$ rpki-client -vvf rpkica.twnic.tw/rpki/CATVISP/0/34332e3234382e31362e302f32322d3234203d3e20313331363733.roa File: 34332e3234382e31362e302f32322d3234203d3e20313331363733.roa (raw, json) Hash identifier: yT6GkUFctFjsYfjkimVCCoYgqHwh9a8wPuU6HRbCaVY= Subject key identifier: F3:C7:9C:0E:F0:70:08:1F:A8:FB:E7:A6:D9:95:05:C8:9E:48:40:51 Certificate issuer: /CN=F1F518BDB5085DA9DAA281C529D23491A72DA248 Certificate serial: 1277DA3A7E35E478F339B392DB2265225F0E6994 Authority key identifier: F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CATVISP/0/34332e3234382e31362e302f32322d3234203d3e20313331363733.roa Signing time: Mon 11 May 2026 17:57:24 +0000 ROA not before: Mon 11 May 2026 17:52:24 +0000 ROA not after: Mon 10 May 2027 17:57:24 +0000 asID: 131673 IP address blocks: 43.248.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.crl rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:77:da:3a:7e:35:e4:78:f3:39:b3:92:db:22:65:22:5f:0e:69:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1F518BDB5085DA9DAA281C529D23491A72DA248 Validity Not Before: May 11 17:52:24 2026 GMT Not After : May 10 17:57:24 2027 GMT Subject: CN=F3C79C0EF070081FA8FBE7A6D99505C89E484051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4b:fc:d8:9c:43:e7:27:2e:ec:bb:8c:c7:f3: 3d:1a:5c:fb:15:85:ff:92:41:ee:10:30:59:f7:24: 91:d6:4a:e2:7c:fc:48:d6:0c:e6:59:08:92:50:57: a1:2f:e8:21:9f:3c:26:47:34:45:b5:16:e0:2d:aa: e6:0a:54:0e:83:39:3a:95:a0:94:f9:5e:ca:e4:3d: d3:b1:eb:3e:11:d2:e2:f0:28:f0:99:ae:63:3a:fd: ed:30:41:11:9f:26:11:e8:ff:dc:48:10:0c:fc:3c: f7:5b:5e:b4:52:d7:46:87:23:04:d6:af:0d:39:29: b0:4c:80:df:39:ea:3f:38:84:23:e5:35:a6:48:8b: a0:0b:0d:ff:8f:ec:68:04:58:3a:22:a2:47:89:e9: 89:4c:4d:55:57:39:af:11:33:3b:88:8f:4a:a9:81: 64:30:28:bf:eb:09:0f:4e:b1:e0:27:9e:6c:83:40: e9:78:9a:ed:8b:17:9f:f8:3a:a2:a1:3a:dd:26:f3: 41:6a:f3:65:d7:a2:7e:ca:bb:27:56:9d:a8:d9:9b: 49:f8:f6:3a:bb:dd:42:41:a0:69:45:93:68:39:a8: 1a:bd:bd:a0:cc:03:50:91:5b:22:f1:d3:58:fb:ca: 71:c8:f0:7c:44:5b:f4:0c:9b:4e:4e:12:3c:65:a2: fa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C7:9C:0E:F0:70:08:1F:A8:FB:E7:A6:D9:95:05:C8:9E:48:40:51 X509v3 Authority Key Identifier: keyid:F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/34332e3234382e31362e302f32322d3234203d3e20313331363733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.16.0/22 Signature Algorithm: sha256WithRSAEncryption c0:95:cb:20:9a:26:b9:6c:b7:ce:7b:2c:72:16:55:0b:e7:0c: a8:ac:45:b5:0a:5d:72:59:be:3f:40:28:b3:68:a3:14:d0:43: 46:38:62:07:76:90:72:ca:eb:8e:51:4b:2f:dd:b9:ab:8d:0c: 72:e5:21:96:68:8c:f7:ec:45:87:ea:e0:62:0f:79:e5:21:ce: 36:92:22:c9:91:15:b9:1c:a7:c8:9f:cd:98:d8:df:ed:71:d2: ac:c8:40:cd:e6:64:bf:e5:d6:b6:f5:2b:03:f8:7a:06:2b:16: a8:93:0b:10:9b:7a:4e:e3:ef:c4:09:20:80:48:79:46:d8:7a: d8:b8:92:2b:8a:b4:a2:8f:d7:23:09:bf:f3:b7:83:95:bd:fb: b1:85:1f:28:94:7c:2d:c1:71:b2:0e:81:e9:c6:42:7c:40:7e: bb:23:37:7c:ec:eb:5a:6b:61:0c:1f:a7:28:f1:83:c0:9f:a4: b1:7e:5d:fd:73:be:37:f9:c3:4c:53:ad:4d:6a:6c:fc:a3:a6: f5:c6:d2:b2:71:5c:c0:bd:0d:14:98:2b:93:18:84:c4:74:05: 05:84:15:52:8b:e5:5b:5d:b6:a8:50:7b:23:44:15:52:64:90: c4:27:5e:75:33:e4:b1:80:45:f1:fc:f3:9d:db:c9:79:18:a6: ae:9e:5c:28 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUEnfaOn415HjzObOS2yJlIl8OaZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFGNTE4QkRCNTA4NURBOURBQTI4MUM1MjlEMjM0OTFB NzJEQTI0ODAeFw0yNjA1MTExNzUyMjRaFw0yNzA1MTAxNzU3MjRaMDMxMTAvBgNV BAMTKEYzQzc5QzBFRjA3MDA4MUZBOEZCRTdBNkQ5OTUwNUM4OUU0ODQwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSS/zYnEPnJy7su4zH8z0aXPsV hf+SQe4QMFn3JJHWSuJ8/EjWDOZZCJJQV6Ev6CGfPCZHNEW1FuAtquYKVA6DOTqV oJT5XsrkPdOx6z4R0uLwKPCZrmM6/e0wQRGfJhHo/9xIEAz8PPdbXrRS10aHIwTW rw05KbBMgN856j84hCPlNaZIi6ALDf+P7GgEWDoiokeJ6YlMTVVXOa8RMzuIj0qp gWQwKL/rCQ9OseAnnmyDQOl4mu2LF5/4OqKhOt0m80Fq82XXon7KuydWnajZm0n4 9jq73UJBoGlFk2g5qBq9vaDMA1CRWyLx01j7ynHI8HxEW/QMm05OEjxlovpLAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQU88ecDvBwCB+o++em2ZUFyJ5IQFEwHwYDVR0j BBgwFoAU8fUYvbUIXanaooHFKdI0kactokgwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FUVklT UC8wL0YxRjUxOEJEQjUwODVEQTlEQUEyODFDNTI5RDIzNDkxQTcyREEyNDguY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvRjFGNTE4QkRCNTA4NURBOURBQTI4MUM1MjlE MjM0OTFBNzJEQTI0OC5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NBVFZJU1AvMC8zNDMzMmUzMjM0 MzgyZTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTMzMzEzNjM3MzMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAIr+BAwDQYJKoZIhvcNAQELBQADggEBAMCVyyCaJrlst857LHIWVQvn DKisRbUKXXJZvj9AKLNooxTQQ0Y4Ygd2kHLK645RSy/duauNDHLlIZZojPfsRYfq 4GIPeeUhzjaSIsmRFbkcp8ifzZjY3+1x0qzIQM3mZL/l1rb1KwP4egYrFqiTCxCb ek7j78QJIIBIeUbYeti4kiuKtKKP1yMJv/O3g5W9+7GFHyiUfC3BcbIOgenGQnxA frsjN3zs61prYQwfpyjxg8CfpLF+Xf1zvjf5w0xTrU1qbPyjpvXG0rJxXMC9DRSY K5MYhMR0BQWEFVKL5VtdtqhQeyNEFVJkkMQnXnUz5LGARfH8853byXkYpq6eXCg= -----END CERTIFICATE-----Generated at Wed May 13 21:11:27 2026 by rpki-client