$ rpki-client -vvf rpkica.twnic.tw/rpki/IDT/0/3232332e32362e342e302f32332d3234203d3e20313532313739.roa File: 3232332e32362e342e302f32332d3234203d3e20313532313739.roa (raw, json) Hash identifier: 1KuxfqT20KEMU13K1PoNgkxwUh6tXjO/u8vuBPBbPvM= Subject key identifier: F1:D9:3B:1A:32:D1:BB:47:74:E5:2D:43:BA:51:DD:D7:13:E9:B2:C2 Certificate issuer: /CN=35C866BE000DEAB870C97BED72D0A7807B829E4D Certificate serial: 30DF5AACE00A9602E67306642ED13265BCED8D95 Authority key identifier: 35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IDT/0/3232332e32362e342e302f32332d3234203d3e20313532313739.roa Signing time: Mon 11 May 2026 17:56:22 +0000 ROA not before: Mon 11 May 2026 17:51:22 +0000 ROA not after: Mon 10 May 2027 17:56:22 +0000 asID: 152179 IP address blocks: 223.26.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:df:5a:ac:e0:0a:96:02:e6:73:06:64:2e:d1:32:65:bc:ed:8d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35C866BE000DEAB870C97BED72D0A7807B829E4D Validity Not Before: May 11 17:51:22 2026 GMT Not After : May 10 17:56:22 2027 GMT Subject: CN=F1D93B1A32D1BB4774E52D43BA51DDD713E9B2C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bf:76:0c:18:75:7a:5a:72:18:bc:3a:99:f3: d3:c3:b7:1b:7f:5a:4a:fd:a8:94:b8:31:8e:09:1e: c8:0a:f1:33:63:00:81:b3:57:01:83:41:35:59:0f: b4:6f:8f:18:6e:56:78:5c:75:aa:3d:92:9c:74:46: 3f:94:d3:eb:90:d4:cd:89:eb:c3:e9:fc:c3:5d:af: 8a:3d:10:48:02:6d:af:d3:c4:32:44:56:96:5d:a1: 4e:94:42:25:05:65:db:26:bd:34:1a:b2:c9:07:50: 62:c1:4f:7e:23:97:7f:a4:a6:84:6e:bb:49:b3:48: ec:ef:ec:ae:a3:79:e3:04:19:02:0d:27:bc:36:43: a9:fd:5b:9d:62:8d:59:71:02:74:c5:c9:75:10:c8: af:29:d4:d5:24:da:cf:05:77:a7:01:20:0e:52:90: 3d:87:1b:a1:42:68:a1:d3:ba:3d:cd:13:fd:46:7d: 4d:cb:ea:29:49:d3:23:f4:08:60:26:01:be:62:68: 04:fc:b8:a5:bd:55:e0:da:b3:5f:b3:8b:2b:b9:d8: 93:28:63:d0:77:2e:8a:f2:c0:4e:6c:f7:9a:ad:76: 27:69:94:c7:89:f5:61:24:7e:7c:70:cb:28:f2:00: e0:10:35:19:c5:f7:2d:90:09:11:f0:96:5b:31:7c: e7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D9:3B:1A:32:D1:BB:47:74:E5:2D:43:BA:51:DD:D7:13:E9:B2:C2 X509v3 Authority Key Identifier: keyid:35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IDT/0/3232332e32362e342e302f32332d3234203d3e20313532313739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.26.4.0/23 Signature Algorithm: sha256WithRSAEncryption 22:58:55:06:05:1e:58:3e:bd:3e:47:84:25:81:d8:9c:ad:28: 6b:9b:00:d0:f5:f4:d7:4c:90:8d:c3:fa:65:8e:c8:58:a6:39: 1b:e8:7b:01:0c:a8:3d:2d:05:1d:c6:71:7d:d3:df:bc:3a:36: 8a:8e:08:87:bf:57:70:d8:cf:b0:50:97:fd:3f:f9:60:86:ea: 0d:3a:39:9b:0e:f1:a9:ae:82:9c:ba:ef:29:b9:8f:b5:b1:72: b1:da:41:5e:ee:e4:e2:25:7b:11:95:45:d5:8d:8c:1f:53:ec: 4c:0f:2e:ff:62:8b:eb:27:81:73:49:dd:65:ed:ff:33:4e:52: c4:53:f0:6d:df:65:0d:c2:62:d5:b0:a9:cb:1e:6f:3a:5d:9c: 3e:e0:5b:1b:e6:fd:65:51:ea:d4:ec:a3:9f:5a:7a:ad:8e:68: 87:5f:58:28:7b:4b:34:2f:cf:c2:26:3c:67:ef:e3:c6:fb:49: e2:72:62:0e:8f:6d:cc:e2:12:1b:3a:19:7b:1d:cb:7e:c9:e5: 27:90:28:9e:ff:9a:50:e7:7a:b4:1e:e8:3e:05:02:98:91:b4: 9a:7b:eb:d8:ea:6c:93:a5:95:de:26:ff:08:55:bf:ff:d8:31: 73:0c:1c:88:31:c3:21:19:91:b1:b6:bc:7d:39:15:f6:05:95: b9:0e:ee:49 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUMN9arOAKlgLmcwZkLtEyZbztjZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3 QjgyOUU0RDAeFw0yNjA1MTExNzUxMjJaFw0yNzA1MTAxNzU2MjJaMDMxMTAvBgNV BAMTKEYxRDkzQjFBMzJEMUJCNDc3NEU1MkQ0M0JBNTFEREQ3MTNFOUIyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQv3YMGHV6WnIYvDqZ89PDtxt/ Wkr9qJS4MY4JHsgK8TNjAIGzVwGDQTVZD7RvjxhuVnhcdao9kpx0Rj+U0+uQ1M2J 68Pp/MNdr4o9EEgCba/TxDJEVpZdoU6UQiUFZdsmvTQasskHUGLBT34jl3+kpoRu u0mzSOzv7K6jeeMEGQINJ7w2Q6n9W51ijVlxAnTFyXUQyK8p1NUk2s8Fd6cBIA5S kD2HG6FCaKHTuj3NE/1GfU3L6ilJ0yP0CGAmAb5iaAT8uKW9VeDas1+ziyu52JMo Y9B3LorywE5s95qtdidplMeJ9WEkfnxwyyjyAOAQNRnF9y2QCRHwllsxfOfHAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQU8dk7GjLRu0d05S1DulHd1xPpssIwHwYDVR0j BBgwFoAUNchmvgAN6rhwyXvtctCngHuCnk0wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAv MzVDODY2QkUwMDBERUFCODcwQzk3QkVENzJEMEE3ODA3QjgyOUU0RC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zNUM4NjZCRTAwMERFQUI4NzBDOTdCRUQ3MkQwQTc4 MDdCODI5RTRELmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYBBQUHMAuGW3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSURULzAvMzIzMjMzMmUzMjM2MmUzNDJl MzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMjMxMzczOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAd8a BDANBgkqhkiG9w0BAQsFAAOCAQEAIlhVBgUeWD69PkeEJYHYnK0oa5sA0PX010yQ jcP6ZY7IWKY5G+h7AQyoPS0FHcZxfdPfvDo2io4Ih79XcNjPsFCX/T/5YIbqDTo5 mw7xqa6CnLrvKbmPtbFysdpBXu7k4iV7EZVF1Y2MH1PsTA8u/2KL6yeBc0ndZe3/ M05SxFPwbd9lDcJi1bCpyx5vOl2cPuBbG+b9ZVHq1Oyjn1p6rY5oh19YKHtLNC/P wiY8Z+/jxvtJ4nJiDo9tzOISGzoZex3LfsnlJ5Aonv+aUOd6tB7oPgUCmJG0mnvr 2Opsk6WV3ib/CFW//9gxcwwciDHDIRmRsba8fTkV9gWVuQ7uSQ== -----END CERTIFICATE-----Generated at Wed May 13 21:52:12 2026 by rpki-client