$ rpki-client -vvf rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e31362e302f32302d3230203d3e203138343131.roa File: 36312e35362e31362e302f32302d3230203d3e203138343131.roa (raw, json) Hash identifier: cpOU01Iw58/YmjLPrJqeRjungi3bbe0B4tFLVOzxjxc= Subject key identifier: FF:61:00:9F:A6:92:68:62:36:E9:9C:7C:35:0C:8F:B1:AF:9A:12:8B Certificate issuer: /CN=D31DE8192962A403BB6809455D9C0776F79CC527 Certificate serial: 7D837FECF1F1092B149A7A98D302B61F6F1F39F0 Authority key identifier: D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject info access: rsync://rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e31362e302f32302d3230203d3e203138343131.roa Signing time: Mon 11 May 2026 16:54:29 +0000 ROA not before: Mon 11 May 2026 16:49:29 +0000 ROA not after: Mon 10 May 2027 16:54:29 +0000 asID: 18411 IP address blocks: 61.56.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:83:7f:ec:f1:f1:09:2b:14:9a:7a:98:d3:02:b6:1f:6f:1f:39:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D31DE8192962A403BB6809455D9C0776F79CC527 Validity Not Before: May 11 16:49:29 2026 GMT Not After : May 10 16:54:29 2027 GMT Subject: CN=FF61009FA692686236E99C7C350C8FB1AF9A128B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c0:40:28:6f:2e:21:cd:c3:de:26:4d:91:aa: 53:90:58:f1:ac:31:0d:d6:03:97:ef:2d:37:2b:1b: 95:59:8b:5d:db:88:ef:eb:77:21:de:b0:fb:71:d0: b0:f5:2e:36:69:1c:70:fc:5e:a0:fa:3c:e2:78:12: 11:b6:af:ed:9d:99:39:12:a5:21:e9:cf:2b:b9:ed: 75:e6:20:ac:34:65:19:12:e8:3c:fd:f2:d6:99:09: fb:b6:10:a3:73:bd:81:0c:28:c6:ad:8e:e9:f0:f3: 52:ab:a4:cf:ea:a8:b8:37:9e:59:91:28:50:2f:a9: bd:50:ff:c5:3a:b0:39:74:2c:d4:78:1f:12:6e:11: d7:cd:cc:d9:74:c1:21:de:cd:a3:66:a1:38:d6:3b: 52:3c:8e:3b:b7:63:2d:3a:80:03:b3:59:02:7c:de: f4:2f:ca:d1:1b:d2:a5:3d:a0:18:59:e0:b9:03:74: 8f:f0:56:86:e2:cf:14:c1:97:48:c5:a1:95:00:93: 1f:c3:90:86:cc:f2:09:9f:ba:57:02:af:7d:4a:41: 15:d5:db:ce:05:6c:7c:8e:0c:c6:47:6c:69:05:7b: 0f:5c:5d:c6:e3:2e:9b:ba:d3:ad:49:13:06:65:db: d7:45:64:dd:af:5f:c0:66:93:d3:93:de:fc:b0:59: 50:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:61:00:9F:A6:92:68:62:36:E9:9C:7C:35:0C:8F:B1:AF:9A:12:8B X509v3 Authority Key Identifier: keyid:D3:1D:E8:19:29:62:A4:03:BB:68:09:45:5D:9C:07:76:F7:9C:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/D31DE8192962A403BB6809455D9C0776F79CC527.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D31DE8192962A403BB6809455D9C0776F79CC527.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/EDTNS/0/36312e35362e31362e302f32302d3230203d3e203138343131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.56.16.0/20 Signature Algorithm: sha256WithRSAEncryption 1d:be:be:ff:27:1c:af:4b:a2:81:6c:b9:be:19:1a:29:61:12: 2e:cf:43:fa:d6:56:14:80:78:e8:d9:be:34:9a:e5:e8:d1:75: 9a:86:dc:05:5d:85:2c:cf:fe:48:ff:4a:83:48:02:4f:fd:0d: e3:b5:17:36:d2:a9:ce:49:d4:ee:e3:28:d4:ff:74:54:33:f8: b1:18:6b:2f:0f:34:82:1a:13:9d:c9:9f:c2:71:3e:e5:f2:d0: d8:cd:03:fe:8e:96:d8:e2:0a:86:1d:db:01:48:96:4a:d8:0b: b1:c0:f3:be:66:f6:f0:42:d3:a8:62:6e:42:1d:3f:c6:43:5b: 23:d2:9e:c3:58:39:a9:7d:df:13:9d:7a:5d:61:b9:4a:d6:c9: 32:ff:ed:1c:90:d3:39:7a:52:ca:f8:8d:8c:44:d8:6f:ee:2f: 8e:9b:10:d1:43:ec:85:52:50:6a:04:dc:84:b5:39:ee:c1:9b: 00:08:8a:ca:be:b4:bb:9f:14:45:fa:2e:2a:7e:ab:4a:04:69: fa:be:8f:19:61:1a:a2:ce:b9:b9:93:a9:aa:07:37:bf:2c:7f: 97:f7:52:b3:3b:67:46:12:f0:09:88:f2:8c:96:6d:c7:97:86: 96:36:52:81:26:75:30:a0:77:a3:54:bb:44:78:5b:9f:a8:52: a8:c2:43:d7 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUfYN/7PHxCSsUmnqY0wK2H28fOfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMxREU4MTkyOTYyQTQwM0JCNjgwOTQ1NUQ5QzA3NzZG NzlDQzUyNzAeFw0yNjA1MTExNjQ5MjlaFw0yNzA1MTAxNjU0MjlaMDMxMTAvBgNV BAMTKEZGNjEwMDlGQTY5MjY4NjIzNkU5OUM3QzM1MEM4RkIxQUY5QTEyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXwEAoby4hzcPeJk2RqlOQWPGs MQ3WA5fvLTcrG5VZi13biO/rdyHesPtx0LD1LjZpHHD8XqD6POJ4EhG2r+2dmTkS pSHpzyu57XXmIKw0ZRkS6Dz98taZCfu2EKNzvYEMKMatjunw81KrpM/qqLg3nlmR KFAvqb1Q/8U6sDl0LNR4HxJuEdfNzNl0wSHezaNmoTjWO1I8jju3Yy06gAOzWQJ8 3vQvytEb0qU9oBhZ4LkDdI/wVobizxTBl0jFoZUAkx/DkIbM8gmfulcCr31KQRXV 284FbHyODMZHbGkFew9cXcbjLpu6061JEwZl29dFZN2vX8Bmk9OT3vywWVD7AgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQU/2EAn6aSaGI26Zx8NQyPsa+aEoswHwYDVR0j BBgwFoAU0x3oGSlipAO7aAlFXZwHdvecxScwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRURUTlMv MC9EMzFERTgxOTI5NjJBNDAzQkI2ODA5NDU1RDlDMDc3NkY3OUNDNTI3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0QzMURFODE5Mjk2MkE0MDNCQjY4MDk0NTVEOUMw Nzc2Rjc5Q0M1MjcuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9FRFROUy8wLzM2MzEyZTM1MzYyZTMx MzYyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMTM4MzQzMTMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE PTgQMA0GCSqGSIb3DQEBCwUAA4IBAQAdvr7/JxyvS6KBbLm+GRopYRIuz0P61lYU gHjo2b40muXo0XWahtwFXYUsz/5I/0qDSAJP/Q3jtRc20qnOSdTu4yjU/3RUM/ix GGsvDzSCGhOdyZ/CcT7l8tDYzQP+jpbY4gqGHdsBSJZK2AuxwPO+ZvbwQtOoYm5C HT/GQ1sj0p7DWDmpfd8TnXpdYblK1sky/+0ckNM5elLK+I2MRNhv7i+OmxDRQ+yF UlBqBNyEtTnuwZsACIrKvrS7nxRF+i4qfqtKBGn6vo8ZYRqizrm5k6mqBze/LH+X 91KzO2dGEvAJiPKMlm3Hl4aWNlKBJnUwoHejVLtEeFufqFKowkPX -----END CERTIFICATE-----Generated at Wed May 13 21:13:17 2026 by rpki-client