$ rpki-client -vvf rpkica.twnic.tw/rpki/CLARK/0/323430303a663432303a3a2f33322d3634203d3e203633393130.roa File: 323430303a663432303a3a2f33322d3634203d3e203633393130.roa (raw, json) Hash identifier: nHJZCc2ObG/YAr0XIyCnCXOkUDdTdP47YAnSTHpOSa4= Subject key identifier: 8D:79:AE:43:CB:E0:BA:0B:C2:BA:ED:8D:B6:C2:02:A7:78:C9:6E:DE Certificate issuer: /CN=9B5DA40B0F23621450755917A456431F689EB049 Certificate serial: 761D4EC15604BE9B64DAADABBAD0498D41214EA4 Authority key identifier: 9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CLARK/0/323430303a663432303a3a2f33322d3634203d3e203633393130.roa Signing time: Mon 11 May 2026 17:31:15 +0000 ROA not before: Mon 11 May 2026 17:26:15 +0000 ROA not after: Mon 10 May 2027 17:31:15 +0000 asID: 63910 IP address blocks: 2400:f420::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.crl rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 13:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1d:4e:c1:56:04:be:9b:64:da:ad:ab:ba:d0:49:8d:41:21:4e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B5DA40B0F23621450755917A456431F689EB049 Validity Not Before: May 11 17:26:15 2026 GMT Not After : May 10 17:31:15 2027 GMT Subject: CN=8D79AE43CBE0BA0BC2BAED8DB6C202A778C96EDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:27:09:b1:cf:51:bf:8c:fb:3b:3c:ea:14: 69:97:67:2f:5f:98:6a:dc:8d:a6:f7:b7:30:f4:99: 26:09:da:e9:6e:b8:c3:36:7e:e0:72:05:ff:61:e9: 94:b5:d7:51:c0:ed:5c:52:03:26:91:10:c9:69:d2: 73:34:fc:ba:e1:5d:f8:6f:10:67:34:d9:6b:f1:4c: 92:93:5e:0e:f7:9b:44:e8:75:4d:e7:ce:ef:09:9e: 52:65:59:e3:92:95:15:a3:64:63:74:cd:8b:b4:ef: 17:ff:ac:91:88:0d:aa:8b:2d:94:ba:cd:63:dd:bb: 1a:59:34:d5:2d:ad:5d:06:37:72:4a:5b:6b:d4:e7: 65:fe:b1:d7:4e:a9:f6:05:55:94:1d:52:c9:93:36: ca:83:23:86:8d:27:14:57:47:e8:35:a9:e9:6b:7f: 0f:20:ce:fb:a7:2e:4e:1c:c5:0c:fa:32:32:43:e0: 95:7e:43:fd:47:4d:6e:8c:ba:d5:04:3b:db:a5:06: 6a:7f:eb:1d:a0:28:17:cb:39:fb:10:43:eb:8c:b4: bf:a5:29:88:fe:85:28:13:f5:62:07:89:f0:02:bd: a9:79:36:04:d4:53:80:be:4a:d6:d9:19:80:c6:1d: d8:a3:38:0f:89:9f:b2:2f:fd:2e:36:96:33:91:a4: c5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:79:AE:43:CB:E0:BA:0B:C2:BA:ED:8D:B6:C2:02:A7:78:C9:6E:DE X509v3 Authority Key Identifier: keyid:9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/323430303a663432303a3a2f33322d3634203d3e203633393130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:f420::/32 Signature Algorithm: sha256WithRSAEncryption 67:26:9e:18:36:2c:19:44:26:d5:fd:6b:c5:7f:95:6e:da:6e: 8e:43:38:69:dd:35:bc:1f:a4:ea:f0:c2:79:29:b5:1d:b5:eb: a9:f4:ec:a6:6f:35:a1:a2:d3:cd:90:07:af:60:b5:1e:fd:d9: 67:0a:13:69:40:d3:39:cf:6c:d9:65:ce:64:06:f6:d4:32:99: 08:b3:19:92:2e:13:d8:5f:74:f8:b3:96:d8:aa:7b:39:ba:18: b1:6a:a6:d4:ff:dd:91:81:a9:e0:ef:17:b5:95:0e:5a:8f:b6: 50:5c:23:53:4b:5a:f9:f4:e9:41:15:ed:22:de:14:ef:75:88: de:e6:6b:9e:ac:fc:78:d5:7d:19:7b:e8:98:d8:5d:e3:e2:ac: 97:2a:b5:0c:b3:fc:7f:65:e0:bd:ad:64:5c:04:84:04:a1:38: 09:10:16:e6:ef:c6:86:66:a5:d9:f8:eb:b4:dc:71:f5:30:2e: 87:7f:df:6f:4c:c4:b4:07:bb:00:5b:8f:0d:eb:3d:b8:fd:38: 17:80:a3:1e:b1:b7:3a:75:99:0a:b7:da:b4:f5:1a:7c:78:4f: 54:48:d4:41:a2:c3:37:24:8e:07:13:92:e1:4b:4a:29:7b:8d: e5:be:fd:c0:e8:e6:24:9c:ca:6e:96:7d:e5:a5:74:6f:a9:b8: 11:b7:07:91 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIUdh1OwVYEvptk2q2rutBJjUEhTqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI1REE0MEIwRjIzNjIxNDUwNzU1OTE3QTQ1NjQzMUY2 ODlFQjA0OTAeFw0yNjA1MTExNzI2MTVaFw0yNzA1MTAxNzMxMTVaMDMxMTAvBgNV BAMTKDhENzlBRTQzQ0JFMEJBMEJDMkJBRUQ4REI2QzIwMkE3NzhDOTZFREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGXScJsc9Rv4z7OzzqFGmXZy9f mGrcjab3tzD0mSYJ2uluuMM2fuByBf9h6ZS111HA7VxSAyaREMlp0nM0/LrhXfhv EGc02WvxTJKTXg73m0TodU3nzu8JnlJlWeOSlRWjZGN0zYu07xf/rJGIDaqLLZS6 zWPduxpZNNUtrV0GN3JKW2vU52X+sddOqfYFVZQdUsmTNsqDI4aNJxRXR+g1qelr fw8gzvunLk4cxQz6MjJD4JV+Q/1HTW6MutUEO9ulBmp/6x2gKBfLOfsQQ+uMtL+l KYj+hSgT9WIHifACval5NgTUU4C+StbZGYDGHdijOA+Jn7Iv/S42ljORpMWVAgMB AAGjggHgMIIB3DAdBgNVHQ4EFgQUjXmuQ8vgugvCuu2NtsICp3jJbt4wHwYDVR0j BBgwFoAUm12kCw8jYhRQdVkXpFZDH2iesEkwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0xBUksv MC85QjVEQTQwQjBGMjM2MjE0NTA3NTU5MTdBNDU2NDMxRjY4OUVCMDQ5LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzlCNURBNDBCMEYyMzYyMTQ1MDc1NTkxN0E0NTY0 MzFGNjg5RUIwNDkuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DTEFSSy8wLzMyMzQzMDMwM2E2NjM0 MzIzMDNhM2EyZjMzMzIyZDM2MzQyMDNkM2UyMDM2MzMzOTMxMzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAPQgMA0GCSqGSIb3DQEBCwUAA4IBAQBnJp4YNiwZRCbV/WvFf5Vu2m6OQzhp 3TW8H6Tq8MJ5KbUdteup9OymbzWhotPNkAevYLUe/dlnChNpQNM5z2zZZc5kBvbU MpkIsxmSLhPYX3T4s5bYqns5uhixaqbU/92Rgang7xe1lQ5aj7ZQXCNTS1r59OlB Fe0i3hTvdYje5muerPx41X0Ze+iY2F3j4qyXKrUMs/x/ZeC9rWRcBIQEoTgJEBbm 78aGZqXZ+Ou03HH1MC6Hf99vTMS0B7sAW48N6z24/TgXgKMesbc6dZkKt9q09Rp8 eE9USNRBosM3JI4HE5LhS0ope43lvv3A6OYknMpuln3lpXRvqbgRtweR -----END CERTIFICATE-----Generated at Wed May 13 21:09:18 2026 by rpki-client