$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/35382e3131352e382e302f32312d3231203d3e203338383531.roa File: 35382e3131352e382e302f32312d3231203d3e203338383531.roa (raw, json) Hash identifier: /6/HIphIgl/v/t8bjLejjkAehhD4XS/lEHAPAzI8Uqk= Subject key identifier: BF:CC:B2:8F:BF:5C:54:46:C9:A1:4E:B1:23:72:DA:B6:F5:BF:53:A7 Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 0F274DBBCC6370DC8EFF8CCF96460BBE7E549390 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/35382e3131352e382e302f32312d3231203d3e203338383531.roa Signing time: Mon 22 Jun 2026 03:43:49 +0000 ROA not before: Mon 22 Jun 2026 03:38:49 +0000 ROA not after: Mon 21 Jun 2027 03:43:49 +0000 asID: 38851 IP address blocks: 58.115.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:27:4d:bb:cc:63:70:dc:8e:ff:8c:cf:96:46:0b:be:7e:54:93:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 22 03:38:49 2026 GMT Not After : Jun 21 03:43:49 2027 GMT Subject: CN=BFCCB28FBF5C5446C9A14EB12372DAB6F5BF53A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:31:00:4e:c0:1d:f2:c4:ea:d6:bd:c0:a1:3e: 54:c7:a0:65:97:e2:c6:d9:75:f6:db:ca:66:5d:af: 12:56:e7:c9:25:f2:03:4f:56:45:cc:4d:52:fc:1f: 34:aa:54:4f:ea:3b:07:25:dd:7f:03:b9:82:c3:fd: b0:13:4d:41:07:50:0a:f5:f5:fb:53:f5:2d:50:c9: 8b:b0:ac:b5:33:13:d0:38:33:28:8f:85:63:ca:a9: d9:37:9f:c0:4d:9b:94:65:e3:44:d6:bd:bd:b6:19: 5e:15:52:8d:a1:ed:10:74:ef:6f:15:c4:2a:6c:5e: 93:dd:ca:e9:e0:db:1e:ee:0c:ab:94:9f:9c:00:ad: 81:9c:f1:c5:fc:76:3f:d2:cc:69:9b:42:eb:1a:c2: 38:05:e7:52:71:1a:ff:94:42:5f:2c:db:2e:fb:f7: 94:3b:0c:26:22:3e:63:06:a3:da:88:4f:35:bc:ba: c0:05:6a:f4:81:76:6f:12:89:a4:78:a9:cb:cb:69: 54:c1:fe:c2:4b:2b:fa:fb:df:ad:e1:c2:3e:09:18: f8:3b:c5:9c:a7:57:e3:66:d2:94:81:96:a3:56:13: 6e:dd:27:f3:c8:10:af:24:48:b7:9c:06:da:ba:4a: e7:2f:86:29:54:f7:71:62:ab:dc:16:cc:7d:08:29: bb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CC:B2:8F:BF:5C:54:46:C9:A1:4E:B1:23:72:DA:B6:F5:BF:53:A7 X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/35382e3131352e382e302f32312d3231203d3e203338383531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.115.8.0/21 Signature Algorithm: sha256WithRSAEncryption 59:39:29:0c:1d:79:c7:9d:8e:5d:60:2c:9a:15:cf:30:65:51: fa:27:b1:50:4d:ab:16:fe:60:3a:d8:f5:6d:92:1d:fe:0c:8d: 7d:41:27:fd:e2:a6:0d:3a:6e:58:a2:37:07:90:09:82:33:9d: 93:3c:26:d6:12:66:2d:93:eb:b8:62:d5:86:b6:8b:90:71:b0: c0:8d:25:a6:25:e1:77:fe:96:60:2b:c2:ec:ab:de:27:ea:6d: 90:2d:3e:09:dd:19:0d:56:1a:34:35:75:01:19:d3:23:af:b4: 65:3a:ec:c7:8f:ce:42:0d:da:e0:2d:0e:d3:59:70:c1:d8:51: 22:85:04:e1:e3:7d:47:e6:65:4b:73:04:ab:fa:d7:69:8b:29: 3d:dd:cd:5d:55:e5:19:ab:bd:ff:0c:cd:bd:c2:27:f1:3d:35: 8e:55:7e:ea:e8:d9:c0:f5:e0:3a:24:ac:4b:6e:bd:07:15:ac: 9a:ed:bd:d9:a2:26:fc:ad:60:ae:ce:41:d3:7c:fd:48:e3:2c: c4:6f:51:bd:72:c8:90:19:b3:28:34:38:f1:c4:04:da:ec:f0: 78:af:51:22:07:73:a6:4d:a2:f2:65:79:49:cd:8a:30:87:6a: 65:02:ee:e2:ba:3d:52:1b:f5:6d:ac:71:2e:71:cc:da:e7:e1: 70:cc:bd:25 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgIUDydNu8xjcNyO/4zPlkYLvn5Uk5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjIwMzM4NDlaFw0yNzA2MjEwMzQzNDlaMDMxMTAvBgNV BAMTKEJGQ0NCMjhGQkY1QzU0NDZDOUExNEVCMTIzNzJEQUI2RjVCRjUzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVMQBOwB3yxOrWvcChPlTHoGWX 4sbZdfbbymZdrxJW58kl8gNPVkXMTVL8HzSqVE/qOwcl3X8DuYLD/bATTUEHUAr1 9ftT9S1QyYuwrLUzE9A4MyiPhWPKqdk3n8BNm5Rl40TWvb22GV4VUo2h7RB0728V xCpsXpPdyung2x7uDKuUn5wArYGc8cX8dj/SzGmbQusawjgF51JxGv+UQl8s2y77 95Q7DCYiPmMGo9qITzW8usAFavSBdm8SiaR4qcvLaVTB/sJLK/r7363hwj4JGPg7 xZynV+Nm0pSBlqNWE27dJ/PIEK8kSLecBtq6SucvhilU93Fiq9wWzH0IKbuLAgMB AAGjggHZMIIB1TAdBgNVHQ4EFgQUv8yyj79cVEbJoU6xI3LatvW/U6cwHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzUzODJlMzEzMTM1MmUzODJl MzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMzMzgzODM1MzEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM6cwgw DQYJKoZIhvcNAQELBQADggEBAFk5KQwdecedjl1gLJoVzzBlUfonsVBNqxb+YDrY 9W2SHf4MjX1BJ/3ipg06bliiNweQCYIznZM8JtYSZi2T67hi1Ya2i5BxsMCNJaYl 4Xf+lmArwuyr3ifqbZAtPgndGQ1WGjQ1dQEZ0yOvtGU67MePzkIN2uAtDtNZcMHY USKFBOHjfUfmZUtzBKv612mLKT3dzV1V5Rmrvf8Mzb3CJ/E9NY5Vfuro2cD14Dok rEtuvQcVrJrtvdmiJvytYK7OQdN8/UjjLMRvUb1yyJAZsyg0OPHEBNrs8HivUSIH c6ZNovJleUnNijCHamUC7uK6PVIb9W2scS5xzNrn4XDMvSU= -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:00 2026 by rpki-client