$ rpki-client -vvf rpkica.twnic.tw/rpki/GSN/0/3231302e36392e3233342e302f32342d3234203d3e2034373832.roa File: 3231302e36392e3233342e302f32342d3234203d3e2034373832.roa (raw, json) Hash identifier: 1EDOB0BRp1H67cx5ce4EUm7AGvO1r28WnpZQ75ZC5MM= Subject key identifier: 7E:BB:3D:96:E0:97:B5:7E:51:D3:1E:68:FB:69:E3:29:37:76:7D:D2 Certificate issuer: /CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Certificate serial: 786DC95FCD1C098122A7EE2EC3CB641132BB49B4 Authority key identifier: C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GSN/0/3231302e36392e3233342e302f32342d3234203d3e2034373832.roa Signing time: Mon 11 May 2026 17:58:39 +0000 ROA not before: Mon 11 May 2026 17:53:39 +0000 ROA not after: Mon 10 May 2027 17:58:39 +0000 asID: 4782 IP address blocks: 210.69.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6d:c9:5f:cd:1c:09:81:22:a7:ee:2e:c3:cb:64:11:32:bb:49:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Validity Not Before: May 11 17:53:39 2026 GMT Not After : May 10 17:58:39 2027 GMT Subject: CN=7EBB3D96E097B57E51D31E68FB69E32937767DD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f1:69:c2:ea:78:21:6c:15:1e:80:ee:0f:91: 33:07:aa:0f:9b:a4:5c:d1:cf:56:d6:4e:31:82:ce: 12:74:39:c7:7d:db:10:81:d5:ed:ac:9e:86:61:1a: 6a:e8:5f:2e:6e:52:30:1c:c6:7a:49:7b:68:57:a6: 94:9d:22:3d:e9:19:73:f7:bc:43:d9:d0:cf:9a:f9: 5c:44:d6:54:25:fb:e5:fd:5b:20:e1:b8:3b:d9:b1: df:62:d0:41:fc:a6:b8:11:96:63:68:72:5e:6a:d8: 81:f2:51:7b:2a:97:c5:42:ee:83:0b:91:58:80:88: 93:0a:0f:c6:06:64:e6:30:21:11:a6:9d:3b:8d:3b: 61:e7:cf:c9:63:65:ff:4b:4b:b1:2f:7b:23:3c:af: 2b:c6:bf:42:9d:84:38:a9:b2:1f:f3:65:68:e3:f7: aa:50:6a:b0:7e:9e:48:fb:26:b6:24:a8:b1:7c:aa: 0a:1c:13:7c:b0:95:32:fe:d5:6a:12:85:da:94:01: 6c:03:22:39:2d:1a:ff:db:68:e1:a4:64:78:57:52: c6:fa:f8:ce:a5:b9:0e:b7:c1:52:f9:e3:83:43:50: c0:25:37:5f:99:6d:0f:99:60:de:dd:1c:80:95:82: 62:1c:c7:57:c5:61:da:80:d0:7b:18:d6:68:0a:d8: e0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BB:3D:96:E0:97:B5:7E:51:D3:1E:68:FB:69:E3:29:37:76:7D:D2 X509v3 Authority Key Identifier: keyid:C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSN/0/3231302e36392e3233342e302f32342d3234203d3e2034373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.69.234.0/24 Signature Algorithm: sha256WithRSAEncryption b5:22:9a:02:72:c4:8f:db:bb:86:2b:d5:e6:ab:34:c8:9b:42: 60:4e:20:fc:d9:17:ec:05:64:1e:31:e4:77:16:fb:77:ec:23: c6:3b:8f:34:c4:61:ca:78:42:25:5e:c2:10:3b:b3:d4:c1:45: aa:7f:7f:f5:5e:23:6b:52:1b:2b:88:73:1e:b3:52:1b:2a:eb: e2:7d:77:1b:a0:91:57:de:6e:07:ce:4b:9e:de:aa:f3:2a:88: e8:30:f6:6a:a6:84:de:8d:6c:40:68:9f:9e:34:2f:fc:97:38: bb:62:aa:9b:0e:a3:5b:71:f0:28:9f:02:8b:e0:3b:31:80:65: e1:8f:1d:80:8b:12:a6:97:ae:97:47:19:67:38:c5:6d:0f:8a: 34:a9:83:10:f0:d7:5e:06:f5:bc:7f:eb:71:70:ca:12:13:61: 04:c9:d5:44:a5:d9:ac:44:10:5e:81:cf:2c:1c:c0:ad:b4:eb: 43:77:d1:20:58:f1:8c:fd:fd:90:4f:fb:c8:da:92:26:32:e1: a4:4c:12:e2:38:b3:b0:84:60:f8:7f:5f:e8:a9:82:7e:fc:7b: 13:c8:cf:6c:a4:da:fe:85:48:62:3d:61:2f:ef:79:14:5f:f6: fa:f6:80:3d:d9:e7:fe:2c:84:a6:10:2a:c7:d2:a7:6e:e7:5a: 18:a4:f8:ea -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUeG3JX80cCYEip+4uw8tkETK7SbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2 QUZEQzM1MTAeFw0yNjA1MTExNzUzMzlaFw0yNzA1MTAxNzU4MzlaMDMxMTAvBgNV BAMTKDdFQkIzRDk2RTA5N0I1N0U1MUQzMUU2OEZCNjlFMzI5Mzc3NjdERDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH8WnC6nghbBUegO4PkTMHqg+b pFzRz1bWTjGCzhJ0Ocd92xCB1e2snoZhGmroXy5uUjAcxnpJe2hXppSdIj3pGXP3 vEPZ0M+a+VxE1lQl++X9WyDhuDvZsd9i0EH8prgRlmNocl5q2IHyUXsql8VC7oML kViAiJMKD8YGZOYwIRGmnTuNO2Hnz8ljZf9LS7EveyM8ryvGv0KdhDipsh/zZWjj 96pQarB+nkj7JrYkqLF8qgocE3ywlTL+1WoShdqUAWwDIjktGv/baOGkZHhXUsb6 +M6luQ63wVL544NDUMAlN1+ZbQ+ZYN7dHICVgmIcx1fFYdqA0HsY1mgK2ODLAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUfrs9luCXtX5R0x5o+2njKTd2fdIwHwYDVR0j BBgwFoAUwDS9nHI13C0swf1+IdQ90Gr9w1EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAv QzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2QUZEQzM1MS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9DMDM0QkQ5QzcyMzVEQzJEMkNDMUZEN0UyMUQ0M0RE MDZBRkRDMzUxLmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYBBQUHMAuGW3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAvMzIzMTMwMmUzNjM5MmUzMjMz MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzgzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANJF 6jANBgkqhkiG9w0BAQsFAAOCAQEAtSKaAnLEj9u7hivV5qs0yJtCYE4g/NkX7AVk HjHkdxb7d+wjxjuPNMRhynhCJV7CEDuz1MFFqn9/9V4ja1IbK4hzHrNSGyrr4n13 G6CRV95uB85Lnt6q8yqI6DD2aqaE3o1sQGifnjQv/Jc4u2Kqmw6jW3HwKJ8Ci+A7 MYBl4Y8dgIsSppeul0cZZzjFbQ+KNKmDEPDXXgb1vH/rcXDKEhNhBMnVRKXZrEQQ XoHPLBzArbTrQ3fRIFjxjP39kE/7yNqSJjLhpEwS4jizsIRg+H9f6KmCfvx7E8jP bKTa/oVIYj1hL+95FF/2+vaAPdnn/iyEphAqx9KnbudaGKT46g== -----END CERTIFICATE-----Generated at Wed May 13 21:08:32 2026 by rpki-client