$ rpki-client -vvf rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232342e302f32332d3234203d3e20313334383233.roa File: 3130332e3232372e3232342e302f32332d3234203d3e20313334383233.roa (raw, json) Hash identifier: GuzN1ophfvX5EgHLKpJRkwlqpD4JGNW35OZ+ZCoqD78= Subject key identifier: C0:D9:C1:48:B6:53:22:A1:18:58:8A:A5:6F:CB:6B:9E:6D:DA:4E:FA Certificate issuer: /CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0 Certificate serial: 42F7BDB319FA5F4CEB1F7FB3470DCFF1E7BFC33B Authority key identifier: A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232342e302f32332d3234203d3e20313334383233.roa Signing time: Mon 11 May 2026 17:55:50 +0000 ROA not before: Mon 11 May 2026 17:50:50 +0000 ROA not after: Mon 10 May 2027 17:55:50 +0000 asID: 134823 IP address blocks: 103.227.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:f7:bd:b3:19:fa:5f:4c:eb:1f:7f:b3:47:0d:cf:f1:e7:bf:c3:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7827E4E53BA517BBC5C798CF0D3AF870375C0B0 Validity Not Before: May 11 17:50:50 2026 GMT Not After : May 10 17:55:50 2027 GMT Subject: CN=C0D9C148B65322A118588AA56FCB6B9E6DDA4EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:b7:b9:a2:85:04:60:37:60:90:0d:5f:5b: 34:3c:c1:11:32:55:ca:5e:37:ff:e5:ba:b3:54:cb: a3:d6:4a:5e:99:c8:a5:b5:8e:9b:69:c0:d2:a6:89: 76:f3:46:58:30:80:5e:e7:c3:90:2e:20:b8:4e:ee: ed:71:59:ac:21:69:0c:fd:1c:64:c7:f1:22:ab:35: d7:40:59:6f:41:45:34:47:8d:2a:f6:f4:56:cb:bf: 2b:0f:b9:09:d0:cc:77:04:17:3e:3d:f9:ea:7b:e5: 91:e6:a5:cb:55:05:92:50:25:15:5e:7f:5f:03:c3: 0d:e3:7d:60:d3:bd:d2:2c:73:40:74:e9:99:44:d0: 0d:43:cd:d7:d1:21:1c:c5:f3:09:7b:1b:fe:b7:0c: 1c:d3:72:4e:c9:88:0e:2d:35:1a:67:19:ab:62:67: 46:26:8e:ef:32:64:54:12:ae:76:9b:fb:b7:73:b0: 86:fa:59:f0:90:b0:d9:03:d6:c6:68:3b:be:49:9e: 9e:95:44:86:84:96:fa:47:88:8b:69:46:85:1e:c5: 63:e7:38:f1:79:3e:24:81:be:8a:ae:7f:01:5a:dc: b5:94:33:03:24:69:aa:d7:e0:5b:9d:b2:8e:07:9b: 7b:51:91:8c:99:2b:d5:dd:94:e2:93:2b:2e:2e:c5: 2a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D9:C1:48:B6:53:22:A1:18:58:8A:A5:6F:CB:6B:9E:6D:DA:4E:FA X509v3 Authority Key Identifier: keyid:A7:82:7E:4E:53:BA:51:7B:BC:5C:79:8C:F0:D3:AF:87:03:75:C0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A7827E4E53BA517BBC5C798CF0D3AF870375C0B0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IMCRS/0/3130332e3232372e3232342e302f32332d3234203d3e20313334383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.224.0/23 Signature Algorithm: sha256WithRSAEncryption 03:8f:64:9a:05:dc:21:18:b1:c7:97:78:38:69:c0:5f:02:65: 7c:5d:ab:06:04:4a:ea:db:b2:a5:23:ab:68:51:be:9f:fc:62: f4:08:74:69:ba:e3:62:8b:a7:e5:9b:81:f3:55:e0:29:43:ca: dd:3c:91:cc:59:87:13:d9:95:4a:42:1c:62:66:3b:dd:5f:f3: 76:f3:3a:f7:69:60:2b:58:d5:95:f8:3f:ae:35:05:3f:ee:4a: 7f:b2:78:59:3a:94:9b:05:75:e0:ff:8a:3b:bf:67:07:e8:a1: bb:a6:6f:e1:c5:4c:3c:f1:d4:94:84:61:b1:a2:db:6f:60:ec: 4c:6b:68:9b:ff:1b:eb:31:93:b5:2b:a6:23:53:07:39:40:e6: 68:44:01:3a:f6:f6:8a:0e:69:f0:af:8f:c6:84:42:2d:74:f9: a9:f8:15:6d:77:ca:5d:cb:69:84:3b:39:05:e4:9a:8e:12:34: 57:10:b0:b0:53:00:3f:12:25:47:da:0b:9f:92:1c:a3:2b:22: 80:f2:0a:82:a4:f8:f4:d7:bc:28:a2:c6:20:b0:2e:dc:cd:4c: 31:55:c9:78:83:e6:f7:9a:5e:81:c3:6c:42:ef:d7:df:69:9e: 5f:5b:4a:75:d1:9d:48:34:62:7b:92:2f:f7:23:7e:d8:db:c4: d6:a5:2e:b7 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUQve9sxn6X0zrH3+zRw3P8ee/wzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MjdFNEU1M0JBNTE3QkJDNUM3OThDRjBEM0FGODcw Mzc1QzBCMDAeFw0yNjA1MTExNzUwNTBaFw0yNzA1MTAxNzU1NTBaMDMxMTAvBgNV BAMTKEMwRDlDMTQ4QjY1MzIyQTExODU4OEFBNTZGQ0I2QjlFNkREQTRFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Yre5ooUEYDdgkA1fWzQ8wREy VcpeN//lurNUy6PWSl6ZyKW1jptpwNKmiXbzRlgwgF7nw5AuILhO7u1xWawhaQz9 HGTH8SKrNddAWW9BRTRHjSr29FbLvysPuQnQzHcEFz49+ep75ZHmpctVBZJQJRVe f18Dww3jfWDTvdIsc0B06ZlE0A1DzdfRIRzF8wl7G/63DBzTck7JiA4tNRpnGati Z0Ymju8yZFQSrnab+7dzsIb6WfCQsNkD1sZoO75Jnp6VRIaElvpHiItpRoUexWPn OPF5PiSBvoqufwFa3LWUMwMkaarX4Fudso4Hm3tRkYyZK9XdlOKTKy4uxSqVAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUwNnBSLZTIqEYWIqlb8trnm3aTvowHwYDVR0j BBgwFoAUp4J+TlO6UXu8XHmM8NOvhwN1wLAwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSU1DUlMv MC9BNzgyN0U0RTUzQkE1MTdCQkM1Qzc5OENGMEQzQUY4NzAzNzVDMEIwLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0E3ODI3RTRFNTNCQTUxN0JCQzVDNzk4Q0YwRDNB Rjg3MDM3NUMwQjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEFBQcwC4ZjcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9JTUNSUy8wLzMxMzAzMzJlMzIzMjM3 MmUzMjMyMzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMzMzQzODMyMzMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFn4+AwDQYJKoZIhvcNAQELBQADggEBAAOPZJoF3CEYsceXeDhpwF8C ZXxdqwYESurbsqUjq2hRvp/8YvQIdGm642KLp+WbgfNV4ClDyt08kcxZhxPZlUpC HGJmO91f83bzOvdpYCtY1ZX4P641BT/uSn+yeFk6lJsFdeD/iju/Zwfoobumb+HF TDzx1JSEYbGi229g7ExraJv/G+sxk7UrpiNTBzlA5mhEATr29ooOafCvj8aEQi10 +an4FW13yl3LaYQ7OQXkmo4SNFcQsLBTAD8SJUfaC5+SHKMrIoDyCoKk+PTXvCii xiCwLtzNTDFVyXiD5veaXoHDbELv199pnl9bSnXRnUg0YnuSL/cjftjbxNalLrc= -----END CERTIFICATE-----Generated at Wed May 13 21:16:12 2026 by rpki-client