$ rpki-client -vvf rpkica.twnic.tw/rpki/HST/0/3130332e3134342e33342e302f32332d3234203d3e20313331363636.roa File: 3130332e3134342e33342e302f32332d3234203d3e20313331363636.roa (raw, json) Hash identifier: Wv08z2tY7w2z0229EEvjyYYNTE6epIRCshOK3YEh39Y= Subject key identifier: B8:4C:F1:C1:A9:89:41:4B:DD:7D:D6:BA:72:C0:D7:74:34:2E:1D:F8 Certificate issuer: /CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44 Certificate serial: 1C1AF946DF9F4681BD9CAF85A6816B2C051C7DF3 Authority key identifier: E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HST/0/3130332e3134342e33342e302f32332d3234203d3e20313331363636.roa Signing time: Mon 11 May 2026 17:28:48 +0000 ROA not before: Mon 11 May 2026 17:23:48 +0000 ROA not after: Mon 10 May 2027 17:28:48 +0000 asID: 131666 IP address blocks: 103.144.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:1a:f9:46:df:9f:46:81:bd:9c:af:85:a6:81:6b:2c:05:1c:7d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D26C09449CEB4EE5FD7CC200B073CA53BCA44 Validity Not Before: May 11 17:23:48 2026 GMT Not After : May 10 17:28:48 2027 GMT Subject: CN=B84CF1C1A989414BDD7DD6BA72C0D774342E1DF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c3:c9:6a:91:10:d6:6a:90:87:8c:88:58:72: 36:65:81:ed:69:4b:1e:5f:4c:92:b0:a4:86:5e:55: c6:6f:c9:de:00:d8:9b:87:a3:ce:47:ce:47:db:ac: 65:3b:a1:f5:b2:cd:a1:6e:ca:42:2d:06:1a:d6:30: eb:85:4f:7b:0f:bc:08:51:fc:f3:a9:81:63:40:e9: 1f:96:23:74:ae:b7:7e:04:9c:66:43:df:a7:d8:f3: 2f:eb:d6:83:c9:77:97:46:b3:f8:27:d2:cc:95:72: 48:34:1b:5a:35:9b:06:49:42:d8:0a:e5:1b:84:95: 64:72:d0:d2:f0:f8:1c:f5:98:8d:37:43:13:65:c6: 30:f1:f7:d1:79:ec:9d:c5:52:3c:a8:4b:56:ac:e2: a6:d6:6e:63:10:36:e1:aa:93:fd:ab:e3:a7:ee:03: bb:be:10:40:78:97:a8:4b:66:a1:93:ac:d6:23:b3: 49:82:b9:55:8f:80:df:d4:61:ab:0c:32:69:1b:ac: ac:af:52:3e:2c:ed:61:2b:b1:31:67:cd:29:e7:3b: c2:6a:25:04:c8:85:30:51:a1:1e:4d:5f:bc:e3:8e: ed:e6:be:61:ab:c3:e7:70:81:64:0a:7a:3d:88:36: 3f:14:12:11:62:af:31:90:0a:9e:82:30:df:73:84: 9e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4C:F1:C1:A9:89:41:4B:DD:7D:D6:BA:72:C0:D7:74:34:2E:1D:F8 X509v3 Authority Key Identifier: keyid:E8:7D:26:C0:94:49:CE:B4:EE:5F:D7:CC:20:0B:07:3C:A5:3B:CA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HST/0/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E87D26C09449CEB4EE5FD7CC200B073CA53BCA44.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HST/0/3130332e3134342e33342e302f32332d3234203d3e20313331363636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.34.0/23 Signature Algorithm: sha256WithRSAEncryption 44:60:61:84:df:7f:09:cf:6d:84:af:dc:e0:d4:3d:e2:85:f4: 74:f1:15:30:ed:6c:ae:48:76:56:01:45:42:2e:1d:c6:54:f3: 63:ea:5f:af:48:c0:97:a4:60:e0:55:57:5b:90:67:bd:bb:60: 8a:28:33:29:c3:e8:8b:6b:cd:c3:d7:ca:fd:f8:76:bc:40:8f: 3c:67:8a:94:61:98:f4:e1:d9:cd:25:79:27:25:39:da:d8:72: 03:f1:de:b4:ad:04:01:a3:a9:32:22:ca:d7:98:6f:c2:26:24: 3b:65:a7:52:01:b6:78:5d:aa:47:de:f9:d7:fb:9e:c2:44:1f: 70:2d:f5:b5:e3:d9:7c:eb:a3:6d:b9:31:12:a0:66:9c:4f:51: 14:fc:77:7e:c7:15:a1:85:c4:23:70:b9:e1:71:69:9b:9d:e1: cf:8f:93:aa:82:e5:04:b7:41:37:00:13:13:e1:17:71:04:52: e8:00:6e:2a:ec:b6:d6:f3:18:e6:12:19:a0:04:16:a3:b8:9f: 52:03:e2:51:9e:cb:ea:8e:51:13:04:11:18:24:58:c6:57:f4: 8c:3f:bf:81:a3:ba:de:66:e2:49:b3:92:88:d9:89:a7:2e:df: ba:d2:34:d5:f8:2b:cf:c3:c4:6f:f3:c3:f0:fb:a8:16:9a:51: bb:28:1e:5e -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUHBr5Rt+fRoG9nK+FpoFrLAUcffMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDI2QzA5NDQ5Q0VCNEVFNUZEN0NDMjAwQjA3M0NB NTNCQ0E0NDAeFw0yNjA1MTExNzIzNDhaFw0yNzA1MTAxNzI4NDhaMDMxMTAvBgNV BAMTKEI4NENGMUMxQTk4OTQxNEJERDdERDZCQTcyQzBENzc0MzQyRTFERjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpw8lqkRDWapCHjIhYcjZlge1p Sx5fTJKwpIZeVcZvyd4A2JuHo85HzkfbrGU7ofWyzaFuykItBhrWMOuFT3sPvAhR /POpgWNA6R+WI3Sut34EnGZD36fY8y/r1oPJd5dGs/gn0syVckg0G1o1mwZJQtgK 5RuElWRy0NLw+Bz1mI03QxNlxjDx99F57J3FUjyoS1as4qbWbmMQNuGqk/2r46fu A7u+EEB4l6hLZqGTrNYjs0mCuVWPgN/UYasMMmkbrKyvUj4s7WErsTFnzSnnO8Jq JQTIhTBRoR5NX7zjju3mvmGrw+dwgWQKej2INj8UEhFirzGQCp6CMN9zhJ4nAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUuEzxwamJQUvdfda6csDXdDQuHfgwHwYDVR0j BBgwFoAU6H0mwJRJzrTuX9fMIAsHPKU7ykQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFNULzAv RTg3RDI2QzA5NDQ5Q0VCNEVFNUZEN0NDMjAwQjA3M0NBNTNCQ0E0NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9FODdEMjZDMDk0NDlDRUI0RUU1RkQ3Q0MyMDBCMDcz Q0E1M0JDQTQ0LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSFNULzAvMzEzMDMzMmUzMTM0MzQyZTMz MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMzMzEzNjM2MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnkCIwDQYJKoZIhvcNAQELBQADggEBAERgYYTffwnPbYSv3ODUPeKF9HTxFTDt bK5IdlYBRUIuHcZU82PqX69IwJekYOBVV1uQZ727YIooMynD6ItrzcPXyv34drxA jzxnipRhmPTh2c0leSclOdrYcgPx3rStBAGjqTIiyteYb8ImJDtlp1IBtnhdqkfe +df7nsJEH3At9bXj2Xzro225MRKgZpxPURT8d37HFaGFxCNwueFxaZud4c+Pk6qC 5QS3QTcAExPhF3EEUugAbirsttbzGOYSGaAEFqO4n1ID4lGey+qOURMEERgkWMZX 9Iw/v4Gjut5m4kmzkojZiacu37rSNNX4K8/DxG/zw/D7qBaaUbsoHl4= -----END CERTIFICATE-----Generated at Wed May 13 21:11:02 2026 by rpki-client