$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/3231392e36392e3235322e302f32342d3234203d3e2037353332.roa File: 3231392e36392e3235322e302f32342d3234203d3e2037353332.roa (raw, json) Hash identifier: kZ+OF8V//RNHlCI92kzDba1EhkTa8bprl26JmF41Mvg= Subject key identifier: 30:0E:8A:FE:89:BC:14:09:31:2C:AD:BA:10:C7:E2:79:B2:B5:59:3F Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 197CA9FDBB07AF67E2D360944BEC1588D11F24EC Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/3231392e36392e3235322e302f32342d3234203d3e2037353332.roa Signing time: Mon 22 Jun 2026 03:23:50 +0000 ROA not before: Mon 22 Jun 2026 03:18:50 +0000 ROA not after: Mon 21 Jun 2027 03:23:50 +0000 asID: 7532 IP address blocks: 219.69.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:7c:a9:fd:bb:07:af:67:e2:d3:60:94:4b:ec:15:88:d1:1f:24:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 03:18:50 2026 GMT Not After : Jun 21 03:23:50 2027 GMT Subject: CN=300E8AFE89BC1409312CADBA10C7E279B2B5593F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:66:8b:2c:87:a8:af:40:8d:1b:6f:dd:5b:36: 84:42:f5:24:3f:1c:1f:b1:8f:0f:16:79:84:b9:dc: 63:90:76:f3:30:e7:df:af:41:c5:95:4f:a8:64:97: 3c:72:18:00:5d:2a:a7:80:5d:47:8b:3d:e5:e7:ec: 09:31:a5:23:4d:1f:53:f4:eb:0c:70:36:87:1e:d1: c4:33:dc:aa:5a:b3:5f:5b:9d:e3:ca:83:ff:46:21: be:77:67:11:1a:79:fc:2c:02:36:74:d5:ba:89:f3: 3b:fd:af:de:e3:72:4a:a7:5c:a5:6e:38:08:f9:4f: b0:26:09:c7:e2:f1:21:ab:c6:a9:6b:32:18:bf:46: b8:65:bc:2f:78:93:f5:f8:f0:4b:fb:cc:57:08:bc: 63:e9:10:97:f4:58:fb:8f:74:05:7b:a2:9e:53:e4: 32:22:10:5d:ae:5b:df:f8:e5:7a:2d:f7:e6:6d:5b: 16:3c:e1:8f:c1:4b:e6:42:11:5d:14:93:e1:72:58: e5:2f:3f:73:8f:89:d3:ba:06:59:44:15:94:bb:55: 2d:f6:59:1f:98:2e:4b:f9:fd:81:f4:51:0a:e6:f4: 0c:59:c2:46:14:72:f2:39:8c:77:7d:18:ba:24:d2: 7c:5e:85:fc:b7:1e:eb:86:57:3b:72:f6:10:a1:bc: 34:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0E:8A:FE:89:BC:14:09:31:2C:AD:BA:10:C7:E2:79:B2:B5:59:3F X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/3231392e36392e3235322e302f32342d3234203d3e2037353332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.69.252.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:9b:1c:d2:4f:b2:55:1f:04:66:71:52:08:ac:71:eb:95:b5: 86:b9:cb:32:c4:40:fe:a6:2e:37:fb:d0:38:e5:2c:c5:6e:68: 63:23:6d:5e:1a:1e:7d:40:d0:ab:41:8d:6a:67:f4:0b:6a:13: c5:ba:e5:b9:79:29:e3:e7:ac:b9:d9:77:cc:b6:4b:9f:61:67: 6d:f2:18:1e:a0:27:67:85:d1:5c:9d:75:04:9f:d2:41:40:6f: dc:f0:bd:37:f5:f5:79:7d:c0:02:8a:26:a7:81:b3:ba:59:7a: df:93:34:c7:a8:06:56:0b:69:13:c0:01:ec:7a:e5:fc:00:6a: e4:ca:ad:b5:9d:ba:9f:e1:34:18:98:f0:51:0a:ff:29:3f:cd: 1f:dd:e2:ed:55:52:67:72:e7:e1:0b:2d:f8:f2:40:27:d2:fa: da:73:58:97:43:db:2f:3d:6c:03:7a:d7:35:9c:40:b1:46:c4: b3:fa:85:57:40:3c:00:e4:c5:fc:b8:84:52:37:d3:cf:04:72: 30:57:8b:b2:99:8c:60:72:28:00:aa:eb:dc:16:b9:a4:fd:0e: 0f:73:f9:31:4b:ef:e6:26:9d:7b:9b:0e:b3:e8:44:de:ee:ad: b4:eb:ab:d2:a6:ce:e6:85:ed:b7:ba:46:c0:b5:de:d5:f4:e3: a5:6b:31:b9 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUGXyp/bsHr2fi02CUS+wViNEfJOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMzE4NTBaFw0yNzA2MjEwMzIzNTBaMDMxMTAvBgNV BAMTKDMwMEU4QUZFODlCQzE0MDkzMTJDQURCQTEwQzdFMjc5QjJCNTU5M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZossh6ivQI0bb91bNoRC9SQ/ HB+xjw8WeYS53GOQdvMw59+vQcWVT6hklzxyGABdKqeAXUeLPeXn7AkxpSNNH1P0 6wxwNoce0cQz3Kpas19bnePKg/9GIb53ZxEaefwsAjZ01bqJ8zv9r97jckqnXKVu OAj5T7AmCcfi8SGrxqlrMhi/RrhlvC94k/X48Ev7zFcIvGPpEJf0WPuPdAV7op5T 5DIiEF2uW9/45Xot9+ZtWxY84Y/BS+ZCEV0Uk+FyWOUvP3OPidO6BllEFZS7VS32 WR+YLkv5/YH0UQrm9AxZwkYUcvI5jHd9GLok0nxehfy3HuuGVzty9hChvDSHAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUMA6K/om8FAkxLK26EMfiebK1WT8wHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYBBQUHMAuGW3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzIzMTM5MmUzNjM5MmUzMjM1 MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNzM1MzMzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANtF /DANBgkqhkiG9w0BAQsFAAOCAQEAnJsc0k+yVR8EZnFSCKxx65W1hrnLMsRA/qYu N/vQOOUsxW5oYyNtXhoefUDQq0GNamf0C2oTxbrluXkp4+esudl3zLZLn2FnbfIY HqAnZ4XRXJ11BJ/SQUBv3PC9N/X1eX3AAoomp4Gzull635M0x6gGVgtpE8AB7Hrl /ABq5MqttZ26n+E0GJjwUQr/KT/NH93i7VVSZ3Ln4Qst+PJAJ9L62nNYl0PbLz1s A3rXNZxAsUbEs/qFV0A8AOTF/LiEUjfTzwRyMFeLspmMYHIoAKrr3Ba5pP0OD3P5 MUvv5iade5sOs+hE3u6ttOur0qbO5oXtt7pGwLXe1fTjpWsxuQ== -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:15 2026 by rpki-client