$ rpki-client -vvf rpkica.twnic.tw/rpki/DCT/0/3131342e32392e3234342e302f32322d3234203d3e20313331363031.roa File: 3131342e32392e3234342e302f32322d3234203d3e20313331363031.roa (raw, json) Hash identifier: UEZLGnP+f6dvuTFKx5co3CN+bp25mFinjEy0MFxQtNo= Subject key identifier: 4C:F1:EB:AD:14:EA:FD:BA:1E:BF:87:BC:67:22:3C:27:E0:35:E1:F3 Certificate issuer: /CN=39FBFF134ABD193CAEA4AAB003503031F998187D Certificate serial: 57871A6C5EC9FAB4197862F6BBD8818EDE1AEA2F Authority key identifier: 39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DCT/0/3131342e32392e3234342e302f32322d3234203d3e20313331363031.roa Signing time: Mon 11 May 2026 17:18:40 +0000 ROA not before: Mon 11 May 2026 17:13:40 +0000 ROA not after: Mon 10 May 2027 17:18:40 +0000 asID: 131601 IP address blocks: 114.29.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:87:1a:6c:5e:c9:fa:b4:19:78:62:f6:bb:d8:81:8e:de:1a:ea:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39FBFF134ABD193CAEA4AAB003503031F998187D Validity Not Before: May 11 17:13:40 2026 GMT Not After : May 10 17:18:40 2027 GMT Subject: CN=4CF1EBAD14EAFDBA1EBF87BC67223C27E035E1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:42:b8:e2:65:62:96:f7:48:3a:31:42:e1:08: f3:77:fb:bc:23:a3:46:ef:f0:e4:71:d2:40:c9:50: 4d:3e:33:48:ee:e8:aa:a1:94:ac:77:73:b2:71:b8: 3b:3b:9e:20:c3:d8:cc:92:49:88:0e:8e:f3:2d:e0: b3:7f:50:bf:77:74:ff:da:b7:ae:f8:9b:cd:b4:16: 19:ac:fd:f9:0c:58:0a:51:29:29:36:1c:a2:c6:87: f7:f8:c1:4a:7e:58:94:70:5b:5b:ae:4f:5d:f6:e2: bb:28:b8:94:77:b4:e7:81:2c:4f:07:e9:5c:0b:04: 81:08:e8:45:55:2c:50:3c:5e:21:6b:1c:95:23:2e: e1:2c:bd:77:61:84:dc:31:6c:44:b1:6f:db:f2:9e: 1b:58:cd:92:95:84:b9:0e:a1:e9:85:7d:04:fd:a1: a7:e7:31:78:24:76:68:c8:6e:e4:d1:e6:b1:ab:eb: 3c:4e:f6:3d:02:73:99:32:c1:b3:13:dc:34:78:54: 35:b9:1f:be:bb:82:8d:be:82:80:0b:c7:63:ca:d7: 91:86:35:a8:94:4a:0f:de:a6:df:a1:d5:68:1c:0c: ee:43:b3:c2:37:2c:a6:66:57:db:4b:72:e9:60:f6: 73:1c:da:a3:a1:f6:8b:3d:eb:05:5c:73:96:11:f0: ab:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F1:EB:AD:14:EA:FD:BA:1E:BF:87:BC:67:22:3C:27:E0:35:E1:F3 X509v3 Authority Key Identifier: keyid:39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCT/0/3131342e32392e3234342e302f32322d3234203d3e20313331363031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.29.244.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:b9:dd:93:d7:3b:24:3f:6f:5e:4a:e1:bf:80:64:f5:9e:25: c3:08:c5:7b:3f:b8:81:89:95:07:0f:f1:a4:47:f1:f9:8b:8c: 3c:89:ef:ee:0b:9e:a5:c7:e0:d2:24:8d:f0:35:84:08:2e:61: 9f:d3:02:a5:f2:5b:b2:f9:eb:04:d2:f0:f3:65:aa:03:db:7e: 01:12:65:4a:29:c7:68:2d:26:d3:fc:98:db:a9:0d:20:9e:47: e6:7a:4a:5d:0d:38:5b:5c:c8:1c:7d:53:1c:a3:59:82:b4:0c: 76:ea:1f:60:40:37:b4:04:3b:8f:fd:67:a8:dd:3c:e2:61:86: 3a:d5:0e:62:f5:19:13:ff:0d:2b:63:f2:01:0a:59:8e:fa:6c: 95:ba:43:e9:6f:00:ec:11:12:21:da:6c:84:fe:aa:27:8b:d8: 95:03:7b:bc:98:e1:e6:f7:16:0b:c4:c7:89:02:0e:31:ca:0b: 7e:43:da:ee:ef:93:77:1a:80:1b:d9:92:41:12:b0:19:92:18: 2a:13:aa:ec:9c:bc:28:f6:79:39:2a:37:da:fd:e1:25:54:5b: 28:ab:7f:1a:d0:86:7d:c9:0b:8f:f0:62:44:4b:95:a2:b0:f0: 4f:c2:a6:6a:de:87:d8:5b:ff:38:b3:db:b2:56:54:b7:98:ed: 33:ef:b1:f5 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUV4cabF7J+rQZeGL2u9iBjt4a6i8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlGQkZGMTM0QUJEMTkzQ0FFQTRBQUIwMDM1MDMwMzFG OTk4MTg3RDAeFw0yNjA1MTExNzEzNDBaFw0yNzA1MTAxNzE4NDBaMDMxMTAvBgNV BAMTKDRDRjFFQkFEMTRFQUZEQkExRUJGODdCQzY3MjIzQzI3RTAzNUUxRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQrjiZWKW90g6MULhCPN3+7wj o0bv8ORx0kDJUE0+M0ju6KqhlKx3c7JxuDs7niDD2MySSYgOjvMt4LN/UL93dP/a t674m820Fhms/fkMWApRKSk2HKLGh/f4wUp+WJRwW1uuT1324rsouJR3tOeBLE8H 6VwLBIEI6EVVLFA8XiFrHJUjLuEsvXdhhNwxbESxb9vynhtYzZKVhLkOoemFfQT9 oafnMXgkdmjIbuTR5rGr6zxO9j0Cc5kywbMT3DR4VDW5H767go2+goALx2PK15GG NaiUSg/ept+h1WgcDO5Ds8I3LKZmV9tLculg9nMc2qOh9os96wVcc5YR8Ks7AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUTPHrrRTq/boev4e8ZyI8J+A14fMwHwYDVR0j BBgwFoAUOfv/E0q9GTyupKqwA1AwMfmYGH0wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENULzAv MzlGQkZGMTM0QUJEMTkzQ0FFQTRBQUIwMDM1MDMwMzFGOTk4MTg3RC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zOUZCRkYxMzRBQkQxOTNDQUVBNEFBQjAwMzUwMzAz MUY5OTgxODdELmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENULzAvMzEzMTM0MmUzMjM5MmUzMjM0 MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTMzMzEzNjMwMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJyHfQwDQYJKoZIhvcNAQELBQADggEBAF653ZPXOyQ/b15K4b+AZPWeJcMIxXs/ uIGJlQcP8aRH8fmLjDyJ7+4LnqXH4NIkjfA1hAguYZ/TAqXyW7L56wTS8PNlqgPb fgESZUopx2gtJtP8mNupDSCeR+Z6Sl0NOFtcyBx9UxyjWYK0DHbqH2BAN7QEO4/9 Z6jdPOJhhjrVDmL1GRP/DStj8gEKWY76bJW6Q+lvAOwREiHabIT+qieL2JUDe7yY 4eb3FgvEx4kCDjHKC35D2u7vk3cagBvZkkESsBmSGCoTquycvCj2eTkqN9r94SVU WyirfxrQhn3JC4/wYkRLlaKw8E/Cpmreh9hb/ziz27JWVLeY7TPvsfU= -----END CERTIFICATE-----Generated at Wed May 13 21:49:30 2026 by rpki-client