$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3132382e302f32312d3233203d3e203138343239.roa File: 36312e35372e3132382e302f32312d3233203d3e203138343239.roa (raw, json) Hash identifier: oILRy0XN6+vfknVJhr6Q+qi7YaF45CybcefBhLZsXmE= Subject key identifier: 42:52:D0:D4:55:5D:6A:AD:CE:6E:D5:9C:CB:E6:08:CF:AC:C8:A2:5D Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Certificate serial: 39FFDA025BF4602E2CC122C05367377540C5E3F8 Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3132382e302f32312d3233203d3e203138343239.roa Signing time: Mon 11 May 2026 17:18:38 +0000 ROA not before: Mon 11 May 2026 17:13:38 +0000 ROA not after: Mon 10 May 2027 17:18:38 +0000 asID: 18429 IP address blocks: 61.57.128.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ff:da:02:5b:f4:60:2e:2c:c1:22:c0:53:67:37:75:40:c5:e3:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Validity Not Before: May 11 17:13:38 2026 GMT Not After : May 10 17:18:38 2027 GMT Subject: CN=4252D0D4555D6AADCE6ED59CCBE608CFACC8A25D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:91:92:77:8e:38:d1:10:8e:33:bb:6b:83:cf: a6:f7:aa:1c:8d:50:b6:10:03:f2:ea:46:3e:39:97: 3f:77:ed:d4:ea:c5:0e:67:7f:57:c4:6b:f2:0e:ee: c5:36:f3:91:e2:80:24:dc:d5:9e:be:01:3d:57:a1: ab:ce:88:fc:3e:79:72:eb:18:d8:15:ec:5f:d8:46: 2e:5f:a3:dc:ae:b9:04:61:f4:bd:4d:a9:39:b6:b6: 6e:f4:ff:53:ed:d4:d0:b4:bb:cb:3a:13:23:f3:31: 8f:33:7b:87:f0:54:29:e7:d8:b1:4c:b8:18:ab:3b: 1b:35:6c:a2:e5:e3:74:0e:2e:a2:02:e1:06:cd:05: d1:09:c6:68:f1:08:7c:c3:a3:28:28:fb:e6:9f:e4: 90:86:59:85:ea:6e:4a:91:56:f9:c3:3b:96:85:a3: f5:cc:6b:08:b3:ab:61:89:44:28:0f:77:c3:87:0b: 37:66:14:a2:df:d4:0e:d1:f4:63:9f:3c:3a:3b:43: 62:a7:a0:f5:1a:54:75:81:74:7d:9f:48:e8:3f:96: 98:ab:25:81:0b:5f:69:99:6f:42:61:41:06:27:31: c3:b9:5c:b8:a3:80:82:37:a8:88:92:27:17:05:aa: 7e:d0:10:c5:8d:db:9a:cc:1e:d7:26:15:a4:6d:ed: bf:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:52:D0:D4:55:5D:6A:AD:CE:6E:D5:9C:CB:E6:08:CF:AC:C8:A2:5D X509v3 Authority Key Identifier: keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3132382e302f32312d3233203d3e203138343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.57.128.0/21 Signature Algorithm: sha256WithRSAEncryption 84:21:25:65:06:5f:07:48:56:2a:9b:0c:89:d2:24:7d:80:fe: fc:3d:36:87:92:35:59:96:9d:d8:81:03:83:cf:69:e8:60:77: 53:29:c4:ca:d2:e3:d9:a5:93:32:65:05:85:f8:12:86:e2:53: 86:81:0c:0e:9c:2b:8f:57:31:58:c4:d4:7d:05:c8:bd:48:be: 52:ed:1e:f0:9e:3d:1a:9f:00:f4:ab:c8:18:2d:de:00:0e:42: ee:e9:9a:b7:15:74:16:7c:ca:d6:56:1d:f7:b7:a4:ca:d2:47: 12:de:d5:06:69:6d:0c:52:d7:39:c7:e3:3d:29:9d:5f:e5:cc: e2:13:43:5b:63:f4:0e:f5:b7:13:a7:23:5d:0a:65:c2:90:19: 0e:2c:5f:17:0d:06:6e:8d:7c:f6:55:85:2b:aa:a8:1b:32:f3: 31:4a:ac:ab:bb:a2:f6:a1:eb:e1:ad:87:f6:ec:aa:70:33:59: 00:31:25:28:e1:d9:d6:fe:83:8b:de:f1:6f:fb:dd:4f:cb:4e: d2:b3:65:dd:85:55:29:cb:f4:8e:bf:4d:a7:92:58:eb:87:e6: f7:dd:76:c5:bb:55:dc:54:74:b9:f9:a6:18:86:39:64:ee:bf: 64:50:bd:40:57:39:7e:97:ce:00:43:29:02:eb:c1:a5:99:17: ce:54:83:22 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUOf/aAlv0YC4swSLAU2c3dUDF4/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5REIzMDVDMEU3RTFBRkFCOUU0MzI5M0ZEMDBGQ0VD REJDRUZEMTAeFw0yNjA1MTExNzEzMzhaFw0yNzA1MTAxNzE4MzhaMDMxMTAvBgNV BAMTKDQyNTJEMEQ0NTU1RDZBQURDRTZFRDU5Q0NCRTYwOENGQUNDOEEyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTkZJ3jjjREI4zu2uDz6b3qhyN ULYQA/LqRj45lz937dTqxQ5nf1fEa/IO7sU285HigCTc1Z6+AT1XoavOiPw+eXLr GNgV7F/YRi5fo9yuuQRh9L1NqTm2tm70/1Pt1NC0u8s6EyPzMY8ze4fwVCnn2LFM uBirOxs1bKLl43QOLqIC4QbNBdEJxmjxCHzDoygo++af5JCGWYXqbkqRVvnDO5aF o/XMawizq2GJRCgPd8OHCzdmFKLf1A7R9GOfPDo7Q2KnoPUaVHWBdH2fSOg/lpir JYELX2mZb0JhQQYnMcO5XLijgII3qIiSJxcFqn7QEMWN25rMHtcmFaRt7b8lAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUQlLQ1FVdaq3ObtWcy+YIz6zIol0wHwYDVR0j BBgwFoAU952zBcDn4a+rnkMpP9APzs2879EwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0dORVQv MC9GNzlEQjMwNUMwRTdFMUFGQUI5RTQzMjkzRkQwMEZDRUNEQkNFRkQxLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0Y3OURCMzA1QzBFN0UxQUZBQjlFNDMyOTNGRDAw RkNFQ0RCQ0VGRDEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DR05FVC8wLzM2MzEyZTM1MzcyZTMx MzIzODJlMzAyZjMyMzEyZDMyMzMyMDNkM2UyMDMxMzgzNDMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAM9OYAwDQYJKoZIhvcNAQELBQADggEBAIQhJWUGXwdIViqbDInSJH2A/vw9NoeS NVmWndiBA4PPaehgd1MpxMrS49mlkzJlBYX4EobiU4aBDA6cK49XMVjE1H0FyL1I vlLtHvCePRqfAPSryBgt3gAOQu7pmrcVdBZ8ytZWHfe3pMrSRxLe1QZpbQxS1znH 4z0pnV/lzOITQ1tj9A71txOnI10KZcKQGQ4sXxcNBm6NfPZVhSuqqBsy8zFKrKu7 ovah6+Gth/bsqnAzWQAxJSjh2db+g4ve8W/73U/LTtKzZd2FVSnL9I6/TaeSWOuH 5vfddsW7VdxUdLn5phiGOWTuv2RQvUBXOX6XzgBDKQLrwaWZF85UgyI= -----END CERTIFICATE-----Generated at Wed May 13 21:08:22 2026 by rpki-client