$ rpki-client -vvf rpkica.twnic.tw/rpki/HEALTHNET/0/3230332e36352e3132382e302f31392d3139203d3e2034373832.roa File: 3230332e36352e3132382e302f31392d3139203d3e2034373832.roa (raw, json) Hash identifier: mjDMiNdATFHdMEjP66ppJ/Z0/1InOOtWemdYwazOi5A= Subject key identifier: 7A:7B:73:0B:B1:0B:51:2F:FA:82:62:68:4F:1C:F4:CC:96:F5:11:E3 Certificate issuer: /CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F Certificate serial: 58B340154AAFC340B13F3E617E2D0F63B134DC8F Authority key identifier: 4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/3230332e36352e3132382e302f31392d3139203d3e2034373832.roa Signing time: Mon 11 May 2026 16:50:19 +0000 ROA not before: Mon 11 May 2026 16:45:19 +0000 ROA not after: Mon 10 May 2027 16:50:19 +0000 asID: 4782 IP address blocks: 203.65.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b3:40:15:4a:af:c3:40:b1:3f:3e:61:7e:2d:0f:63:b1:34:dc:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F Validity Not Before: May 11 16:45:19 2026 GMT Not After : May 10 16:50:19 2027 GMT Subject: CN=7A7B730BB10B512FFA8262684F1CF4CC96F511E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:6a:16:e0:31:bf:71:34:42:10:da:dc:e2: 4b:4a:49:99:9d:ad:7d:ab:57:a8:3e:67:bf:61:7e: b5:27:76:99:5e:e5:71:10:9a:1d:c1:18:6d:8a:7f: 06:ce:ab:3d:2b:6e:0f:3a:54:d5:f5:20:7a:df:d3: f3:cd:bb:41:7d:b9:39:2d:ed:b2:46:c4:cf:d0:62: 3e:3f:60:00:27:36:1b:89:da:9c:6a:94:70:10:75: 0a:cc:04:48:60:ab:7e:23:87:f8:d6:b3:8c:73:a0: df:8c:0f:52:d4:d9:39:c4:12:cf:d8:8a:39:7e:fe: d8:c2:5b:b8:2e:65:31:8c:8d:4d:5f:82:1c:94:28: 0c:bd:b0:4b:88:20:aa:26:c1:66:26:26:b2:e0:c7: 26:7c:d6:e4:d3:b3:c9:e9:e7:fb:45:a9:4d:4a:02: 31:63:44:ef:cf:fc:49:2c:1b:48:a1:65:8a:2e:92: 51:cc:ea:91:43:f0:b3:ee:3a:ad:3d:cf:6f:3b:66: 5a:ce:0e:18:18:12:38:70:19:43:b4:42:b7:fa:f3: 32:6a:75:39:6d:e7:f2:1f:40:5c:47:e3:c0:f5:a3: e1:9b:22:ae:d7:3d:c3:75:1b:fa:bd:ab:cc:0a:be: d7:90:8d:06:34:2c:da:3f:93:16:be:33:7c:2c:50: a4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7B:73:0B:B1:0B:51:2F:FA:82:62:68:4F:1C:F4:CC:96:F5:11:E3 X509v3 Authority Key Identifier: keyid:4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/3230332e36352e3132382e302f31392d3139203d3e2034373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.65.128.0/19 Signature Algorithm: sha256WithRSAEncryption 29:f5:7a:2e:93:06:b4:c3:18:a4:d3:5c:65:cd:f1:73:31:a5: 63:51:f4:ea:f4:28:de:06:e9:d1:1f:e9:55:8a:38:be:bc:75: 8e:17:31:48:28:80:3c:c7:d6:cd:4f:cb:99:aa:8b:e5:96:09: 0a:5a:06:ae:7a:1e:3f:01:26:a7:ce:02:eb:e0:62:95:6c:91: 74:58:e1:1b:11:7c:95:0c:35:69:1e:23:91:e5:8c:15:df:2c: 27:5f:5c:c8:9d:e4:a1:3e:18:56:4a:a0:85:6e:24:f5:29:af: 50:e2:5f:8b:e3:7b:53:e3:19:3c:99:71:30:66:8a:5d:08:4e: 66:22:21:e7:29:07:c7:b9:b2:49:5c:35:2f:12:7f:c6:10:a0: 10:8f:0e:fe:62:91:7f:cf:92:be:88:f9:13:2c:ca:f9:d8:19: 69:32:06:64:c7:25:13:b0:01:4a:89:29:c8:f9:1c:b8:2b:9e: bd:eb:59:d2:70:a2:75:7c:8c:07:2d:13:81:cd:78:5c:81:dd: b1:84:b6:df:20:d0:12:94:aa:5e:1c:85:9c:b6:83:28:b4:93: af:fd:b7:2f:15:8d:9f:81:50:df:74:06:3a:d5:eb:6a:a3:32: 74:de:c7:2d:90:f9:bb:38:32:af:39:ba:96:5c:35:86:96:0e: 55:31:93:b3 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUWLNAFUqvw0CxPz5hfi0PY7E03I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMz OUI4MTQ1RjAeFw0yNjA1MTExNjQ1MTlaFw0yNzA1MTAxNjUwMTlaMDMxMTAvBgNV BAMTKDdBN0I3MzBCQjEwQjUxMkZGQTgyNjI2ODRGMUNGNENDOTZGNTExRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqDWoW4DG/cTRCENrc4ktKSZmd rX2rV6g+Z79hfrUndple5XEQmh3BGG2KfwbOqz0rbg86VNX1IHrf0/PNu0F9uTkt 7bJGxM/QYj4/YAAnNhuJ2pxqlHAQdQrMBEhgq34jh/jWs4xzoN+MD1LU2TnEEs/Y ijl+/tjCW7guZTGMjU1fghyUKAy9sEuIIKomwWYmJrLgxyZ81uTTs8np5/tFqU1K AjFjRO/P/EksG0ihZYouklHM6pFD8LPuOq09z287ZlrODhgYEjhwGUO0Qrf68zJq dTlt5/IfQFxH48D1o+GbIq7XPcN1G/q9q8wKvteQjQY0LNo/kxa+M3wsUKSNAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUentzC7ELUS/6gmJoTxz0zJb1EeMwHwYDVR0j BBgwFoAUTX+s9eSGHa9FXzG8rrt2Ezm4FF8wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRI TkVULzAvNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMzOUI4MTQ1Ri5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RDdGQUNGNUU0ODYxREFGNDU1RjMxQkNB RUJCNzYxMzM5QjgxNDVGLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuG YXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRITkVULzAvMzIzMDMz MmUzNjM1MmUzMTMyMzgyZTMwMmYzMTM5MmQzMTM5MjAzZDNlMjAzNDM3MzgzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBctBgDANBgkqhkiG9w0BAQsFAAOCAQEAKfV6LpMGtMMYpNNcZc3x czGlY1H06vQo3gbp0R/pVYo4vrx1jhcxSCiAPMfWzU/LmaqL5ZYJCloGrnoePwEm p84C6+BilWyRdFjhGxF8lQw1aR4jkeWMFd8sJ19cyJ3koT4YVkqghW4k9SmvUOJf i+N7U+MZPJlxMGaKXQhOZiIh5ykHx7mySVw1LxJ/xhCgEI8O/mKRf8+Svoj5EyzK +dgZaTIGZMclE7ABSokpyPkcuCuevetZ0nCidXyMBy0Tgc14XIHdsYS23yDQEpSq XhyFnLaDKLSTr/23LxWNn4FQ33QGOtXraqMydN7HLZD5uzgyrzm6llw1hpYOVTGT sw== -----END CERTIFICATE-----Generated at Wed May 13 21:08:22 2026 by rpki-client