$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/3132332e35302e34382e302f32302d3234203d3e203138343239.roa File: 3132332e35302e34382e302f32302d3234203d3e203138343239.roa (raw, json) Hash identifier: pfWpAy31cNZAFFfJhlz1UCOSVdSpV5/kuuIDy1nWc5s= Subject key identifier: 26:64:E9:2E:2C:30:1A:9A:09:4A:DE:75:D0:4A:52:DC:A8:24:95:28 Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Certificate serial: 7D4C333B424F0741501FEE6098419B9219F2090E Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/3132332e35302e34382e302f32302d3234203d3e203138343239.roa Signing time: Mon 11 May 2026 17:26:56 +0000 ROA not before: Mon 11 May 2026 17:21:56 +0000 ROA not after: Mon 10 May 2027 17:26:56 +0000 asID: 18429 IP address blocks: 123.50.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:4c:33:3b:42:4f:07:41:50:1f:ee:60:98:41:9b:92:19:f2:09:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Validity Not Before: May 11 17:21:56 2026 GMT Not After : May 10 17:26:56 2027 GMT Subject: CN=2664E92E2C301A9A094ADE75D04A52DCA8249528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:78:92:9e:41:b6:1c:96:67:42:c8:f0:c9:7f: 46:5f:20:58:13:d7:3c:81:f8:51:46:c4:3a:1f:f1: 7a:15:40:c9:5f:9a:ef:df:7a:03:85:8c:ba:c8:e4: a8:d6:17:00:f2:af:cb:55:35:c8:dd:6b:79:98:33: 56:d8:86:10:5b:36:92:6e:aa:8c:aa:4b:5f:f2:03: 00:66:96:c0:0a:3d:48:52:c5:a4:f9:a4:04:81:30: 47:24:e4:45:4c:1b:7f:c4:ec:6d:4d:89:a3:3c:e5: a0:23:97:70:02:7d:9d:11:f5:8b:37:a6:bb:27:f2: c7:e1:c6:5e:6d:45:70:df:c9:a3:6d:31:a3:40:bc: 50:f5:ff:d4:a3:7d:d9:f6:63:2c:43:85:03:cc:a5: 19:4a:10:89:3d:df:48:b0:d7:51:05:db:b1:a1:76: e2:2b:bc:11:98:1f:c7:30:7c:68:42:c9:84:01:04: 91:d9:63:82:61:96:53:e2:4e:8e:69:16:9d:fa:a6: 95:a3:86:da:64:8b:32:72:45:f1:de:de:19:f3:a6: 0a:0f:47:12:7e:d3:a6:e4:8e:22:74:93:bb:1c:db: 2e:3d:81:34:3f:fc:e3:53:de:fa:c7:97:dc:f2:c6: 6c:e8:1c:ea:69:c4:d8:1d:08:8e:4e:f2:43:32:83: 5f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:64:E9:2E:2C:30:1A:9A:09:4A:DE:75:D0:4A:52:DC:A8:24:95:28 X509v3 Authority Key Identifier: keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/3132332e35302e34382e302f32302d3234203d3e203138343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.50.48.0/20 Signature Algorithm: sha256WithRSAEncryption b2:ce:d9:f2:cc:0c:f9:21:92:95:41:82:43:59:b5:99:68:69: 61:eb:cd:5f:59:cf:a3:f8:b1:c5:1b:bb:ef:4b:c2:a5:c8:48: 02:9e:8b:c0:de:8a:f2:ea:a1:6b:5f:ce:fb:99:0d:45:40:e9: c8:74:00:65:f9:fa:9f:b8:e5:9f:8c:d2:6d:bc:83:b5:73:43: 8e:85:02:ae:4c:b8:fa:83:01:72:fa:b8:88:2a:da:67:64:13: ec:50:35:90:71:b7:af:2c:42:71:bb:62:e9:b7:1d:4a:f2:02: 04:45:f7:0d:e3:09:cc:8a:66:e5:75:15:c3:f2:0e:0f:5c:19: e7:23:0b:fc:bf:75:3c:bf:1f:9b:5d:f5:bd:98:b1:99:b5:cc: fc:73:f7:96:d1:75:1c:6f:31:0d:f8:67:02:58:b5:01:2e:15: a3:58:6f:db:ae:1a:24:7e:f5:95:68:e0:8f:c8:0f:f4:42:e5: 2b:3a:c1:73:2b:46:03:43:1a:19:a1:6c:cd:6c:ca:51:10:7b: cb:44:b7:0f:3d:17:d8:31:9b:c8:67:a7:72:56:13:93:6d:2b: 7f:1a:5b:ef:48:7b:1c:9e:8d:3d:4e:4d:db:6f:1a:19:eb:e3: ee:66:08:5d:df:48:76:77:5c:da:dd:7f:97:d6:a0:32:bd:05: 2e:88:e8:f2 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUfUwzO0JPB0FQH+5gmEGbkhnyCQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5REIzMDVDMEU3RTFBRkFCOUU0MzI5M0ZEMDBGQ0VD REJDRUZEMTAeFw0yNjA1MTExNzIxNTZaFw0yNzA1MTAxNzI2NTZaMDMxMTAvBgNV BAMTKDI2NjRFOTJFMkMzMDFBOUEwOTRBREU3NUQwNEE1MkRDQTgyNDk1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJeJKeQbYclmdCyPDJf0ZfIFgT 1zyB+FFGxDof8XoVQMlfmu/fegOFjLrI5KjWFwDyr8tVNcjda3mYM1bYhhBbNpJu qoyqS1/yAwBmlsAKPUhSxaT5pASBMEck5EVMG3/E7G1NiaM85aAjl3ACfZ0R9Ys3 prsn8sfhxl5tRXDfyaNtMaNAvFD1/9Sjfdn2YyxDhQPMpRlKEIk930iw11EF27Gh duIrvBGYH8cwfGhCyYQBBJHZY4JhllPiTo5pFp36ppWjhtpkizJyRfHe3hnzpgoP RxJ+06bkjiJ0k7sc2y49gTQ//ONT3vrHl9zyxmzoHOppxNgdCI5O8kMyg1/5AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUJmTpLiwwGpoJSt510EpS3KgklSgwHwYDVR0j BBgwFoAU952zBcDn4a+rnkMpP9APzs2879EwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0dORVQv MC9GNzlEQjMwNUMwRTdFMUFGQUI5RTQzMjkzRkQwMEZDRUNEQkNFRkQxLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0Y3OURCMzA1QzBFN0UxQUZBQjlFNDMyOTNGRDAw RkNFQ0RCQ0VGRDEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DR05FVC8wLzMxMzIzMzJlMzUzMDJl MzQzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzgzNDMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAR7MjAwDQYJKoZIhvcNAQELBQADggEBALLO2fLMDPkhkpVBgkNZtZloaWHrzV9Z z6P4scUbu+9LwqXISAKei8DeivLqoWtfzvuZDUVA6ch0AGX5+p+45Z+M0m28g7Vz Q46FAq5MuPqDAXL6uIgq2mdkE+xQNZBxt68sQnG7Yum3HUryAgRF9w3jCcyKZuV1 FcPyDg9cGecjC/y/dTy/H5td9b2YsZm1zPxz95bRdRxvMQ34ZwJYtQEuFaNYb9uu GiR+9ZVo4I/ID/RC5Ss6wXMrRgNDGhmhbM1sylEQe8tEtw89F9gxm8hnp3JWE5Nt K38aW+9IexyejT1OTdtvGhnr4+5mCF3fSHZ3XNrdf5fWoDK9BS6I6PI= -----END CERTIFICATE-----Generated at Wed May 13 21:08:19 2026 by rpki-client