$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/3231392e36382e302e302f31352d3135203d3e203138303432.roa File: 3231392e36382e302e302f31352d3135203d3e203138303432.roa (raw, json) Hash identifier: kcw66/7SgWgN1qDXhNljU4hA5626L/m6uDygq8u6MjU= Subject key identifier: 82:40:92:C0:4A:99:00:BD:BB:20:54:CA:EF:97:30:CD:95:2D:5A:23 Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 39CA0DBD8E2BA44F0831F9C0427CD6C2378F7753 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/3231392e36382e302e302f31352d3135203d3e203138303432.roa Signing time: Thu 25 Jun 2026 02:43:51 +0000 ROA not before: Thu 25 Jun 2026 02:38:51 +0000 ROA not after: Thu 24 Jun 2027 02:43:51 +0000 asID: 18042 IP address blocks: 219.68.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ca:0d:bd:8e:2b:a4:4f:08:31:f9:c0:42:7c:d6:c2:37:8f:77:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 25 02:38:51 2026 GMT Not After : Jun 24 02:43:51 2027 GMT Subject: CN=824092C04A9900BDBB2054CAEF9730CD952D5A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:73:36:80:92:44:fa:ce:43:5e:51:bd:0a:58: e6:06:79:54:ce:d8:62:03:f9:6e:81:1a:3b:b6:db: 58:38:d8:85:7b:64:19:b9:b0:a8:b8:21:80:3e:6c: 46:29:6a:5d:70:0b:1f:7c:0e:fd:df:db:c1:cf:a6: 3f:3a:29:4e:cc:f2:3a:92:1b:08:d1:e6:49:0e:d8: 16:a1:34:ba:47:84:73:59:ce:5b:79:d0:89:7e:42: 03:e4:3d:ec:06:42:7d:12:48:c1:52:ce:18:92:ae: 78:12:fd:ba:05:9a:fa:df:91:55:1d:1c:36:0e:d2: e6:cc:67:40:ee:b3:f2:a0:06:be:ec:6e:5e:30:a4: ab:04:c7:28:ca:f2:80:b3:85:89:67:b6:7f:7d:7d: 84:6c:45:8e:79:1e:81:53:7c:6c:ce:18:73:d0:24: f5:5e:03:e2:ec:4e:3d:70:6b:20:55:4b:89:4c:59: a1:c4:00:a3:f2:b6:db:6b:ab:3f:a9:fa:f0:f5:ab: d7:84:fa:8e:fd:ac:af:db:8a:85:37:d0:0a:90:04: 16:13:66:cf:bf:98:d2:a6:4f:0e:2c:97:08:75:e0: 91:28:c7:66:be:1a:34:5d:7c:4c:1b:e8:4c:19:64: 87:bf:86:5a:fa:23:23:d8:54:23:d9:2a:b7:e9:55: 08:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:40:92:C0:4A:99:00:BD:BB:20:54:CA:EF:97:30:CD:95:2D:5A:23 X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/3231392e36382e302e302f31352d3135203d3e203138303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.68.0.0/15 Signature Algorithm: sha256WithRSAEncryption 83:ce:22:98:1e:ea:81:75:4d:e2:2e:8e:54:cb:26:03:3d:a7: 65:8b:12:e0:d5:9a:8d:90:a1:5b:5a:dc:54:d7:41:bd:86:4d: ec:0e:c4:73:c0:1b:bb:73:58:17:eb:08:93:85:70:df:5c:42: 7a:c0:88:ec:fc:a2:83:ed:b2:92:be:d1:bd:cb:dd:80:89:1f: 1c:33:7a:0c:62:3c:ed:ff:69:fd:bf:0a:12:b1:c9:84:b4:ca: 1f:40:47:ab:45:4a:7e:47:3d:91:18:e5:7b:8c:34:85:a9:7d: 35:9d:9b:92:8a:43:57:33:4d:cc:00:ea:44:b8:ca:6a:eb:df: 97:10:94:d0:fe:ad:8c:f3:c7:2b:68:c3:34:4a:1f:1d:c9:d5: b3:e7:b9:b6:9f:6d:42:3f:17:11:b8:3b:a1:6f:47:94:df:7d: af:31:cb:0d:fa:cd:cd:43:13:1c:4f:90:0f:a6:42:cb:b3:68: 22:43:0f:e0:4b:1e:d0:d5:fa:cd:ae:e6:5b:00:65:a0:39:ea: 73:d4:3a:66:10:53:02:ca:0b:c3:fb:ce:dd:e6:37:b8:e6:67: 3e:c7:21:00:57:3a:de:83:92:ce:f4:32:74:3c:47:13:2a:d7: 03:27:d9:8f:a3:f8:5a:73:90:2b:b6:61:ed:ad:a7:93:ae:24: 9b:8d:0e:d3 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgIUOcoNvY4rpE8IMfnAQnzWwjePd1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjUwMjM4NTFaFw0yNzA2MjQwMjQzNTFaMDMxMTAvBgNV BAMTKDgyNDA5MkMwNEE5OTAwQkRCQjIwNTRDQUVGOTczMENEOTUyRDVBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiczaAkkT6zkNeUb0KWOYGeVTO 2GID+W6BGju221g42IV7ZBm5sKi4IYA+bEYpal1wCx98Dv3f28HPpj86KU7M8jqS GwjR5kkO2BahNLpHhHNZzlt50Il+QgPkPewGQn0SSMFSzhiSrngS/boFmvrfkVUd HDYO0ubMZ0Dus/KgBr7sbl4wpKsExyjK8oCzhYlntn99fYRsRY55HoFTfGzOGHPQ JPVeA+LsTj1wayBVS4lMWaHEAKPytttrqz+p+vD1q9eE+o79rK/bioU30AqQBBYT Zs+/mNKmTw4slwh14JEox2a+GjRdfEwb6EwZZIe/hlr6IyPYVCPZKrfpVQjlAgMB AAGjggHYMIIB1DAdBgNVHQ4EFgQUgkCSwEqZAL27IFTK75cwzZUtWiMwHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzIzMTM5MmUzNjM4MmUzMDJl MzAyZjMxMzUyZDMxMzUyMDNkM2UyMDMxMzgzMDM0MzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwHbRDAN BgkqhkiG9w0BAQsFAAOCAQEAg84imB7qgXVN4i6OVMsmAz2nZYsS4NWajZChW1rc VNdBvYZN7A7Ec8Abu3NYF+sIk4Vw31xCesCI7Pyig+2ykr7RvcvdgIkfHDN6DGI8 7f9p/b8KErHJhLTKH0BHq0VKfkc9kRjle4w0hal9NZ2bkopDVzNNzADqRLjKauvf lxCU0P6tjPPHK2jDNEofHcnVs+e5tp9tQj8XEbg7oW9HlN99rzHLDfrNzUMTHE+Q D6ZCy7NoIkMP4Ese0NX6za7mWwBloDnqc9Q6ZhBTAsoLw/vO3eY3uOZnPschAFc6 3oOSzvQydDxHEyrXAyfZj6P4WnOQK7Zh7a2nk64km40O0w== -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:01 2026 by rpki-client