$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/32372e3134372e34302e302f32312d3231203d3e203138343239.roa File: 32372e3134372e34302e302f32312d3231203d3e203138343239.roa (raw, json) Hash identifier: /CwaREB4SfeesbcR4NYoWhwDG9bw1WDnc+LZVxLr8Ro= Subject key identifier: 60:14:42:05:39:3E:D6:69:05:2B:35:7D:28:33:BA:60:CD:B4:01:2D Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Certificate serial: 738893B92B77756B8C9227278C1FE5799D2B7B17 Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/32372e3134372e34302e302f32312d3231203d3e203138343239.roa Signing time: Mon 11 May 2026 17:04:37 +0000 ROA not before: Mon 11 May 2026 16:59:37 +0000 ROA not after: Mon 10 May 2027 17:04:37 +0000 asID: 18429 IP address blocks: 27.147.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:88:93:b9:2b:77:75:6b:8c:92:27:27:8c:1f:e5:79:9d:2b:7b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Validity Not Before: May 11 16:59:37 2026 GMT Not After : May 10 17:04:37 2027 GMT Subject: CN=60144205393ED669052B357D2833BA60CDB4012D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:20:47:e4:46:3a:88:3e:ab:40:e8:a6:53:95: 46:f4:8e:dc:54:46:4f:fb:27:3c:da:5c:5d:fb:f7: 1d:85:ba:c5:b0:07:06:1a:3d:3a:93:a9:7c:e0:0f: 49:46:2e:62:41:e7:0e:54:4e:35:ce:f6:f2:51:92: bc:cc:75:94:8c:a7:92:ea:60:58:ae:c6:ae:2c:5c: be:0b:5e:03:d1:03:78:1d:35:23:47:34:0f:90:be: f2:5b:86:41:30:c5:a1:eb:a2:73:a2:90:27:a9:55: 7c:c5:f3:fe:49:77:46:22:f3:b8:34:bf:7d:76:6c: 7a:5a:7c:c6:9a:99:04:54:7e:27:e5:e7:2c:0c:96: 8b:d3:7f:1c:13:de:2f:85:07:62:d2:f0:ec:f4:63: c4:c8:f0:30:05:ab:1a:9e:1a:cc:da:75:dd:2f:68: 59:05:ef:c5:4f:4f:c7:92:f4:df:0e:86:19:f9:c3: 08:92:6d:82:b6:59:bf:9c:2c:15:78:c8:2a:4d:02: 9b:0f:9c:e7:cf:d2:10:3b:58:02:05:ac:5d:1f:c3: 26:66:50:75:8c:f3:f5:4c:a1:72:ea:11:49:cf:d3: dd:0c:04:06:eb:fb:e9:8e:ab:50:b7:fe:ba:08:31: ee:b3:78:3f:71:46:f5:8d:99:49:a0:bc:16:84:8a: b6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:14:42:05:39:3E:D6:69:05:2B:35:7D:28:33:BA:60:CD:B4:01:2D X509v3 Authority Key Identifier: keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/32372e3134372e34302e302f32312d3231203d3e203138343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.147.40.0/21 Signature Algorithm: sha256WithRSAEncryption 41:96:e2:12:40:09:37:7c:bd:ea:7f:52:da:6e:fe:d5:48:6a: 18:40:7b:c2:37:22:12:e2:64:66:f3:9e:c0:c8:81:c9:f6:80: 6d:b8:c5:d4:05:8b:85:bd:f4:b8:cd:2e:c8:3a:af:cf:2c:f8: 84:02:c3:55:d9:68:1b:aa:52:3f:c6:97:94:5e:42:2d:f8:0c: 55:f4:fa:fe:e3:fc:6d:a4:57:6d:c9:64:7a:71:04:81:fe:8e: e7:55:15:fb:d9:49:c7:0f:d9:57:74:8e:c4:cc:6e:d9:4a:7f: fe:45:0f:e8:f8:8f:ad:a3:63:3a:19:83:94:42:64:01:ae:18: a7:37:4c:4e:d9:38:05:9d:ff:33:9a:3c:9d:ef:0c:41:56:b2: 08:d6:fc:c2:e1:80:c4:e1:40:3e:83:c2:27:38:33:55:19:eb: 1c:49:36:e2:73:19:9e:f7:28:99:91:5e:04:47:3f:94:99:ab: 51:b3:fe:04:a4:92:12:fe:40:55:4a:29:cc:15:8d:b3:33:2d: 53:95:f7:f8:d9:a8:05:e4:35:ca:55:35:41:24:0e:88:f3:dd: 11:0c:92:d1:10:b0:56:c7:94:0e:ef:58:13:59:f2:ba:2a:10: 9e:96:5c:5b:05:0b:3a:09:33:cf:7a:48:0e:22:2b:54:1e:05: 05:b0:dc:3c -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUc4iTuSt3dWuMkicnjB/leZ0rexcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5REIzMDVDMEU3RTFBRkFCOUU0MzI5M0ZEMDBGQ0VD REJDRUZEMTAeFw0yNjA1MTExNjU5MzdaFw0yNzA1MTAxNzA0MzdaMDMxMTAvBgNV BAMTKDYwMTQ0MjA1MzkzRUQ2NjkwNTJCMzU3RDI4MzNCQTYwQ0RCNDAxMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnIEfkRjqIPqtA6KZTlUb0jtxU Rk/7JzzaXF379x2FusWwBwYaPTqTqXzgD0lGLmJB5w5UTjXO9vJRkrzMdZSMp5Lq YFiuxq4sXL4LXgPRA3gdNSNHNA+QvvJbhkEwxaHronOikCepVXzF8/5Jd0Yi87g0 v312bHpafMaamQRUfifl5ywMlovTfxwT3i+FB2LS8Oz0Y8TI8DAFqxqeGszadd0v aFkF78VPT8eS9N8Ohhn5wwiSbYK2Wb+cLBV4yCpNApsPnOfP0hA7WAIFrF0fwyZm UHWM8/VMoXLqEUnP090MBAbr++mOq1C3/roIMe6zeD9xRvWNmUmgvBaEirZfAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUYBRCBTk+1mkFKzV9KDO6YM20AS0wHwYDVR0j BBgwFoAU952zBcDn4a+rnkMpP9APzs2879EwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0dORVQv MC9GNzlEQjMwNUMwRTdFMUFGQUI5RTQzMjkzRkQwMEZDRUNEQkNFRkQxLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0Y3OURCMzA1QzBFN0UxQUZBQjlFNDMyOTNGRDAw RkNFQ0RCQ0VGRDEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DR05FVC8wLzMyMzcyZTMxMzQzNzJl MzQzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMxMzgzNDMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAMbkygwDQYJKoZIhvcNAQELBQADggEBAEGW4hJACTd8vep/Utpu/tVIahhAe8I3 IhLiZGbznsDIgcn2gG24xdQFi4W99LjNLsg6r88s+IQCw1XZaBuqUj/Gl5ReQi34 DFX0+v7j/G2kV23JZHpxBIH+judVFfvZSccP2Vd0jsTMbtlKf/5FD+j4j62jYzoZ g5RCZAGuGKc3TE7ZOAWd/zOaPJ3vDEFWsgjW/MLhgMThQD6Dwic4M1UZ6xxJNuJz GZ73KJmRXgRHP5SZq1Gz/gSkkhL+QFVKKcwVjbMzLVOV9/jZqAXkNcpVNUEkDojz 3REMktEQsFbHlA7vWBNZ8roqEJ6WXFsFCzoJM896SA4iK1QeBQWw3Dw= -----END CERTIFICATE-----Generated at Wed May 13 21:48:31 2026 by rpki-client