$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136302e302f31392d3234203d3e203138343239.roa File: 3132342e3135352e3136302e302f31392d3234203d3e203138343239.roa (raw, json) Hash identifier: e7/3rwxXmBhDA3JpXw3YSJP2elUr6BwFFYmW3ArOTro= Subject key identifier: 64:7D:A0:F5:42:30:95:4D:7D:2A:80:CA:1F:C8:E3:5E:FD:74:D6:81 Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Certificate serial: 2E4F4B8E203C4556693D7115153A035720C2EF83 Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136302e302f31392d3234203d3e203138343239.roa Signing time: Mon 11 May 2026 17:27:10 +0000 ROA not before: Mon 11 May 2026 17:22:10 +0000 ROA not after: Mon 10 May 2027 17:27:10 +0000 asID: 18429 IP address blocks: 124.155.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:4f:4b:8e:20:3c:45:56:69:3d:71:15:15:3a:03:57:20:c2:ef:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Validity Not Before: May 11 17:22:10 2026 GMT Not After : May 10 17:27:10 2027 GMT Subject: CN=647DA0F54230954D7D2A80CA1FC8E35EFD74D681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:39:1a:c4:41:8f:eb:c2:84:8e:4c:2a:fc:4f: 13:99:0d:9c:ca:1d:94:be:1b:d1:ca:aa:45:9c:a3: eb:fd:74:07:80:35:25:50:47:67:cb:98:28:f7:d6: a4:c7:7f:f6:24:06:5d:26:70:82:e6:f7:d4:57:f4: 16:69:ea:07:e4:ce:ac:b6:54:e5:ae:6c:09:7d:2b: 23:f7:f3:01:f1:71:4b:20:e2:24:eb:17:38:ed:fc: ec:e5:a3:88:da:23:16:ed:7d:45:c2:e5:f9:36:97: 64:f1:5d:b9:05:9b:1a:24:ec:70:9e:4e:ae:34:92: 4a:63:4b:1e:96:da:e3:4b:ce:c3:e2:0d:b5:27:72: 11:a7:64:b8:5e:c0:49:00:b7:c0:d7:d9:89:2c:40: f6:23:5b:73:a1:c2:2e:ab:91:01:ba:6c:cf:5b:de: 44:f9:ce:60:c8:a3:13:36:97:47:34:0d:d7:08:b0: b8:33:a6:70:02:f9:b7:b1:01:40:56:3f:45:4d:6f: a6:fb:69:3c:5e:95:2b:29:35:ce:88:2b:f4:1f:2a: 15:41:b0:f1:67:19:65:a1:b9:6f:4e:60:59:37:fd: 05:aa:e0:52:9a:d7:96:43:2b:48:f2:7b:c1:26:db: e5:e5:1f:d9:6b:f9:40:8f:56:43:a9:3d:9f:af:fc: 5e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7D:A0:F5:42:30:95:4D:7D:2A:80:CA:1F:C8:E3:5E:FD:74:D6:81 X509v3 Authority Key Identifier: keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136302e302f31392d3234203d3e203138343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.155.160.0/19 Signature Algorithm: sha256WithRSAEncryption 8a:9a:c2:d6:7b:ef:f0:ec:f5:b1:1f:45:92:0a:93:7b:02:fe: 93:c4:b6:f0:c8:cb:4a:23:35:61:6b:80:08:95:65:c0:fd:13: 2d:d1:5b:a4:c6:bc:4f:5e:bc:5e:69:6f:51:b9:02:95:55:9b: 8d:23:21:f2:97:28:35:39:c1:24:44:fc:a9:85:85:7d:da:30: 70:dd:86:19:db:70:0d:8d:bd:ae:6a:13:84:3b:57:2d:bd:83: 0b:68:26:fb:71:22:bd:6b:cf:5d:87:01:7a:22:9e:c2:70:8f: ed:b7:87:62:b2:e4:1a:dc:30:00:8a:e4:a0:e3:09:b6:48:06: 0b:20:36:86:01:f8:03:91:32:06:03:0e:0a:2b:1c:4e:84:7d: be:cf:63:29:8c:c8:34:ca:37:0c:2d:d3:a5:d7:62:be:c6:ce: 55:29:f0:46:03:bb:de:46:b5:e0:03:e5:be:37:08:0a:93:f5: 92:7d:c5:d1:bf:9a:d9:6f:a9:f2:9a:7c:c8:17:ba:2c:b6:e9: 3d:61:d2:89:57:fe:6c:06:8e:4d:db:38:7b:e3:9b:f0:48:be: 3e:24:e1:38:85:8d:5e:1d:32:35:8a:30:99:18:88:97:2c:e5: ad:40:d9:2f:db:cb:2b:81:8d:e2:05:26:2a:66:1e:fe:20:a3: 63:0e:20:4b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIULk9LjiA8RVZpPXEVFToDVyDC74MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5REIzMDVDMEU3RTFBRkFCOUU0MzI5M0ZEMDBGQ0VD REJDRUZEMTAeFw0yNjA1MTExNzIyMTBaFw0yNzA1MTAxNzI3MTBaMDMxMTAvBgNV BAMTKDY0N0RBMEY1NDIzMDk1NEQ3RDJBODBDQTFGQzhFMzVFRkQ3NEQ2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPORrEQY/rwoSOTCr8TxOZDZzK HZS+G9HKqkWco+v9dAeANSVQR2fLmCj31qTHf/YkBl0mcILm99RX9BZp6gfkzqy2 VOWubAl9KyP38wHxcUsg4iTrFzjt/Ozlo4jaIxbtfUXC5fk2l2TxXbkFmxok7HCe Tq40kkpjSx6W2uNLzsPiDbUnchGnZLhewEkAt8DX2YksQPYjW3Ohwi6rkQG6bM9b 3kT5zmDIoxM2l0c0DdcIsLgzpnAC+bexAUBWP0VNb6b7aTxelSspNc6IK/QfKhVB sPFnGWWhuW9OYFk3/QWq4FKa15ZDK0jye8Em2+XlH9lr+UCPVkOpPZ+v/F7XAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUZH2g9UIwlU19KoDKH8jjXv101oEwHwYDVR0j BBgwFoAU952zBcDn4a+rnkMpP9APzs2879EwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0dORVQv MC9GNzlEQjMwNUMwRTdFMUFGQUI5RTQzMjkzRkQwMEZDRUNEQkNFRkQxLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0Y3OURCMzA1QzBFN0UxQUZBQjlFNDMyOTNGRDAw RkNFQ0RCQ0VGRDEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DR05FVC8wLzMxMzIzNDJlMzEzNTM1 MmUzMTM2MzAyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMTM4MzQzMjM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQFfJugMA0GCSqGSIb3DQEBCwUAA4IBAQCKmsLWe+/w7PWxH0WSCpN7Av6T xLbwyMtKIzVha4AIlWXA/RMt0VukxrxPXrxeaW9RuQKVVZuNIyHylyg1OcEkRPyp hYV92jBw3YYZ23ANjb2uahOEO1ctvYMLaCb7cSK9a89dhwF6Ip7CcI/tt4disuQa 3DAAiuSg4wm2SAYLIDaGAfgDkTIGAw4KKxxOhH2+z2MpjMg0yjcMLdOl12K+xs5V KfBGA7veRrXgA+W+NwgKk/WSfcXRv5rZb6nymnzIF7ostuk9YdKJV/5sBo5N2zh7 45vwSL4+JOE4hY1eHTI1ijCZGIiXLOWtQNkv28srgY3iBSYqZh7+IKNjDiBL -----END CERTIFICATE-----Generated at Wed May 13 21:08:19 2026 by rpki-client