$ rpki-client -vvf rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3134382e302f32342d3234203d3e203138343239.roa File: 36312e35372e3134382e302f32342d3234203d3e203138343239.roa (raw, json) Hash identifier: +J1P+3ValXJ+ieyUqwo9tYXiuIu7HD/G0U87IwtMgPY= Subject key identifier: 32:58:BB:3B:0B:D3:16:8C:2F:23:15:43:94:66:6F:C7:D8:6D:7D:A1 Certificate issuer: /CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Certificate serial: 6BF939ABF6331684BE356F28CE7F613A856C023F Authority key identifier: F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3134382e302f32342d3234203d3e203138343239.roa Signing time: Mon 11 May 2026 17:08:16 +0000 ROA not before: Mon 11 May 2026 17:03:16 +0000 ROA not after: Mon 10 May 2027 17:08:16 +0000 asID: 18429 IP address blocks: 61.57.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:16:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f9:39:ab:f6:33:16:84:be:35:6f:28:ce:7f:61:3a:85:6c:02:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1 Validity Not Before: May 11 17:03:16 2026 GMT Not After : May 10 17:08:16 2027 GMT Subject: CN=3258BB3B0BD3168C2F23154394666FC7D86D7DA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:5c:f7:47:ac:c0:5e:21:3a:02:81:f4:5e: 7f:e9:e7:f6:f2:c7:62:bb:38:8d:c7:af:6f:bd:32: df:6a:cd:fb:de:d8:c5:50:b0:0c:5d:4b:56:2b:80: 00:75:86:b6:22:33:0a:0a:65:0e:a0:12:ae:c6:a1: d7:c5:e9:bc:95:c0:dc:7b:ba:e6:87:1a:3c:15:dd: d9:bb:23:40:90:62:29:95:d0:00:54:d2:c2:68:2f: 53:c7:7f:11:03:af:f1:f6:96:b9:ee:fc:91:b5:a6: 9b:53:78:fd:7e:f1:cb:b0:a2:05:05:bd:7d:ae:c0: 34:56:59:d0:db:7d:e1:aa:00:a0:a1:3a:3e:60:22: ff:3e:d3:e4:eb:3a:20:09:90:f6:71:66:6e:94:7a: f1:8d:4c:0a:34:63:cf:f1:dd:c2:3d:e2:1a:11:a2: 97:a1:d0:00:b3:fc:e8:0a:4f:b2:01:91:0b:28:8e: a9:7d:3a:15:9e:e9:91:0e:cc:8f:33:49:9e:09:04: ef:7c:9d:33:38:9b:21:69:3d:70:0f:68:71:f7:cd: 73:ca:41:8c:f5:17:d8:2c:89:4a:d0:0b:cd:1e:b9: ed:4e:cd:75:76:bb:c8:83:2f:de:0e:d5:a6:bd:57: 7b:0b:7e:42:6d:87:42:84:fd:d7:95:02:d8:d7:c3: 6b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:58:BB:3B:0B:D3:16:8C:2F:23:15:43:94:66:6F:C7:D8:6D:7D:A1 X509v3 Authority Key Identifier: keyid:F7:9D:B3:05:C0:E7:E1:AF:AB:9E:43:29:3F:D0:0F:CE:CD:BC:EF:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F79DB305C0E7E1AFAB9E43293FD00FCECDBCEFD1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CGNET/0/36312e35372e3134382e302f32342d3234203d3e203138343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.57.148.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:6d:3e:85:23:e2:0b:11:3e:47:32:c1:ce:df:c8:be:07:4b: 83:94:60:6b:2b:49:b6:e0:44:35:d1:64:a5:f5:87:df:78:90: 09:9c:57:8e:a8:98:6c:36:c8:96:7f:ae:d4:9e:da:85:b7:1a: b2:dc:20:bf:8e:8e:af:b7:ee:55:a4:88:f4:be:e7:50:f5:0d: 88:77:80:d9:ee:f2:ed:1a:98:a1:07:d1:f8:45:45:66:aa:a9: 69:f2:9a:70:59:2d:2a:71:25:7a:ab:ea:f4:2b:ee:4f:fe:41: 14:2e:1b:bc:12:ba:23:ee:52:a8:1c:79:80:b2:86:ac:f7:c8: 99:a8:d8:07:a5:1c:e6:e1:8d:45:a5:ed:1a:29:a8:72:ba:57: 17:cb:3e:f7:4b:dc:d1:d6:53:2b:34:37:2d:1c:9d:b3:99:3e: ac:9f:f6:13:1e:7d:43:24:73:c4:88:83:ef:fb:07:eb:e0:d8: 15:c2:7c:99:b3:b4:b3:d7:2d:dd:57:ac:89:23:4a:a8:ee:44: 34:7d:e5:6c:85:5b:17:fb:fe:55:46:ea:b1:9d:35:b1:74:43: f9:cb:59:6d:74:6c:57:85:00:6a:04:a3:f8:be:3a:61:de:b8: 93:bd:17:74:0d:24:08:45:1d:37:e1:60:57:ba:40:d2:30:30: 20:98:13:b3 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUa/k5q/YzFoS+NW8ozn9hOoVsAj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5REIzMDVDMEU3RTFBRkFCOUU0MzI5M0ZEMDBGQ0VD REJDRUZEMTAeFw0yNjA1MTExNzAzMTZaFw0yNzA1MTAxNzA4MTZaMDMxMTAvBgNV BAMTKDMyNThCQjNCMEJEMzE2OEMyRjIzMTU0Mzk0NjY2RkM3RDg2RDdEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBYVz3R6zAXiE6AoH0Xn/p5/by x2K7OI3Hr2+9Mt9qzfve2MVQsAxdS1YrgAB1hrYiMwoKZQ6gEq7GodfF6byVwNx7 uuaHGjwV3dm7I0CQYimV0ABU0sJoL1PHfxEDr/H2lrnu/JG1pptTeP1+8cuwogUF vX2uwDRWWdDbfeGqAKChOj5gIv8+0+TrOiAJkPZxZm6UevGNTAo0Y8/x3cI94hoR opeh0ACz/OgKT7IBkQsojql9OhWe6ZEOzI8zSZ4JBO98nTM4myFpPXAPaHH3zXPK QYz1F9gsiUrQC80eue1OzXV2u8iDL94O1aa9V3sLfkJth0KE/deVAtjXw2u7AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUMli7OwvTFowvIxVDlGZvx9htfaEwHwYDVR0j BBgwFoAU952zBcDn4a+rnkMpP9APzs2879EwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0dORVQv MC9GNzlEQjMwNUMwRTdFMUFGQUI5RTQzMjkzRkQwMEZDRUNEQkNFRkQxLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0Y3OURCMzA1QzBFN0UxQUZBQjlFNDMyOTNGRDAw RkNFQ0RCQ0VGRDEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DR05FVC8wLzM2MzEyZTM1MzcyZTMx MzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzgzNDMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAA9OZQwDQYJKoZIhvcNAQELBQADggEBAAptPoUj4gsRPkcywc7fyL4HS4OUYGsr SbbgRDXRZKX1h994kAmcV46omGw2yJZ/rtSe2oW3GrLcIL+Ojq+37lWkiPS+51D1 DYh3gNnu8u0amKEH0fhFRWaqqWnymnBZLSpxJXqr6vQr7k/+QRQuG7wSuiPuUqgc eYCyhqz3yJmo2AelHObhjUWl7RopqHK6VxfLPvdL3NHWUys0Ny0cnbOZPqyf9hMe fUMkc8SIg+/7B+vg2BXCfJmztLPXLd1XrIkjSqjuRDR95WyFWxf7/lVG6rGdNbF0 Q/nLWW10bFeFAGoEo/i+OmHeuJO9F3QNJAhFHTfhYFe6QNIwMCCYE7M= -----END CERTIFICATE-----Generated at Wed May 13 21:08:42 2026 by rpki-client