$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136382e302f32332d3233203d3e203138343239.roa File: 3132342e3135352e3136382e302f32332d3233203d3e203138343239.roa (raw, json) Hash identifier: N7RDzBltgG2muRSlyIP304X+utzCAvQ7yYlfflqeSnE= Subject key identifier: E6:98:45:36:C2:4B:0D:80:DF:05:F7:1B:5E:8F:18:C4:C8:E2:BB:A1 Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Certificate serial: 7ABAF8A3979CDD26624384EB27C8DA2516FE7DA1 Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136382e302f32332d3233203d3e203138343239.roa Signing time: Mon 11 May 2026 17:27:15 +0000 ROA not before: Mon 11 May 2026 17:22:15 +0000 ROA not after: Mon 10 May 2027 17:27:15 +0000 asID: 18429 IP address blocks: 124.155.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ba:f8:a3:97:9c:dd:26:62:43:84:eb:27:c8:da:25:16:fe:7d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Validity Not Before: May 11 17:22:15 2026 GMT Not After : May 10 17:27:15 2027 GMT Subject: CN=E6984536C24B0D80DF05F71B5E8F18C4C8E2BBA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:91:97:bd:27:37:65:aa:f1:41:97:35:55: f3:cc:92:54:4f:b0:61:8a:b3:ab:7f:d6:79:3d:bb: a8:5a:44:53:94:56:aa:44:fe:6f:d5:b6:98:8d:3c: 26:62:ef:1f:3d:01:a8:77:14:4b:3c:bb:43:7d:c3: 6f:62:2a:8d:67:2e:6e:c5:2e:3b:8a:2a:df:8b:52: 5b:c3:99:c5:04:af:73:d8:69:0d:30:e0:0a:28:e4: 4e:ab:fd:46:eb:b1:af:e2:19:cf:6d:83:51:d0:91: dc:93:3e:8f:4b:ad:cd:68:58:b5:36:86:0e:cb:5d: d6:c6:08:07:6d:1c:e1:f6:ab:d1:c8:95:3b:49:86: 71:d3:ef:04:6f:fd:a4:d4:30:ba:ed:fc:04:e4:4f: 65:99:48:50:fa:39:3a:64:08:28:8b:67:1b:54:0e: 42:be:32:23:ce:67:af:8d:ae:e6:c4:52:ad:37:69: a7:53:19:5e:ab:02:f3:f3:d2:c4:f0:9e:a5:5d:a3: 6c:ac:7f:14:6d:f7:d3:13:9a:bd:98:ea:4d:de:e7: 50:70:27:9f:d6:b5:dd:62:e5:76:96:be:7f:80:7a: 81:8d:ab:fd:a4:26:a6:ba:9b:21:12:74:20:78:70: e2:91:21:cc:f5:35:d3:20:a7:66:83:51:18:e5:17: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:98:45:36:C2:4B:0D:80:DF:05:F7:1B:5E:8F:18:C4:C8:E2:BB:A1 X509v3 Authority Key Identifier: keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/3132342e3135352e3136382e302f32332d3233203d3e203138343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.155.168.0/23 Signature Algorithm: sha256WithRSAEncryption 36:02:ca:19:41:49:b4:36:20:6a:23:17:b8:b7:04:9e:3a:de: 8a:a6:73:84:b4:72:f3:75:64:b4:dd:c2:6c:91:61:dc:3b:0d: fd:0d:ad:31:a8:51:d4:e5:bd:84:78:eb:96:0d:01:ed:f1:36: 84:66:6d:e1:8e:9e:47:99:f0:77:8d:98:3b:35:1c:7a:8e:e5: f0:c4:d0:22:af:52:9b:a0:72:91:1d:38:da:d6:1b:7a:78:1f: 13:9c:ca:d4:95:50:47:21:95:38:8d:56:5c:c1:30:bf:38:8d: 7f:05:49:6b:d3:25:3f:d3:07:bd:d1:3a:df:91:16:a2:90:e1: fb:8c:0e:98:0e:ae:0e:e9:43:fa:3b:f8:68:15:61:b7:ec:9a: 99:c3:68:c0:7e:1f:99:b7:bc:0e:29:12:6b:aa:a6:51:72:e0: 30:f9:84:79:a1:f9:f2:8a:6e:f1:ea:f9:41:71:41:ba:cc:62: 4f:31:b4:25:75:0e:ee:69:46:7e:7e:b6:df:07:c2:4e:82:88: 8c:09:2e:74:56:20:b7:64:76:33:a1:68:da:83:b3:54:ba:6f: 3e:f2:d9:8c:21:08:bc:69:6f:c5:c3:ab:a4:f5:e6:56:4b:c8: a2:61:8a:77:c7:8b:51:43:23:af:86:ba:ea:17:61:d1:23:ac: 8b:5b:b3:ae -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUerr4o5ec3SZiQ4TrJ8jaJRb+faEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5REIzMDVDMEU3RTFBRkFCOUU0MzI5M0ZEMDBGQ0VD REJDRUZEMTAeFw0yNjA1MTExNzIyMTVaFw0yNzA1MTAxNzI3MTVaMDMxMTAvBgNV BAMTKEU2OTg0NTM2QzI0QjBEODBERjA1RjcxQjVFOEYxOEM0QzhFMkJCQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoppGXvSc3ZarxQZc1VfPMklRP sGGKs6t/1nk9u6haRFOUVqpE/m/VtpiNPCZi7x89Aah3FEs8u0N9w29iKo1nLm7F LjuKKt+LUlvDmcUEr3PYaQ0w4Aoo5E6r/Ubrsa/iGc9tg1HQkdyTPo9Lrc1oWLU2 hg7LXdbGCAdtHOH2q9HIlTtJhnHT7wRv/aTUMLrt/ATkT2WZSFD6OTpkCCiLZxtU DkK+MiPOZ6+NrubEUq03aadTGV6rAvPz0sTwnqVdo2ysfxRt99MTmr2Y6k3e51Bw J5/Wtd1i5XaWvn+AeoGNq/2kJqa6myESdCB4cOKRIcz1NdMgp2aDURjlFy2BAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQU5phFNsJLDYDfBfcbXo8YxMjiu6EwHwYDVR0j BBgwFoAU952zBcDn4a+rnkMpP9APzs2879EwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0dORVQv MC9GNzlEQjMwNUMwRTdFMUFGQUI5RTQzMjkzRkQwMEZDRUNEQkNFRkQxLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0Y3OURCMzA1QzBFN0UxQUZBQjlFNDMyOTNGRDAw RkNFQ0RCQ0VGRDEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DR05FVC8wLzMxMzIzNDJlMzEzNTM1 MmUzMTM2MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMTM4MzQzMjM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBfJuoMA0GCSqGSIb3DQEBCwUAA4IBAQA2AsoZQUm0NiBqIxe4twSeOt6K pnOEtHLzdWS03cJskWHcOw39Da0xqFHU5b2EeOuWDQHt8TaEZm3hjp5HmfB3jZg7 NRx6juXwxNAir1KboHKRHTja1ht6eB8TnMrUlVBHIZU4jVZcwTC/OI1/BUlr0yU/ 0we90TrfkRaikOH7jA6YDq4O6UP6O/hoFWG37JqZw2jAfh+Zt7wOKRJrqqZRcuAw +YR5ofnyim7x6vlBcUG6zGJPMbQldQ7uaUZ+frbfB8JOgoiMCS50ViC3ZHYzoWja g7NUum8+8tmMIQi8aW/Fw6uk9eZWS8iiYYp3x4tRQyOvhrrqF2HRI6yLW7Ou -----END CERTIFICATE-----Generated at Wed May 13 21:08:21 2026 by rpki-client