$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/3131312e3138342e302e302f31352d3234203d3e2039343136.roa File: 3131312e3138342e302e302f31352d3234203d3e2039343136.roa (raw, json) Hash identifier: Runn9jrJftVZZHWnnUu2CINMQKCLSDBLeWby9y81t9k= Subject key identifier: 7B:A4:E2:0F:81:00:30:B4:81:A6:3B:A0:0F:76:85:AE:46:57:52:98 Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 63E3DB68B6BF3267C9082600C4F9982074272D9C Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/3131312e3138342e302e302f31352d3234203d3e2039343136.roa Signing time: Mon 22 Jun 2026 02:23:49 +0000 ROA not before: Mon 22 Jun 2026 02:18:49 +0000 ROA not after: Mon 21 Jun 2027 02:23:49 +0000 asID: 9416 IP address blocks: 111.184.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e3:db:68:b6:bf:32:67:c9:08:26:00:c4:f9:98:20:74:27:2d:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 02:18:49 2026 GMT Not After : Jun 21 02:23:49 2027 GMT Subject: CN=7BA4E20F810030B481A63BA00F7685AE46575298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:20:f3:35:67:41:11:2e:86:f1:07:8f:7b:69: c2:c5:3c:02:8a:79:5e:6a:34:ca:30:c1:04:9e:c9: cf:8c:da:c2:3c:4c:3f:77:09:0a:de:42:c1:4a:4a: a6:c5:18:c4:c2:dd:79:26:10:9c:db:c1:4e:ad:20: 5d:32:6a:1f:0e:82:97:f6:0f:fd:a6:66:8f:fc:7e: f3:79:c9:82:2c:ba:7d:93:06:1f:6b:0f:a9:da:72: 9c:ba:49:5f:e3:ac:7b:d7:3a:0e:da:dd:a3:91:f8: 1f:72:a9:c3:01:5f:fa:fa:9e:74:48:f4:c9:1e:a5: 15:de:59:b2:6d:2c:fc:ed:b9:7f:83:ae:6d:05:88: e0:eb:e7:6b:90:e2:27:2e:af:48:9a:b6:bc:0a:1e: 02:f0:99:10:01:f4:4e:5b:39:d8:7e:1d:53:de:05: f3:a8:42:66:f9:03:83:de:84:77:b8:6b:07:a2:e0: 79:14:28:ce:96:08:1c:e2:0d:58:39:fa:4c:ce:cb: d3:fe:3a:39:0f:a4:ab:93:02:d8:51:b3:a4:66:22: 0f:25:06:fc:3d:ba:03:30:1d:d3:90:a4:52:46:d1: f9:4c:32:88:0a:49:07:6a:61:1a:cd:4a:09:7c:b7: 59:68:13:5a:1f:d1:bd:2a:c9:65:45:e3:75:5d:ef: fe:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A4:E2:0F:81:00:30:B4:81:A6:3B:A0:0F:76:85:AE:46:57:52:98 X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/3131312e3138342e302e302f31352d3234203d3e2039343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 111.184.0.0/15 Signature Algorithm: sha256WithRSAEncryption 06:d3:4a:e4:10:37:17:f3:52:d3:b6:a2:d2:76:f2:0b:1a:ef: 02:7a:c4:48:87:c5:66:30:02:c3:32:ee:e8:b2:4f:cf:93:14: f9:50:16:55:51:ab:20:3e:0a:6b:3c:a2:63:79:d0:ed:55:93: 0f:4d:ce:34:a2:3e:c8:e1:c7:26:2d:67:5f:ab:6f:a5:7e:5a: d3:6d:e0:45:f8:86:b2:c3:51:6c:7f:69:7e:82:53:d1:9e:5c: 87:b8:50:17:aa:46:ec:bb:40:dc:b5:24:7e:4e:17:75:b3:2f: 88:af:91:f1:04:38:c1:8e:fd:3b:62:1a:9a:ba:3c:e6:e6:ef: 4f:21:2c:05:98:ea:ea:5c:10:2a:61:6c:2d:2c:5c:6d:ed:92: d9:65:c4:0e:fd:2c:af:e9:1e:23:74:d9:95:d2:90:b9:f6:2f: 2b:c5:12:5f:04:1a:08:a1:96:4a:17:3c:bc:ad:d9:ee:81:90: a8:ed:07:2f:0f:1d:b5:de:4e:be:cf:87:47:31:76:01:32:33: a9:96:92:48:6a:32:81:29:ca:5b:da:88:3b:e5:59:34:91:47: ea:0e:37:75:35:3e:d6:2f:7e:8c:9b:65:b7:84:58:de:f1:ba: 1e:6f:14:56:c5:6c:1f:9c:37:03:b6:54:a7:b5:67:a7:fc:26: a3:a0:bb:b8 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgIUY+PbaLa/MmfJCCYAxPmYIHQnLZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMjE4NDlaFw0yNzA2MjEwMjIzNDlaMDMxMTAvBgNV BAMTKDdCQTRFMjBGODEwMDMwQjQ4MUE2M0JBMDBGNzY4NUFFNDY1NzUyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVIPM1Z0ERLobxB497acLFPAKK eV5qNMowwQSeyc+M2sI8TD93CQreQsFKSqbFGMTC3XkmEJzbwU6tIF0yah8Ogpf2 D/2mZo/8fvN5yYIsun2TBh9rD6nacpy6SV/jrHvXOg7a3aOR+B9yqcMBX/r6nnRI 9MkepRXeWbJtLPztuX+Drm0FiODr52uQ4icur0iatrwKHgLwmRAB9E5bOdh+HVPe BfOoQmb5A4PehHe4awei4HkUKM6WCBziDVg5+kzOy9P+OjkPpKuTAthRs6RmIg8l Bvw9ugMwHdOQpFJG0flMMogKSQdqYRrNSgl8t1loE1of0b0qyWVF43Vd7/69AgMB AAGjggHYMIIB1DAdBgNVHQ4EFgQUe6TiD4EAMLSBpjugD3aFrkZXUpgwHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzEzMTMxMmUzMTM4MzQyZTMw MmUzMDJmMzEzNTJkMzIzNDIwM2QzZTIwMzkzNDMxMzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwFvuDAN BgkqhkiG9w0BAQsFAAOCAQEABtNK5BA3F/NS07ai0nbyCxrvAnrESIfFZjACwzLu 6LJPz5MU+VAWVVGrID4KazyiY3nQ7VWTD03ONKI+yOHHJi1nX6tvpX5a023gRfiG ssNRbH9pfoJT0Z5ch7hQF6pG7LtA3LUkfk4XdbMviK+R8QQ4wY79O2Iamro85ubv TyEsBZjq6lwQKmFsLSxcbe2S2WXEDv0sr+keI3TZldKQufYvK8USXwQaCKGWShc8 vK3Z7oGQqO0HLw8dtd5Ovs+HRzF2ATIzqZaSSGoygSnKW9qIO+VZNJFH6g43dTU+ 1i9+jJtlt4RY3vG6Hm8UVsVsH5w3A7ZUp7Vnp/wmo6C7uA== -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:00 2026 by rpki-client