$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/3138322e3233342e302e302f31362d3234203d3e2039343136.roa File: 3138322e3233342e302e302f31362d3234203d3e2039343136.roa (raw, json) Hash identifier: X8IHCwEZxO4F9rQqDVjk/Lr7kq2ljF2z2HIcVrXKW5g= Subject key identifier: FD:00:28:DD:44:07:F8:23:BB:D2:6D:0D:F8:C5:34:C6:BF:1C:50:91 Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 58FBF2CEBDBF6A1B9A1C2262CDB69839A6F5034A Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/3138322e3233342e302e302f31362d3234203d3e2039343136.roa Signing time: Mon 22 Jun 2026 02:43:50 +0000 ROA not before: Mon 22 Jun 2026 02:38:50 +0000 ROA not after: Mon 21 Jun 2027 02:43:50 +0000 asID: 9416 IP address blocks: 182.234.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fb:f2:ce:bd:bf:6a:1b:9a:1c:22:62:cd:b6:98:39:a6:f5:03:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 02:38:50 2026 GMT Not After : Jun 21 02:43:50 2027 GMT Subject: CN=FD0028DD4407F823BBD26D0DF8C534C6BF1C5091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:85:e6:6d:04:09:47:3f:aa:81:41:e3:13: 1f:d1:af:65:ba:6a:19:83:bb:ff:29:57:fb:86:77: f7:f5:6d:a4:72:70:62:db:df:9a:28:95:fe:6a:17: fc:47:11:37:12:01:03:3c:1f:bd:6d:a2:62:5a:75: d4:2d:39:46:05:91:77:41:0b:3e:df:ff:0c:f5:23: 06:8e:37:8b:f7:34:f9:68:93:d3:b6:bb:fa:9b:6b: 26:1c:92:f6:aa:86:00:27:d0:be:a6:37:be:a3:74: 11:d4:75:50:ee:14:22:5c:95:9d:0b:ab:02:7c:21: 15:e8:fa:ec:5e:3f:3f:13:08:5c:01:f8:73:55:c9: 13:a3:0b:bd:d1:c9:6f:ff:cb:89:34:52:78:30:e6: be:9d:e2:12:59:2e:2b:2d:f0:d2:84:e4:f4:e2:87: a1:9a:de:24:33:96:9b:20:3a:2d:3c:c8:77:f6:44: 34:0c:7c:c1:c0:91:91:47:49:09:fb:e2:8d:de:d9: 94:11:bc:12:45:11:d0:86:9d:8f:dd:63:03:7e:fe: 16:9e:e3:0f:e5:64:6c:1a:eb:63:6a:57:53:7c:6b: 38:49:df:8e:50:26:76:92:a6:47:f2:a9:bf:72:67: 74:10:e9:2b:1b:d7:46:86:0e:7b:dc:c4:ae:f5:a4: b3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:00:28:DD:44:07:F8:23:BB:D2:6D:0D:F8:C5:34:C6:BF:1C:50:91 X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/3138322e3233342e302e302f31362d3234203d3e2039343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.234.0.0/16 Signature Algorithm: sha256WithRSAEncryption 78:dc:ff:8e:92:05:b2:b2:26:a3:ab:52:72:c5:8f:72:e4:da: 62:4b:61:1a:5f:d6:62:ea:f5:9f:e6:bf:0c:db:99:8c:9a:13: 26:9c:c4:ea:a7:70:d5:fa:bb:5f:16:56:02:46:5d:15:af:75: 42:47:02:24:6c:0e:74:39:2c:47:87:6f:3a:79:94:dd:22:f5: d6:5f:b7:7f:1c:d8:3d:30:af:79:3e:9e:72:f6:2f:95:14:8f: 05:dc:20:9b:49:fd:85:80:0c:85:cb:d3:72:60:10:ba:ef:e9: dc:50:75:c9:5d:6c:68:cb:fa:69:c2:1d:6e:25:fe:bb:54:d1: e6:93:4d:e2:35:b5:5e:b3:97:a4:79:7f:4e:2a:0b:f2:bb:77: 09:05:a7:00:55:67:32:6b:81:ed:99:22:c6:ba:f0:12:42:ce: 96:fa:84:5f:56:98:92:49:0b:6c:93:a4:44:1e:e0:8e:03:8c: 5d:7a:e8:b7:07:f8:fa:dc:c9:4b:62:1f:bd:ca:60:c1:64:dc: 58:26:16:71:07:ba:09:ed:cb:84:d4:36:d1:94:c2:14:ef:eb: 32:0f:b9:01:48:fd:5f:36:dd:2b:88:77:33:47:42:a2:a4:1a: 65:39:cf:5e:fd:2a:48:96:f9:00:76:9f:8b:df:bd:6c:cd:24: ee:5d:b9:69 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgIUWPvyzr2/ahuaHCJizbaYOab1A0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMjM4NTBaFw0yNzA2MjEwMjQzNTBaMDMxMTAvBgNV BAMTKEZEMDAyOERENDQwN0Y4MjNCQkQyNkQwREY4QzUzNEM2QkYxQzUwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWoXmbQQJRz+qgUHjEx/Rr2W6 ahmDu/8pV/uGd/f1baRycGLb35oolf5qF/xHETcSAQM8H71tomJaddQtOUYFkXdB Cz7f/wz1IwaON4v3NPlok9O2u/qbayYckvaqhgAn0L6mN76jdBHUdVDuFCJclZ0L qwJ8IRXo+uxePz8TCFwB+HNVyROjC73RyW//y4k0Ungw5r6d4hJZList8NKE5PTi h6Ga3iQzlpsgOi08yHf2RDQMfMHAkZFHSQn74o3e2ZQRvBJFEdCGnY/dYwN+/hae 4w/lZGwa62NqV1N8azhJ345QJnaSpkfyqb9yZ3QQ6Ssb10aGDnvcxK71pLPtAgMB AAGjggHYMIIB1DAdBgNVHQ4EFgQU/QAo3UQH+CO70m0N+MU0xr8cUJEwHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzEzODMyMmUzMjMzMzQyZTMw MmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzkzNDMxMzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC26jAN BgkqhkiG9w0BAQsFAAOCAQEAeNz/jpIFsrImo6tScsWPcuTaYkthGl/WYur1n+a/ DNuZjJoTJpzE6qdw1fq7XxZWAkZdFa91QkcCJGwOdDksR4dvOnmU3SL11l+3fxzY PTCveT6ecvYvlRSPBdwgm0n9hYAMhcvTcmAQuu/p3FB1yV1saMv6acIdbiX+u1TR 5pNN4jW1XrOXpHl/TioL8rt3CQWnAFVnMmuB7ZkixrrwEkLOlvqEX1aYkkkLbJOk RB7gjgOMXXrotwf4+tzJS2IfvcpgwWTcWCYWcQe6Ce3LhNQ20ZTCFO/rMg+5AUj9 XzbdK4h3M0dCoqQaZTnPXv0qSJb5AHafi9+9bM0k7l25aQ== -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:04 2026 by rpki-client