$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/3231392e37302e302e302f31362d3234203d3e2039343136.roa File: 3231392e37302e302e302f31362d3234203d3e2039343136.roa (raw, json) Hash identifier: FjLYsMPOBJqCk4EWz8BV+uBsELj116giKOpuq5RLX3g= Subject key identifier: 1F:1C:FA:92:B1:D0:CF:7E:1B:83:82:44:99:F1:62:0F:D7:1C:1A:D4 Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 2F05D373D0E2E619ABA0401CF0826BF114B61DB1 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/3231392e37302e302e302f31362d3234203d3e2039343136.roa Signing time: Mon 22 Jun 2026 03:23:59 +0000 ROA not before: Mon 22 Jun 2026 03:18:59 +0000 ROA not after: Mon 21 Jun 2027 03:23:59 +0000 asID: 9416 IP address blocks: 219.70.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:05:d3:73:d0:e2:e6:19:ab:a0:40:1c:f0:82:6b:f1:14:b6:1d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 03:18:59 2026 GMT Not After : Jun 21 03:23:59 2027 GMT Subject: CN=1F1CFA92B1D0CF7E1B83824499F1620FD71C1AD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ee:86:31:65:e5:4b:70:83:c6:e3:12:c5:29: e7:e3:cc:1d:7e:f3:08:ab:62:47:08:1d:9e:91:d3: 3b:3f:9f:75:ae:7f:78:d9:88:4c:8c:48:67:75:31: 0f:3a:6b:27:91:12:95:04:a3:77:a7:b3:31:a8:14: 76:6c:36:68:7f:9f:e5:09:5f:64:98:9a:15:4b:b2: 65:32:2e:a9:5a:d9:34:32:ed:d4:0e:7c:2c:2f:fd: cd:5f:6d:ee:79:2c:fc:d8:f3:49:93:2c:e5:ca:b0: cc:99:fd:1c:57:f7:38:2e:64:2e:99:cf:e8:67:6c: 2f:8c:8b:9a:a2:ba:5c:87:e6:c6:e0:de:db:b9:f1: f0:88:cc:91:27:61:ae:8d:10:1c:7c:24:2b:be:4f: 54:11:99:a8:fc:e6:57:8d:1e:6d:8d:c3:70:28:b1: a5:8f:4c:18:c0:95:39:af:61:88:b5:22:b6:e6:55: 35:06:52:af:8c:09:c1:75:b0:4f:bb:0c:ee:ac:06: 1b:ac:f1:cd:4b:65:aa:f9:f4:23:53:72:78:f7:d0: 5d:05:0a:a6:fe:55:49:8f:b1:33:c7:3f:e8:f6:a4: c9:86:1c:7d:47:e4:90:69:49:33:42:87:da:f1:c3: 70:fd:6d:83:87:95:57:46:88:68:9e:22:ca:3e:c2: 75:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1C:FA:92:B1:D0:CF:7E:1B:83:82:44:99:F1:62:0F:D7:1C:1A:D4 X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/3231392e37302e302e302f31362d3234203d3e2039343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.70.0.0/16 Signature Algorithm: sha256WithRSAEncryption a4:98:db:ac:c7:72:db:43:84:a9:12:d7:23:6d:9b:b4:15:4e: 86:7c:19:85:e7:c0:6c:8e:1f:62:f1:0e:bd:01:6a:6f:ba:ec: f6:8e:d1:d3:70:39:f2:50:71:a0:86:40:59:95:7c:88:51:fa: 16:48:7a:d2:45:d5:78:c3:bb:0d:10:5c:2a:6b:1a:f8:de:c7: 7c:32:65:02:07:69:ac:53:e2:57:8d:4c:b6:77:7f:10:1f:06: 7b:c1:f4:07:aa:d4:fe:fb:f3:a9:6a:ee:00:25:61:2b:f2:de: cd:09:c5:09:39:ba:bb:3a:b3:85:d1:6e:d3:ae:46:32:6a:8c: d3:b6:94:28:55:da:74:e1:2d:2a:82:32:01:72:5f:2e:74:48: 17:7c:f3:73:64:7f:f4:f7:97:d0:e8:20:2a:01:18:ab:bd:44: b3:63:2c:27:e8:c9:e7:a0:91:cb:8a:e5:22:06:a9:98:b6:f7: 83:5e:77:37:e0:0b:1c:be:37:09:24:f8:ce:82:5d:14:1b:16: 1b:d7:74:dd:e7:52:f1:a0:b2:90:2b:67:d4:5d:af:54:0e:5b: a3:79:a3:dc:90:a5:3e:2c:3c:73:f5:98:4d:10:89:fc:af:8c: 2b:f7:33:c6:aa:e8:76:d6:21:b6:e1:5f:33:1e:fc:e9:fb:04: 27:53:22:fe -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgIULwXTc9Di5hmroEAc8IJr8RS2HbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMzE4NTlaFw0yNzA2MjEwMzIzNTlaMDMxMTAvBgNV BAMTKDFGMUNGQTkyQjFEMENGN0UxQjgzODI0NDk5RjE2MjBGRDcxQzFBRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi7oYxZeVLcIPG4xLFKefjzB1+ 8wirYkcIHZ6R0zs/n3Wuf3jZiEyMSGd1MQ86ayeREpUEo3enszGoFHZsNmh/n+UJ X2SYmhVLsmUyLqla2TQy7dQOfCwv/c1fbe55LPzY80mTLOXKsMyZ/RxX9zguZC6Z z+hnbC+Mi5qiulyH5sbg3tu58fCIzJEnYa6NEBx8JCu+T1QRmaj85leNHm2Nw3Ao saWPTBjAlTmvYYi1IrbmVTUGUq+MCcF1sE+7DO6sBhus8c1LZar59CNTcnj30F0F Cqb+VUmPsTPHP+j2pMmGHH1H5JBpSTNCh9rxw3D9bYOHlVdGiGieIso+wnUrAgMB AAGjggHWMIIB0jAdBgNVHQ4EFgQUHxz6krHQz34bg4JEmfFiD9ccGtQwHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjBzBggrBgEFBQcBCwRnMGUwYwYIKwYBBQUHMAuGV3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzIzMTM5MmUzNzMwMmUzMDJl MzAyZjMxMzYyZDMyMzQyMDNkM2UyMDM5MzQzMTM2LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA20YwDQYJ KoZIhvcNAQELBQADggEBAKSY26zHcttDhKkS1yNtm7QVToZ8GYXnwGyOH2LxDr0B am+67PaO0dNwOfJQcaCGQFmVfIhR+hZIetJF1XjDuw0QXCprGvjex3wyZQIHaaxT 4leNTLZ3fxAfBnvB9Aeq1P7786lq7gAlYSvy3s0JxQk5urs6s4XRbtOuRjJqjNO2 lChV2nThLSqCMgFyXy50SBd883Nkf/T3l9DoICoBGKu9RLNjLCfoyeegkcuK5SIG qZi294NedzfgCxy+Nwkk+M6CXRQbFhvXdN3nUvGgspArZ9Rdr1QOW6N5o9yQpT4s PHP1mE0QifyvjCv3M8aq6HbWIbbhXzMe/On7BCdTIv4= -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:03 2026 by rpki-client