$ rpki-client -vvf rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3133352e31372e302f32342d3234203d3e20313331363632.roa File: 3130332e3133352e31372e302f32342d3234203d3e20313331363632.roa (raw, json) Hash identifier: p3/JFj7x3ARP4jNwPc+pLHDD3Q/+iNNDoVFuKzGU7/M= Subject key identifier: 6A:30:04:78:0D:4E:D5:79:FA:6D:00:0A:E4:D1:E3:AF:60:D4:1E:B7 Certificate issuer: /CN=059E0652FCBAC895061A57FE0566CF353F3E43CA Certificate serial: 0486B322EC398849EA79CBB4DA8868CD719E1767 Authority key identifier: 05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3133352e31372e302f32342d3234203d3e20313331363632.roa Signing time: Mon 11 May 2026 17:36:22 +0000 ROA not before: Mon 11 May 2026 17:31:22 +0000 ROA not after: Mon 10 May 2027 17:36:22 +0000 asID: 131662 IP address blocks: 103.135.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:86:b3:22:ec:39:88:49:ea:79:cb:b4:da:88:68:cd:71:9e:17:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=059E0652FCBAC895061A57FE0566CF353F3E43CA Validity Not Before: May 11 17:31:22 2026 GMT Not After : May 10 17:36:22 2027 GMT Subject: CN=6A3004780D4ED579FA6D000AE4D1E3AF60D41EB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:85:e8:79:bf:07:54:1e:43:6a:57:ba:2e:06: 7f:e6:c9:1c:17:94:88:e4:54:5a:37:e2:8d:c8:4e: 8c:a8:ae:ea:e5:1a:01:1d:41:df:a0:14:5b:84:68: 95:f1:9a:4b:0e:02:7c:18:37:78:73:bf:a9:46:d8: bc:f7:d5:04:5d:e6:ad:be:79:b5:2c:2e:42:67:8a: a7:38:a7:75:35:6a:6f:02:8a:2d:62:bf:81:90:ac: 82:e8:41:ef:6a:6b:7e:47:da:67:f3:ab:d3:e5:f8: 8b:4f:d0:74:69:d5:cf:bb:0b:60:ee:58:45:04:bc: 22:3f:d0:26:42:d0:1c:27:07:e6:f5:0f:42:49:24: 36:b4:93:aa:91:fe:42:cf:4a:22:98:8a:00:82:1c: 4c:23:39:f7:90:70:36:4e:45:65:d7:1a:38:f5:c3: 4a:36:e5:d6:e8:f3:f1:51:cd:ef:d8:0a:85:cc:fc: ba:18:f6:8d:ca:2f:e1:2e:75:e5:25:5b:58:b1:36: eb:e5:11:30:40:01:c6:9e:aa:01:8d:cc:d1:14:22: 59:76:e4:4c:a3:c5:5a:f8:29:9f:70:06:80:5d:7a: e2:22:68:2b:b0:a8:1a:ea:7c:2b:bd:5c:7e:8d:ed: 0c:0f:e2:41:5d:7f:c1:d9:43:0a:67:09:1c:60:81: c0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:30:04:78:0D:4E:D5:79:FA:6D:00:0A:E4:D1:E3:AF:60:D4:1E:B7 X509v3 Authority Key Identifier: keyid:05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3133352e31372e302f32342d3234203d3e20313331363632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.17.0/24 Signature Algorithm: sha256WithRSAEncryption 00:6b:d0:22:11:fa:27:79:d2:af:99:91:ff:08:ca:eb:83:f6: a0:31:a3:69:b7:ee:4b:b5:96:83:25:56:dc:78:70:4a:1c:a5: 89:60:fc:51:73:31:b8:c6:cf:b8:d4:82:c9:45:36:db:1b:14: 0f:78:31:14:ed:23:9e:cd:4e:8a:28:06:92:e2:a7:e4:11:c6: 51:f3:c6:1a:d0:85:1b:65:63:5f:d1:de:79:03:5f:ce:bc:54: 0f:04:d2:7d:ca:94:3c:25:70:b6:ea:17:b2:41:08:c1:eb:d3: 67:49:3a:97:8e:de:a6:31:49:32:59:08:d7:16:0c:92:65:19: 84:16:aa:ed:99:32:5b:f1:f4:88:01:bc:33:71:b9:5e:83:f1: 36:a5:18:91:bc:24:ab:27:39:17:35:65:87:13:e6:24:37:58: 48:e8:d5:b5:9c:22:87:e5:34:e3:b6:98:5a:e3:72:8a:be:e6: a2:9f:c8:8f:8e:83:29:b9:fe:69:50:59:ad:be:73:0b:e3:24: b9:1f:ec:7c:5a:0f:95:d5:81:86:12:70:bf:25:0e:67:c9:d2: 6b:6e:92:a6:d4:f6:95:39:18:55:6d:b3:a3:84:46:d4:9d:24: ec:7f:8d:63:4d:98:5e:ca:3a:03:50:63:53:26:c0:23:f8:27: d1:8b:73:68 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUBIazIuw5iEnqecu02ohozXGeF2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU5RTA2NTJGQ0JBQzg5NTA2MUE1N0ZFMDU2NkNGMzUz RjNFNDNDQTAeFw0yNjA1MTExNzMxMjJaFw0yNzA1MTAxNzM2MjJaMDMxMTAvBgNV BAMTKDZBMzAwNDc4MEQ0RUQ1NzlGQTZEMDAwQUU0RDFFM0FGNjBENDFFQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeheh5vwdUHkNqV7ouBn/myRwX lIjkVFo34o3IToyorurlGgEdQd+gFFuEaJXxmksOAnwYN3hzv6lG2Lz31QRd5q2+ ebUsLkJniqc4p3U1am8Cii1iv4GQrILoQe9qa35H2mfzq9Pl+ItP0HRp1c+7C2Du WEUEvCI/0CZC0BwnB+b1D0JJJDa0k6qR/kLPSiKYigCCHEwjOfeQcDZORWXXGjj1 w0o25dbo8/FRze/YCoXM/LoY9o3KL+EudeUlW1ixNuvlETBAAcaeqgGNzNEUIll2 5EyjxVr4KZ9wBoBdeuIiaCuwqBrqfCu9XH6N7QwP4kFdf8HZQwpnCRxggcA/AgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUajAEeA1O1Xn6bQAK5NHjr2DUHrcwHwYDVR0j BBgwFoAUBZ4GUvy6yJUGGlf+BWbPNT8+Q8owDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREVOUEFJ Ty8wLzA1OUUwNjUyRkNCQUM4OTUwNjFBNTdGRTA1NjZDRjM1M0YzRTQzQ0EuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMDU5RTA2NTJGQ0JBQzg5NTA2MUE1N0ZFMDU2 NkNGMzUzRjNFNDNDQS5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RFTlBBSU8vMC8zMTMwMzMyZTMx MzMzNTJlMzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTM2MzYzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeHETANBgkqhkiG9w0BAQsFAAOCAQEAAGvQIhH6J3nSr5mR/wjK 64P2oDGjabfuS7WWgyVW3HhwShyliWD8UXMxuMbPuNSCyUU22xsUD3gxFO0jns1O iigGkuKn5BHGUfPGGtCFG2VjX9HeeQNfzrxUDwTSfcqUPCVwtuoXskEIwevTZ0k6 l47epjFJMlkI1xYMkmUZhBaq7ZkyW/H0iAG8M3G5XoPxNqUYkbwkqyc5FzVlhxPm JDdYSOjVtZwih+U047aYWuNyir7mop/Ij46DKbn+aVBZrb5zC+MkuR/sfFoPldWB hhJwvyUOZ8nSa26SptT2lTkYVW2zo4RG1J0k7H+NY02YXso6A1BjUybAI/gn0Ytz aA== -----END CERTIFICATE-----Generated at Wed May 13 21:11:21 2026 by rpki-client