$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/35382e3131352e3132382e302f31382d3138203d3e203138303432.roa File: 35382e3131352e3132382e302f31382d3138203d3e203138303432.roa (raw, json) Hash identifier: dI2y4NRL8Z0142jcw2rYhxkNr2P5GsnUBgFp96CAkhs= Subject key identifier: E3:E6:D3:65:2F:AC:E8:20:F9:77:C7:A1:B5:F9:3A:EC:15:F2:D2:BF Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 3792BA453B68AE0E3D411549828AE92E50040752 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/35382e3131352e3132382e302f31382d3138203d3e203138303432.roa Signing time: Mon 22 Jun 2026 03:24:01 +0000 ROA not before: Mon 22 Jun 2026 03:19:01 +0000 ROA not after: Mon 21 Jun 2027 03:24:01 +0000 asID: 18042 IP address blocks: 58.115.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:92:ba:45:3b:68:ae:0e:3d:41:15:49:82:8a:e9:2e:50:04:07:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 03:19:01 2026 GMT Not After : Jun 21 03:24:01 2027 GMT Subject: CN=E3E6D3652FACE820F977C7A1B5F93AEC15F2D2BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d3:b5:f7:cd:21:5a:3a:96:e6:f0:20:cd:ac: 24:1d:7a:65:62:02:9a:d9:91:db:9c:1d:3b:0e:6e: 8b:c9:f2:6b:22:75:4e:b6:b3:8c:d0:e6:6b:8c:35: cb:1d:80:e0:af:2d:fa:cf:84:91:04:76:d6:07:9c: 48:ec:05:f2:05:44:2e:70:56:15:b6:a3:da:6d:81: b3:cc:7f:9a:33:0b:44:ed:09:62:63:95:90:d7:82: 0a:63:0d:0a:ee:07:8f:b6:18:42:09:23:a2:6f:a7: 2b:f2:cf:85:46:13:df:3d:fa:51:0f:82:22:33:9d: 9c:b0:f2:51:17:71:49:77:57:5f:62:ec:e5:07:e1: 5a:5c:ce:e1:c6:5d:a2:ee:e0:77:30:87:6e:56:e1: 10:77:85:90:14:d4:ed:ca:d5:33:67:70:97:0f:4b: 9b:f4:ca:17:be:16:57:0d:47:7f:ab:25:53:e9:4d: b6:fb:66:38:19:1f:68:9a:ee:97:88:23:28:95:76: 2b:2c:8e:c1:56:ae:20:95:95:37:ae:ac:48:3a:5a: c2:c3:ce:91:e1:74:2e:b4:5d:88:64:a9:6a:24:26: 2a:67:e1:cf:d7:e4:e6:6e:32:ac:f4:60:27:03:6b: fd:0c:b3:71:f9:c4:65:11:5c:f8:2b:7e:97:6c:37: 5b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E6:D3:65:2F:AC:E8:20:F9:77:C7:A1:B5:F9:3A:EC:15:F2:D2:BF X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/35382e3131352e3132382e302f31382d3138203d3e203138303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.115.128.0/18 Signature Algorithm: sha256WithRSAEncryption 85:54:e8:5d:5c:22:31:4c:b6:d3:e0:c2:01:17:86:bf:8e:21: e8:67:94:47:1d:16:87:8d:6b:c4:a0:bc:60:c3:d1:b1:aa:c9: c7:62:c9:56:f4:96:d8:5a:14:d1:a5:5c:59:ee:db:73:07:57: 71:f3:fb:a4:16:8c:6d:a6:b9:95:25:d3:b9:eb:fc:49:41:c0: 36:75:c9:a7:e2:5c:60:02:bd:86:ba:d8:ad:08:84:4b:a6:8d: 5a:4e:65:c0:b7:d8:d2:09:9b:22:02:01:55:d9:a9:00:1b:8d: 7b:de:f6:d6:d5:4f:17:3b:13:0e:f7:6e:2c:11:56:14:08:ea: c1:a9:3e:b3:54:3a:3c:f8:4c:0f:5a:e2:ff:46:bd:12:60:2b: 81:7d:ec:a0:4d:7b:75:35:20:be:06:c1:fe:28:5e:33:1c:0e: 53:8b:f4:2c:dc:98:2c:23:a3:2e:8f:1a:d0:7b:be:c3:8e:8c: 5d:49:68:82:cc:69:51:3c:20:21:a1:fc:78:e4:1f:1b:bc:c8: cb:dc:a9:4b:53:38:5d:aa:25:87:8c:f9:d7:c0:4a:7c:2b:70: 1f:03:f0:71:66:0a:b8:b1:61:8c:48:dd:dd:dd:4c:ea:fb:6f: 0a:57:6a:90:27:a9:fa:f3:5a:10:73:92:ca:d5:f2:70:1c:0b: 6a:c9:9b:86 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUN5K6RTtorg49QRVJgorpLlAEB1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMzE5MDFaFw0yNzA2MjEwMzI0MDFaMDMxMTAvBgNV BAMTKEUzRTZEMzY1MkZBQ0U4MjBGOTc3QzdBMUI1RjkzQUVDMTVGMkQyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr07X3zSFaOpbm8CDNrCQdemVi AprZkducHTsObovJ8msidU62s4zQ5muMNcsdgOCvLfrPhJEEdtYHnEjsBfIFRC5w VhW2o9ptgbPMf5ozC0TtCWJjlZDXggpjDQruB4+2GEIJI6Jvpyvyz4VGE989+lEP giIznZyw8lEXcUl3V19i7OUH4VpczuHGXaLu4Hcwh25W4RB3hZAU1O3K1TNncJcP S5v0yhe+FlcNR3+rJVPpTbb7ZjgZH2ia7peIIyiVdissjsFWriCVlTeurEg6WsLD zpHhdC60XYhkqWokJipn4c/X5OZuMqz0YCcDa/0Ms3H5xGURXPgrfpdsN1tTAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQU4+bTZS+s6CD5d8ehtfk67BXy0r8wHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzUzODJlMzEzMTM1MmUzMTMy MzgyZTMwMmYzMTM4MmQzMTM4MjAzZDNlMjAzMTM4MzAzNDMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG OnOAMA0GCSqGSIb3DQEBCwUAA4IBAQCFVOhdXCIxTLbT4MIBF4a/jiHoZ5RHHRaH jWvEoLxgw9GxqsnHYslW9JbYWhTRpVxZ7ttzB1dx8/ukFoxtprmVJdO56/xJQcA2 dcmn4lxgAr2GutitCIRLpo1aTmXAt9jSCZsiAgFV2akAG4173vbW1U8XOxMO924s EVYUCOrBqT6zVDo8+EwPWuL/Rr0SYCuBfeygTXt1NSC+BsH+KF4zHA5Ti/Qs3Jgs I6MujxrQe77DjoxdSWiCzGlRPCAhofx45B8bvMjL3KlLUzhdqiWHjPnXwEp8K3Af A/BxZgq4sWGMSN3d3Uzq+28KV2qQJ6n681oQc5LK1fJwHAtqyZuG -----END CERTIFICATE-----Generated at Tue Jun 30 20:12:55 2026 by rpki-client