$ rpki-client -vvf rpkica.twnic.tw/rpki/CPSYS/0/3130332e31342e3137302e302f32332d3234203d3e20313532313739.roa File: 3130332e31342e3137302e302f32332d3234203d3e20313532313739.roa (raw, json) Hash identifier: 0yV6274hzedLbyBXIX24PIgFkE/qG4nC2HGR5DvDDRk= Subject key identifier: AA:0A:C0:4F:A5:AB:0D:F6:98:7A:E8:0A:2A:0F:6B:B7:50:95:60:7D Certificate issuer: /CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Certificate serial: 442EF0B55943E6FC94516580F383AF2C4D49BA58 Authority key identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CPSYS/0/3130332e31342e3137302e302f32332d3234203d3e20313532313739.roa Signing time: Mon 11 May 2026 17:33:12 +0000 ROA not before: Mon 11 May 2026 17:28:12 +0000 ROA not after: Mon 10 May 2027 17:33:12 +0000 asID: 152179 IP address blocks: 103.14.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:2e:f0:b5:59:43:e6:fc:94:51:65:80:f3:83:af:2c:4d:49:ba:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Validity Not Before: May 11 17:28:12 2026 GMT Not After : May 10 17:33:12 2027 GMT Subject: CN=AA0AC04FA5AB0DF6987AE80A2A0F6BB75095607D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:e0:70:8b:33:52:e4:f2:51:b2:de:6e:39: 81:a4:e5:06:bc:72:ac:91:e5:4a:e9:2c:57:89:a4: 47:d7:6c:66:73:c3:0c:bf:c6:6c:f6:3e:ef:26:c9: 37:95:d0:d3:a2:f4:d5:97:e5:ea:10:1c:b8:4e:14: 6e:c6:57:e1:af:aa:68:58:96:2d:6a:7b:5b:de:a5: a2:f9:43:3f:3d:23:64:4f:f6:75:1b:19:9f:03:9f: 38:d3:55:63:4a:3f:5a:d0:84:44:97:d5:a5:f4:e2: a5:cd:54:a2:ee:5f:a4:1b:c7:49:1a:e9:4b:ee:4d: 7a:6c:1b:be:fe:9d:84:cb:eb:8b:93:dc:ae:2e:5b: c0:f8:bf:0b:a8:7d:6c:b2:4d:bb:d5:af:61:0e:43: 18:89:e7:34:fa:58:1b:5f:de:e3:bd:ff:8b:e3:c6: d4:4d:0d:cc:15:c4:05:56:8a:cc:5b:9c:8e:95:f4: d4:89:c5:d1:be:2c:19:3d:76:f9:b9:3b:13:64:17: 97:86:d9:9a:3d:fd:ad:b0:fa:d1:58:c1:63:65:28: d6:1f:a6:46:15:49:ff:78:4c:36:af:81:cf:d2:6a: 59:fd:10:f6:bb:77:8a:45:ba:45:76:75:d1:c0:98: 04:f5:4d:5b:e7:e7:35:d7:53:9a:58:83:94:a8:95: 71:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0A:C0:4F:A5:AB:0D:F6:98:7A:E8:0A:2A:0F:6B:B7:50:95:60:7D X509v3 Authority Key Identifier: keyid:4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/3130332e31342e3137302e302f32332d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.14.170.0/23 Signature Algorithm: sha256WithRSAEncryption 66:aa:f2:79:80:3a:db:fc:89:75:84:08:87:bc:31:bf:09:6a: 90:db:51:31:f0:16:6a:df:58:2b:a5:42:65:30:d5:17:fb:0b: 71:5c:6a:c7:89:06:52:c4:8e:59:d5:c3:02:29:09:f6:5e:fe: 9c:0b:48:71:02:d4:ac:f6:52:20:1c:b6:25:e4:d4:30:77:4e: ac:8f:ef:55:da:a4:06:74:35:6c:a2:3a:27:75:d8:49:28:7d: 38:61:80:98:7b:ab:72:a4:98:12:a6:b9:86:79:fe:1a:8b:93: 2f:6a:70:b4:4f:bd:ba:cd:11:0e:17:4e:ed:7f:6a:0f:a9:dc: 79:68:e4:7e:79:bc:6a:96:3d:ec:eb:e5:88:e5:0e:35:71:43: bb:a8:05:31:53:fe:a3:3b:8d:7c:63:eb:63:26:29:62:1b:73: db:53:4c:45:6b:b5:ea:03:40:2a:9e:cf:5e:9a:d2:8c:d0:d9: 72:47:d6:b3:3b:00:2c:11:7c:dd:18:1f:82:91:91:76:24:96: e8:89:2c:b7:fe:c2:c4:ab:db:93:f1:e1:ea:68:31:6b:fc:34: f1:08:38:55:4a:93:56:25:f9:f5:3c:d4:f1:b2:82:de:3c:8b: 4d:ad:2b:b4:23:38:2f:1c:dc:60:dc:ce:80:86:87:5a:7f:72: f3:c6:e3:2a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIURC7wtVlD5vyUUWWA84OvLE1JulgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCM0FCQjFCNEEwMjRBNzAxMjIzQ0Q3MTU5MTFEOTk2 NzA2RTNBQTAeFw0yNjA1MTExNzI4MTJaFw0yNzA1MTAxNzMzMTJaMDMxMTAvBgNV BAMTKEFBMEFDMDRGQTVBQjBERjY5ODdBRTgwQTJBMEY2QkI3NTA5NTYwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPr+BwizNS5PJRst5uOYGk5Qa8 cqyR5UrpLFeJpEfXbGZzwwy/xmz2Pu8myTeV0NOi9NWX5eoQHLhOFG7GV+GvqmhY li1qe1vepaL5Qz89I2RP9nUbGZ8DnzjTVWNKP1rQhESX1aX04qXNVKLuX6Qbx0ka 6UvuTXpsG77+nYTL64uT3K4uW8D4vwuofWyyTbvVr2EOQxiJ5zT6WBtf3uO9/4vj xtRNDcwVxAVWisxbnI6V9NSJxdG+LBk9dvm5OxNkF5eG2Zo9/a2w+tFYwWNlKNYf pkYVSf94TDavgc/Saln9EPa7d4pFukV2ddHAmAT1TVvn5zXXU5pYg5SolXHHAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUqgrAT6WrDfaYeugKKg9rt1CVYH0wHwYDVR0j BBgwFoAUTLOrsbSgJKcBIjzXFZEdmWcG46owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1BTWVMv MC80Q0IzQUJCMUI0QTAyNEE3MDEyMjNDRDcxNTkxMUQ5OTY3MDZFM0FBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzRDQjNBQkIxQjRBMDI0QTcwMTIyM0NENzE1OTEx RDk5NjcwNkUzQUEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DUFNZUy8wLzMxMzAzMzJlMzEzNDJl MzEzNzMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzNTMyMzEzNzM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZw6qMA0GCSqGSIb3DQEBCwUAA4IBAQBmqvJ5gDrb/Il1hAiHvDG/CWqQ 21Ex8BZq31grpUJlMNUX+wtxXGrHiQZSxI5Z1cMCKQn2Xv6cC0hxAtSs9lIgHLYl 5NQwd06sj+9V2qQGdDVsojonddhJKH04YYCYe6typJgSprmGef4ai5MvanC0T726 zREOF07tf2oPqdx5aOR+ebxqlj3s6+WI5Q41cUO7qAUxU/6jO418Y+tjJiliG3Pb U0xFa7XqA0Aqns9emtKM0NlyR9azOwAsEXzdGB+CkZF2JJboiSy3/sLEq9uT8eHq aDFr/DTxCDhVSpNWJfn1PNTxsoLePItNrSu0IzgvHNxg3M6Ahodaf3LzxuMq -----END CERTIFICATE-----Generated at Wed May 13 21:08:56 2026 by rpki-client