$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/0/AS131661.roa File: AS131661.roa (raw, json) Hash identifier: GC1IoAO6Ejpr0QLxXQG0EEvUHXjC0oImhEap8vTe9lQ= Subject key identifier: EB:56:50:67:D2:5D:93:4A:33:8C:26:36:85:4F:79:92:E6:67:55:79 Certificate issuer: /CN=6276AF5AEFB216534D76803A45D67CADC23447BD Certificate serial: 136C5237A824C46A675E6E5B388C66D47CE529B2 Authority key identifier: 62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/0/AS131661.roa Signing time: Mon 11 May 2026 17:04:32 +0000 ROA not before: Mon 11 May 2026 16:59:32 +0000 ROA not after: Mon 10 May 2027 17:04:32 +0000 asID: 131661 IP address blocks: 210.62.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:6c:52:37:a8:24:c4:6a:67:5e:6e:5b:38:8c:66:d4:7c:e5:29:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6276AF5AEFB216534D76803A45D67CADC23447BD Validity Not Before: May 11 16:59:32 2026 GMT Not After : May 10 17:04:32 2027 GMT Subject: CN=EB565067D25D934A338C2636854F7992E6675579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:48:cd:e8:24:86:14:f2:f5:67:44:fc:0c:8d: b6:c6:ab:1a:14:86:9c:9e:df:e5:e1:e0:7f:53:4e: 83:8b:c7:6d:cb:17:76:26:08:04:59:87:fc:4b:67: 41:b7:a1:b9:a5:92:a1:71:7b:8a:a1:09:c8:25:b4: 63:31:d8:01:10:20:5a:9a:49:53:fe:f3:06:01:d4: 80:23:26:e3:5f:6a:a8:22:c7:78:b7:9c:fd:af:3c: 57:70:1f:5c:f3:93:ce:5d:0e:d6:bb:a1:78:9b:be: a1:25:8e:02:d6:fc:9f:7a:34:0d:20:5d:99:de:05: 27:75:d0:4a:71:9c:ac:d1:25:00:82:56:6f:29:f3: 49:4d:97:72:a4:fd:5a:4b:10:71:06:9c:d2:d8:bb: d5:68:cc:ab:0c:ed:14:ae:e1:f6:e9:a3:42:c6:c2: ee:3b:8d:bd:6b:26:89:38:f2:a3:11:2d:62:ca:f6: 55:b9:52:c6:a8:ad:38:47:46:82:6d:4e:95:d2:cd: 99:a8:d2:c7:f9:a8:69:f4:b1:a4:69:df:c6:b5:e6: b6:d4:c6:5b:7f:c0:11:8a:e5:29:3e:0d:b8:f5:e8: 46:ea:7b:a5:a4:44:d9:4b:3b:7b:67:d8:28:a6:f5: c7:4c:b0:89:ab:7e:58:17:f7:4e:e5:5c:a7:12:8c: d4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:56:50:67:D2:5D:93:4A:33:8C:26:36:85:4F:79:92:E6:67:55:79 X509v3 Authority Key Identifier: keyid:62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/0/AS131661.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.62.250.0/24 Signature Algorithm: sha256WithRSAEncryption 41:cc:01:61:52:7a:6c:33:10:c2:08:c5:48:74:48:62:4e:42: 2d:71:30:98:2b:4f:9f:f6:fa:7f:af:c4:60:7c:b3:8d:f7:7d: 0b:47:09:01:39:c6:2f:a0:0d:f9:cb:dc:eb:06:6b:8c:25:a5: 20:bb:80:75:48:60:43:be:c3:de:8c:32:a4:df:74:ad:14:b3: 4a:44:50:1c:67:c8:77:9c:0a:d6:db:40:fb:2e:85:36:e3:c2: 4e:54:4e:e3:8f:8a:21:79:41:ab:90:d3:38:a3:d8:95:93:37: 70:61:99:b7:76:4d:80:33:2a:2d:b1:59:a9:79:ac:3d:3f:37: 19:a2:72:b1:50:26:cd:da:af:4e:3f:95:06:99:af:01:af:57: 3b:10:bd:f9:32:78:90:a8:13:7b:4e:6a:27:ef:7d:f4:a6:38: 57:9f:f6:87:86:df:e6:df:a8:1e:7c:7f:73:85:15:91:2a:65: 5a:f3:e1:15:57:04:e7:68:33:92:3a:86:36:e0:87:72:4c:b2: 4a:1b:d8:14:60:53:14:ff:40:f0:67:30:18:f5:20:63:1d:c8: 54:27:b7:01:df:54:fe:77:24:c4:42:22:f0:74:ab:01:08:c5: 13:90:26:c5:4c:6c:95:67:d4:95:67:a4:d7:81:57:28:ed:c7: 84:62:03:98 -----BEGIN CERTIFICATE----- MIIEqTCCA5GgAwIBAgIUE2xSN6gkxGpnXm5bOIxm1HzlKbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI3NkFGNUFFRkIyMTY1MzRENzY4MDNBNDVENjdDQURD MjM0NDdCRDAeFw0yNjA1MTExNjU5MzJaFw0yNzA1MTAxNzA0MzJaMDMxMTAvBgNV BAMTKEVCNTY1MDY3RDI1RDkzNEEzMzhDMjYzNjg1NEY3OTkyRTY2NzU1NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/SM3oJIYU8vVnRPwMjbbGqxoU hpye3+Xh4H9TToOLx23LF3YmCARZh/xLZ0G3obmlkqFxe4qhCcgltGMx2AEQIFqa SVP+8wYB1IAjJuNfaqgix3i3nP2vPFdwH1zzk85dDta7oXibvqEljgLW/J96NA0g XZneBSd10EpxnKzRJQCCVm8p80lNl3Kk/VpLEHEGnNLYu9VozKsM7RSu4fbpo0LG wu47jb1rJok48qMRLWLK9lW5UsaorThHRoJtTpXSzZmo0sf5qGn0saRp38a15rbU xlt/wBGK5Sk+Dbj16Ebqe6WkRNlLO3tn2Cim9cdMsImrflgX907lXKcSjNRtAgMB AAGjggGzMIIBrzAdBgNVHQ4EFgQU61ZQZ9Jdk0ozjCY2hU95kuZnVXkwHwYDVR0j BBgwFoAUYnavWu+yFlNNdoA6RdZ8rcI0R70wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv MC82Mjc2QUY1QUVGQjIxNjUzNEQ3NjgwM0E0NUQ2N0NBREMyMzQ0N0JELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzYyNzZBRjVBRUZCMjE2NTM0RDc2ODAzQTQ1RDY3 Q0FEQzIzNDQ3QkQuY2VyME0GCCsGAQUFBwELBEEwPzA9BggrBgEFBQcwC4YxcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8wL0FTMTMxNjYxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQA0j76MA0GCSqGSIb3DQEBCwUAA4IBAQBBzAFhUnpsMxDCCMVIdEhiTkIt cTCYK0+f9vp/r8RgfLON930LRwkBOcYvoA35y9zrBmuMJaUgu4B1SGBDvsPejDKk 33StFLNKRFAcZ8h3nArW20D7LoU248JOVE7jj4oheUGrkNM4o9iVkzdwYZm3dk2A MyotsVmpeaw9PzcZonKxUCbN2q9OP5UGma8Br1c7EL35MniQqBN7Tmon7330pjhX n/aHht/m36gefH9zhRWRKmVa8+EVVwTnaDOSOoY24IdyTLJKG9gUYFMU/0DwZzAY 9SBjHchUJ7cB31T+dyTEQiLwdKsBCMUTkCbFTGyVZ9SVZ6TXgVco7ceEYgOY -----END CERTIFICATE-----Generated at Wed May 13 21:51:29 2026 by rpki-client