$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/3231392e36392e3235352e302f32342d3234203d3e2037353332.roa File: 3231392e36392e3235352e302f32342d3234203d3e2037353332.roa (raw, json) Hash identifier: 4So4PqmjbdPlS9s+G3RKoNJjJactdK8CXCPV6nbBY9M= Subject key identifier: C0:87:93:A7:6B:2B:3F:AE:92:40:4C:F8:34:36:CC:00:4C:7E:2F:6A Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 477153E115A0D5777C6DC065F1FF13F76A3D7ABA Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/3231392e36392e3235352e302f32342d3234203d3e2037353332.roa Signing time: Mon 22 Jun 2026 03:23:55 +0000 ROA not before: Mon 22 Jun 2026 03:18:55 +0000 ROA not after: Mon 21 Jun 2027 03:23:55 +0000 asID: 7532 IP address blocks: 219.69.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:71:53:e1:15:a0:d5:77:7c:6d:c0:65:f1:ff:13:f7:6a:3d:7a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 03:18:55 2026 GMT Not After : Jun 21 03:23:55 2027 GMT Subject: CN=C08793A76B2B3FAE92404CF83436CC004C7E2F6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d9:91:ad:eb:9c:53:62:0f:14:05:c6:e5:1f: f7:2b:45:72:73:f9:01:87:80:51:7d:f1:fb:13:fe: 0a:8e:21:0d:1b:0f:e2:b3:31:8b:31:71:4f:3c:0b: e1:4a:8c:2a:5d:f5:68:38:05:8b:cd:b5:c3:d6:23: 15:62:45:94:76:71:be:4f:9b:b4:3d:6d:55:a7:a7: 8c:81:bd:9d:8e:7a:63:2b:ff:9d:01:a3:43:23:9f: 0e:aa:3d:9a:76:c7:90:b6:a2:f3:4b:91:e8:18:bb: 9b:e2:05:fd:58:ab:31:62:1f:ae:6a:a9:f7:fb:43: 27:55:4f:ee:15:ad:a5:ac:55:54:27:76:ad:4b:99: bb:df:79:8e:ed:e5:7c:27:cc:b2:27:8d:23:ac:6c: 16:98:e4:6e:ea:e8:21:16:d7:98:57:63:6b:34:dc: 18:a3:d3:4a:04:40:ed:8d:d9:8f:62:e4:7c:a3:5b: d7:cc:24:0d:b9:9c:9e:b8:34:6e:85:18:12:44:44: 81:81:ab:7d:b0:5d:80:99:d6:da:5b:58:6d:82:5d: 92:d5:7e:7a:8b:7e:54:8b:0b:ad:dc:15:de:5b:47: 0f:55:c7:ab:00:3e:4f:73:60:c9:be:fd:79:eb:f0: 40:e3:11:82:50:43:60:24:8c:a3:94:6a:0d:37:82: 8b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:87:93:A7:6B:2B:3F:AE:92:40:4C:F8:34:36:CC:00:4C:7E:2F:6A X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/3231392e36392e3235352e302f32342d3234203d3e2037353332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.69.255.0/24 Signature Algorithm: sha256WithRSAEncryption b0:6e:af:d6:1c:a0:c9:6a:c8:fb:d4:2b:18:34:37:0e:85:cc: 39:5c:5f:65:ba:8b:3c:d6:0b:8c:0a:42:bd:00:98:95:7c:e6: 8a:89:a6:87:70:39:1b:e9:98:0d:4f:20:74:ff:94:69:ad:91: eb:16:a6:11:39:0d:da:10:01:44:fa:0c:46:4f:14:e7:30:0e: c1:1d:cb:21:c3:3a:2e:80:39:62:99:39:54:89:30:ce:20:6e: c3:b1:f0:ab:d8:c2:e5:0d:48:e5:36:4f:ce:d8:19:6a:ed:d8: 99:3b:5e:fb:3b:55:4d:25:b7:17:1d:e6:a2:58:0a:07:7a:a4: 4a:7f:7c:ff:59:a5:e7:56:bb:80:49:2b:41:44:33:d5:33:3d: a8:3c:97:e6:e6:bb:14:5f:f5:92:b9:6b:07:81:4d:39:1d:95: ee:5b:3e:f0:55:7d:53:4f:32:87:b8:97:ca:41:dd:1e:d6:9d: 41:0f:8a:57:d7:ea:40:72:b5:62:c8:41:fe:01:66:04:b6:da: 0d:78:cc:47:d3:79:1f:b0:b9:b4:d9:34:04:20:24:47:c8:49: 7b:22:56:28:a6:a3:2a:b5:12:f4:bf:c5:a9:a7:d6:e0:df:33: 32:d7:18:a3:11:ec:60:80:06:82:fa:28:bf:03:77:0b:9c:69: 81:0d:d0:2d -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUR3FT4RWg1Xd8bcBl8f8T92o9erowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMzE4NTVaFw0yNzA2MjEwMzIzNTVaMDMxMTAvBgNV BAMTKEMwODc5M0E3NkIyQjNGQUU5MjQwNENGODM0MzZDQzAwNEM3RTJGNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO2ZGt65xTYg8UBcblH/crRXJz +QGHgFF98fsT/gqOIQ0bD+KzMYsxcU88C+FKjCpd9Wg4BYvNtcPWIxViRZR2cb5P m7Q9bVWnp4yBvZ2OemMr/50Bo0Mjnw6qPZp2x5C2ovNLkegYu5viBf1YqzFiH65q qff7QydVT+4VraWsVVQndq1LmbvfeY7t5XwnzLInjSOsbBaY5G7q6CEW15hXY2s0 3Bij00oEQO2N2Y9i5HyjW9fMJA25nJ64NG6FGBJERIGBq32wXYCZ1tpbWG2CXZLV fnqLflSLC63cFd5bRw9Vx6sAPk9zYMm+/Xnr8EDjEYJQQ2AkjKOUag03govjAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUwIeTp2srP66SQEz4NDbMAEx+L2owHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYBBQUHMAuGW3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzIzMTM5MmUzNjM5MmUzMjM1 MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNzM1MzMzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANtF /zANBgkqhkiG9w0BAQsFAAOCAQEAsG6v1hygyWrI+9QrGDQ3DoXMOVxfZbqLPNYL jApCvQCYlXzmiommh3A5G+mYDU8gdP+Uaa2R6xamETkN2hABRPoMRk8U5zAOwR3L IcM6LoA5Ypk5VIkwziBuw7Hwq9jC5Q1I5TZPztgZau3YmTte+ztVTSW3Fx3molgK B3qkSn98/1ml51a7gEkrQUQz1TM9qDyX5ua7FF/1krlrB4FNOR2V7ls+8FV9U08y h7iXykHdHtadQQ+KV9fqQHK1YshB/gFmBLbaDXjMR9N5H7C5tNk0BCAkR8hJeyJW KKajKrUS9L/FqafW4N8zMtcYoxHsYIAGgvoovwN3C5xpgQ3QLQ== -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:15 2026 by rpki-client