$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/3231392e36392e3235332e302f32342d3234203d3e2037353332.roa File: 3231392e36392e3235332e302f32342d3234203d3e2037353332.roa (raw, json) Hash identifier: 0+6MjQs5noln+ESdD6uMYdybo0w9CYOGrbW5iM+GPM8= Subject key identifier: 57:23:A0:CC:76:91:A1:8F:C9:8B:85:7B:51:70:C5:7F:8E:6D:06:10 Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 464252F035FB7F2F4BAC7889F2DF5706AA8CE5BA Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/3231392e36392e3235332e302f32342d3234203d3e2037353332.roa Signing time: Mon 22 Jun 2026 03:24:00 +0000 ROA not before: Mon 22 Jun 2026 03:19:00 +0000 ROA not after: Mon 21 Jun 2027 03:24:00 +0000 asID: 7532 IP address blocks: 219.69.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:42:52:f0:35:fb:7f:2f:4b:ac:78:89:f2:df:57:06:aa:8c:e5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 03:19:00 2026 GMT Not After : Jun 21 03:24:00 2027 GMT Subject: CN=5723A0CC7691A18FC98B857B5170C57F8E6D0610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:86:2a:02:fe:07:ae:c4:76:cb:4b:0f:8c: a1:da:68:0c:f4:68:90:d1:f0:a6:f0:6f:68:cf:2a: eb:9c:0d:c4:8c:ee:dd:de:d8:3e:a6:53:e9:60:9f: 90:c7:28:91:0b:75:a7:d5:ea:c3:f3:75:28:9c:8b: ba:5a:22:6a:84:68:e4:df:f6:20:a0:7c:05:bd:da: a3:cb:84:3b:2d:b6:89:0a:85:84:24:87:9d:11:e0: 75:12:fb:22:2b:5f:91:5f:33:6c:99:f2:b6:76:a5: 82:8a:bb:c1:46:69:57:da:d6:68:a0:3b:96:88:1b: 40:e1:82:f6:10:9c:d4:9e:fa:92:7f:de:b9:08:bb: ad:39:9b:cb:03:61:cc:e0:9e:70:17:e2:69:5f:d2: 49:4d:74:52:34:88:64:70:62:6d:7b:de:8f:3e:8d: a1:a0:8b:a6:ff:11:d3:cf:ce:c0:5e:18:6d:f7:0b: 11:1c:69:58:48:da:3e:58:7b:8c:5b:63:01:78:0f: c0:17:29:7b:27:95:d2:16:55:fa:a6:2e:23:57:ee: 49:b8:f2:bf:79:b4:45:66:aa:80:33:a9:ec:3b:8e: 9e:d2:d5:22:85:41:ef:31:0f:86:76:c5:7e:00:c4: ab:0c:d3:55:cd:8c:be:73:db:07:bc:1d:12:6b:09: 24:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:23:A0:CC:76:91:A1:8F:C9:8B:85:7B:51:70:C5:7F:8E:6D:06:10 X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/3231392e36392e3235332e302f32342d3234203d3e2037353332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.69.253.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:01:7d:32:df:98:1a:0f:cd:89:bc:1f:46:a2:ac:d0:15:a2: ec:79:13:d4:49:45:96:18:b0:b7:e1:60:09:1b:79:5a:9a:11: 87:38:bc:d0:0c:5e:2a:29:16:8e:6f:cc:76:50:d9:22:59:a3: 6f:57:a8:aa:5c:2a:75:0b:9e:aa:2b:3e:7d:ac:81:80:9d:79: e7:f3:34:5b:31:10:0b:34:33:be:8d:7b:7c:43:a2:98:6c:e7: d9:b4:0c:96:bd:7b:7c:0b:5f:04:3d:66:21:70:9b:9b:e1:67: f3:78:f7:77:3f:3a:02:20:ff:29:94:c2:53:74:56:a3:91:fd: 35:c1:5a:f7:b6:1e:b4:7e:3b:56:74:4a:1d:5d:af:15:a2:84: 8b:b0:89:13:26:e5:b3:45:56:e4:d1:8d:38:03:8d:b1:08:c7: ca:30:ce:dd:13:13:59:5c:b1:35:dc:d4:d5:dc:d5:f3:b0:10: c2:4d:13:42:76:39:f2:13:3f:ab:fd:d6:26:3f:1e:3f:a0:79: 4f:52:88:e9:c2:87:c2:6b:f4:a2:40:f2:7c:68:30:05:00:2f: 9e:d4:d9:d6:72:18:f7:47:3f:15:74:f4:a5:33:a7:04:e1:54: e2:6a:e3:08:3d:51:ed:8b:c1:dd:d9:5b:0a:25:4f:93:c6:d7: 83:b8:07:84 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIURkJS8DX7fy9LrHiJ8t9XBqqM5bowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMzE5MDBaFw0yNzA2MjEwMzI0MDBaMDMxMTAvBgNV BAMTKDU3MjNBMENDNzY5MUExOEZDOThCODU3QjUxNzBDNTdGOEU2RDA2MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpIYqAv4HrsR2y0sPjKHaaAz0 aJDR8Kbwb2jPKuucDcSM7t3e2D6mU+lgn5DHKJELdafV6sPzdSici7paImqEaOTf 9iCgfAW92qPLhDsttokKhYQkh50R4HUS+yIrX5FfM2yZ8rZ2pYKKu8FGaVfa1mig O5aIG0DhgvYQnNSe+pJ/3rkIu605m8sDYczgnnAX4mlf0klNdFI0iGRwYm173o8+ jaGgi6b/EdPPzsBeGG33CxEcaVhI2j5Ye4xbYwF4D8AXKXsnldIWVfqmLiNX7km4 8r95tEVmqoAzqew7jp7S1SKFQe8xD4Z2xX4AxKsM01XNjL5z2we8HRJrCSSBAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUVyOgzHaRoY/Ji4V7UXDFf45tBhAwHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYBBQUHMAuGW3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzIzMTM5MmUzNjM5MmUzMjM1 MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNzM1MzMzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANtF /TANBgkqhkiG9w0BAQsFAAOCAQEAXQF9Mt+YGg/NibwfRqKs0BWi7HkT1ElFlhiw t+FgCRt5WpoRhzi80AxeKikWjm/MdlDZIlmjb1eoqlwqdQueqis+fayBgJ155/M0 WzEQCzQzvo17fEOimGzn2bQMlr17fAtfBD1mIXCbm+Fn83j3dz86AiD/KZTCU3RW o5H9NcFa97YetH47VnRKHV2vFaKEi7CJEybls0VW5NGNOAONsQjHyjDO3RMTWVyx NdzU1dzV87AQwk0TQnY58hM/q/3WJj8eP6B5T1KI6cKHwmv0okDyfGgwBQAvntTZ 1nIY90c/FXT0pTOnBOFU4mrjCD1R7YvB3dlbCiVPk8bXg7gHhA== -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:14 2026 by rpki-client