$ rpki-client -vvf rpkica.twnic.tw/rpki/FET/0/AS131627.roa File: AS131627.roa (raw, json) Hash identifier: ibdv4KczlUiHuqdxTA5BtcOtsysjG6n663UL3tXWjXQ= Subject key identifier: 87:48:19:AB:5F:F7:70:69:E4:93:F3:D2:9C:B9:24:A5:40:F7:03:02 Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Certificate serial: 0E5D5322213B6333E5D2545778AF1A49289DBB66 Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/AS131627.roa Signing time: Mon 11 May 2026 17:35:56 +0000 ROA not before: Mon 11 May 2026 17:30:56 +0000 ROA not after: Mon 10 May 2027 17:35:56 +0000 asID: 131627 IP address blocks: 210.58.128.0/19 maxlen: 24 219.91.0.0/17 maxlen: 24 219.91.0.0/18 maxlen: 24 219.91.64.0/18 maxlen: 24 219.91.64.0/22 maxlen: 24 219.91.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:5d:53:22:21:3b:63:33:e5:d2:54:57:78:af:1a:49:28:9d:bb:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Validity Not Before: May 11 17:30:56 2026 GMT Not After : May 10 17:35:56 2027 GMT Subject: CN=874819AB5FF77069E493F3D29CB924A540F70302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:92:aa:a0:83:dc:7e:14:5a:29:1e:24:2a: a7:f9:24:d7:e7:08:53:5f:9f:fa:da:5e:ed:80:21: 37:1d:f6:1b:96:62:68:89:3e:3e:9b:bb:dc:c2:ac: 56:b8:c8:c3:14:bc:71:03:27:98:0d:f0:db:80:11: 2c:80:a0:d6:51:b5:af:76:fc:96:ec:81:b3:74:29: 74:7f:12:86:f9:e9:c9:da:4c:7f:bc:f9:f8:29:63: 52:0d:fc:47:fe:ef:3b:e7:74:c9:32:8f:98:5f:e2: 0d:13:fb:cc:0b:01:eb:1d:d6:54:1b:a2:4b:ac:74: ba:0f:56:8d:d2:5f:cb:75:b9:69:ad:9e:fe:55:d9: 7f:73:a4:7d:26:7b:45:27:54:9a:c6:40:44:fb:a3: ce:ef:fa:7b:48:45:49:b1:53:1e:d4:19:40:ce:2f: ab:ea:52:eb:36:d8:ce:ae:47:d5:02:23:d2:f9:87: ee:de:9a:c2:e8:bf:ce:b8:c1:16:fc:ff:7a:0e:f1: f6:4a:b0:af:5d:50:50:43:e0:27:71:97:24:e7:3f: 55:e2:ee:6b:82:7e:94:8c:2c:5c:84:e1:00:d3:e9: 7d:83:b5:c9:1a:40:ac:58:c1:11:3c:92:0c:76:46: a6:26:48:89:c0:82:d4:df:26:e4:12:67:2c:a2:e4: b1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:48:19:AB:5F:F7:70:69:E4:93:F3:D2:9C:B9:24:A5:40:F7:03:02 X509v3 Authority Key Identifier: keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS131627.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.58.128.0/19 219.91.0.0/17 Signature Algorithm: sha256WithRSAEncryption 39:12:32:5c:bf:72:0d:f1:9f:ba:82:79:c7:4d:a8:59:62:e0: f4:da:35:7a:a5:12:8e:e2:72:e9:a0:a3:cd:48:4e:6e:8f:c7: dc:d0:c2:fb:9b:93:ac:51:96:89:9e:e1:2a:95:41:23:75:84: 8b:a5:99:68:e2:13:6e:85:4d:90:c1:9a:c7:19:bb:15:04:ef: 20:cc:cd:00:96:27:35:dd:2a:81:c2:80:d0:fd:37:74:d9:92: d3:c6:94:82:c4:77:48:6f:39:43:00:14:d7:ca:65:db:42:4a: f4:e3:5f:2c:d9:17:14:61:66:3c:28:1a:35:55:be:bb:73:f1: 72:37:e0:32:f6:40:99:23:5e:87:96:8a:10:0b:39:3b:c3:e7: c9:b3:47:ae:76:cf:f1:b5:1c:7c:66:5f:e1:4d:e9:29:6c:7a: d6:53:53:c1:1e:c8:0b:36:0c:f3:69:e5:9a:36:d9:12:6a:4b: 98:7a:95:c3:cc:0b:75:1c:15:12:7d:96:36:9b:77:0c:e4:7d: 71:60:ca:57:b6:5a:91:bb:0e:bc:3f:5c:05:35:7d:68:e8:22: 60:bf:01:31:74:1c:26:bd:f0:22:27:70:00:a2:77:bd:bd:05: 86:21:ec:ff:a6:80:3b:d6:7f:29:ca:4c:28:63:6d:bf:98:7a: 12:de:a3:94 -----BEGIN CERTIFICATE----- MIIEqzCCA5OgAwIBAgIUDl1TIiE7YzPl0lRXeK8aSSidu2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4 NDI0NkQxMDAeFw0yNjA1MTExNzMwNTZaFw0yNzA1MTAxNzM1NTZaMDMxMTAvBgNV BAMTKDg3NDgxOUFCNUZGNzcwNjlFNDkzRjNEMjlDQjkyNEE1NDBGNzAzMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0JKqoIPcfhRaKR4kKqf5JNfn CFNfn/raXu2AITcd9huWYmiJPj6bu9zCrFa4yMMUvHEDJ5gN8NuAESyAoNZRta92 /JbsgbN0KXR/Eob56cnaTH+8+fgpY1IN/Ef+7zvndMkyj5hf4g0T+8wLAesd1lQb okusdLoPVo3SX8t1uWmtnv5V2X9zpH0me0UnVJrGQET7o87v+ntIRUmxUx7UGUDO L6vqUus22M6uR9UCI9L5h+7emsLov864wRb8/3oO8fZKsK9dUFBD4CdxlyTnP1Xi 7muCfpSMLFyE4QDT6X2DtckaQKxYwRE8kgx2RqYmSInAgtTfJuQSZyyi5LGxAgMB AAGjggG1MIIBsTAdBgNVHQ4EFgQUh0gZq1/3cGnkk/PSnLkkpUD3AwIwHwYDVR0j BBgwFoAUcfog/Cac6YBbLGflmzV6poQkbRAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAv NzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4NDI0NkQxMC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MUZBMjBGQzI2OUNFOTgwNUIyQzY3RTU5QjM1N0FB Njg0MjQ2RDEwLmNlcjBLBggrBgEFBQcBCwQ/MD0wOwYIKwYBBQUHMAuGL3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAvQVMxMzE2Mjcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAXSOoADBAfbWwAwDQYJKoZIhvcNAQELBQADggEBADkSMly/cg3xn7qCecdNqFli 4PTaNXqlEo7icumgo81ITm6Px9zQwvubk6xRlome4SqVQSN1hIulmWjiE26FTZDB mscZuxUE7yDMzQCWJzXdKoHCgND9N3TZktPGlILEd0hvOUMAFNfKZdtCSvTjXyzZ FxRhZjwoGjVVvrtz8XI34DL2QJkjXoeWihALOTvD58mzR652z/G1HHxmX+FN6Sls etZTU8EeyAs2DPNp5Zo22RJqS5h6lcPMC3UcFRJ9ljabdwzkfXFgyle2WpG7Drw/ XAU1fWjoImC/ATF0HCa98CIncACid729BYYh7P+mgDvWfynKTChjbb+YehLeo5Q= -----END CERTIFICATE-----Generated at Wed May 13 21:51:13 2026 by rpki-client