$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/3232332e32362e302e302f32342d3234203d3e2039363738.roa File: 3232332e32362e302e302f32342d3234203d3e2039363738.roa (raw, json) Hash identifier: plplmJ8pwlLh3yGAxEbhFQEbbFuJ0mIf0eyJpVvTgks= Subject key identifier: 6C:38:3D:F7:40:62:49:D7:CB:19:EC:E2:54:A3:BB:6F:00:AD:CA:87 Certificate issuer: /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A Certificate serial: 5C1C2495505C9A2251DB89A4E0F11E45FB99E50E Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3232332e32362e302e302f32342d3234203d3e2039363738.roa Signing time: Mon 11 May 2026 17:56:02 +0000 ROA not before: Mon 11 May 2026 17:51:02 +0000 ROA not after: Mon 10 May 2027 17:56:02 +0000 asID: 9678 IP address blocks: 223.26.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1c:24:95:50:5c:9a:22:51:db:89:a4:e0:f1:1e:45:fb:99:e5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A Validity Not Before: May 11 17:51:02 2026 GMT Not After : May 10 17:56:02 2027 GMT Subject: CN=6C383DF7406249D7CB19ECE254A3BB6F00ADCA87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3e:89:9f:4a:40:48:4e:d0:d5:d5:46:90:25: 67:b6:f3:5c:37:49:de:d5:ff:5d:cd:26:0f:74:a6: 7e:1c:d1:ee:b7:6f:f9:4f:09:10:00:2b:a2:48:6b: 78:c0:38:2c:74:d7:49:aa:95:26:bb:7d:15:57:bd: 07:80:10:f4:d5:84:4f:25:25:45:c4:d5:33:a3:f3: 15:6c:6b:52:cf:bb:b8:34:df:5a:d9:b3:b0:cd:12: c9:9c:a3:46:b4:68:0d:05:d5:ce:b4:bf:9e:c5:7e: 18:f5:5b:f8:97:cb:44:5f:c6:af:9c:8a:3d:0c:c7: 93:94:37:c5:90:bc:fb:97:cf:0a:14:6f:4d:4b:db: 62:a5:c2:94:47:62:d6:84:6e:55:de:f3:d3:c4:04: 2b:74:ef:b8:b8:91:df:c4:0c:0e:a8:95:01:e7:9e: 36:21:1a:25:54:e0:eb:e2:9e:19:7c:e1:03:c3:bf: 80:3e:b7:9f:f0:2d:15:fb:bb:22:89:c4:f1:ce:ab: 71:f0:35:0f:c6:f6:07:bf:43:35:d5:2c:32:54:a3: f7:da:bb:2f:7a:ac:04:ce:78:c5:20:f8:93:d6:eb: b1:be:19:98:87:7a:7e:b3:bc:85:4e:4e:7f:d7:7e: 5d:d6:47:ee:c9:a5:6f:21:1f:89:f6:46:5f:a4:10: 87:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:38:3D:F7:40:62:49:D7:CB:19:EC:E2:54:A3:BB:6F:00:AD:CA:87 X509v3 Authority Key Identifier: keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/3232332e32362e302e302f32342d3234203d3e2039363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.26.0.0/24 Signature Algorithm: sha256WithRSAEncryption 08:cb:37:62:bc:2c:a0:5e:35:3b:a2:7e:7f:74:c9:bb:ba:cf: 06:4c:93:45:a0:ec:33:96:7b:a3:e8:52:4b:ca:b8:e5:bd:08: 96:27:19:cf:60:96:88:7f:aa:47:d7:59:31:95:ca:d2:d3:46: ed:5c:b8:e6:1a:eb:ff:ce:49:64:92:ba:b5:03:ec:a3:84:30: f4:62:fd:d3:b8:e3:fa:4e:a2:55:3d:66:db:4d:db:71:1b:04: 4b:1b:de:7e:77:83:94:8f:c5:5d:d1:d2:7d:6e:a0:c6:f3:3b: aa:16:63:36:1b:07:81:9c:2c:d5:e3:f1:40:98:38:aa:02:5a: c1:5b:28:e7:d7:9d:fc:2a:5b:16:81:c7:12:6f:cd:b1:25:6b: dc:20:b9:74:b4:bc:0c:95:0d:61:7c:ee:bf:4c:8b:de:d5:e0: d0:49:5c:95:4b:6d:81:dd:b4:d8:1a:a0:4d:16:4e:d6:98:a8: ce:a6:bd:c3:1e:9f:93:b0:dd:82:ce:ed:60:79:5b:32:b0:a5: b3:45:ff:53:21:7c:31:1a:45:3e:e2:b8:83:7a:ee:0f:58:d0: ec:ea:94:cf:c8:76:eb:80:a3:f2:0c:90:51:c1:ae:f0:33:2c: 48:df:d5:25:0d:db:4e:21:f2:c3:03:af:20:97:2e:87:99:98: ae:db:2c:22 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUXBwklVBcmiJR24mk4PEeRfuZ5Q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBNkYyMEUzOUU4MTk2MkZEMzc3MEM0QzQ0QzVFMTBE RkQzMkQyQTAeFw0yNjA1MTExNzUxMDJaFw0yNzA1MTAxNzU2MDJaMDMxMTAvBgNV BAMTKDZDMzgzREY3NDA2MjQ5RDdDQjE5RUNFMjU0QTNCQjZGMDBBRENBODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDePomfSkBITtDV1UaQJWe281w3 Sd7V/13NJg90pn4c0e63b/lPCRAAK6JIa3jAOCx010mqlSa7fRVXvQeAEPTVhE8l JUXE1TOj8xVsa1LPu7g031rZs7DNEsmco0a0aA0F1c60v57Ffhj1W/iXy0Rfxq+c ij0Mx5OUN8WQvPuXzwoUb01L22KlwpRHYtaEblXe89PEBCt077i4kd/EDA6olQHn njYhGiVU4Ovinhl84QPDv4A+t5/wLRX7uyKJxPHOq3HwNQ/G9ge/QzXVLDJUo/fa uy96rATOeMUg+JPW67G+GZiHen6zvIVOTn/Xfl3WR+7JpW8hH4n2Rl+kEIelAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUbDg990BiSdfLGeziVKO7bwCtyocwHwYDVR0j BBgwFoAUYKbyDjnoGWL9N3DExExeEN/TLSowDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO LzAvNjBBNkYyMEUzOUU4MTk2MkZEMzc3MEM0QzQ0QzVFMTBERkQzMkQyQS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS82MEE2RjIwRTM5RTgxOTYyRkQzNzcwQzRDNDRD NUUxMERGRDMyRDJBLmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElOLzAvMzIzMjMzMmUzMjM2 MmUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzYzNzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 3xoAMA0GCSqGSIb3DQEBCwUAA4IBAQAIyzdivCygXjU7on5/dMm7us8GTJNFoOwz lnuj6FJLyrjlvQiWJxnPYJaIf6pH11kxlcrS00btXLjmGuv/zklkkrq1A+yjhDD0 Yv3TuOP6TqJVPWbbTdtxGwRLG95+d4OUj8Vd0dJ9bqDG8zuqFmM2GweBnCzV4/FA mDiqAlrBWyjn1538KlsWgccSb82xJWvcILl0tLwMlQ1hfO6/TIve1eDQSVyVS22B 3bTYGqBNFk7WmKjOpr3DHp+TsN2Czu1geVsysKWzRf9TIXwxGkU+4riDeu4PWNDs 6pTPyHbrgKPyDJBRwa7wMyxI39UlDdtOIfLDA68gly6HmZiu2ywi -----END CERTIFICATE-----Generated at Wed May 13 21:16:13 2026 by rpki-client