$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/35382e3131352e302e302f31382d3231203d3e203138303432.roa File: 35382e3131352e302e302f31382d3231203d3e203138303432.roa (raw, json) Hash identifier: BVxmeSgqC9YDw83B+zoyP0GrnTLVycjXqAm9e7Vbe60= Subject key identifier: E9:13:F4:46:89:FC:D0:9F:62:94:CF:CF:1C:08:73:B0:3A:B9:1C:79 Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 04B6ADBFD15C2691D984E034CDB4532A54D273F6 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/35382e3131352e302e302f31382d3231203d3e203138303432.roa Signing time: Mon 22 Jun 2026 03:24:01 +0000 ROA not before: Mon 22 Jun 2026 03:19:01 +0000 ROA not after: Mon 21 Jun 2027 03:24:01 +0000 asID: 18042 IP address blocks: 58.115.0.0/18 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b6:ad:bf:d1:5c:26:91:d9:84:e0:34:cd:b4:53:2a:54:d2:73:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 03:19:01 2026 GMT Not After : Jun 21 03:24:01 2027 GMT Subject: CN=E913F44689FCD09F6294CFCF1C0873B03AB91C79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:a6:d9:01:86:64:88:c5:75:a9:ce:59:29: 1a:d8:96:26:28:78:1d:60:a8:3e:39:1d:f3:fd:d2: 2f:b8:fe:f7:b2:dd:74:02:c3:d5:e2:70:26:04:c2: ed:4d:09:9e:d5:a5:34:5e:9a:ea:62:1d:c6:46:df: 7f:f9:6d:d5:40:0d:6d:fb:3f:cc:db:12:a5:30:44: 06:13:f4:8d:a0:e4:6f:1a:2e:8d:47:f0:bf:e9:6e: 81:77:29:6e:37:e4:2f:70:3d:40:b1:26:c9:a2:0e: 5f:dc:93:0d:4e:16:12:f3:e4:bb:ad:fb:31:3d:4e: 48:d7:99:4f:d3:04:ec:5b:ac:49:79:f7:f7:60:80: 3b:27:fb:db:9a:95:00:39:51:7b:32:f1:cd:67:95: 9f:5b:4b:07:c4:55:ad:28:83:28:50:52:74:9b:b7: be:31:ba:b2:e4:ef:b5:6c:06:01:15:fc:a7:1f:5a: 74:22:50:36:4b:0b:a7:89:f8:01:3e:e8:1f:74:29: ed:38:e3:8b:d3:f6:6e:4b:57:95:76:e1:8f:cc:8d: 5b:b3:3d:53:67:78:38:a7:94:0e:91:ce:a9:93:a3: 57:da:49:61:3f:84:4c:4e:2a:9f:68:fd:61:32:1d: 8f:1a:ab:2d:15:90:e4:94:a6:20:06:b9:83:86:da: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:13:F4:46:89:FC:D0:9F:62:94:CF:CF:1C:08:73:B0:3A:B9:1C:79 X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/35382e3131352e302e302f31382d3231203d3e203138303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.115.0.0/18 Signature Algorithm: sha256WithRSAEncryption 72:c3:01:13:22:09:53:0e:45:51:4c:25:4d:eb:c1:a3:db:0d: 3c:7e:21:ba:36:b1:ee:8e:94:23:d3:1b:82:8a:f5:41:c8:1a: f1:ab:84:84:8c:99:d4:03:7e:59:14:cc:86:93:f6:a3:22:f7: a2:23:07:0c:ff:f4:59:4d:1c:76:51:69:dd:95:84:2f:4f:5e: 9d:a2:70:34:94:c2:0c:7d:aa:7f:3d:a4:17:87:a3:83:ab:78: cd:f7:13:08:d7:9a:14:74:eb:05:db:e1:ea:e9:52:db:5c:9f: 1c:5f:91:05:3f:92:4f:88:07:17:e8:79:d0:8f:c3:f5:d8:0b: ba:5a:da:43:03:38:63:82:6f:a8:d3:10:ef:15:d2:24:00:88: 8f:c8:ae:28:9f:e4:01:59:ef:e5:f9:be:d4:e6:1a:ae:1d:08: ca:49:f2:24:a7:f8:81:c4:85:c2:29:95:38:2a:e9:f0:0e:31: 1d:d5:e7:c2:40:0a:70:12:05:62:c6:b2:d0:f0:6a:06:5a:53: 45:12:98:98:a5:50:7b:51:41:0e:b4:f5:e2:92:b2:00:65:17: 28:0e:71:bf:14:3f:73:49:1d:67:28:c9:10:69:a0:96:5e:08: 05:46:e9:f4:ff:da:a1:7f:19:40:bd:74:85:3d:bf:b5:f8:7e: 92:a9:e1:37 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgIUBLatv9FcJpHZhOA0zbRTKlTSc/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMzE5MDFaFw0yNzA2MjEwMzI0MDFaMDMxMTAvBgNV BAMTKEU5MTNGNDQ2ODlGQ0QwOUY2Mjk0Q0ZDRjFDMDg3M0IwM0FCOTFDNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo4abZAYZkiMV1qc5ZKRrYliYo eB1gqD45HfP90i+4/vey3XQCw9XicCYEwu1NCZ7VpTRemupiHcZG33/5bdVADW37 P8zbEqUwRAYT9I2g5G8aLo1H8L/pboF3KW435C9wPUCxJsmiDl/ckw1OFhLz5Lut +zE9TkjXmU/TBOxbrEl59/dggDsn+9ualQA5UXsy8c1nlZ9bSwfEVa0ogyhQUnSb t74xurLk77VsBgEV/KcfWnQiUDZLC6eJ+AE+6B90Ke0444vT9m5LV5V24Y/MjVuz PVNneDinlA6RzqmTo1faSWE/hExOKp9o/WEyHY8aqy0VkOSUpiAGuYOG2riLAgMB AAGjggHZMIIB1TAdBgNVHQ4EFgQU6RP0Ron80J9ilM/PHAhzsDq5HHkwHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzUzODJlMzEzMTM1MmUzMDJl MzAyZjMxMzgyZDMyMzEyMDNkM2UyMDMxMzgzMDM0MzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAY6cwAw DQYJKoZIhvcNAQELBQADggEBAHLDARMiCVMORVFMJU3rwaPbDTx+Ibo2se6OlCPT G4KK9UHIGvGrhISMmdQDflkUzIaT9qMi96IjBwz/9FlNHHZRad2VhC9PXp2icDSU wgx9qn89pBeHo4OreM33EwjXmhR06wXb4erpUttcnxxfkQU/kk+IBxfoedCPw/XY C7pa2kMDOGOCb6jTEO8V0iQAiI/Iriif5AFZ7+X5vtTmGq4dCMpJ8iSn+IHEhcIp lTgq6fAOMR3V58JACnASBWLGstDwagZaU0USmJilUHtRQQ609eKSsgBlFygOcb8U P3NJHWcoyRBpoJZeCAVG6fT/2qF/GUC9dIU9v7X4fpKp4Tc= -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:00 2026 by rpki-client