$ rpki-client -vvf rpkica.twnic.tw/rpki/EDTNS/0/3131392e33302e31362e302f32302d3234203d3e203138343131.roa File: 3131392e33302e31362e302f32302d3234203d3e203138343131.roa (raw, json) Hash identifier: b/aL5o5ZJ2+jJ6WA1q4dCKtGxzeUgsNC1ybEW3+mJZY= Subject key identifier: 22:11:2C:3A:A8:EF:58:5A:44:57:E0:4C:3F:E2:F4:48:03:D6:26:F6 Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527 Certificate serial: 266E1D7BF8C6E1424B95880D51EAD4576F1172FF Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/3131392e33302e31362e302f32302d3234203d3e203138343131.roa Signing time: Mon 11 May 2026 17:31:52 +0000 ROA not before: Mon 11 May 2026 17:26:52 +0000 ROA not after: Mon 10 May 2027 17:31:52 +0000 asID: 18411 IP address blocks: 119.30.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:6e:1d:7b:f8:c6:e1:42:4b:95:88:0d:51:ea:d4:57:6f:11:72:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527 Validity Not Before: May 11 17:26:52 2026 GMT Not After : May 10 17:31:52 2027 GMT Subject: CN=22112C3AA8EF585A4457E04C3FE2F44803D626F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a2:d0:36:86:ca:8c:5d:11:18:09:74:c6:72: 80:8c:b7:a6:25:33:e9:95:49:37:20:58:a3:43:c2: 1a:bc:f7:54:d1:8c:e0:0b:52:ab:41:aa:5e:83:ce: a8:3a:ff:45:71:11:69:94:a7:0c:54:c4:55:b2:f2: 0a:af:c0:c6:3d:0c:96:9f:f9:52:d4:45:47:89:64: e5:8d:95:c2:ba:00:4d:94:b5:98:89:98:67:c9:b0: 4c:55:a5:98:f9:bb:6f:b8:ee:c5:e1:94:ae:51:1f: 4e:cc:45:04:c7:46:b5:b1:eb:dc:31:bc:38:5c:4e: 59:fc:14:68:d2:b4:09:de:8f:c2:4e:52:e2:8d:cf: d5:6d:e4:c9:e0:1c:81:1c:33:a6:88:b7:df:51:61: 0e:60:b5:fa:27:fd:67:6c:b2:4c:1c:f4:38:de:13: 06:ee:fd:29:2a:03:59:74:f1:9b:a5:2a:18:23:db: 95:4b:98:f8:0e:d7:e6:df:6b:28:63:80:ae:33:bf: be:03:07:ac:35:43:6f:b9:06:0e:58:b8:f8:de:51: ad:d3:71:4a:5b:f0:ac:78:85:3a:00:e5:08:bd:f7: 85:d0:12:2c:25:40:c6:66:83:f1:07:c0:0f:1c:cf: 54:40:f9:b1:c1:34:3a:14:63:33:45:4b:a7:01:d7: 10:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:11:2C:3A:A8:EF:58:5A:44:57:E0:4C:3F:E2:F4:48:03:D6:26:F6 X509v3 Authority Key Identifier: keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/3131392e33302e31362e302f32302d3234203d3e203138343131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.30.16.0/20 Signature Algorithm: sha256WithRSAEncryption 41:a1:09:78:77:e8:ea:5a:8d:d6:d5:00:f1:66:f6:f2:c6:8b: 34:8f:56:28:ca:c5:46:b6:40:0b:72:21:b3:b1:7f:cc:d4:08: a8:cd:d9:0f:59:99:ee:35:6b:14:11:21:67:3a:34:15:fc:d3: 56:3a:02:03:a6:27:61:5a:70:ab:33:88:91:83:29:d4:b3:d8: d1:77:e7:58:67:6d:6f:28:2f:f0:c0:10:ac:04:d7:ac:1c:9c: bf:6d:5d:80:c1:fe:0c:10:bb:6e:c3:fd:88:46:d4:ef:6e:86: da:d9:c8:06:32:23:47:d4:d8:6a:73:65:6d:9a:f1:5d:03:2e: eb:06:38:1b:9c:12:9d:d9:d2:70:26:4c:40:7c:d0:63:ec:f8: b4:4b:fa:1b:30:72:1b:51:19:11:35:51:03:a1:27:23:02:6b: e3:24:8d:cc:7f:35:da:a5:95:2e:e2:db:be:f5:c6:a7:65:f0: 4d:48:82:ad:6d:fe:b0:60:df:16:a2:34:60:ca:87:0b:f8:ba: 7d:51:22:e8:2e:82:ba:7b:ee:53:bb:ba:25:85:f7:83:14:00: 2a:87:ce:42:5a:36:bf:75:1a:e6:83:ad:fd:e4:47:0f:2a:95: 8b:e3:d8:36:69:73:26:11:22:e3:c0:4b:12:5f:08:37:de:b3: e1:c5:42:4d -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUJm4de/jG4UJLlYgNUerUV28Rcv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxREU4MTkyOTYyQTQwM0JCNjgwOTQ1NUQ5QzA3NzZG NzlDQzUyNzAeFw0yNjA1MTExNzI2NTJaFw0yNzA1MTAxNzMxNTJaMDMxMTAvBgNV BAMTKDIyMTEyQzNBQThFRjU4NUE0NDU3RTA0QzNGRTJGNDQ4MDNENjI2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsotA2hsqMXREYCXTGcoCMt6Yl M+mVSTcgWKNDwhq891TRjOALUqtBql6Dzqg6/0VxEWmUpwxUxFWy8gqvwMY9DJaf +VLURUeJZOWNlcK6AE2UtZiJmGfJsExVpZj5u2+47sXhlK5RH07MRQTHRrWx69wx vDhcTln8FGjStAnej8JOUuKNz9Vt5MngHIEcM6aIt99RYQ5gtfon/Wdsskwc9Dje Ewbu/SkqA1l08ZulKhgj25VLmPgO1+bfayhjgK4zv74DB6w1Q2+5Bg5YuPjeUa3T cUpb8Kx4hToA5Qi994XQEiwlQMZmg/EHwA8cz1RA+bHBNDoUYzNFS6cB1xATAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUIhEsOqjvWFpEV+BMP+L0SAPWJvYwHwYDVR0j BBgwFoAU0x3oGSlipAO7aAlFXZwHdvecxScwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRURUTlMv MC9EMzFERTgxOTI5NjJBNDAzQkI2ODA5NDU1RDlDMDc3NkY3OUNDNTI3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0QzMURFODE5Mjk2MkE0MDNCQjY4MDk0NTVEOUMw Nzc2Rjc5Q0M1MjcuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FRFROUy8wLzMxMzEzOTJlMzMzMDJl MzEzNjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzgzNDMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAR3HhAwDQYJKoZIhvcNAQELBQADggEBAEGhCXh36OpajdbVAPFm9vLGizSPVijK xUa2QAtyIbOxf8zUCKjN2Q9Zme41axQRIWc6NBX801Y6AgOmJ2FacKsziJGDKdSz 2NF351hnbW8oL/DAEKwE16wcnL9tXYDB/gwQu27D/YhG1O9uhtrZyAYyI0fU2Gpz ZW2a8V0DLusGOBucEp3Z0nAmTEB80GPs+LRL+hswchtRGRE1UQOhJyMCa+Mkjcx/ NdqllS7i2771xqdl8E1Igq1t/rBg3xaiNGDKhwv4un1RIugugrp77lO7uiWF94MU ACqHzkJaNr91GuaDrf3kRw8qlYvj2DZpcyYRIuPASxJfCDfes+HFQk0= -----END CERTIFICATE-----Generated at Wed May 13 21:13:26 2026 by rpki-client