$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATRUST/0/3137352e3138342e3234302e302f32312d3234203d3e20313331313433.roa File: 3137352e3138342e3234302e302f32312d3234203d3e20313331313433.roa (raw, json) Hash identifier: 0QQUBFrsQpXXTYt4aIh8/MbRTgI4V9RhZAxoH9bVt18= Subject key identifier: 24:7C:2E:52:6C:8A:E9:4E:E5:C7:65:BE:15:E2:79:B3:F8:8C:75:F6 Certificate issuer: /CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Certificate serial: 50AF241CFD51AE9AEDAB66CC25E6291C84A65A15 Authority key identifier: 80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/3137352e3138342e3234302e302f32312d3234203d3e20313331313433.roa Signing time: Mon 11 May 2026 17:06:31 +0000 ROA not before: Mon 11 May 2026 17:01:31 +0000 ROA not after: Mon 10 May 2027 17:06:31 +0000 asID: 131143 IP address blocks: 175.184.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:af:24:1c:fd:51:ae:9a:ed:ab:66:cc:25:e6:29:1c:84:a6:5a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D Validity Not Before: May 11 17:01:31 2026 GMT Not After : May 10 17:06:31 2027 GMT Subject: CN=247C2E526C8AE94EE5C765BE15E279B3F88C75F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3e:f3:62:91:d7:8f:68:a1:30:56:7b:e9:9f: 86:ab:fe:26:82:b7:c8:fb:be:25:64:18:4f:f3:c0: ff:bd:e0:c8:eb:18:30:85:a3:d3:e9:a6:93:34:a4: 9c:26:f2:c1:12:47:b8:d1:de:57:43:8e:43:5e:f8: 51:78:f0:56:12:79:34:46:31:1d:b2:3d:53:39:47: f3:06:72:8c:ae:6e:ef:42:61:88:20:65:db:79:a2: 28:eb:36:8c:c8:7c:d3:9a:bf:de:c2:98:3e:9b:72: 5d:17:df:ef:c5:bb:f0:f2:a3:36:d4:83:73:a8:16: 6c:06:5c:c4:b0:82:d5:2f:87:d1:ec:55:43:4d:99: c1:66:ab:22:7c:69:4f:36:9d:e7:36:40:22:18:15: 99:eb:44:53:99:14:75:33:78:9a:f3:bf:25:b7:12: 3d:30:8f:30:b6:43:16:bb:00:a9:42:96:8e:84:50: 6b:eb:60:e3:36:fb:22:9e:a7:2c:f9:ea:e8:ab:19: d5:d3:59:93:54:15:89:83:d8:95:0b:3e:ba:04:b2: 19:83:de:0b:b8:24:3a:5a:37:e6:47:8c:f7:5e:37: b0:08:55:86:d7:f2:48:e3:31:75:ee:20:65:05:a3: 44:3f:0e:a3:12:5c:94:76:c9:57:f1:66:37:5d:65: 47:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7C:2E:52:6C:8A:E9:4E:E5:C7:65:BE:15:E2:79:B3:F8:8C:75:F6 X509v3 Authority Key Identifier: keyid:80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/3137352e3138342e3234302e302f32312d3234203d3e20313331313433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.184.240.0/21 Signature Algorithm: sha256WithRSAEncryption 7e:55:c2:08:b6:ae:36:1f:fd:d7:05:44:08:22:d7:60:85:82: 1c:fe:46:b0:df:31:e2:98:de:84:97:8d:81:03:76:55:a8:61: da:e5:49:d9:35:67:ba:51:1c:28:3f:a5:a0:fb:29:68:36:d2: c3:4c:c9:a8:fb:94:72:ed:0c:1f:db:b6:5d:b1:58:80:56:26: da:b6:f6:e5:1d:42:7b:c6:25:23:c9:dd:3d:c7:b7:54:0c:65: 2e:4b:65:96:3e:49:b5:c0:d8:dc:86:5e:72:b5:4d:62:b0:18: 61:7f:ac:71:0f:60:5a:79:93:fd:8f:dd:d6:dd:e0:a2:50:68: 0a:3e:38:d4:09:ee:f3:75:ea:59:c4:60:65:a3:3a:75:7e:d5: 8f:59:c5:fa:99:c5:d0:f2:63:ad:20:0d:d6:ec:9f:12:bd:92: 62:d9:f1:08:85:fe:71:0d:82:14:7a:31:19:9b:c1:03:43:ea: 45:55:f4:a2:76:45:a1:86:34:56:08:6f:be:f3:b4:84:2a:3e: 6b:ae:5b:d4:78:25:e3:6a:0c:b2:bb:78:30:66:d7:57:89:65: b1:dc:04:ec:7d:fc:5e:7e:15:22:bb:fd:7b:ee:d9:d9:f7:1c: c9:ad:bc:97:6c:c6:6c:fd:31:b9:bd:7d:3d:d9:c9:39:1d:c6: df:a4:83:29 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUUK8kHP1Rrprtq2bMJeYpHISmWhUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1RUEzMTRDQzlB ODY3N0YyRDAeFw0yNjA1MTExNzAxMzFaFw0yNzA1MTAxNzA2MzFaMDMxMTAvBgNV BAMTKDI0N0MyRTUyNkM4QUU5NEVFNUM3NjVCRTE1RTI3OUIzRjg4Qzc1RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVPvNikdePaKEwVnvpn4ar/iaC t8j7viVkGE/zwP+94MjrGDCFo9PpppM0pJwm8sESR7jR3ldDjkNe+FF48FYSeTRG MR2yPVM5R/MGcoyubu9CYYggZdt5oijrNozIfNOav97CmD6bcl0X3+/Fu/DyozbU g3OoFmwGXMSwgtUvh9HsVUNNmcFmqyJ8aU82nec2QCIYFZnrRFOZFHUzeJrzvyW3 Ej0wjzC2Qxa7AKlClo6EUGvrYOM2+yKepyz56uirGdXTWZNUFYmD2JULProEshmD 3gu4JDpaN+ZHjPdeN7AIVYbX8kjjMXXuIGUFo0Q/DqMSXJR2yVfxZjddZUenAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUJHwuUmyK6U7lx2W+FeJ5s/iMdfYwHwYDVR0j BBgwFoAUgJnfwM/IPF3f2Qyl6jFMyahnfy0wDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFU UlVTVC8wLzgwOTlERkMwQ0ZDODNDNURERkQ5MENBNUVBMzE0Q0M5QTg2NzdGMkQu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvODA5OURGQzBDRkM4M0M1RERGRDkwQ0E1 RUEzMTRDQzlBODY3N0YyRC5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcw C4ZocnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElOQVRSVVNULzAvMzEz NzM1MmUzMTM4MzQyZTMyMzQzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzMz MTMxMzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB BwEB/wQQMA4wDAQCAAEwBgMEA6+48DANBgkqhkiG9w0BAQsFAAOCAQEAflXCCLau Nh/91wVECCLXYIWCHP5GsN8x4pjehJeNgQN2Vahh2uVJ2TVnulEcKD+loPspaDbS w0zJqPuUcu0MH9u2XbFYgFYm2rb25R1Ce8YlI8ndPce3VAxlLktllj5JtcDY3IZe crVNYrAYYX+scQ9gWnmT/Y/d1t3golBoCj441Anu83XqWcRgZaM6dX7Vj1nF+pnF 0PJjrSAN1uyfEr2SYtnxCIX+cQ2CFHoxGZvBA0PqRVX0onZFoYY0VghvvvO0hCo+ a65b1Hgl42oMsrt4MGbXV4llsdwE7H38Xn4VIrv9e+7Z2fccya28l2zGbP0xub19 PdnJOR3G36SDKQ== -----END CERTIFICATE-----Generated at Wed May 13 21:49:44 2026 by rpki-client