$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3132382e302f32302d3234203d3e203138343239.roa File: 36312e35372e3132382e302f32302d3234203d3e203138343239.roa (raw, json) Hash identifier: YiI45/E7SabvhifwJIVtLR9+r78Zo4hPOQiJiczZjHU= Subject key identifier: AF:5F:92:46:C9:81:24:0A:4B:E7:98:04:C8:01:78:73:9D:27:6C:19 Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Certificate serial: 4E0E6D9CC53ED50793BCBE1BE97ECF58E13099B9 Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3132382e302f32302d3234203d3e203138343239.roa Signing time: Mon 11 May 2026 17:27:11 +0000 ROA not before: Mon 11 May 2026 17:22:11 +0000 ROA not after: Mon 10 May 2027 17:27:11 +0000 asID: 18429 IP address blocks: 61.57.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0e:6d:9c:c5:3e:d5:07:93:bc:be:1b:e9:7e:cf:58:e1:30:99:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Validity Not Before: May 11 17:22:11 2026 GMT Not After : May 10 17:27:11 2027 GMT Subject: CN=AF5F9246C981240A4BE79804C80178739D276C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7f:be:38:be:42:9c:dc:81:08:55:84:39:fb: 6f:95:59:33:0c:7f:38:ec:55:ff:7b:02:e9:f3:1e: b0:f2:87:c2:7d:6b:ff:de:50:58:2c:9f:41:ff:18: 06:03:bb:5c:7d:80:a3:8e:d9:69:5c:bd:74:e9:e7: f4:a8:ce:c5:66:92:3f:f7:04:fb:f1:ac:95:7b:ac: dd:30:07:d5:55:16:a5:a8:ce:3a:56:44:25:4e:14: da:1c:47:ce:86:18:de:c8:a7:dd:87:17:04:68:fb: 1f:6d:ba:d2:2d:b9:29:1e:57:04:f2:66:08:82:f5: 02:20:6d:f0:0e:62:76:8f:96:8d:f4:c9:74:51:d9: 45:25:18:64:9d:8c:9c:4f:fc:b0:c7:72:46:63:2a: 4c:3f:4a:b3:82:e1:cc:39:88:ed:e2:e9:25:c4:33: b4:fa:4f:c2:91:c1:96:e1:6b:ae:a1:03:92:63:27: 31:6a:01:75:23:d3:a2:fc:d3:60:e2:94:1a:cc:fb: bb:29:8f:e0:53:52:90:01:5e:05:ec:be:ad:00:ec: 33:8a:32:1e:5f:72:55:3a:bc:eb:cc:f6:49:aa:30: d6:d8:46:d8:a4:19:04:5b:8a:9c:1d:9f:a3:7a:17: 9c:b1:30:62:a0:d3:de:c9:16:0b:bb:d5:b3:bc:b8: 7f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5F:92:46:C9:81:24:0A:4B:E7:98:04:C8:01:78:73:9D:27:6C:19 X509v3 Authority Key Identifier: keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3132382e302f32302d3234203d3e203138343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.57.128.0/20 Signature Algorithm: sha256WithRSAEncryption 3f:ac:7e:b6:d0:2b:1e:e6:73:ce:ef:1b:bd:9f:e6:75:44:42: b0:fd:5d:11:e7:c1:67:94:92:1d:37:91:f7:d5:7f:99:74:db: dc:2a:38:09:05:4e:4a:5b:30:b7:fe:0d:5c:0b:dd:bc:19:af: 21:a5:13:0e:a3:1e:49:ef:21:16:09:84:7c:8f:4d:e2:af:ff: b0:c1:40:3f:cd:98:af:0b:12:37:74:d0:ac:55:1b:45:c7:b5: 07:95:de:26:da:71:e0:50:cb:8c:cc:7e:ac:79:43:65:c0:76: ca:10:56:6e:48:7a:b5:9f:de:18:6f:98:0b:cb:22:b2:99:5b: 99:d1:62:c8:e0:0a:32:c6:e3:df:83:f9:31:94:b4:63:78:59: 4d:c5:f6:11:7d:fe:55:89:6c:e6:77:05:16:43:89:dd:83:83: 92:7a:14:be:61:4c:4f:bd:cf:21:70:3e:c9:4b:02:5f:c6:39: 59:5a:25:28:ed:25:40:1c:40:70:61:31:6d:4a:43:21:f0:a8: 6b:7e:ac:e8:59:5f:f2:9b:97:8f:81:cd:39:a9:6b:a0:db:25: 56:07:8d:d0:3a:b0:8d:06:65:f7:29:b2:10:ed:e2:54:72:c0: 97:bc:2c:02:3f:90:db:91:58:c5:27:ba:3b:d6:09:be:4e:18: b8:35:b7:d9 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUTg5tnMU+1QeTvL4b6X7PWOEwmbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5REIzMDVDMEU3RTFBRkFCOUU0MzI5M0ZEMDBGQ0VD REJDRUZEMTAeFw0yNjA1MTExNzIyMTFaFw0yNzA1MTAxNzI3MTFaMDMxMTAvBgNV BAMTKEFGNUY5MjQ2Qzk4MTI0MEE0QkU3OTgwNEM4MDE3ODczOUQyNzZDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTf744vkKc3IEIVYQ5+2+VWTMM fzjsVf97AunzHrDyh8J9a//eUFgsn0H/GAYDu1x9gKOO2WlcvXTp5/SozsVmkj/3 BPvxrJV7rN0wB9VVFqWozjpWRCVOFNocR86GGN7Ip92HFwRo+x9tutItuSkeVwTy ZgiC9QIgbfAOYnaPlo30yXRR2UUlGGSdjJxP/LDHckZjKkw/SrOC4cw5iO3i6SXE M7T6T8KRwZbha66hA5JjJzFqAXUj06L802DilBrM+7spj+BTUpABXgXsvq0A7DOK Mh5fclU6vOvM9kmqMNbYRtikGQRbipwdn6N6F5yxMGKg097JFgu71bO8uH+dAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUr1+SRsmBJApL55gEyAF4c50nbBkwHwYDVR0j BBgwFoAU952zBcDn4a+rnkMpP9APzs2879EwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0dORVQv MC9GNzlEQjMwNUMwRTdFMUFGQUI5RTQzMjkzRkQwMEZDRUNEQkNFRkQxLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0Y3OURCMzA1QzBFN0UxQUZBQjlFNDMyOTNGRDAw RkNFQ0RCQ0VGRDEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DR05FVC8wLzM2MzEyZTM1MzcyZTMx MzIzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzgzNDMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAQ9OYAwDQYJKoZIhvcNAQELBQADggEBAD+sfrbQKx7mc87vG72f5nVEQrD9XRHn wWeUkh03kffVf5l029wqOAkFTkpbMLf+DVwL3bwZryGlEw6jHknvIRYJhHyPTeKv /7DBQD/NmK8LEjd00KxVG0XHtQeV3ibaceBQy4zMfqx5Q2XAdsoQVm5IerWf3hhv mAvLIrKZW5nRYsjgCjLG49+D+TGUtGN4WU3F9hF9/lWJbOZ3BRZDid2Dg5J6FL5h TE+9zyFwPslLAl/GOVlaJSjtJUAcQHBhMW1KQyHwqGt+rOhZX/Kbl4+BzTmpa6Db JVYHjdA6sI0GZfcpshDt4lRywJe8LAI/kNuRWMUnujvWCb5OGLg1t9k= -----END CERTIFICATE-----Generated at Wed May 13 21:08:19 2026 by rpki-client