$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/0/AS137280.roa File: AS137280.roa (raw, json) Hash identifier: Nimwoq/pwaao4AXvgj/szRa4h3REXLWJ5APd4SsjUP8= Subject key identifier: 38:50:37:94:C8:FB:73:99:B5:2A:49:E4:1B:F9:39:47:0B:8D:A6:E3 Certificate issuer: /CN=6276AF5AEFB216534D76803A45D67CADC23447BD Certificate serial: 552D0AD6784E88FA2BE970C1FFBA673B5D3DCFB5 Authority key identifier: 62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/0/AS137280.roa Signing time: Mon 11 May 2026 17:08:02 +0000 ROA not before: Mon 11 May 2026 17:03:02 +0000 ROA not after: Mon 10 May 2027 17:08:02 +0000 asID: 137280 IP address blocks: 203.69.19.0/24 maxlen: 24 203.69.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2d:0a:d6:78:4e:88:fa:2b:e9:70:c1:ff:ba:67:3b:5d:3d:cf:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6276AF5AEFB216534D76803A45D67CADC23447BD Validity Not Before: May 11 17:03:02 2026 GMT Not After : May 10 17:08:02 2027 GMT Subject: CN=38503794C8FB7399B52A49E41BF939470B8DA6E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:25:54:6a:cd:b4:3a:d2:e4:5e:19:1d:b6: 39:11:31:c7:3b:ce:f2:5e:1a:bc:9c:81:5e:9a:00: d3:d5:e6:2e:ca:c8:4e:a5:21:c4:24:c2:5e:3a:5d: 77:a3:f6:89:a6:1c:d0:d8:8a:e5:fb:45:91:86:75: 37:2e:e1:c8:77:70:66:6d:a6:02:c6:d4:7d:de:5e: 74:b4:82:8e:e9:2c:b7:7a:cc:41:22:6e:8f:d3:cc: 89:ba:3a:3e:74:a7:f0:13:f3:3f:47:f1:05:11:97: e8:fd:16:09:05:75:51:68:e8:c6:cc:4e:85:d2:9e: fb:10:a9:62:f1:4b:64:9f:92:db:42:ea:6d:e7:11: 6e:b3:a7:ce:3e:00:a0:00:a6:1d:49:27:a6:92:b7: 05:ce:88:6d:82:14:ab:b5:d7:85:d6:dd:b2:6e:2d: 0a:a0:16:5f:4e:31:c8:6c:98:8a:01:c4:54:98:34: 96:8e:05:f8:72:ba:6f:73:55:e6:3b:d5:3c:60:0f: f2:2f:d3:a0:88:fe:04:d9:a6:87:88:58:76:28:84: bc:c7:a2:bd:27:95:61:33:a3:89:4c:c4:59:59:a0: 6e:ca:2a:fa:c5:c1:0d:e0:30:17:83:db:b1:46:4a: b6:05:15:47:7e:b8:be:e2:9d:1a:f3:c4:8f:b2:ea: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:50:37:94:C8:FB:73:99:B5:2A:49:E4:1B:F9:39:47:0B:8D:A6:E3 X509v3 Authority Key Identifier: keyid:62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/0/AS137280.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.69.19.0/24 203.69.33.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:16:05:ef:1a:a9:8b:db:1d:03:f9:33:07:70:d8:37:09:5e: 75:49:be:7c:93:0d:15:c3:c4:cb:1f:4b:89:30:7d:05:36:a8: 1c:dd:02:2d:6e:7d:7e:d1:3f:cb:89:da:a5:ec:72:b9:25:aa: 31:4c:cc:81:8a:13:65:31:da:f0:c8:95:d5:dd:4f:0b:30:3e: 3e:32:60:74:ae:80:c5:55:60:58:a6:97:f1:68:2e:81:98:66: e7:a5:49:7f:9a:ae:ba:6b:55:ba:e6:51:75:ab:a5:58:b6:5c: 7f:fd:38:7f:2b:d1:3b:8e:80:73:c9:e0:47:b1:cb:cd:34:b5: 23:68:4f:da:ee:15:eb:1f:df:7b:29:3f:47:bb:73:eb:5e:b0: d3:1c:10:cd:20:57:5b:88:a0:25:09:d6:2f:2d:b9:90:8e:1f: c3:32:dc:cb:3c:92:56:a2:40:58:1e:9c:38:9e:6e:77:18:f6: e6:8d:f7:1a:7f:84:cd:b9:5f:de:30:9e:28:14:f8:3f:1f:41: cb:50:15:d2:fb:a9:16:06:18:c4:b9:c4:00:df:9f:93:c7:a8: 97:86:0f:6c:56:ed:33:79:12:57:ba:47:b0:cf:fe:7f:24:3a: cf:23:70:7f:18:a4:0d:15:c3:ab:04:3c:f8:ce:15:7d:6f:fa: 3d:8f:7c:de -----BEGIN CERTIFICATE----- MIIErzCCA5egAwIBAgIUVS0K1nhOiPor6XDB/7pnO109z7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI3NkFGNUFFRkIyMTY1MzRENzY4MDNBNDVENjdDQURD MjM0NDdCRDAeFw0yNjA1MTExNzAzMDJaFw0yNzA1MTAxNzA4MDJaMDMxMTAvBgNV BAMTKDM4NTAzNzk0QzhGQjczOTlCNTJBNDlFNDFCRjkzOTQ3MEI4REE2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvDiVUas20OtLkXhkdtjkRMcc7 zvJeGrycgV6aANPV5i7KyE6lIcQkwl46XXej9ommHNDYiuX7RZGGdTcu4ch3cGZt pgLG1H3eXnS0go7pLLd6zEEibo/TzIm6Oj50p/AT8z9H8QURl+j9FgkFdVFo6MbM ToXSnvsQqWLxS2SfkttC6m3nEW6zp84+AKAAph1JJ6aStwXOiG2CFKu114XW3bJu LQqgFl9OMchsmIoBxFSYNJaOBfhyum9zVeY71TxgD/Iv06CI/gTZpoeIWHYohLzH or0nlWEzo4lMxFlZoG7KKvrFwQ3gMBeD27FGSrYFFUd+uL7inRrzxI+y6tUpAgMB AAGjggG5MIIBtTAdBgNVHQ4EFgQUOFA3lMj7c5m1KknkG/k5RwuNpuMwHwYDVR0j BBgwFoAUYnavWu+yFlNNdoA6RdZ8rcI0R70wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv MC82Mjc2QUY1QUVGQjIxNjUzNEQ3NjgwM0E0NUQ2N0NBREMyMzQ0N0JELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzYyNzZBRjVBRUZCMjE2NTM0RDc2ODAzQTQ1RDY3 Q0FEQzIzNDQ3QkQuY2VyME0GCCsGAQUFBwELBEEwPzA9BggrBgEFBQcwC4YxcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8wL0FTMTM3MjgwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIA ATAMAwQAy0UTAwQAy0UhMA0GCSqGSIb3DQEBCwUAA4IBAQA8FgXvGqmL2x0D+TMH cNg3CV51Sb58kw0Vw8TLH0uJMH0FNqgc3QItbn1+0T/Lidql7HK5JaoxTMyBihNl MdrwyJXV3U8LMD4+MmB0roDFVWBYppfxaC6BmGbnpUl/mq66a1W65lF1q6VYtlx/ /Th/K9E7joBzyeBHscvNNLUjaE/a7hXrH997KT9Hu3PrXrDTHBDNIFdbiKAlCdYv LbmQjh/DMtzLPJJWokBYHpw4nm53GPbmjfcaf4TNuV/eMJ4oFPg/H0HLUBXS+6kW BhjEucQA35+Tx6iXhg9sVu0zeRJXukewz/5/JDrPI3B/GKQNFcOrBDz4zhV9b/o9 j3ze -----END CERTIFICATE-----Generated at Wed May 13 21:51:08 2026 by rpki-client