$ rpki-client -vvf rpkica.twnic.tw/rpki/JFT/0/323430313a313661303a3a2f33322d3332203d3e203138303431.roa File: 323430313a313661303a3a2f33322d3332203d3e203138303431.roa (raw, json) Hash identifier: i0/pTPKyKu5j66qOAMiRZI9DIMIWaYy8NyfCfY/8Two= Subject key identifier: 6C:B7:92:E5:D5:D4:FE:D6:6F:7F:79:42:2C:81:21:3D:16:26:CC:4C Certificate issuer: /CN=D7FDD2309EFAC257359F67A560160D59D372E164 Certificate serial: 4383CD156510625A8889EBD7E32BF62814671595 Authority key identifier: D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer Subject info access: rsync://rpkica.twnic.tw/rpki/JFT/0/323430313a313661303a3a2f33322d3332203d3e203138303431.roa Signing time: Mon 11 May 2026 17:32:14 +0000 ROA not before: Mon 11 May 2026 17:27:14 +0000 ROA not after: Mon 10 May 2027 17:32:14 +0000 asID: 18041 IP address blocks: 2401:16a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:83:cd:15:65:10:62:5a:88:89:eb:d7:e3:2b:f6:28:14:67:15:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7FDD2309EFAC257359F67A560160D59D372E164 Validity Not Before: May 11 17:27:14 2026 GMT Not After : May 10 17:32:14 2027 GMT Subject: CN=6CB792E5D5D4FED66F7F79422C81213D1626CC4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:36:64:12:3f:46:7b:6a:43:34:51:a7:74:1a: 96:e0:20:87:73:e6:93:5e:61:e0:97:ce:0b:e3:08: 47:3d:77:99:40:00:35:04:fe:a1:f7:81:40:2d:6b: 14:a1:23:1d:c4:70:1a:d8:e9:4b:26:c7:cd:4b:47: f5:4d:80:ef:23:3a:59:8a:0b:82:07:6c:5c:f8:a6: 5e:b9:76:5e:37:12:04:c2:32:b0:d2:e9:70:8d:65: 10:76:d2:1c:d0:4d:b8:98:7b:35:92:3c:47:34:5d: f5:f6:9d:c4:f2:df:5d:84:80:b6:ce:ac:fb:40:15: f1:f9:90:89:93:19:ae:f4:31:d3:8e:77:79:2d:ac: c1:84:75:c5:17:4d:e7:62:61:84:a2:bb:86:b4:5e: d4:67:2f:f8:2a:23:0f:40:61:fb:03:c4:4e:85:48: 6a:56:f8:9f:bf:70:b4:f4:65:03:f0:67:1d:87:61: f0:27:42:7f:83:72:92:6c:12:03:1c:e2:f3:a9:a3: b8:8a:58:eb:d4:02:0b:99:84:b8:df:9b:f6:36:da: 5e:96:de:cb:4f:50:93:83:7e:fa:e4:22:a4:db:cd: d9:bc:86:38:c8:86:0f:59:78:00:c6:21:8d:45:8c: 4c:77:fd:0c:54:b5:55:9b:f0:1a:24:fb:e3:5b:66: c6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B7:92:E5:D5:D4:FE:D6:6F:7F:79:42:2C:81:21:3D:16:26:CC:4C X509v3 Authority Key Identifier: keyid:D7:FD:D2:30:9E:FA:C2:57:35:9F:67:A5:60:16:0D:59:D3:72:E1:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/JFT/0/D7FDD2309EFAC257359F67A560160D59D372E164.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D7FDD2309EFAC257359F67A560160D59D372E164.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JFT/0/323430313a313661303a3a2f33322d3332203d3e203138303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:16a0::/32 Signature Algorithm: sha256WithRSAEncryption b4:1a:a2:f0:0f:23:27:d9:20:29:5f:2f:56:3d:97:c2:85:8b: 77:f4:90:a3:d3:48:ba:bc:b1:43:9d:35:da:da:c1:01:20:dc: ac:44:c2:82:d5:95:e3:e3:85:87:bf:7a:39:f8:c8:65:2f:79: 98:c6:52:cd:79:be:3e:0d:ea:df:7d:6b:b2:0b:a4:4a:be:2d: 15:2f:26:ad:76:c6:6e:dc:03:89:73:92:02:c7:35:b2:73:82: 95:6d:30:46:48:a7:5a:5c:0e:cf:d4:eb:5e:82:e8:0b:15:3f: 2c:4c:3b:09:c0:3c:08:13:47:cf:b4:10:63:9e:34:88:60:29: 39:4c:05:c7:47:af:e5:1c:10:81:4a:ff:78:7e:49:48:a9:37: 27:2e:54:1e:19:92:38:04:a8:74:e1:4f:f0:c4:ca:e4:a9:22: 67:c0:f2:61:2d:97:2f:91:d6:e1:0f:8e:3a:21:e6:5c:aa:a0: a1:1b:0e:8e:ac:eb:f8:c9:96:d5:53:8d:5a:c7:54:df:2b:73: 22:4f:1b:15:b7:15:98:06:ef:b4:43:22:6b:24:bb:56:51:d2: 9d:2e:07:1e:6e:bb:44:31:c8:3d:ce:e7:0d:bb:7e:e1:f3:2b: ec:3f:51:a5:ae:f4:61:16:bf:e6:62:3a:57:76:98:9b:d5:9f: 3a:9f:c0:c3 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQ4PNFWUQYlqIievX4yv2KBRnFZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGREQyMzA5RUZBQzI1NzM1OUY2N0E1NjAxNjBENTlE MzcyRTE2NDAeFw0yNjA1MTExNzI3MTRaFw0yNzA1MTAxNzMyMTRaMDMxMTAvBgNV BAMTKDZDQjc5MkU1RDVENEZFRDY2RjdGNzk0MjJDODEyMTNEMTYyNkNDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCINmQSP0Z7akM0Uad0GpbgIIdz 5pNeYeCXzgvjCEc9d5lAADUE/qH3gUAtaxShIx3EcBrY6Usmx81LR/VNgO8jOlmK C4IHbFz4pl65dl43EgTCMrDS6XCNZRB20hzQTbiYezWSPEc0XfX2ncTy312EgLbO rPtAFfH5kImTGa70MdOOd3ktrMGEdcUXTediYYSiu4a0XtRnL/gqIw9AYfsDxE6F SGpW+J+/cLT0ZQPwZx2HYfAnQn+DcpJsEgMc4vOpo7iKWOvUAguZhLjfm/Y22l6W 3stPUJODfvrkIqTbzdm8hjjIhg9ZeADGIY1FjEx3/QxUtVWb8Bok++NbZsaXAgMB AAGjggHcMIIB2DAdBgNVHQ4EFgQUbLeS5dXU/tZvf3lCLIEhPRYmzEwwHwYDVR0j BBgwFoAU1/3SMJ76wlc1n2elYBYNWdNy4WQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkZULzAv RDdGREQyMzA5RUZBQzI1NzM1OUY2N0E1NjAxNjBENTlEMzcyRTE2NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9EN0ZERDIzMDlFRkFDMjU3MzU5RjY3QTU2MDE2MEQ1 OUQzNzJFMTY0LmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYBBQUHMAuGW3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkZULzAvMzIzNDMwMzEzYTMxMzY2MTMw M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzEzODMwMzQzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQB FqAwDQYJKoZIhvcNAQELBQADggEBALQaovAPIyfZIClfL1Y9l8KFi3f0kKPTSLq8 sUOdNdrawQEg3KxEwoLVlePjhYe/ejn4yGUveZjGUs15vj4N6t99a7ILpEq+LRUv Jq12xm7cA4lzkgLHNbJzgpVtMEZIp1pcDs/U616C6AsVPyxMOwnAPAgTR8+0EGOe NIhgKTlMBcdHr+UcEIFK/3h+SUipNycuVB4ZkjgEqHThT/DEyuSpImfA8mEtly+R 1uEPjjoh5lyqoKEbDo6s6/jJltVTjVrHVN8rcyJPGxW3FZgG77RDImsku1ZR0p0u Bx5uu0QxyD3O5w27fuHzK+w/UaWu9GEWv+ZiOld2mJvVnzqfwMM= -----END CERTIFICATE-----Generated at Wed May 13 21:12:07 2026 by rpki-client