$ rpki-client -vvf rpkica.twnic.tw/rpki/FET/0/AS131601.roa File: AS131601.roa (raw, json) Hash identifier: GCaWtJY9VQL7/LVgzoKj6m7VZWgszoRurN0mGVKVBrM= Subject key identifier: 43:BE:7A:65:92:78:46:C5:09:9A:A3:92:56:11:0D:39:70:56:40:69 Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Certificate serial: 1A14D6F791B494F9264F1942BB768E6998456D50 Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/AS131601.roa Signing time: Mon 11 May 2026 17:36:34 +0000 ROA not before: Mon 11 May 2026 17:31:34 +0000 ROA not after: Mon 10 May 2027 17:36:34 +0000 asID: 131601 IP address blocks: 210.58.112.0/21 maxlen: 24 210.58.120.0/24 maxlen: 24 210.203.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:14:d6:f7:91:b4:94:f9:26:4f:19:42:bb:76:8e:69:98:45:6d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Validity Not Before: May 11 17:31:34 2026 GMT Not After : May 10 17:36:34 2027 GMT Subject: CN=43BE7A65927846C5099AA39256110D3970564069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:16:a5:49:f8:ae:15:6a:d2:49:4d:54:67:9e: 16:a1:d8:e6:51:d1:7c:22:34:39:8d:34:7e:cb:06: 89:90:44:18:ec:6b:01:05:83:87:8d:f6:fc:39:02: 00:3a:0c:6f:73:f2:a4:02:ea:c7:30:13:21:fb:38: de:6c:b4:98:a4:fd:6e:49:be:f6:25:76:ea:cb:2d: 11:2c:12:d7:e5:6d:aa:25:b3:24:05:62:ce:c9:6f: cc:53:6d:95:13:19:e0:5c:5e:67:bd:eb:33:86:02: f3:80:a3:09:88:47:2e:db:92:63:db:33:0a:b5:27: c8:19:75:bf:bf:2e:3d:17:eb:91:dc:c6:a9:b6:d5: dd:79:0c:28:1a:62:2a:5c:0e:6f:b4:73:7f:0a:50: 99:15:71:d3:95:27:a5:89:43:ff:49:77:dd:dd:74: 00:d7:31:31:9e:e7:dd:21:84:a4:59:56:97:ff:1a: e8:ad:0b:ae:67:ff:35:18:c6:95:93:ed:c1:a2:2f: 55:a2:45:08:06:84:84:27:66:6a:10:42:dc:ce:d9: f1:c3:99:14:57:67:31:78:cf:80:97:ef:d8:10:00: 3d:8f:bb:17:45:77:82:83:88:2d:42:81:77:8a:7c: 13:ad:ca:d0:e7:39:98:a8:86:cc:1d:5c:23:39:37: 19:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BE:7A:65:92:78:46:C5:09:9A:A3:92:56:11:0D:39:70:56:40:69 X509v3 Authority Key Identifier: keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS131601.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.58.112.0-210.58.120.255 210.203.20.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:e0:ea:e9:1d:2e:e2:cd:da:79:28:0a:97:7f:c9:25:82:da: 59:d7:d2:76:12:73:18:d0:7a:32:22:a2:34:f7:27:6e:11:11: a0:07:18:f2:22:e2:6b:7b:1f:53:3b:ad:b1:b5:5b:a6:3b:88: f5:72:3f:81:ef:3a:13:5b:5f:54:b5:fe:a8:78:7b:f2:3c:10: a6:89:68:de:8d:6d:3a:14:52:07:02:12:00:6b:b6:40:35:af: 74:07:b1:49:a4:f0:11:90:a1:94:b0:02:ce:74:d3:35:0c:ff: 0b:2c:a6:a2:c7:c2:2a:45:07:73:a4:cd:ad:7d:a2:32:41:a3: be:ac:b4:33:a4:69:66:9c:13:b0:74:18:b3:f2:ea:65:a0:63: 74:4e:dc:8a:7b:f5:67:2e:dd:2f:9a:81:f7:27:65:ff:31:0c: e3:21:c3:6a:86:a3:28:da:3e:5c:0b:59:de:d3:0f:b1:ad:04: 69:86:52:28:ba:f0:ee:8e:03:d2:7d:45:61:eb:f1:6f:72:c7: 3f:be:bc:4c:86:2d:6f:7c:a9:a3:7b:c6:ec:dd:22:51:d0:46: 58:03:20:27:17:71:e4:7f:dc:e2:a9:a9:4d:4f:bf:24:3c:bf: f9:3d:32:ec:00:a7:70:a3:f8:3f:f2:1e:08:b2:59:93:8d:8b: b2:89:d4:b3 -----BEGIN CERTIFICATE----- MIIEszCCA5ugAwIBAgIUGhTW95G0lPkmTxlCu3aOaZhFbVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4 NDI0NkQxMDAeFw0yNjA1MTExNzMxMzRaFw0yNzA1MTAxNzM2MzRaMDMxMTAvBgNV BAMTKDQzQkU3QTY1OTI3ODQ2QzUwOTlBQTM5MjU2MTEwRDM5NzA1NjQwNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjFqVJ+K4VatJJTVRnnhah2OZR 0XwiNDmNNH7LBomQRBjsawEFg4eN9vw5AgA6DG9z8qQC6scwEyH7ON5stJik/W5J vvYldurLLREsEtflbaolsyQFYs7Jb8xTbZUTGeBcXme96zOGAvOAowmIRy7bkmPb Mwq1J8gZdb+/Lj0X65Hcxqm21d15DCgaYipcDm+0c38KUJkVcdOVJ6WJQ/9Jd93d dADXMTGe590hhKRZVpf/GuitC65n/zUYxpWT7cGiL1WiRQgGhIQnZmoQQtzO2fHD mRRXZzF4z4CX79gQAD2PuxdFd4KDiC1CgXeKfBOtytDnOZiohswdXCM5NxkLAgMB AAGjggG9MIIBuTAdBgNVHQ4EFgQUQ756ZZJ4RsUJmqOSVhENOXBWQGkwHwYDVR0j BBgwFoAUcfog/Cac6YBbLGflmzV6poQkbRAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAv NzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4NDI0NkQxMC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MUZBMjBGQzI2OUNFOTgwNUIyQzY3RTU5QjM1N0FB Njg0MjQ2RDEwLmNlcjBLBggrBgEFBQcBCwQ/MD0wOwYIKwYBBQUHMAuGL3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAvQVMxMzE2MDEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgABMBQw DAMEBNI6cAMEANI6eAMEAtLLFDANBgkqhkiG9w0BAQsFAAOCAQEAmuDq6R0u4s3a eSgKl3/JJYLaWdfSdhJzGNB6MiKiNPcnbhERoAcY8iLia3sfUzutsbVbpjuI9XI/ ge86E1tfVLX+qHh78jwQpolo3o1tOhRSBwISAGu2QDWvdAexSaTwEZChlLACznTT NQz/CyymosfCKkUHc6TNrX2iMkGjvqy0M6RpZpwTsHQYs/LqZaBjdE7cinv1Zy7d L5qB9ydl/zEM4yHDaoajKNo+XAtZ3tMPsa0EaYZSKLrw7o4D0n1FYevxb3LHP768 TIYtb3ypo3vG7N0iUdBGWAMgJxdx5H/c4qmpTU+/JDy/+T0y7ACncKP4P/IeCLJZ k42LsonUsw== -----END CERTIFICATE-----Generated at Wed May 13 21:50:40 2026 by rpki-client