$ rpki-client -vvf rpkica.twnic.tw/rpki/CPSYS/0/3130332e31342e3137302e302f32332d3234203d3e203338303432.roa File: 3130332e31342e3137302e302f32332d3234203d3e203338303432.roa (raw, json) Hash identifier: 5mtwz/x5xstPzEWwV0mjjdNtyAKuFHozbJj1pgp59P4= Subject key identifier: DA:F8:59:6F:4B:50:7F:15:CD:4F:50:1C:C9:55:20:41:71:42:5E:3C Certificate issuer: /CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Certificate serial: 6D65B56341BB51BD5989F39F016DE234AAF2BF60 Authority key identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CPSYS/0/3130332e31342e3137302e302f32332d3234203d3e203338303432.roa Signing time: Mon 11 May 2026 17:20:13 +0000 ROA not before: Mon 11 May 2026 17:15:13 +0000 ROA not after: Mon 10 May 2027 17:20:13 +0000 asID: 38042 IP address blocks: 103.14.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:65:b5:63:41:bb:51:bd:59:89:f3:9f:01:6d:e2:34:aa:f2:bf:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Validity Not Before: May 11 17:15:13 2026 GMT Not After : May 10 17:20:13 2027 GMT Subject: CN=DAF8596F4B507F15CD4F501CC955204171425E3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:af:01:52:0a:51:b5:b1:bf:19:cc:ba:78: 8b:40:ea:3f:58:a5:0a:94:d9:8f:91:b0:58:1e:f2: 23:03:81:da:07:ff:f8:70:0d:db:a0:4b:32:85:54: 52:f9:f9:f4:35:19:f6:97:7c:a5:75:86:f6:7a:94: d7:b3:8b:b6:9a:9c:c5:9e:eb:2e:8a:64:3a:72:82: 28:1d:cd:98:0b:b5:00:98:dd:94:8f:37:37:6a:36: 59:d1:64:66:0c:d7:10:92:ac:24:5b:9d:39:e4:92: 9b:20:07:42:f9:81:6d:e0:69:15:e4:d4:fb:13:20: 49:98:c1:d7:d1:8d:4a:42:eb:5c:fe:1f:6f:0d:e4: 61:e7:86:4b:aa:78:51:50:18:71:c1:76:dd:24:72: c5:e8:f9:39:f7:1a:92:7f:f2:36:0c:7f:87:52:d4: 14:0d:af:96:ca:07:1a:f1:44:69:2c:02:24:c0:46: af:cc:6b:46:58:80:0d:1a:5b:6b:bb:d5:17:d6:0c: 1d:b0:ae:f9:ad:6d:a5:26:01:59:30:41:c4:39:57: 24:bc:af:ff:ff:1f:7b:2e:16:02:05:f5:3a:49:fa: f7:e7:4b:eb:f9:8f:e9:81:7c:e2:23:72:13:69:fb: 23:3d:90:0f:0b:c3:f0:8a:66:17:de:d0:30:9b:d1: ff:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F8:59:6F:4B:50:7F:15:CD:4F:50:1C:C9:55:20:41:71:42:5E:3C X509v3 Authority Key Identifier: keyid:4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/3130332e31342e3137302e302f32332d3234203d3e203338303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.14.170.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:1c:e3:62:6c:55:cc:2d:9b:98:31:b1:21:9d:8a:9b:84:ef: d0:23:41:e7:ee:e5:6b:43:f9:10:19:55:1f:ce:6e:b1:dc:4d: c7:8c:5c:7a:f3:96:f3:fb:2c:b6:49:43:31:f6:77:ba:d8:40: 1f:30:17:9f:80:dc:b8:c2:fc:f8:3b:68:69:de:e6:5f:b4:45: 8a:44:91:ec:a2:d0:27:41:ab:4c:25:0d:03:18:0c:25:78:24: 0a:0c:db:41:6c:49:fc:f1:d4:0b:0c:72:b5:e3:07:98:57:db: 01:44:cf:f5:43:81:55:cf:c6:ad:bc:b6:6a:7e:51:a4:d5:a9: 33:97:0c:bc:f8:d8:d8:b2:9a:d3:59:dc:76:d2:d4:59:a7:cd: 1f:e3:5d:03:ba:3e:91:22:8a:61:d2:bc:58:ae:89:6b:31:07: b2:a1:78:46:45:42:e8:fb:e1:8d:bc:8b:ad:e5:08:f6:48:ca: 6a:97:70:4a:76:2b:22:ea:0f:07:fe:4e:02:12:66:65:47:6c: 65:37:2f:ed:ae:65:51:f5:32:9a:94:90:86:b2:11:29:fe:41: 01:06:27:70:fc:98:7c:6c:c7:6d:d5:d7:be:70:1a:8f:b8:ee: 96:0c:16:ba:95:2e:a1:99:57:4d:6a:98:c2:b0:90:79:76:ca: f8:26:38:dc -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUbWW1Y0G7Ub1ZifOfAW3iNKryv2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCM0FCQjFCNEEwMjRBNzAxMjIzQ0Q3MTU5MTFEOTk2 NzA2RTNBQTAeFw0yNjA1MTExNzE1MTNaFw0yNzA1MTAxNzIwMTNaMDMxMTAvBgNV BAMTKERBRjg1OTZGNEI1MDdGMTVDRDRGNTAxQ0M5NTUyMDQxNzE0MjVFM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09a8BUgpRtbG/Gcy6eItA6j9Y pQqU2Y+RsFge8iMDgdoH//hwDdugSzKFVFL5+fQ1GfaXfKV1hvZ6lNezi7aanMWe 6y6KZDpygigdzZgLtQCY3ZSPNzdqNlnRZGYM1xCSrCRbnTnkkpsgB0L5gW3gaRXk 1PsTIEmYwdfRjUpC61z+H28N5GHnhkuqeFFQGHHBdt0kcsXo+Tn3GpJ/8jYMf4dS 1BQNr5bKBxrxRGksAiTARq/Ma0ZYgA0aW2u71RfWDB2wrvmtbaUmAVkwQcQ5VyS8 r///H3suFgIF9TpJ+vfnS+v5j+mBfOIjchNp+yM9kA8Lw/CKZhfe0DCb0f9TAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQU2vhZb0tQfxXNT1AcyVUgQXFCXjwwHwYDVR0j BBgwFoAUTLOrsbSgJKcBIjzXFZEdmWcG46owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1BTWVMv MC80Q0IzQUJCMUI0QTAyNEE3MDEyMjNDRDcxNTkxMUQ5OTY3MDZFM0FBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzRDQjNBQkIxQjRBMDI0QTcwMTIyM0NENzE1OTEx RDk5NjcwNkUzQUEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DUFNZUy8wLzMxMzAzMzJlMzEzNDJl MzEzNzMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzMzODMwMzQzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWcOqjANBgkqhkiG9w0BAQsFAAOCAQEAKhzjYmxVzC2bmDGxIZ2Km4Tv0CNB 5+7la0P5EBlVH85usdxNx4xcevOW8/sstklDMfZ3uthAHzAXn4DcuML8+Dtoad7m X7RFikSR7KLQJ0GrTCUNAxgMJXgkCgzbQWxJ/PHUCwxyteMHmFfbAUTP9UOBVc/G rby2an5RpNWpM5cMvPjY2LKa01ncdtLUWafNH+NdA7o+kSKKYdK8WK6JazEHsqF4 RkVC6PvhjbyLreUI9kjKapdwSnYrIuoPB/5OAhJmZUdsZTcv7a5lUfUympSQhrIR Kf5BAQYncPyYfGzHbdXXvnAaj7julgwWupUuoZlXTWqYwrCQeXbK+CY43A== -----END CERTIFICATE-----Generated at Wed May 13 21:08:31 2026 by rpki-client