$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/35382e3131342e302e302f31352d3136203d3e203138303432.roa File: 35382e3131342e302e302f31352d3136203d3e203138303432.roa (raw, json) Hash identifier: 5GrQwectl8cSZNVOcMxpUC8SksH9E2ymgm4hJp5zmqc= Subject key identifier: D9:15:67:9A:29:9A:50:7C:DD:12:B1:91:17:12:CB:CE:C9:D5:00:3E Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 165C498795C1E86FB2CE24833523F5FC9AB08912 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/35382e3131342e302e302f31352d3136203d3e203138303432.roa Signing time: Mon 22 Jun 2026 03:24:05 +0000 ROA not before: Mon 22 Jun 2026 03:19:05 +0000 ROA not after: Mon 21 Jun 2027 03:24:05 +0000 asID: 18042 IP address blocks: 58.114.0.0/15 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5c:49:87:95:c1:e8:6f:b2:ce:24:83:35:23:f5:fc:9a:b0:89:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 03:19:05 2026 GMT Not After : Jun 21 03:24:05 2027 GMT Subject: CN=D915679A299A507CDD12B1911712CBCEC9D5003E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:d5:a0:74:2f:e6:f7:fc:29:6c:ad:dd:4e: c1:0d:c6:8b:1f:45:b3:57:c4:b3:ba:4e:5a:64:d1: 0b:3d:1b:b5:80:a7:58:98:13:f6:06:43:1c:5d:92: 53:f3:68:75:a6:fa:11:49:fc:93:b0:95:4b:28:a3: a9:a6:18:59:ca:56:ad:0f:03:02:b2:8c:72:ed:e9: 56:77:de:03:c3:df:5b:e2:0d:c5:48:fe:bb:57:e4: fc:29:b8:6b:5e:0a:93:a3:69:b1:1c:be:05:49:d4: 9e:0b:b6:5e:85:b2:95:e2:2c:bf:2c:6e:f2:89:21: 5d:61:1a:04:ae:2a:94:89:3b:7c:47:b3:38:34:7b: e6:78:40:e5:95:3a:7b:e8:ac:ac:ac:64:52:83:7e: cb:e0:74:e7:31:e0:1a:ac:14:4b:e5:20:65:fc:21: c1:1f:af:49:c9:28:6b:c4:33:ec:e5:2d:46:84:eb: 08:d5:c6:f9:8c:cb:7e:b8:64:53:02:07:60:fe:62: 2e:45:29:e5:1a:b5:bb:1c:2b:eb:46:36:5a:d3:a9: c3:c0:1b:e4:64:d0:3d:db:12:04:24:fd:bd:bf:bd: c7:df:bc:41:3c:33:6a:a2:29:03:24:25:da:97:4c: 44:4b:12:74:c4:09:ad:b2:66:df:3c:6a:2e:3c:d1: 40:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:15:67:9A:29:9A:50:7C:DD:12:B1:91:17:12:CB:CE:C9:D5:00:3E X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/35382e3131342e302e302f31352d3136203d3e203138303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.114.0.0/15 Signature Algorithm: sha256WithRSAEncryption 44:89:bf:e7:7f:72:a4:d3:e5:e4:1f:f4:15:c2:01:71:a0:f6: 20:13:0d:02:18:3e:40:cc:68:ee:ff:bb:44:b0:28:bd:98:ce: c1:b3:26:14:e3:0b:78:b3:14:91:8b:2e:f0:ed:d6:d5:95:67: 07:9d:27:f2:31:22:a1:db:6b:fa:c3:fd:0c:8f:17:21:20:70: 5a:ef:fb:69:20:08:e5:a3:ab:a7:c7:af:3c:7d:ef:4b:f0:dc: b0:02:e2:16:8f:7f:de:86:25:96:b4:53:8a:27:fc:32:92:9a: e4:ef:08:2c:da:2c:f2:65:45:07:78:13:e4:df:57:25:07:4a: 02:91:4a:3f:25:d0:6d:e9:c1:f4:bb:cc:a5:93:83:78:67:a1: 5c:81:8b:53:54:35:6a:93:3a:39:bb:48:c3:20:a3:03:fc:a9: b0:6a:72:17:43:32:1e:fb:fd:74:7e:c5:7e:e4:6a:c9:da:1d: 27:44:06:ee:74:f4:52:e9:44:24:84:a0:81:2e:d3:53:8f:ab: 2f:cb:f3:6e:e7:ea:79:0f:02:c2:02:54:d6:31:04:39:e8:57: 43:14:61:b9:17:db:60:e9:53:dd:b8:6f:aa:d5:de:5c:b1:44: 31:f9:08:51:16:22:0a:2a:67:d3:71:3d:f8:9c:40:aa:23:cf: 96:ec:9d:76 -----BEGIN CERTIFICATE----- MIIEzjCCA7agAwIBAgIUFlxJh5XB6G+yziSDNSP1/JqwiRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMzE5MDVaFw0yNzA2MjEwMzI0MDVaMDMxMTAvBgNV BAMTKEQ5MTU2NzlBMjk5QTUwN0NERDEyQjE5MTE3MTJDQkNFQzlENTAwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8NWgdC/m9/wpbK3dTsENxosf RbNXxLO6Tlpk0Qs9G7WAp1iYE/YGQxxdklPzaHWm+hFJ/JOwlUsoo6mmGFnKVq0P AwKyjHLt6VZ33gPD31viDcVI/rtX5PwpuGteCpOjabEcvgVJ1J4Ltl6FspXiLL8s bvKJIV1hGgSuKpSJO3xHszg0e+Z4QOWVOnvorKysZFKDfsvgdOcx4BqsFEvlIGX8 IcEfr0nJKGvEM+zlLUaE6wjVxvmMy364ZFMCB2D+Yi5FKeUatbscK+tGNlrTqcPA G+Rk0D3bEgQk/b2/vcffvEE8M2qiKQMkJdqXTERLEnTECa2yZt88ai480UDDAgMB AAGjggHYMIIB1DAdBgNVHQ4EFgQU2RVnmimaUHzdErGRFxLLzsnVAD4wHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzUzODJlMzEzMTM0MmUzMDJl MzAyZjMxMzUyZDMxMzYyMDNkM2UyMDMxMzgzMDM0MzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwE6cjAN BgkqhkiG9w0BAQsFAAOCAQEARIm/539ypNPl5B/0FcIBcaD2IBMNAhg+QMxo7v+7 RLAovZjOwbMmFOMLeLMUkYsu8O3W1ZVnB50n8jEiodtr+sP9DI8XISBwWu/7aSAI 5aOrp8evPH3vS/DcsALiFo9/3oYllrRTiif8MpKa5O8ILNos8mVFB3gT5N9XJQdK ApFKPyXQbenB9LvMpZODeGehXIGLU1Q1apM6ObtIwyCjA/ypsGpyF0MyHvv9dH7F fuRqydodJ0QG7nT0UulEJISggS7TU4+rL8vzbufqeQ8CwgJU1jEEOehXQxRhuRfb YOlT3bhvqtXeXLFEMfkIURYiCipn03E9+JxAqiPPluyddg== -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:04 2026 by rpki-client