$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/35382e3131352e31362e302f32302d3230203d3e203338383531.roa File: 35382e3131352e31362e302f32302d3230203d3e203338383531.roa (raw, json) Hash identifier: wi3F+bSUCJbjvpYt42xT8zXM17ksOuqAB6qUrcBzcOE= Subject key identifier: 76:FB:0D:7F:A4:9D:04:51:FA:D4:F3:0C:37:49:14:AF:92:51:57:D7 Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 32107B2D5B6F5541858193A38011005423E79831 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/35382e3131352e31362e302f32302d3230203d3e203338383531.roa Signing time: Mon 22 Jun 2026 03:23:56 +0000 ROA not before: Mon 22 Jun 2026 03:18:56 +0000 ROA not after: Mon 21 Jun 2027 03:23:56 +0000 asID: 38851 IP address blocks: 58.115.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:10:7b:2d:5b:6f:55:41:85:81:93:a3:80:11:00:54:23:e7:98:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 03:18:56 2026 GMT Not After : Jun 21 03:23:56 2027 GMT Subject: CN=76FB0D7FA49D0451FAD4F30C374914AF925157D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:bf:7e:51:36:24:5b:b0:fa:fd:cd:50:ce: 8a:ed:1e:58:60:a8:df:ef:a3:9c:8c:ec:51:c1:31: 7c:a9:9d:c4:94:10:97:98:1e:7a:8e:76:46:1a:d1: fe:cd:e3:84:eb:e3:9f:96:2c:67:20:33:d9:b0:a0: d4:42:df:43:24:ee:d8:0a:35:4d:16:cc:31:40:dd: 92:08:ff:94:50:0a:d4:fa:8c:8b:47:08:a1:39:cb: 9d:83:0c:59:f1:53:87:df:70:2e:24:90:ee:40:f6: d8:04:0d:35:2c:b0:c1:a5:f8:8c:5a:cf:cd:30:21: a6:0f:14:b7:64:73:a7:e3:9f:0f:15:bd:49:f5:c7: f3:a3:88:e5:f9:17:29:84:1e:1a:b2:2f:8c:14:ad: 72:9c:03:91:d0:2b:4e:4f:f1:79:06:f0:91:28:f8: 52:02:a0:97:c3:89:eb:ba:68:38:7d:1e:e9:94:6c: b6:d2:47:6c:56:f2:e1:18:ed:62:bb:55:b4:56:46: 30:a2:5e:25:7c:54:42:65:93:46:b4:31:5e:86:21: ab:84:42:b0:f8:25:10:e5:df:6e:60:72:0f:47:29: c0:aa:5f:59:61:45:58:91:35:fd:62:8f:af:8f:87: a0:84:71:8b:32:5d:af:88:44:b6:35:4f:5e:23:b0: 7e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FB:0D:7F:A4:9D:04:51:FA:D4:F3:0C:37:49:14:AF:92:51:57:D7 X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/35382e3131352e31362e302f32302d3230203d3e203338383531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.115.16.0/20 Signature Algorithm: sha256WithRSAEncryption 45:29:21:ff:37:3d:17:95:ff:fd:eb:71:2f:3f:3e:6c:20:d3: 99:e7:27:d6:e0:79:67:32:59:17:bd:14:e3:b9:9e:ca:9a:08: 5f:be:d7:53:32:f9:28:a6:f9:d9:e0:e7:17:bd:c9:ca:48:78: 21:e2:5f:12:e8:cb:32:55:be:57:12:20:0c:3e:6a:cc:66:93: c9:5c:6b:21:dc:da:4f:a6:a0:97:19:30:e4:00:fb:0f:15:13: 81:74:b7:68:e6:ad:bf:53:e3:93:45:96:c4:f2:15:ab:19:9c: 89:ab:19:fc:ac:74:93:28:77:6f:a6:b4:0e:a7:f9:b2:77:30: df:72:0e:10:9b:a0:47:cf:69:94:9f:cb:e3:1a:13:40:26:b1: 6c:51:cb:10:11:4c:14:a4:c3:7d:e4:3d:63:c2:26:32:89:db: fe:73:6c:64:49:3c:07:d6:41:d2:e7:15:2c:d7:0b:9b:a7:20: 4e:38:f2:7b:b9:2e:18:65:2e:ce:8c:d8:13:e9:12:f3:6b:11: d6:c7:2a:6a:cf:ec:02:40:ad:19:ac:b0:db:f9:c3:2b:a1:20: 40:43:e6:fb:2d:10:98:f4:03:fb:6f:53:8a:1e:f8:48:85:b3: 5b:1f:59:6d:64:5c:4f:fe:29:c4:b0:6f:a0:28:87:9a:c6:2b: df:b5:3b:72 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUMhB7LVtvVUGFgZOjgBEAVCPnmDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMzE4NTZaFw0yNzA2MjEwMzIzNTZaMDMxMTAvBgNV BAMTKDc2RkIwRDdGQTQ5RDA0NTFGQUQ0RjMwQzM3NDkxNEFGOTI1MTU3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fL9+UTYkW7D6/c1QzortHlhg qN/vo5yM7FHBMXypncSUEJeYHnqOdkYa0f7N44Tr45+WLGcgM9mwoNRC30Mk7tgK NU0WzDFA3ZII/5RQCtT6jItHCKE5y52DDFnxU4ffcC4kkO5A9tgEDTUssMGl+Ixa z80wIaYPFLdkc6fjnw8VvUn1x/OjiOX5FymEHhqyL4wUrXKcA5HQK05P8XkG8JEo +FICoJfDieu6aDh9HumUbLbSR2xW8uEY7WK7VbRWRjCiXiV8VEJlk0a0MV6GIauE QrD4JRDl325gcg9HKcCqX1lhRViRNf1ij6+Ph6CEcYsyXa+IRLY1T14jsH6HAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUdvsNf6SdBFH61PMMN0kUr5JRV9cwHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYBBQUHMAuGW3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzUzODJlMzEzMTM1MmUzMTM2 MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzMzODM4MzUzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBDpz EDANBgkqhkiG9w0BAQsFAAOCAQEARSkh/zc9F5X//etxLz8+bCDTmecn1uB5ZzJZ F70U47meypoIX77XUzL5KKb52eDnF73Jykh4IeJfEujLMlW+VxIgDD5qzGaTyVxr IdzaT6aglxkw5AD7DxUTgXS3aOatv1Pjk0WWxPIVqxmciasZ/Kx0kyh3b6a0Dqf5 sncw33IOEJugR89plJ/L4xoTQCaxbFHLEBFMFKTDfeQ9Y8ImMonb/nNsZEk8B9ZB 0ucVLNcLm6cgTjjye7kuGGUuzozYE+kS82sR1scqas/sAkCtGayw2/nDK6EgQEPm +y0QmPQD+29Tih74SIWzWx9ZbWRcT/4pxLBvoCiHmsYr37U7cg== -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:02 2026 by rpki-client