$ rpki-client -vvf rpkica.twnic.tw/rpki/ISHISH/0/323430303a356561303a3a2f33322d3438203d3e203338303437.roa File: 323430303a356561303a3a2f33322d3438203d3e203338303437.roa (raw, json) Hash identifier: O+ZSz165chMSG9TTTLbDA5gMMFC44YPDzN30YRcNezw= Subject key identifier: CA:5F:17:E3:3E:DA:50:3C:2B:A7:B8:9A:2B:97:B4:4F:5D:F6:5A:85 Certificate issuer: /CN=D82B42B328967B86227F939C5515F94575F4B06F Certificate serial: 59A0E60281C986F0FDCF6DC443909DBC331AB004 Authority key identifier: D8:2B:42:B3:28:96:7B:86:22:7F:93:9C:55:15:F9:45:75:F4:B0:6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ISHISH/0/323430303a356561303a3a2f33322d3438203d3e203338303437.roa Signing time: Mon 11 May 2026 17:15:35 +0000 ROA not before: Mon 11 May 2026 17:10:35 +0000 ROA not after: Mon 10 May 2027 17:15:35 +0000 asID: 38047 IP address blocks: 2400:5ea0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.crl rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a0:e6:02:81:c9:86:f0:fd:cf:6d:c4:43:90:9d:bc:33:1a:b0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D82B42B328967B86227F939C5515F94575F4B06F Validity Not Before: May 11 17:10:35 2026 GMT Not After : May 10 17:15:35 2027 GMT Subject: CN=CA5F17E33EDA503C2BA7B89A2B97B44F5DF65A85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:8b:ce:c1:76:e3:77:97:af:2e:b5:3a:b1: e5:61:9f:67:54:ec:2a:09:cd:30:a1:fb:87:d5:83: 94:f6:c0:ef:66:bc:b4:64:c2:7d:db:4a:76:0a:a5: d4:9b:e0:55:fc:58:7a:a6:dd:7c:5c:eb:a8:3a:d8: f0:af:9d:07:df:0b:0e:f3:38:d6:5a:31:94:fb:f7: 4a:62:12:b7:74:ed:2c:2d:23:30:39:6a:7c:78:da: cb:22:6e:ed:ea:96:a8:d9:32:c4:8b:ef:2e:bb:35: 7d:ec:0c:16:ff:27:70:e6:ec:a0:a4:24:e9:b4:96: f5:71:a7:1e:5d:d1:0a:c7:e1:6b:5b:16:ff:89:8a: 69:a1:cf:74:8d:dd:53:7c:b9:37:cc:a6:d1:d5:23: 5f:b9:a0:4a:02:2e:62:45:42:b5:ec:e0:f7:1a:08: d4:1e:5e:3e:68:8f:f1:79:1f:1c:2f:89:8c:44:c1: 16:31:3e:44:1d:61:8b:f5:d7:e2:6e:63:7c:b1:f8: 38:0e:65:c2:e1:a5:00:65:28:c5:1f:26:29:29:7e: 2a:f5:19:8c:9d:ae:e9:eb:49:a5:0d:df:7b:1c:eb: 5f:1f:71:24:f7:17:87:a6:dd:22:3a:f6:78:c2:8d: 99:4c:87:bc:e5:bd:8d:12:b4:23:87:a9:dd:9d:c2: b8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5F:17:E3:3E:DA:50:3C:2B:A7:B8:9A:2B:97:B4:4F:5D:F6:5A:85 X509v3 Authority Key Identifier: keyid:D8:2B:42:B3:28:96:7B:86:22:7F:93:9C:55:15:F9:45:75:F4:B0:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ISHISH/0/D82B42B328967B86227F939C5515F94575F4B06F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D82B42B328967B86227F939C5515F94575F4B06F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ISHISH/0/323430303a356561303a3a2f33322d3438203d3e203338303437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:5ea0::/32 Signature Algorithm: sha256WithRSAEncryption 24:55:38:50:4b:b3:71:45:18:d9:9c:69:0a:3c:09:64:41:81: 91:3e:83:6a:90:05:02:eb:19:9a:1f:de:65:31:d5:4f:05:7e: 61:71:5d:b3:19:53:1c:d9:9b:74:2e:9f:13:c3:84:99:1b:37: 96:83:7c:33:0b:68:d2:3f:c8:b3:1f:ed:93:9d:e5:52:80:f2: 10:b7:15:78:7f:c2:88:8b:0f:77:2e:c8:4b:af:3b:2a:2d:41: ac:0b:dc:9e:69:18:1e:ba:ec:67:29:ad:36:69:03:8a:2c:c0: c5:9d:d3:81:a2:ec:45:27:a8:7a:1c:05:5f:60:19:d1:86:76: 4a:91:d4:03:8a:3d:7f:fe:03:17:58:a7:65:b4:60:ee:a8:9e: 00:2e:41:dc:62:07:a7:2b:fe:a0:13:13:3e:fe:d0:87:de:64: 9b:aa:95:6e:22:4a:3d:0f:1f:d5:06:1c:3c:02:fe:f6:39:1e: b1:b8:a6:a7:24:a4:e6:c7:9c:7f:59:a4:eb:28:b5:c0:7e:a2: e2:f6:1d:f4:76:c6:82:f4:01:e3:98:15:0c:12:e5:a8:c6:1e: 31:13:c2:97:f8:60:b7:a0:de:a7:32:12:28:52:d4:4f:82:e0: 66:19:ab:45:26:60:32:8b:07:59:46:dc:8b:b0:c3:06:7a:2b: f9:5c:ef:6c -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUWaDmAoHJhvD9z23EQ5CdvDMasAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgyQjQyQjMyODk2N0I4NjIyN0Y5MzlDNTUxNUY5NDU3 NUY0QjA2RjAeFw0yNjA1MTExNzEwMzVaFw0yNzA1MTAxNzE1MzVaMDMxMTAvBgNV BAMTKENBNUYxN0UzM0VEQTUwM0MyQkE3Qjg5QTJCOTdCNDRGNURGNjVBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3IvOwXbjd5evLrU6seVhn2dU 7CoJzTCh+4fVg5T2wO9mvLRkwn3bSnYKpdSb4FX8WHqm3Xxc66g62PCvnQffCw7z ONZaMZT790piErd07SwtIzA5anx42ssibu3qlqjZMsSL7y67NX3sDBb/J3Dm7KCk JOm0lvVxpx5d0QrH4WtbFv+Jimmhz3SN3VN8uTfMptHVI1+5oEoCLmJFQrXs4Pca CNQeXj5oj/F5HxwviYxEwRYxPkQdYYv11+JuY3yx+DgOZcLhpQBlKMUfJikpfir1 GYydrunrSaUN33sc618fcST3F4em3SI69njCjZlMh7zlvY0StCOHqd2dwrjDAgMB AAGjggHiMIIB3jAdBgNVHQ4EFgQUyl8X4z7aUDwrp7iaK5e0T132WoUwHwYDVR0j BBgwFoAU2CtCsyiWe4Yif5OcVRX5RXX0sG8wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSVNISVNI LzAvRDgyQjQyQjMyODk2N0I4NjIyN0Y5MzlDNTUxNUY5NDU3NUY0QjA2Ri5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS9EODJCNDJCMzI4OTY3Qjg2MjI3RjkzOUM1NTE1 Rjk0NTc1RjRCMDZGLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSVNISVNILzAvMzIzNDMwMzAzYTM1 NjU2MTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzODMwMzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQAXqAwDQYJKoZIhvcNAQELBQADggEBACRVOFBLs3FFGNmcaQo8CWRBgZE+ g2qQBQLrGZof3mUx1U8FfmFxXbMZUxzZm3QunxPDhJkbN5aDfDMLaNI/yLMf7ZOd 5VKA8hC3FXh/woiLD3cuyEuvOyotQawL3J5pGB667GcprTZpA4oswMWd04Gi7EUn qHocBV9gGdGGdkqR1AOKPX/+AxdYp2W0YO6ongAuQdxiB6cr/qATEz7+0IfeZJuq lW4iSj0PH9UGHDwC/vY5HrG4pqckpObHnH9ZpOsotcB+ouL2HfR2xoL0AeOYFQwS 5ajGHjETwpf4YLeg3qcyEihS1E+C4GYZq0UmYDKLB1lG3IuwwwZ6K/lc72w= -----END CERTIFICATE-----Generated at Wed May 13 21:52:10 2026 by rpki-client