$ rpki-client -vvf rpkica.twnic.tw/rpki/GSN/0/3231312e37392e3132382e302f31392d3139203d3e2034373832.roa File: 3231312e37392e3132382e302f31392d3139203d3e2034373832.roa (raw, json) Hash identifier: /QiJMlPs1/pxye04spLNZHzDsoGhtgiX4yfIqbEq1wY= Subject key identifier: D4:BA:DB:4F:F5:B3:B6:FD:A8:C2:D1:36:00:E8:FE:E0:35:33:4D:C4 Certificate issuer: /CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Certificate serial: 4E2EF94C5BFA3C7A0AAE19EDBCADFAB7C2B63EF6 Authority key identifier: C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GSN/0/3231312e37392e3132382e302f31392d3139203d3e2034373832.roa Signing time: Mon 11 May 2026 16:45:58 +0000 ROA not before: Mon 11 May 2026 16:40:58 +0000 ROA not after: Mon 10 May 2027 16:45:58 +0000 asID: 4782 IP address blocks: 211.79.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:2e:f9:4c:5b:fa:3c:7a:0a:ae:19:ed:bc:ad:fa:b7:c2:b6:3e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Validity Not Before: May 11 16:40:58 2026 GMT Not After : May 10 16:45:58 2027 GMT Subject: CN=D4BADB4FF5B3B6FDA8C2D13600E8FEE035334DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:0b:9b:91:5d:99:1b:3d:33:32:cf:3b:b1: ff:21:5f:89:9a:f9:42:0b:1c:c8:e3:dc:be:4d:96: da:c3:a3:91:85:5c:27:75:fd:f6:f8:a6:ea:d5:d3: 14:ec:f2:7b:72:db:73:ca:01:f4:a8:3a:35:0f:e4: 91:e4:f0:7a:1e:b2:30:5a:bf:83:4b:0f:b0:58:dc: 08:50:70:de:fb:72:56:f0:39:9c:01:72:ee:d1:96: b7:57:1b:c6:c3:39:f6:5f:90:65:27:70:5b:96:02: 87:9d:22:c7:55:64:5e:82:40:60:b8:c0:43:f0:f0: 59:86:94:58:5e:9e:b8:90:de:2d:67:ac:c9:db:8e: 4e:e3:b0:6e:d9:b9:ea:d5:ea:24:77:7c:64:32:86: d5:cf:b6:ab:aa:88:bf:eb:e4:53:1b:18:d4:af:ad: 18:44:a8:92:13:94:1e:e1:24:2e:46:8f:78:66:dd: 53:88:53:08:7f:86:8d:2a:97:f0:de:40:f5:38:31: 3a:65:04:43:a5:96:ae:4b:93:8e:94:07:4e:ee:ad: 9c:5a:c4:70:d2:f8:b8:1a:7c:74:3a:23:8b:d0:ef: bc:ed:71:7b:38:e6:3e:a4:a2:cd:dc:51:e5:d0:fd: fc:44:6f:ba:3e:f1:09:cf:fa:51:b8:72:2b:6d:56: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BA:DB:4F:F5:B3:B6:FD:A8:C2:D1:36:00:E8:FE:E0:35:33:4D:C4 X509v3 Authority Key Identifier: keyid:C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSN/0/3231312e37392e3132382e302f31392d3139203d3e2034373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.79.128.0/19 Signature Algorithm: sha256WithRSAEncryption ae:cf:eb:a3:a2:a4:09:02:28:44:63:e1:6e:1d:f2:c3:64:a5: 86:e2:37:11:66:a0:8a:39:11:28:52:f4:c3:55:fa:7d:0d:37: e9:56:49:78:24:e1:81:18:ce:33:d8:a3:61:a7:b8:75:54:76: b7:3c:a4:f7:eb:7b:60:9c:5d:f0:6e:01:eb:a0:d1:25:38:2d: 35:72:0e:cb:6f:05:c7:6f:ff:3c:ff:2b:c3:80:8e:36:4c:36: 3f:d0:40:01:b3:c6:48:c3:06:3c:2d:dd:79:2e:e2:1e:9f:41: a5:85:d8:e7:87:ce:d5:34:24:b9:c5:46:09:70:3b:03:74:a5: 86:d2:82:96:42:c6:27:fc:3e:f3:17:61:56:23:c4:ed:5a:29: 1f:d6:ac:66:95:33:12:13:a0:bb:47:95:36:b0:d6:fe:9f:9c: bf:41:49:c4:0d:f3:86:1b:4a:c4:0f:93:b0:12:e5:af:f4:1a: 8b:91:06:d7:70:00:19:74:bd:0a:21:0f:37:c8:a8:31:a4:db: fd:99:d6:c2:66:d8:df:24:7c:39:10:c2:b5:72:9d:d2:60:7d: 82:c0:2e:ff:ea:db:d1:c7:ac:b2:44:8c:f0:18:2b:ab:c2:9e: 70:b4:d1:3d:8c:4c:d6:04:79:4a:55:fb:34:1f:39:da:42:f1: d8:d5:a6:9c -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUTi75TFv6PHoKrhntvK36t8K2PvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2 QUZEQzM1MTAeFw0yNjA1MTExNjQwNThaFw0yNzA1MTAxNjQ1NThaMDMxMTAvBgNV BAMTKEQ0QkFEQjRGRjVCM0I2RkRBOEMyRDEzNjAwRThGRUUwMzUzMzREQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFDAubkV2ZGz0zMs87sf8hX4ma +UILHMjj3L5NltrDo5GFXCd1/fb4purV0xTs8nty23PKAfSoOjUP5JHk8HoesjBa v4NLD7BY3AhQcN77clbwOZwBcu7RlrdXG8bDOfZfkGUncFuWAoedIsdVZF6CQGC4 wEPw8FmGlFhenriQ3i1nrMnbjk7jsG7ZuerV6iR3fGQyhtXPtquqiL/r5FMbGNSv rRhEqJITlB7hJC5Gj3hm3VOIUwh/ho0ql/DeQPU4MTplBEOllq5Lk46UB07urZxa xHDS+LgafHQ6I4vQ77ztcXs45j6kos3cUeXQ/fxEb7o+8QnP+lG4cittVqudAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQU1LrbT/Wztv2owtE2AOj+4DUzTcQwHwYDVR0j BBgwFoAUwDS9nHI13C0swf1+IdQ90Gr9w1EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAv QzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2QUZEQzM1MS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9DMDM0QkQ5QzcyMzVEQzJEMkNDMUZEN0UyMUQ0M0RE MDZBRkRDMzUxLmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYBBQUHMAuGW3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAvMzIzMTMxMmUzNzM5MmUzMTMy MzgyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzNDM3MzgzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdNP gDANBgkqhkiG9w0BAQsFAAOCAQEArs/ro6KkCQIoRGPhbh3yw2SlhuI3EWagijkR KFL0w1X6fQ036VZJeCThgRjOM9ijYae4dVR2tzyk9+t7YJxd8G4B66DRJTgtNXIO y28Fx2//PP8rw4CONkw2P9BAAbPGSMMGPC3deS7iHp9BpYXY54fO1TQkucVGCXA7 A3SlhtKClkLGJ/w+8xdhViPE7VopH9asZpUzEhOgu0eVNrDW/p+cv0FJxA3zhhtK xA+TsBLlr/Qai5EG13AAGXS9CiEPN8ioMaTb/ZnWwmbY3yR8ORDCtXKd0mB9gsAu /+rb0cesskSM8Bgrq8KecLTRPYxM1gR5SlX7NB852kLx2NWmnA== -----END CERTIFICATE-----Generated at Wed May 13 21:48:42 2026 by rpki-client