$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/3231392e36392e3132382e302f31372d3234203d3e203138303432.roa File: 3231392e36392e3132382e302f31372d3234203d3e203138303432.roa (raw, json) Hash identifier: BSRCwN/vZa7LOsEbCKBl0OrTS7XwCsIdCbYUCcGzu94= Subject key identifier: 7C:7F:BE:31:BD:8D:0C:11:AB:96:B8:08:05:AB:A0:B6:F8:44:A3:7F Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 438BE9E657BB98BB2709ACC0D6B2867DC7C6024C Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/3231392e36392e3132382e302f31372d3234203d3e203138303432.roa Signing time: Mon 22 Jun 2026 03:23:52 +0000 ROA not before: Mon 22 Jun 2026 03:18:52 +0000 ROA not after: Mon 21 Jun 2027 03:23:52 +0000 asID: 18042 IP address blocks: 219.69.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8b:e9:e6:57:bb:98:bb:27:09:ac:c0:d6:b2:86:7d:c7:c6:02:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 03:18:52 2026 GMT Not After : Jun 21 03:23:52 2027 GMT Subject: CN=7C7FBE31BD8D0C11AB96B80805ABA0B6F844A37F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e9:86:26:e6:08:1f:51:ae:52:7d:f6:11:ef: a5:98:da:45:f6:a4:a7:97:ae:f7:64:e7:c3:2a:f4: 27:70:80:05:d5:16:82:a3:ba:ae:d5:bd:5f:ce:28: 52:bf:52:59:4c:16:0b:7a:1c:4f:82:f5:c3:24:9a: e2:b2:51:b7:86:ab:97:66:cd:4e:a3:c4:96:5c:0c: bd:27:01:ec:49:0a:36:f4:6c:7f:1e:5f:53:d1:06: 0e:a0:b0:51:67:3d:c6:37:ce:31:37:e4:fe:83:d5: 4e:c1:a1:5c:cc:6c:b0:45:49:39:02:fd:fe:69:40: c8:e1:9e:f7:71:41:ea:d7:dc:9b:36:ce:8b:74:03: 15:50:36:83:60:f0:31:75:49:24:64:08:7a:e1:2f: 25:5f:e5:37:9d:3b:ad:87:21:a6:4d:15:d7:89:b0: 7a:96:b5:00:30:c8:1a:22:a5:74:bf:48:73:cb:c6: c1:16:0f:f2:89:03:cf:3a:d5:e3:ed:ac:7c:ec:4a: 0d:fe:9d:a8:ee:05:a3:58:4b:13:35:d7:0d:82:49: 2b:f8:2c:c8:c8:ca:36:a8:4f:6f:07:20:a9:06:03: a5:83:3c:2e:30:46:b7:5a:8c:5c:c5:e0:06:24:8a: 57:f6:2a:c9:dd:70:1e:ac:2e:71:d8:96:5a:5d:4f: 59:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7F:BE:31:BD:8D:0C:11:AB:96:B8:08:05:AB:A0:B6:F8:44:A3:7F X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/3231392e36392e3132382e302f31372d3234203d3e203138303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.69.128.0/17 Signature Algorithm: sha256WithRSAEncryption 8d:ec:40:35:22:8c:c0:b0:73:27:2d:39:10:f2:08:cf:72:cf: f6:c8:bb:61:75:ba:af:6c:d2:56:1b:d6:3d:59:d9:fc:f5:d2: 10:a3:4f:b5:d7:77:83:46:0a:1c:16:20:46:4a:d7:aa:5c:1d: c3:92:ed:3c:df:d8:d1:10:1d:06:c8:6c:fe:30:97:f5:ce:e1: 0a:55:72:3f:eb:9d:d5:71:8d:e3:88:93:c3:db:f0:d0:06:ac: 69:57:7b:a4:47:64:66:54:63:84:d4:af:3f:7b:15:75:fa:f9: be:cb:23:cc:dd:ab:79:50:2c:63:3d:e7:c5:f0:42:e5:4d:08: 57:7f:63:2c:2d:95:c9:dc:c4:54:15:dd:fc:9b:85:f9:40:fe: 06:a9:0e:b2:bc:08:f6:13:fc:cd:86:c3:cb:84:44:72:28:8a: cb:d8:e1:ca:fb:24:6c:50:4a:77:2d:14:fd:69:3b:e0:cf:51: 62:85:85:07:dd:ba:c0:29:68:81:86:a7:25:ef:62:85:1a:6d: a2:61:88:58:c5:ff:02:a0:9e:e3:09:f9:d9:6a:f3:14:36:86: 05:61:69:7d:e9:f1:a5:a7:3f:53:9b:89:43:5b:5c:40:ad:5e: 1a:0b:1e:6d:7f:f1:7b:0b:d7:98:fb:26:0c:4a:16:e0:ea:22: 87:4b:b5:5d -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUQ4vp5le7mLsnCazA1rKGfcfGAkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMzE4NTJaFw0yNzA2MjEwMzIzNTJaMDMxMTAvBgNV BAMTKDdDN0ZCRTMxQkQ4RDBDMTFBQjk2QjgwODA1QUJBMEI2Rjg0NEEzN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG6YYm5ggfUa5SffYR76WY2kX2 pKeXrvdk58Mq9CdwgAXVFoKjuq7VvV/OKFK/UllMFgt6HE+C9cMkmuKyUbeGq5dm zU6jxJZcDL0nAexJCjb0bH8eX1PRBg6gsFFnPcY3zjE35P6D1U7BoVzMbLBFSTkC /f5pQMjhnvdxQerX3Js2zot0AxVQNoNg8DF1SSRkCHrhLyVf5TedO62HIaZNFdeJ sHqWtQAwyBoipXS/SHPLxsEWD/KJA8861ePtrHzsSg3+najuBaNYSxM11w2CSSv4 LMjIyjaoT28HIKkGA6WDPC4wRrdajFzF4AYkilf2KsndcB6sLnHYllpdT1mlAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUfH++Mb2NDBGrlrgIBaugtvhEo38wHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzIzMTM5MmUzNjM5MmUzMTMy MzgyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMTM4MzAzNDMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH 20WAMA0GCSqGSIb3DQEBCwUAA4IBAQCN7EA1IozAsHMnLTkQ8gjPcs/2yLthdbqv bNJWG9Y9Wdn89dIQo0+113eDRgocFiBGSteqXB3Dku0839jREB0GyGz+MJf1zuEK VXI/653VcY3jiJPD2/DQBqxpV3ukR2RmVGOE1K8/exV1+vm+yyPM3at5UCxjPefF 8ELlTQhXf2MsLZXJ3MRUFd38m4X5QP4GqQ6yvAj2E/zNhsPLhERyKIrL2OHK+yRs UEp3LRT9aTvgz1FihYUH3brAKWiBhqcl72KFGm2iYYhYxf8CoJ7jCfnZavMUNoYF YWl96fGlpz9Tm4lDW1xArV4aCx5tf/F7C9eY+yYMShbg6iKHS7Vd -----END CERTIFICATE-----Generated at Tue Jun 30 20:12:52 2026 by rpki-client