$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/34352e36342e3233322e302f32322d3234203d3e203138343239.roa File: 34352e36342e3233322e302f32322d3234203d3e203138343239.roa (raw, json) Hash identifier: gvYO9rBGVSJu6QF9bTtoTODgUeLGphqqe89GNwGBMKQ= Subject key identifier: F5:E4:F9:2D:D1:8C:FA:91:D4:AC:BB:E5:B3:72:F0:24:F3:52:CE:2C Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Certificate serial: 180309652343CFD01F4C9808B16C17CE033D4A1E Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/34352e36342e3233322e302f32322d3234203d3e203138343239.roa Signing time: Mon 11 May 2026 17:27:11 +0000 ROA not before: Mon 11 May 2026 17:22:11 +0000 ROA not after: Mon 10 May 2027 17:27:11 +0000 asID: 18429 IP address blocks: 45.64.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:03:09:65:23:43:cf:d0:1f:4c:98:08:b1:6c:17:ce:03:3d:4a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Validity Not Before: May 11 17:22:11 2026 GMT Not After : May 10 17:27:11 2027 GMT Subject: CN=F5E4F92DD18CFA91D4ACBBE5B372F024F352CE2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:97:5f:07:66:c3:d1:e6:61:56:83:22:0a:36: 24:3e:7b:35:f4:1d:f5:f9:13:16:ba:95:9b:df:04: c2:b0:77:fb:2c:65:6a:70:fa:9b:2b:a0:03:4a:29: c3:6c:ee:c5:30:c2:a6:c4:f6:22:45:34:55:73:1e: 19:9d:27:45:1b:92:63:d8:16:9c:2c:e4:5b:6d:0d: c2:62:8f:b5:b3:8c:10:41:b1:94:48:aa:c4:a0:74: ff:2d:a1:91:a7:c5:14:9a:7d:7f:c4:7c:1c:c2:6c: 8a:05:6f:02:75:13:d1:46:1b:83:e2:5c:45:4d:84: aa:53:86:bf:86:c6:b4:fc:f6:6f:e4:e6:1e:af:78: 1a:9d:9f:81:71:9d:7d:ab:11:bb:3e:32:39:ab:78: 13:71:4d:20:5c:f5:d6:1a:b6:68:77:62:8d:85:21: fa:a5:44:ff:c4:36:ef:49:18:ae:c7:ff:65:55:8c: 54:60:82:f6:18:14:89:fc:84:fd:32:de:9b:7c:ee: 66:68:ef:c2:2b:0b:56:8a:b6:3c:3b:e3:55:e9:16: a7:91:e6:cd:a3:77:80:76:05:d7:31:19:d9:73:9a: 43:e3:04:f6:ed:50:48:a4:d8:06:2f:f3:f7:cc:4a: f2:91:80:96:47:2c:53:c9:36:d3:79:e3:b2:f4:36: 05:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E4:F9:2D:D1:8C:FA:91:D4:AC:BB:E5:B3:72:F0:24:F3:52:CE:2C X509v3 Authority Key Identifier: keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/34352e36342e3233322e302f32322d3234203d3e203138343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.64.232.0/22 Signature Algorithm: sha256WithRSAEncryption b0:36:2d:9d:da:51:a2:f8:16:cf:5a:e7:4a:e2:74:66:4d:99: b4:3f:cf:0a:df:b9:c9:ab:46:06:b6:ca:a8:6f:f0:cd:97:0c: 97:96:81:4f:df:37:c0:e6:a7:a1:79:92:bc:b0:d1:3b:8b:c5: 9d:07:f2:74:da:04:9a:b0:77:98:50:76:06:eb:50:f3:02:69: a1:6a:1c:de:87:30:73:cb:9f:fa:34:d3:c2:60:cc:09:6c:a8: 86:90:c1:8f:98:a3:2e:be:07:6d:8d:52:0d:42:3a:9f:df:2e: b1:c8:e4:15:41:e8:20:3e:af:39:3a:dd:f2:e2:d7:dd:36:0f: 87:67:f0:36:3d:a2:15:d5:3c:3f:b3:c9:a6:16:10:d5:98:f8: 2e:b4:05:11:9a:38:c2:ee:c2:39:cd:6f:40:da:e0:9a:a8:d2: 97:fc:af:9c:d2:29:7d:14:65:e6:55:77:b8:d4:ec:e5:f9:47: e5:ad:c8:43:4e:71:fe:f3:dd:1a:93:d5:b9:85:07:f5:31:95: 32:92:c1:c0:fc:fc:0c:f5:b8:28:b3:a1:ec:6c:5d:c6:41:8c: f6:32:ce:af:5e:0b:42:e4:8e:6b:6d:2e:cc:2b:9a:38:fa:c9: f0:08:37:26:1c:c4:cb:1e:34:07:f7:b1:b7:00:71:8b:6e:d5: 79:eb:28:d6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUGAMJZSNDz9AfTJgIsWwXzgM9Sh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5REIzMDVDMEU3RTFBRkFCOUU0MzI5M0ZEMDBGQ0VD REJDRUZEMTAeFw0yNjA1MTExNzIyMTFaFw0yNzA1MTAxNzI3MTFaMDMxMTAvBgNV BAMTKEY1RTRGOTJERDE4Q0ZBOTFENEFDQkJFNUIzNzJGMDI0RjM1MkNFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZl18HZsPR5mFWgyIKNiQ+ezX0 HfX5Exa6lZvfBMKwd/ssZWpw+psroANKKcNs7sUwwqbE9iJFNFVzHhmdJ0UbkmPY Fpws5FttDcJij7WzjBBBsZRIqsSgdP8toZGnxRSafX/EfBzCbIoFbwJ1E9FGG4Pi XEVNhKpThr+GxrT89m/k5h6veBqdn4FxnX2rEbs+MjmreBNxTSBc9dYatmh3Yo2F IfqlRP/ENu9JGK7H/2VVjFRggvYYFIn8hP0y3pt87mZo78IrC1aKtjw741XpFqeR 5s2jd4B2BdcxGdlzmkPjBPbtUEik2AYv8/fMSvKRgJZHLFPJNtN547L0NgX3AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU9eT5LdGM+pHUrLvls3LwJPNSziwwHwYDVR0j BBgwFoAU952zBcDn4a+rnkMpP9APzs2879EwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0dORVQv MC9GNzlEQjMwNUMwRTdFMUFGQUI5RTQzMjkzRkQwMEZDRUNEQkNFRkQxLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0Y3OURCMzA1QzBFN0UxQUZBQjlFNDMyOTNGRDAw RkNFQ0RCQ0VGRDEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DR05FVC8wLzM0MzUyZTM2MzQyZTMy MzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzgzNDMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAItQOgwDQYJKoZIhvcNAQELBQADggEBALA2LZ3aUaL4Fs9a50ridGZNmbQ/zwrf ucmrRga2yqhv8M2XDJeWgU/fN8Dmp6F5kryw0TuLxZ0H8nTaBJqwd5hQdgbrUPMC aaFqHN6HMHPLn/o008JgzAlsqIaQwY+Yoy6+B22NUg1COp/fLrHI5BVB6CA+rzk6 3fLi1902D4dn8DY9ohXVPD+zyaYWENWY+C60BRGaOMLuwjnNb0Da4Jqo0pf8r5zS KX0UZeZVd7jU7OX5R+WtyENOcf7z3RqT1bmFB/UxlTKSwcD8/Az1uCizoexsXcZB jPYyzq9eC0LkjmttLswrmjj6yfAINyYcxMseNAf3sbcAcYtu1XnrKNY= -----END CERTIFICATE-----Generated at Wed May 13 21:08:16 2026 by rpki-client