$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3133362e302f32312d3233203d3e203138343239.roa File: 36312e35372e3133362e302f32312d3233203d3e203138343239.roa (raw, json) Hash identifier: HSYXkFuZJMFX/NshKNVA+4dnD9KWJCv6zzkvrg83gwo= Subject key identifier: 7B:F1:A8:70:4F:E2:E1:AF:2E:D0:FC:60:5B:E1:4E:05:44:99:C0:2E Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Certificate serial: 6F11F3AC96F9B0D03F3E6A63F440010A2F5ABF2B Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3133362e302f32312d3233203d3e203138343239.roa Signing time: Mon 11 May 2026 17:18:39 +0000 ROA not before: Mon 11 May 2026 17:13:39 +0000 ROA not after: Mon 10 May 2027 17:18:39 +0000 asID: 18429 IP address blocks: 61.57.136.0/21 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:11:f3:ac:96:f9:b0:d0:3f:3e:6a:63:f4:40:01:0a:2f:5a:bf:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Validity Not Before: May 11 17:13:39 2026 GMT Not After : May 10 17:18:39 2027 GMT Subject: CN=7BF1A8704FE2E1AF2ED0FC605BE14E054499C02E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:fd:45:b8:69:7e:6c:15:63:af:2c:f3:e5: 87:0a:a9:ad:a5:34:29:74:30:06:b8:49:9b:3e:b0: 42:6f:b7:3a:79:8d:c4:5d:9d:bb:21:2c:ec:77:3b: 0a:27:17:e2:95:63:e7:ae:e2:bf:64:52:12:e1:13: 4f:71:76:6a:9b:42:18:d5:a0:67:3a:b6:13:f0:3c: 8b:7e:95:61:c1:44:cc:4d:36:b6:de:ed:f1:fe:b8: 06:56:70:00:99:05:4d:58:74:6d:7b:03:04:8d:d4: 7b:8e:06:d1:46:44:ef:56:b2:ab:ff:83:b7:10:93: f4:42:b7:1b:a2:86:d0:6c:29:fa:14:f1:73:0b:1b: e8:a0:a4:60:24:08:46:42:0a:ef:2e:95:b5:dc:2c: f0:8c:97:b3:4f:e2:c0:5f:39:b5:00:b7:9f:59:22: c3:ec:66:17:21:92:b2:65:1d:1d:08:af:40:0b:b8: bd:e8:2d:08:e6:48:a3:7a:6d:d2:b3:8f:bd:dd:87: 0f:27:11:f2:83:3d:67:69:de:f6:a6:ef:d1:a1:14: e5:44:c8:be:13:2c:63:79:04:3e:ba:dd:f2:c5:2d: 7b:b4:35:32:f7:79:e7:15:f5:6a:87:3f:99:58:5e: 86:b7:3f:d8:54:25:b5:9f:c4:a7:3d:52:13:77:8f: 11:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F1:A8:70:4F:E2:E1:AF:2E:D0:FC:60:5B:E1:4E:05:44:99:C0:2E X509v3 Authority Key Identifier: keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3133362e302f32312d3233203d3e203138343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.57.136.0/21 Signature Algorithm: sha256WithRSAEncryption 45:df:f3:24:3e:58:14:b4:b4:3b:be:3c:35:1a:05:fc:35:37: 50:8d:ce:59:a2:15:da:99:21:79:9e:34:36:2a:29:ee:90:5d: 63:a6:b3:c0:7e:08:90:4f:b9:2a:87:45:34:18:9c:90:2a:ab: 34:cb:44:58:f9:f7:44:d2:c0:a1:9d:51:c0:32:ce:32:f4:2d: eb:de:e9:d7:7f:6d:83:1c:a4:ad:b6:20:f1:7e:96:d7:8c:4e: 9f:59:bd:3b:cf:58:5d:2d:73:e5:66:bb:44:a6:98:84:78:de: 42:43:2b:2f:9e:0d:4c:83:47:60:1a:14:0e:10:88:92:89:22: e1:c0:6c:6a:d9:27:dc:88:e7:90:f1:63:28:45:25:63:c5:33: ab:c2:16:6e:bd:8b:f9:03:d4:37:e1:9a:c9:99:1f:2e:2f:7d: 88:63:51:fa:4a:1f:b2:77:7d:63:8d:4b:0c:34:35:fe:b4:36: 9f:69:d0:5c:3f:96:da:46:fb:fb:4c:06:d3:3a:97:dc:83:67: aa:98:3b:f8:5d:f4:97:13:3d:ce:6b:be:62:16:2d:e6:e7:a0: 38:2f:f8:53:a1:0f:92:a7:d2:36:92:98:54:ea:cc:60:b2:fe: 98:20:78:f8:8b:ee:b6:85:46:5a:aa:b4:16:11:20:39:84:28: c2:02:4c:56 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUbxHzrJb5sNA/Pmpj9EABCi9avyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5REIzMDVDMEU3RTFBRkFCOUU0MzI5M0ZEMDBGQ0VD REJDRUZEMTAeFw0yNjA1MTExNzEzMzlaFw0yNzA1MTAxNzE4MzlaMDMxMTAvBgNV BAMTKDdCRjFBODcwNEZFMkUxQUYyRUQwRkM2MDVCRTE0RTA1NDQ5OUMwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/iP1FuGl+bBVjryzz5YcKqa2l NCl0MAa4SZs+sEJvtzp5jcRdnbshLOx3OwonF+KVY+eu4r9kUhLhE09xdmqbQhjV oGc6thPwPIt+lWHBRMxNNrbe7fH+uAZWcACZBU1YdG17AwSN1HuOBtFGRO9Wsqv/ g7cQk/RCtxuihtBsKfoU8XMLG+igpGAkCEZCCu8ulbXcLPCMl7NP4sBfObUAt59Z IsPsZhchkrJlHR0Ir0ALuL3oLQjmSKN6bdKzj73dhw8nEfKDPWdp3vam79GhFOVE yL4TLGN5BD663fLFLXu0NTL3eecV9WqHP5lYXoa3P9hUJbWfxKc9UhN3jxGVAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUe/GocE/i4a8u0PxgW+FOBUSZwC4wHwYDVR0j BBgwFoAU952zBcDn4a+rnkMpP9APzs2879EwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0dORVQv MC9GNzlEQjMwNUMwRTdFMUFGQUI5RTQzMjkzRkQwMEZDRUNEQkNFRkQxLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0Y3OURCMzA1QzBFN0UxQUZBQjlFNDMyOTNGRDAw RkNFQ0RCQ0VGRDEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DR05FVC8wLzM2MzEyZTM1MzcyZTMx MzMzNjJlMzAyZjMyMzEyZDMyMzMyMDNkM2UyMDMxMzgzNDMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAM9OYgwDQYJKoZIhvcNAQELBQADggEBAEXf8yQ+WBS0tDu+PDUaBfw1N1CNzlmi FdqZIXmeNDYqKe6QXWOms8B+CJBPuSqHRTQYnJAqqzTLRFj590TSwKGdUcAyzjL0 Leve6dd/bYMcpK22IPF+lteMTp9ZvTvPWF0tc+Vmu0SmmIR43kJDKy+eDUyDR2Aa FA4QiJKJIuHAbGrZJ9yI55DxYyhFJWPFM6vCFm69i/kD1DfhmsmZHy4vfYhjUfpK H7J3fWONSww0Nf60Np9p0Fw/ltpG+/tMBtM6l9yDZ6qYO/hd9JcTPc5rvmIWLebn oDgv+FOhD5Kn0jaSmFTqzGCy/pggePiL7raFRlqqtBYRIDmEKMICTFY= -----END CERTIFICATE-----Generated at Wed May 13 21:08:22 2026 by rpki-client