$ rpki-client -vvf rpkica.twnic.tw/rpki/DAFU/0/3231302e312e3233352e302f32342d3332203d3e20313334383233.roa File: 3231302e312e3233352e302f32342d3332203d3e20313334383233.roa (raw, json) Hash identifier: 1dxx2UnOoxxG5IvdlSa/CJUvxkuNs3hW+sxUCu3CP4M= Subject key identifier: 69:7F:70:9D:C8:4F:71:FD:34:4C:E8:C6:5E:3D:28:38:4E:C8:E3:BC Certificate issuer: /CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Certificate serial: 23B5418AE70AEB0E5834397570438B45F84A5437 Authority key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DAFU/0/3231302e312e3233352e302f32342d3332203d3e20313334383233.roa Signing time: Mon 11 May 2026 17:55:37 +0000 ROA not before: Mon 11 May 2026 17:50:37 +0000 ROA not after: Mon 10 May 2027 17:55:37 +0000 asID: 134823 IP address blocks: 210.1.235.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b5:41:8a:e7:0a:eb:0e:58:34:39:75:70:43:8b:45:f8:4a:54:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460 Validity Not Before: May 11 17:50:37 2026 GMT Not After : May 10 17:55:37 2027 GMT Subject: CN=697F709DC84F71FD344CE8C65E3D28384EC8E3BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:36:70:73:49:40:96:39:6a:c8:b7:11:09:ce: d3:ba:25:b9:b0:c0:ce:ac:9e:2d:8b:f4:62:ca:7e: 1e:1b:10:25:e2:23:c3:4f:36:aa:cf:6f:5e:5a:fa: 0f:48:94:d0:30:fe:2a:9f:48:92:bc:c5:96:b3:13: 4c:82:ef:3f:d7:10:b7:46:d7:87:df:de:b5:a8:da: 77:d3:2d:6c:cb:0c:1e:27:ae:1f:72:cf:15:82:52: c8:b3:81:2c:a6:3c:aa:fb:a8:39:83:63:fd:a6:af: 59:60:d2:41:08:fa:fd:af:ca:82:8c:83:a6:a6:2e: 7a:ae:36:8c:52:08:89:22:25:1d:13:d9:49:ea:23: 21:bf:96:1d:12:dc:c7:bd:19:fd:5c:04:93:f5:ed: e3:f4:b7:6b:19:f7:60:11:85:f7:7a:a1:06:0b:e0: 78:d4:13:75:0b:ad:18:a2:8f:bb:1a:af:f5:69:0b: 2d:2a:84:1c:e2:64:60:38:3b:13:f5:35:61:b2:a4: ac:e8:1c:74:99:ad:b5:5a:9a:f3:f5:03:c8:98:ff: 57:e2:f3:28:33:27:aa:14:e5:5f:c6:e9:d5:15:6d: c4:c4:f7:06:84:cd:12:8b:ec:9e:60:12:fe:21:4e: 9f:ec:5c:65:eb:47:23:ed:9a:44:e0:c9:10:b9:cf: e2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7F:70:9D:C8:4F:71:FD:34:4C:E8:C6:5E:3D:28:38:4E:C8:E3:BC X509v3 Authority Key Identifier: keyid:9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/3231302e312e3233352e302f32342d3332203d3e20313334383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.1.235.0/24 Signature Algorithm: sha256WithRSAEncryption 85:93:85:b5:04:85:d8:c3:26:b2:c2:e2:79:4b:12:67:7d:84: f4:53:85:59:e4:24:c3:35:66:ce:a4:0f:15:64:f9:70:da:6d: fa:98:de:88:a2:21:1f:10:98:60:9e:bd:f0:60:a6:57:e8:d4: 55:01:61:87:d2:55:04:16:7a:be:3b:5e:3e:74:92:9f:39:ed: 42:92:01:0a:62:7a:c8:71:f6:f8:2a:ec:24:4b:1e:fa:db:41: be:a5:3d:e2:5f:68:00:a5:60:1d:30:2c:97:ba:40:03:ee:cc: 37:43:fe:68:e0:02:57:81:5d:89:c9:9f:82:bc:c6:4a:fe:09: b8:a1:0a:5e:e2:8c:84:77:c2:90:c5:a2:d0:d5:8e:32:c2:bf: f3:91:d6:45:94:81:9a:61:7d:ac:ea:b5:ae:e3:df:6c:2a:7e: cc:a3:50:79:fd:85:4d:a1:18:4e:b2:8f:fa:7f:f9:33:8e:b8: c6:f5:93:a3:89:c3:6e:f5:05:ac:cd:51:ed:bf:b5:1f:f2:5f: 06:5f:5b:bb:8d:bf:15:75:d4:c7:56:89:04:62:a3:c5:87:8a: d9:ac:44:e6:0a:93:52:d6:57:31:66:35:4b:a8:5d:00:92:af: ba:55:56:d5:00:50:91:de:44:ab:bd:19:c7:b4:0b:72:25:27: 7f:6b:e8:d4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUI7VBiucK6w5YNDl1cEOLRfhKVDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZGOEE2 RkFEQTQ2MDAeFw0yNjA1MTExNzUwMzdaFw0yNzA1MTAxNzU1MzdaMDMxMTAvBgNV BAMTKDY5N0Y3MDlEQzg0RjcxRkQzNDRDRThDNjVFM0QyODM4NEVDOEUzQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpNnBzSUCWOWrItxEJztO6Jbmw wM6sni2L9GLKfh4bECXiI8NPNqrPb15a+g9IlNAw/iqfSJK8xZazE0yC7z/XELdG 14ff3rWo2nfTLWzLDB4nrh9yzxWCUsizgSymPKr7qDmDY/2mr1lg0kEI+v2vyoKM g6amLnquNoxSCIkiJR0T2UnqIyG/lh0S3Me9Gf1cBJP17eP0t2sZ92ARhfd6oQYL 4HjUE3ULrRiij7sar/VpCy0qhBziZGA4OxP1NWGypKzoHHSZrbVamvP1A8iY/1fi 8ygzJ6oU5V/G6dUVbcTE9waEzRKL7J5gEv4hTp/sXGXrRyPtmkTgyRC5z+InAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUaX9wnchPcf00TOjGXj0oOE7I47wwHwYDVR0j BBgwFoAUnQ9tU28FPDu1Iz5o4GNvim+tpGAwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREFGVS8w LzlEMEY2RDUzNkYwNTNDM0JCNTIzM0U2OEUwNjM2RjhBNkZBREE0NjAuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUQwRjZENTM2RjA1M0MzQkI1MjMzRTY4RTA2MzZG OEE2RkFEQTQ2MC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RBRlUvMC8zMjMxMzAyZTMxMmUzMjMz MzUyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTMzMzQzODMyMzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADSAeswDQYJKoZIhvcNAQELBQADggEBAIWThbUEhdjDJrLC4nlLEmd9hPRThVnk JMM1Zs6kDxVk+XDabfqY3oiiIR8QmGCevfBgplfo1FUBYYfSVQQWer47Xj50kp85 7UKSAQpieshx9vgq7CRLHvrbQb6lPeJfaAClYB0wLJe6QAPuzDdD/mjgAleBXYnJ n4K8xkr+CbihCl7ijIR3wpDFotDVjjLCv/OR1kWUgZphfazqta7j32wqfsyjUHn9 hU2hGE6yj/p/+TOOuMb1k6OJw271BazNUe2/tR/yXwZfW7uNvxV11MdWiQRio8WH itmsROYKk1LWVzFmNUuoXQCSr7pVVtUAUJHeRKu9Gce0C3IlJ39r6NQ= -----END CERTIFICATE-----Generated at Wed May 13 21:11:17 2026 by rpki-client