$ rpki-client -vvf rpkica.twnic.tw/rpki/HEALTHNET/0/3230332e36352e302e302f31372d3137203d3e2034373832.roa File: 3230332e36352e302e302f31372d3137203d3e2034373832.roa (raw, json) Hash identifier: aPv3bOG1weQWYPDGkDtRVOrTNA4jAzlE7y9bBkzaAf8= Subject key identifier: 0C:EB:DC:F4:58:46:08:B1:32:3D:9F:33:09:E7:C3:41:09:69:D6:51 Certificate issuer: /CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F Certificate serial: 4476A9D7715EDC74F89DD7D0BE4DE0D5EAEF30A5 Authority key identifier: 4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/3230332e36352e302e302f31372d3137203d3e2034373832.roa Signing time: Mon 11 May 2026 16:50:18 +0000 ROA not before: Mon 11 May 2026 16:45:18 +0000 ROA not after: Mon 10 May 2027 16:50:18 +0000 asID: 4782 IP address blocks: 203.65.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:76:a9:d7:71:5e:dc:74:f8:9d:d7:d0:be:4d:e0:d5:ea:ef:30:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F Validity Not Before: May 11 16:45:18 2026 GMT Not After : May 10 16:50:18 2027 GMT Subject: CN=0CEBDCF4584608B1323D9F3309E7C3410969D651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:a5:d0:12:ba:61:fb:7b:20:7d:3a:55:29: 09:32:bb:76:d4:44:69:a8:05:c1:b3:b7:7a:db:32: e0:aa:12:a4:2d:64:e3:39:0a:b7:4f:19:29:53:bc: d4:a9:34:49:e0:2a:a7:05:59:60:0b:f7:1e:23:fd: 6d:a5:7f:ea:ce:1b:a6:9f:a0:a4:e0:9f:a8:99:b9: 5b:eb:ed:1b:de:e2:23:15:88:ee:6a:ae:aa:62:40: 54:a1:17:db:5f:6d:0f:24:64:a7:68:7f:f1:8a:f3: 43:39:19:5f:80:be:44:16:5b:ed:51:8e:51:dd:a4: 87:d9:c4:f1:a6:99:e6:e1:6d:28:e6:22:fe:fa:f4: 1b:3c:86:11:24:84:9a:7a:fd:fe:52:a7:0b:ed:7b: 75:b2:6b:3c:2b:58:0d:ed:ab:63:2b:fb:f2:10:f7: 4d:a9:10:e1:fe:9d:59:8f:fd:12:44:ad:ed:73:70: 79:36:d0:cc:d6:e6:e9:57:25:2d:b9:6f:6e:f8:0b: 90:6c:d3:1d:4f:0d:e5:35:d6:8a:5b:29:68:90:19: 19:2f:73:2c:61:f2:d8:1b:e8:cd:36:d8:96:2d:4c: 41:0a:da:89:9a:1f:f7:a2:53:97:82:3e:1d:25:fe: dd:61:2d:25:24:a4:76:90:03:a2:49:b3:74:3b:2a: 2e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EB:DC:F4:58:46:08:B1:32:3D:9F:33:09:E7:C3:41:09:69:D6:51 X509v3 Authority Key Identifier: keyid:4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/3230332e36352e302e302f31372d3137203d3e2034373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.65.0.0/17 Signature Algorithm: sha256WithRSAEncryption 4f:27:fc:86:23:88:e8:10:ea:2b:da:3f:24:5a:74:8c:64:86: 71:18:9a:14:9b:b8:5f:3b:43:cd:4f:1f:c9:a5:19:84:c7:07: 16:58:49:1b:c2:6b:d7:60:fd:54:cd:a2:88:9a:f0:25:52:ec: 17:4f:ad:00:4d:75:37:a3:36:8d:30:0e:82:27:33:c6:ee:61: ca:98:34:6c:1c:f1:22:da:c3:a5:e6:5a:76:e8:46:b9:ac:19: 63:7e:c0:ba:4e:a5:42:b7:3b:e5:92:55:4a:41:55:04:8d:0f: 45:d9:13:63:ff:bb:c6:e4:a9:51:84:9c:cb:8a:a5:7e:1c:a6: b4:c3:bf:33:5a:41:24:03:10:ce:34:01:01:d1:e9:6b:58:19: 60:fc:cf:6e:e2:e7:ab:a0:4b:d3:87:4b:c5:7c:41:25:ca:bf: 78:d3:7a:fc:87:83:f7:c2:ca:ff:2a:fe:57:8c:ea:a9:95:ba: da:dc:d3:89:1c:bf:b4:ae:4c:74:ae:e7:de:6d:f7:4e:ee:d0: d9:f7:0c:19:b7:8a:d4:94:2f:3b:99:b9:49:7e:93:89:d8:19: 89:a7:1c:ee:1e:63:5b:d6:75:81:3a:fd:17:ec:70:85:f2:20: 27:9e:da:e3:f5:5c:e9:8d:56:2e:59:3e:67:a3:d8:3a:dd:c2: 84:54:65:f0 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIURHap13Fe3HT4ndfQvk3g1ervMKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMz OUI4MTQ1RjAeFw0yNjA1MTExNjQ1MThaFw0yNzA1MTAxNjUwMThaMDMxMTAvBgNV BAMTKDBDRUJEQ0Y0NTg0NjA4QjEzMjNEOUYzMzA5RTdDMzQxMDk2OUQ2NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjKXQErph+3sgfTpVKQkyu3bU RGmoBcGzt3rbMuCqEqQtZOM5CrdPGSlTvNSpNEngKqcFWWAL9x4j/W2lf+rOG6af oKTgn6iZuVvr7Rve4iMViO5qrqpiQFShF9tfbQ8kZKdof/GK80M5GV+AvkQWW+1R jlHdpIfZxPGmmebhbSjmIv769Bs8hhEkhJp6/f5Spwvte3WyazwrWA3tq2Mr+/IQ 902pEOH+nVmP/RJEre1zcHk20MzW5ulXJS25b274C5Bs0x1PDeU11opbKWiQGRkv cyxh8tgb6M022JYtTEEK2omaH/eiU5eCPh0l/t1hLSUkpHaQA6JJs3Q7Ki77AgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUDOvc9FhGCLEyPZ8zCefDQQlp1lEwHwYDVR0j BBgwFoAUTX+s9eSGHa9FXzG8rrt2Ezm4FF8wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRI TkVULzAvNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMzOUI4MTQ1Ri5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RDdGQUNGNUU0ODYxREFGNDU1RjMxQkNB RUJCNzYxMzM5QjgxNDVGLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuG XXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRITkVULzAvMzIzMDMz MmUzNjM1MmUzMDJlMzAyZjMxMzcyZDMxMzcyMDNkM2UyMDM0MzczODMyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQHy0EAMA0GCSqGSIb3DQEBCwUAA4IBAQBPJ/yGI4joEOor2j8kWnSMZIZx GJoUm7hfO0PNTx/JpRmExwcWWEkbwmvXYP1UzaKImvAlUuwXT60ATXU3ozaNMA6C JzPG7mHKmDRsHPEi2sOl5lp26Ea5rBljfsC6TqVCtzvlklVKQVUEjQ9F2RNj/7vG 5KlRhJzLiqV+HKa0w78zWkEkAxDONAEB0elrWBlg/M9u4ueroEvTh0vFfEElyr94 03r8h4P3wsr/Kv5XjOqplbra3NOJHL+0rkx0rufebfdO7tDZ9wwZt4rUlC87mblJ fpOJ2BmJpxzuHmNb1nWBOv0X7HCF8iAnntrj9VzpjVYuWT5no9g63cKEVGXw -----END CERTIFICATE-----Generated at Wed May 13 21:48:33 2026 by rpki-client