$ rpki-client -vvf rpkica.twnic.tw/rpki/GSN/0/3136332e32392e302e302f31362d3136203d3e2034373832.roa File: 3136332e32392e302e302f31362d3136203d3e2034373832.roa (raw, json) Hash identifier: pGK5XkceqKAh4/7agsjC+GWpznd78YLbOQwpm2jcRiA= Subject key identifier: 77:10:7F:BD:15:83:18:DE:09:A6:DB:C0:B0:F3:49:B9:16:47:D8:FA Certificate issuer: /CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Certificate serial: 0A09FA41D920C680013DDFC084D902C5F0470B13 Authority key identifier: C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GSN/0/3136332e32392e302e302f31362d3136203d3e2034373832.roa Signing time: Mon 11 May 2026 16:45:55 +0000 ROA not before: Mon 11 May 2026 16:40:55 +0000 ROA not after: Mon 10 May 2027 16:45:55 +0000 asID: 4782 IP address blocks: 163.29.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:09:fa:41:d9:20:c6:80:01:3d:df:c0:84:d9:02:c5:f0:47:0b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Validity Not Before: May 11 16:40:55 2026 GMT Not After : May 10 16:45:55 2027 GMT Subject: CN=77107FBD158318DE09A6DBC0B0F349B91647D8FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:59:24:cb:f7:9c:94:72:3c:0b:9c:44:6a:57: 1f:14:93:be:20:f6:17:69:82:53:4a:1f:b0:cb:5a: 71:e4:36:2e:c4:d6:e8:46:0f:a0:81:16:a3:0f:e8: 90:35:4d:43:4b:81:3b:2f:b8:c7:a4:91:72:e6:31: 09:1c:42:d3:49:64:bc:7e:a8:1c:9e:a7:08:13:36: 6f:d9:3e:a0:bc:87:1b:e8:fe:28:7b:9e:4d:93:17: a1:9e:40:96:00:75:00:6f:7f:ea:d7:10:94:e9:ed: f3:a4:22:dc:7f:81:9e:8e:cc:69:04:4e:84:21:5d: ff:fe:9f:b1:c6:1d:18:60:62:e7:02:34:27:a5:9b: 5f:d0:27:c8:9d:68:49:51:46:be:77:af:3c:d0:6e: 08:cd:f8:c2:7d:57:7a:14:54:6a:0a:71:cc:95:a9: ba:25:31:3b:60:03:47:f2:61:92:c1:01:92:14:20: 8e:32:a8:e9:a6:3b:8b:12:e2:c4:61:9e:88:b0:66: eb:4c:dd:25:d1:1d:9a:a7:a3:b0:99:13:97:1e:7a: 99:a6:2e:d5:88:95:c2:bf:82:01:44:16:17:65:52: bd:e8:14:dd:0f:1b:3c:ae:46:3b:7b:48:75:b8:d7: 2e:41:fa:33:39:42:a5:d0:95:df:2f:44:c5:77:b5: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:10:7F:BD:15:83:18:DE:09:A6:DB:C0:B0:F3:49:B9:16:47:D8:FA X509v3 Authority Key Identifier: keyid:C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSN/0/3136332e32392e302e302f31362d3136203d3e2034373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.29.0.0/16 Signature Algorithm: sha256WithRSAEncryption 26:ef:db:74:3a:d3:72:91:11:eb:47:a0:b9:19:1e:68:ed:ec: 1b:04:e2:78:db:e6:49:e9:cc:79:9f:63:a7:ff:88:b2:f9:1a: 65:fe:52:b6:af:60:51:ff:36:7d:49:c6:e9:2a:a0:e4:85:0a: ab:b1:54:6f:f4:8d:ee:9e:1c:2d:43:a6:1b:eb:a2:6a:63:e6: 0f:b3:0b:40:f2:87:be:c4:65:84:e0:fc:e5:33:d4:9e:fb:27: f8:2f:74:a1:04:60:04:82:a5:0a:33:01:07:39:c3:7b:ba:44: f6:c0:a8:09:19:5b:55:94:3b:dd:f4:04:ba:be:cd:c0:20:6c: 5a:96:09:70:da:42:e5:04:20:86:7b:b5:30:f8:b1:b4:dc:91: eb:09:4a:4f:31:50:07:62:8b:08:86:78:90:41:18:29:aa:5a: 3d:db:59:aa:2a:91:e1:94:28:71:79:f4:85:07:ed:7e:e6:c8: b0:93:f9:ae:f9:82:4b:33:7c:f5:70:63:8f:9e:3b:ed:88:eb: 32:8d:3c:a3:0f:b3:99:c9:43:9b:74:69:f5:ee:73:c6:80:f8: f7:4e:17:cf:91:dd:e4:45:25:80:c2:f6:c0:2b:30:7b:bc:be: 41:63:d7:55:01:58:f1:e4:a3:3a:55:fe:da:5c:60:72:7c:b6: b2:3f:3c:4c -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgIUCgn6QdkgxoABPd/AhNkCxfBHCxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2 QUZEQzM1MTAeFw0yNjA1MTExNjQwNTVaFw0yNzA1MTAxNjQ1NTVaMDMxMTAvBgNV BAMTKDc3MTA3RkJEMTU4MzE4REUwOUE2REJDMEIwRjM0OUI5MTY0N0Q4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWSTL95yUcjwLnERqVx8Uk74g 9hdpglNKH7DLWnHkNi7E1uhGD6CBFqMP6JA1TUNLgTsvuMekkXLmMQkcQtNJZLx+ qByepwgTNm/ZPqC8hxvo/ih7nk2TF6GeQJYAdQBvf+rXEJTp7fOkItx/gZ6OzGkE ToQhXf/+n7HGHRhgYucCNCelm1/QJ8idaElRRr53rzzQbgjN+MJ9V3oUVGoKccyV qbolMTtgA0fyYZLBAZIUII4yqOmmO4sS4sRhnoiwZutM3SXRHZqno7CZE5ceepmm LtWIlcK/ggFEFhdlUr3oFN0PGzyuRjt7SHW41y5B+jM5QqXQld8vRMV3tb4xAgMB AAGjggHWMIIB0jAdBgNVHQ4EFgQUdxB/vRWDGN4JptvAsPNJuRZH2PowHwYDVR0j BBgwFoAUwDS9nHI13C0swf1+IdQ90Gr9w1EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAv QzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2QUZEQzM1MS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9DMDM0QkQ5QzcyMzVEQzJEMkNDMUZEN0UyMUQ0M0RE MDZBRkRDMzUxLmNlcjBzBggrBgEFBQcBCwRnMGUwYwYIKwYBBQUHMAuGV3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAvMzEzNjMzMmUzMjM5MmUzMDJl MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzczODMyLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAox0wDQYJ KoZIhvcNAQELBQADggEBACbv23Q603KREetHoLkZHmjt7BsE4njb5knpzHmfY6f/ iLL5GmX+UravYFH/Nn1JxukqoOSFCquxVG/0je6eHC1Dphvrompj5g+zC0Dyh77E ZYTg/OUz1J77J/gvdKEEYASCpQozAQc5w3u6RPbAqAkZW1WUO930BLq+zcAgbFqW CXDaQuUEIIZ7tTD4sbTckesJSk8xUAdiiwiGeJBBGCmqWj3bWaoqkeGUKHF59IUH 7X7myLCT+a75gkszfPVwY4+eO+2I6zKNPKMPs5nJQ5t0afXuc8aA+PdOF8+R3eRF JYDC9sArMHu8vkFj11UBWPHkozpV/tpcYHJ8trI/PEw= -----END CERTIFICATE-----Generated at Wed May 13 21:08:36 2026 by rpki-client