$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/3231392e36392e302e302f31372d3234203d3e2039343136.roa File: 3231392e36392e302e302f31372d3234203d3e2039343136.roa (raw, json) Hash identifier: YMBF1ykJpBhpMYZ0s/f/hzejSyi5ygCyVJeeNJdsXiU= Subject key identifier: BD:7F:47:02:16:32:D5:B1:C9:96:CD:69:25:30:DE:E3:A1:21:25:19 Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 19C41CA0ED71A86A361630AD4D360514E129DDDC Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/3231392e36392e302e302f31372d3234203d3e2039343136.roa Signing time: Mon 22 Jun 2026 03:03:51 +0000 ROA not before: Mon 22 Jun 2026 02:58:51 +0000 ROA not after: Mon 21 Jun 2027 03:03:51 +0000 asID: 9416 IP address blocks: 219.69.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c4:1c:a0:ed:71:a8:6a:36:16:30:ad:4d:36:05:14:e1:29:dd:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 02:58:51 2026 GMT Not After : Jun 21 03:03:51 2027 GMT Subject: CN=BD7F47021632D5B1C996CD692530DEE3A1212519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:5f:43:80:1f:3a:19:6d:83:e0:8f:90:db: fb:6a:39:78:57:6c:fb:29:ae:ae:3b:b4:ff:b1:8c: 99:f5:2c:9d:79:f7:33:7f:0e:aa:ab:6b:ae:b2:40: 36:c9:97:ed:3d:62:b9:ad:d9:39:66:a2:fa:ea:d5: 20:15:85:fb:4c:f1:b2:8d:c9:e6:b1:64:3a:68:b4: 63:91:41:c1:71:0d:e2:4f:41:cc:6f:64:c0:f9:1a: 33:d1:ea:b1:24:bf:fe:b5:6e:58:10:1d:eb:2b:be: f0:5f:60:f2:4d:1a:01:49:76:d5:2b:13:3b:d4:00: 1d:bb:b8:79:f9:87:d3:68:10:72:b9:ed:bf:48:29: 82:22:54:c5:0a:95:2e:a5:9a:f1:4a:43:7c:58:23: 2f:a0:b3:f0:94:c6:70:96:2f:21:bd:7b:98:85:47: fd:2a:7f:6f:0c:34:2e:06:54:c1:5d:5a:07:41:1a: 23:d3:c1:f6:2f:c2:39:a8:ce:d6:a7:5a:72:67:9a: e9:dc:5c:78:e5:37:bb:8f:a0:95:4b:46:26:bc:91: 1a:8d:82:ad:13:d8:ad:19:7f:f5:a3:a1:ae:d3:5c: cb:b0:09:53:f6:31:2b:30:79:7b:32:d7:ba:2e:ff: a8:50:9c:be:5f:70:97:70:af:63:eb:c4:ba:62:33: 14:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7F:47:02:16:32:D5:B1:C9:96:CD:69:25:30:DE:E3:A1:21:25:19 X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/3231392e36392e302e302f31372d3234203d3e2039343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.69.0.0/17 Signature Algorithm: sha256WithRSAEncryption 61:5c:6f:36:18:78:03:d0:e8:68:ed:99:4a:30:f3:4e:2d:7b: 17:b9:3e:66:a8:52:48:5d:7e:18:c7:a4:b9:65:d9:66:80:b9: 7d:d5:7d:8e:8f:81:8b:1d:ef:bd:b9:26:da:37:df:b4:94:9c: c2:45:03:50:4c:95:99:94:33:17:c7:c7:1a:28:fe:a6:82:72: fe:93:ab:f8:30:46:46:87:86:ee:3e:08:64:db:25:d8:c9:94: a8:a4:14:15:b4:55:1c:c7:55:86:f0:b1:19:a6:3b:b1:f6:d7: 4e:b7:f1:8d:fa:78:6f:a1:b3:28:32:ba:bb:48:dd:9c:b8:87: 26:e9:a7:d0:d8:9f:ec:3b:dd:a3:d2:5d:b4:1f:fc:9b:1b:ce: 44:c4:24:03:5f:d9:8f:8e:b2:80:6e:14:49:62:13:75:8d:1a: 79:cf:24:9c:e3:f3:7b:44:cb:ff:95:c4:fa:10:fb:40:c4:14: 12:93:b0:57:43:13:2a:71:13:d6:68:fa:59:f4:67:8f:ac:c6: aa:51:9f:1f:36:a9:18:37:cc:48:0a:10:6c:14:08:e4:49:54: e6:7e:54:39:0e:8c:83:b2:57:bd:e4:45:b4:d9:51:25:14:45: 02:6a:d1:f4:96:b9:fa:dd:da:3a:dc:17:bc:ea:af:b5:21:aa: 38:d7:04:4e -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgIUGcQcoO1xqGo2FjCtTTYFFOEp3dwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMjU4NTFaFw0yNzA2MjEwMzAzNTFaMDMxMTAvBgNV BAMTKEJEN0Y0NzAyMTYzMkQ1QjFDOTk2Q0Q2OTI1MzBERUUzQTEyMTI1MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BV9DgB86GW2D4I+Q2/tqOXhX bPsprq47tP+xjJn1LJ159zN/Dqqra66yQDbJl+09Yrmt2Tlmovrq1SAVhftM8bKN yeaxZDpotGORQcFxDeJPQcxvZMD5GjPR6rEkv/61blgQHesrvvBfYPJNGgFJdtUr EzvUAB27uHn5h9NoEHK57b9IKYIiVMUKlS6lmvFKQ3xYIy+gs/CUxnCWLyG9e5iF R/0qf28MNC4GVMFdWgdBGiPTwfYvwjmoztanWnJnmuncXHjlN7uPoJVLRia8kRqN gq0T2K0Zf/Wjoa7TXMuwCVP2MSsweXsy17ou/6hQnL5fcJdwr2PrxLpiMxSjAgMB AAGjggHXMIIB0zAdBgNVHQ4EFgQUvX9HAhYy1bHJls1pJTDe46EhJRkwHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjBzBggrBgEFBQcBCwRnMGUwYwYIKwYBBQUHMAuGV3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzIzMTM5MmUzNjM5MmUzMDJl MzAyZjMxMzcyZDMyMzQyMDNkM2UyMDM5MzQzMTM2LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH20UAMA0G CSqGSIb3DQEBCwUAA4IBAQBhXG82GHgD0Oho7ZlKMPNOLXsXuT5mqFJIXX4Yx6S5 ZdlmgLl91X2Oj4GLHe+9uSbaN9+0lJzCRQNQTJWZlDMXx8caKP6mgnL+k6v4MEZG h4buPghk2yXYyZSopBQVtFUcx1WG8LEZpjux9tdOt/GN+nhvobMoMrq7SN2cuIcm 6afQ2J/sO92j0l20H/ybG85ExCQDX9mPjrKAbhRJYhN1jRp5zySc4/N7RMv/lcT6 EPtAxBQSk7BXQxMqcRPWaPpZ9GePrMaqUZ8fNqkYN8xIChBsFAjkSVTmflQ5DoyD sle95EW02VElFEUCatH0lrn63do63Be86q+1Iao41wRO -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:01 2026 by rpki-client