$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/0/36312e36352e3234302e302f32302d3234203d3e203338383531.roa File: 36312e36352e3234302e302f32302d3234203d3e203338383531.roa (raw, json) Hash identifier: 5xy/K2z2rPvYuOxb1Rs438nXfizUFVoGlYRajsSBm10= Subject key identifier: 6A:01:F6:DA:CD:AC:6E:F1:28:9E:D9:5B:25:21:5B:B1:96:E4:97:00 Certificate issuer: /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D Certificate serial: 7495CCD6F582B2D0703909D60A2975E47895FBAF Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DONGFONG/0/36312e36352e3234302e302f32302d3234203d3e203338383531.roa Signing time: Mon 11 May 2026 17:04:07 +0000 ROA not before: Mon 11 May 2026 16:59:07 +0000 ROA not after: Mon 10 May 2027 17:04:07 +0000 asID: 38851 IP address blocks: 61.65.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:95:cc:d6:f5:82:b2:d0:70:39:09:d6:0a:29:75:e4:78:95:fb:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D Validity Not Before: May 11 16:59:07 2026 GMT Not After : May 10 17:04:07 2027 GMT Subject: CN=6A01F6DACDAC6EF1289ED95B25215BB196E49700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:ea:05:23:03:c7:a4:1f:c3:0a:4b:a6:fe: ae:96:9d:d8:c3:72:9c:0f:91:d3:80:73:31:38:51: d1:d9:6c:6f:60:05:e9:64:89:97:74:6a:01:f1:17: 40:8e:b7:60:14:c8:24:1f:d7:54:d7:68:aa:10:9b: 1a:e2:b5:b9:21:45:61:8b:bd:64:23:5a:c7:df:0c: 2a:cd:4a:59:13:73:86:4d:c7:cb:be:cc:5b:5c:90: cf:85:1b:42:4c:34:e3:f8:00:ca:88:fb:2f:c3:ce: b1:f2:c5:9f:e9:8c:b4:f1:f4:be:75:ad:3f:b7:57: 49:5d:b6:ad:d3:1f:d0:66:35:2c:4c:f5:dc:7d:0c: 6f:65:f7:c6:18:9d:7c:cc:bd:9c:f4:0c:e2:21:3d: c1:32:10:29:7f:67:0e:61:df:a2:13:a2:e7:8a:11: ab:47:dd:b6:6b:3a:c1:e8:0d:e2:8e:58:8f:7d:cd: af:09:4b:7c:bb:e9:89:7a:bb:92:b3:cc:04:7c:1e: f6:cf:18:ec:d4:86:31:06:67:c8:4d:ed:88:81:2a: 6d:e1:f1:b3:b5:1e:86:ec:55:c4:a7:a1:5c:21:b7: d5:b3:d9:01:f9:95:20:7b:a9:ed:2a:3f:25:64:bf: 2c:68:57:7f:fa:37:34:d9:01:9e:7c:34:e5:fa:d0: c1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:01:F6:DA:CD:AC:6E:F1:28:9E:D9:5B:25:21:5B:B1:96:E4:97:00 X509v3 Authority Key Identifier: keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/36312e36352e3234302e302f32302d3234203d3e203338383531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.65.240.0/20 Signature Algorithm: sha256WithRSAEncryption 20:f4:5e:f2:f5:23:f7:84:0e:1c:d5:b0:6f:f3:a4:16:f4:fc: 38:9d:ab:07:87:2a:4c:2f:73:92:51:36:8d:7d:5e:ed:68:90: 00:01:44:12:91:74:a2:ca:96:58:fc:1a:b3:6c:f7:b8:b2:8d: 80:62:46:e7:62:ce:79:7c:98:9c:2c:6e:0c:4a:3c:22:26:cd: 16:22:4d:ee:43:c0:44:6a:69:d7:54:d6:9d:29:24:3b:5b:de: d8:41:25:60:fd:7e:2f:23:3a:bb:99:f4:4d:26:3b:69:2b:06: f6:e9:e9:7d:51:1f:c7:6e:7b:cc:f1:10:9b:59:e5:ba:fb:f6: 42:a0:c7:e0:55:02:c2:8a:62:98:7d:25:ef:8d:bd:22:b6:e5: a5:c8:3c:20:97:37:33:e7:eb:a9:18:2b:f6:17:46:72:a7:e1: fb:77:cd:7d:58:80:1d:f9:83:64:2a:e9:3a:fd:8d:a9:53:d4: 20:ef:84:00:0b:0f:ac:d8:f6:01:e9:2b:e2:3f:4d:b2:ae:a2: d7:59:f5:ab:f1:8e:f4:20:54:51:8a:81:dc:93:22:bf:0d:c9: e4:19:dd:de:08:60:dd:d0:bf:5d:8d:8a:df:ce:f7:be:24:50: 23:2c:7e:36:ee:e7:e0:5d:cb:6f:93:0d:62:45:3b:49:f3:74: 21:a8:5b:6e -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUdJXM1vWCstBwOQnWCil15HiV+68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQwN0M4QjhGQUIyQUY3ODVFNDQ5RjY5NTlBMzQzQzEx RjNDMkY3RDAeFw0yNjA1MTExNjU5MDdaFw0yNzA1MTAxNzA0MDdaMDMxMTAvBgNV BAMTKDZBMDFGNkRBQ0RBQzZFRjEyODlFRDk1QjI1MjE1QkIxOTZFNDk3MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk3+oFIwPHpB/DCkum/q6WndjD cpwPkdOAczE4UdHZbG9gBelkiZd0agHxF0COt2AUyCQf11TXaKoQmxritbkhRWGL vWQjWsffDCrNSlkTc4ZNx8u+zFtckM+FG0JMNOP4AMqI+y/DzrHyxZ/pjLTx9L51 rT+3V0ldtq3TH9BmNSxM9dx9DG9l98YYnXzMvZz0DOIhPcEyECl/Zw5h36IToueK EatH3bZrOsHoDeKOWI99za8JS3y76Yl6u5KzzAR8HvbPGOzUhjEGZ8hN7YiBKm3h 8bO1HobsVcSnoVwht9Wz2QH5lSB7qe0qPyVkvyxoV3/6NzTZAZ58NOX60MFXAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUagH22s2sbvEontlbJSFbsZbklwAwHwYDVR0j BBgwFoAUtAfIuPqyr3heRJ9pWaNDwR88L30wDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP TkcvMC9CNDA3QzhCOEZBQjJBRjc4NUU0NDlGNjk1OUEzNDNDMTFGM0MyRjdELmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0I0MDdDOEI4RkFCMkFGNzg1RTQ0OUY2OTU5 QTM0M0MxMUYzQzJGN0QuY2VyMHwGCCsGAQUFBwELBHAwbjBsBggrBgEFBQcwC4Zg cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET05HRk9ORy8wLzM2MzEyZTM2 MzUyZTMyMzQzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMzMzgzODM1MzEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAQ9QfAwDQYJKoZIhvcNAQELBQADggEBACD0XvL1I/eEDhzVsG/zpBb0 /DidqweHKkwvc5JRNo19Xu1okAABRBKRdKLKllj8GrNs97iyjYBiRudiznl8mJws bgxKPCImzRYiTe5DwERqaddU1p0pJDtb3thBJWD9fi8jOruZ9E0mO2krBvbp6X1R H8due8zxEJtZ5br79kKgx+BVAsKKYph9Je+NvSK25aXIPCCXNzPn66kYK/YXRnKn 4ft3zX1YgB35g2Qq6Tr9jalT1CDvhAALD6zY9gHpK+I/TbKuotdZ9avxjvQgVFGK gdyTIr8NyeQZ3d4IYN3Qv12Nit/O974kUCMsfjbu5+Bdy2+TDWJFO0nzdCGoW24= -----END CERTIFICATE-----Generated at Wed May 13 21:48:43 2026 by rpki-client