM2MzczMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfpRDANBgkqhkiG9w0BAQsFAAOCAQEAatx3f6UiTxn2o1V3fvKN q1nlkgWbufj+6ua4LtWW22lSPi502Cann28urLPWVzj/14Ue4ZSadBrvteCnCHMc smQZFQ1v12i2Asqx7LXjhAZEGkbQ70Q1BS8FRaFWAvcw9Bd+NWUNX5K9elZw7HfG eM1K+Gmi43bmgqVejNJRWmbhwQZsYB511KXFy4GsSP4i/dOOU/0s4vpl4owizH4u lElYnzJQu1MwkkNZlULfdU//9IEixtynq4NN6jVeaJONDje0JV6sWnxChDUdilD1 uNHaW+WrEu6wPnj1nnbuyNTXuV7HAhI6ORWPZK+/+gWsngWDKFeRufSB0nNDPRpH 9Q== -----END CERTIFICATE-----Generated at Wed May 13 21:52:02 2026 by rpki-client