$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/35382e3131342e36342e302f31382d3138203d3e203138303432.roa File: 35382e3131342e36342e302f31382d3138203d3e203138303432.roa (raw, json) Hash identifier: xP8lFe8thpFguNxsO+/w1MVcoUBu+7J6Lvb+LafIhGE= Subject key identifier: B4:E5:7C:68:7D:70:A4:9D:BB:BD:6A:0C:E5:90:C8:9C:EB:D2:A0:4A Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 6A3FC59C2519B0919FB2D1B38DC5D4996BF88D92 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/35382e3131342e36342e302f31382d3138203d3e203138303432.roa Signing time: Mon 22 Jun 2026 03:23:51 +0000 ROA not before: Mon 22 Jun 2026 03:18:51 +0000 ROA not after: Mon 21 Jun 2027 03:23:51 +0000 asID: 18042 IP address blocks: 58.114.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3f:c5:9c:25:19:b0:91:9f:b2:d1:b3:8d:c5:d4:99:6b:f8:8d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 03:18:51 2026 GMT Not After : Jun 21 03:23:51 2027 GMT Subject: CN=B4E57C687D70A49DBBBD6A0CE590C89CEBD2A04A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bb:71:df:11:d8:16:fd:23:61:35:1d:35:ae: d2:81:0f:b7:0d:97:25:18:1c:9f:6b:7d:7b:f2:da: 47:9a:fe:d2:6e:97:ae:65:c8:95:36:b1:9f:03:92: 81:9a:b1:d2:db:e4:7b:7c:c9:be:5a:3d:49:0c:ee: c5:ef:7c:0d:18:7b:88:85:8d:4e:13:12:db:14:77: 11:2b:2f:dc:9a:f4:63:54:17:28:d1:b2:a7:5e:45: 9d:50:db:d1:98:2c:e6:48:30:b3:28:0b:0f:26:5a: 7c:65:79:fc:dd:9a:ca:83:53:24:ef:1d:ab:09:16: d1:21:ec:e4:cf:e6:09:bc:f0:47:19:bb:95:eb:ec: c1:0d:3d:23:f5:99:8e:53:9a:7a:7f:5d:18:e0:70: b2:e6:05:fc:2a:72:ac:9d:05:56:60:39:9b:eb:5c: e0:0b:8f:20:b7:fd:68:46:71:b6:c7:ac:68:d4:6d: 33:d6:fb:06:be:8d:16:92:89:86:2f:e7:01:cd:51: 38:e6:d6:56:dc:84:32:58:d3:89:f9:62:09:c4:f1: 7c:c6:08:46:df:11:60:17:d7:ae:91:3b:6f:42:24: bf:c6:db:02:a4:53:1a:f8:bb:fb:54:80:ae:5a:f9: 7e:b1:f6:90:6d:6b:51:f6:1e:cb:b0:92:e0:8b:3a: 65:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E5:7C:68:7D:70:A4:9D:BB:BD:6A:0C:E5:90:C8:9C:EB:D2:A0:4A X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/35382e3131342e36342e302f31382d3138203d3e203138303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.114.64.0/18 Signature Algorithm: sha256WithRSAEncryption 21:fe:58:c8:54:a1:e2:0a:75:28:df:35:61:0c:fd:9a:72:e2: d8:d5:0b:7c:1e:5a:7e:73:cb:8a:57:29:3f:73:46:49:25:47: 6f:2f:c3:08:c1:4e:d3:51:e2:6a:4f:d4:8d:9a:87:26:84:8b: 5d:ca:7c:49:61:1f:c9:80:7a:19:5a:2b:c0:36:c7:f8:90:3e: 37:f1:84:21:26:d6:0e:2d:39:b6:2d:fb:29:d2:91:55:c9:d5: 3e:99:ae:ae:68:83:85:29:d5:dd:2b:4b:b6:07:26:54:d4:39: 92:a4:fa:6c:a3:bb:64:c0:39:40:1e:7b:71:5d:16:55:1b:8b: ac:d1:b2:f0:1f:4b:20:e8:ad:5b:fd:6f:72:50:0c:f3:44:f1: 06:98:37:0f:a8:3f:10:af:65:eb:06:35:32:62:8e:f1:0f:75: 62:33:d1:61:e1:e7:e9:a9:ca:a6:33:8a:8e:43:3e:62:2c:dc: 23:2f:23:75:70:35:71:81:dd:46:62:e9:7c:e8:a2:3d:46:9c: 4e:a4:24:98:bf:ba:37:58:87:d9:57:6c:c4:c8:8f:64:d3:f2: 9b:8e:b5:29:46:13:1e:98:1a:5f:48:73:c4:6b:50:76:7f:8a: 30:3c:bd:03:f0:35:2d:68:49:68:2f:63:1b:11:60:de:a0:94: 04:64:44:51 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUaj/FnCUZsJGfstGzjcXUmWv4jZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMzE4NTFaFw0yNzA2MjEwMzIzNTFaMDMxMTAvBgNV BAMTKEI0RTU3QzY4N0Q3MEE0OURCQkJENkEwQ0U1OTBDODlDRUJEMkEwNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCau3HfEdgW/SNhNR01rtKBD7cN lyUYHJ9rfXvy2kea/tJul65lyJU2sZ8DkoGasdLb5Ht8yb5aPUkM7sXvfA0Ye4iF jU4TEtsUdxErL9ya9GNUFyjRsqdeRZ1Q29GYLOZIMLMoCw8mWnxlefzdmsqDUyTv HasJFtEh7OTP5gm88EcZu5Xr7MENPSP1mY5Tmnp/XRjgcLLmBfwqcqydBVZgOZvr XOALjyC3/WhGcbbHrGjUbTPW+wa+jRaSiYYv5wHNUTjm1lbchDJY04n5YgnE8XzG CEbfEWAX166RO29CJL/G2wKkUxr4u/tUgK5a+X6x9pBta1H2HsuwkuCLOmXhAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUtOV8aH1wpJ27vWoM5ZDInOvSoEowHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYBBQUHMAuGW3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzUzODJlMzEzMTM0MmUzNjM0 MmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzEzODMwMzQzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjpy QDANBgkqhkiG9w0BAQsFAAOCAQEAIf5YyFSh4gp1KN81YQz9mnLi2NULfB5afnPL ilcpP3NGSSVHby/DCMFO01Hiak/UjZqHJoSLXcp8SWEfyYB6GVorwDbH+JA+N/GE ISbWDi05ti37KdKRVcnVPpmurmiDhSnV3StLtgcmVNQ5kqT6bKO7ZMA5QB57cV0W VRuLrNGy8B9LIOitW/1vclAM80TxBpg3D6g/EK9l6wY1MmKO8Q91YjPRYeHn6anK pjOKjkM+YizcIy8jdXA1cYHdRmLpfOiiPUacTqQkmL+6N1iH2VdsxMiPZNPym461 KUYTHpgaX0hzxGtQdn+KMDy9A/A1LWhJaC9jGxFg3qCUBGREUQ== -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:04 2026 by rpki-client