$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/35382e38362e34362e302f32342d3234203d3e203138303138.roa File: 35382e38362e34362e302f32342d3234203d3e203138303138.roa (raw, json) Hash identifier: PB/tlBG77QilX73fcMvhtdUuD6yCKwWXPHgYe1xTVKw= Subject key identifier: D7:F6:3A:77:80:F0:0B:89:45:B8:01:97:C5:05:E1:4B:29:FF:3F:D7 Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 5FB9A619854366C7DA2A72282B6754B549DA9697 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/35382e38362e34362e302f32342d3234203d3e203138303138.roa Signing time: Mon 11 May 2026 16:50:17 +0000 ROA not before: Mon 11 May 2026 16:45:17 +0000 ROA not after: Mon 10 May 2027 16:50:17 +0000 asID: 18018 IP address blocks: 58.86.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b9:a6:19:85:43:66:c7:da:2a:72:28:2b:67:54:b5:49:da:96:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: May 11 16:45:17 2026 GMT Not After : May 10 16:50:17 2027 GMT Subject: CN=D7F63A7780F00B8945B80197C505E14B29FF3FD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:db:84:2a:0a:d8:01:42:a9:a5:58:7e:7f:c4: ba:cf:70:c2:e8:47:a2:7a:57:99:f3:03:7c:e6:57: 0f:82:a8:7d:22:ab:76:0d:48:41:36:7e:b9:bf:f2: 03:67:28:91:e3:30:2c:a9:90:7c:df:6a:16:8b:20: 56:46:96:89:29:ef:5a:4d:2c:cb:14:73:50:2d:28: b5:02:d6:be:ca:22:45:84:93:83:96:2a:09:6e:f5: b5:62:c5:e9:d2:24:b0:4e:6c:b7:61:25:a8:50:d4: 86:33:60:6c:2b:22:e0:9b:5a:45:e5:b3:a4:0b:23: d2:25:b7:c3:53:df:eb:8e:41:e1:e3:02:c5:58:93: 27:17:45:f7:85:39:e1:14:3e:02:8b:b5:35:8e:2e: 7b:0d:fc:aa:74:f6:29:61:49:10:42:7e:b5:ec:c1: 5d:b4:5e:48:64:20:3a:75:79:42:39:7e:58:fa:49: 2f:a0:55:f5:96:f1:fe:73:b3:4d:9e:20:ff:fb:2e: 17:f3:1c:1b:b9:8b:9c:5e:8f:57:92:a9:aa:d0:df: 9d:d3:fb:3b:04:1c:5c:b4:cf:5f:86:51:19:d0:50: 2e:cb:6c:41:37:d1:09:99:39:07:28:25:06:cf:1f: 1d:4f:a2:d2:38:a8:d5:f5:a2:a5:d8:15:8b:ec:22: 0d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F6:3A:77:80:F0:0B:89:45:B8:01:97:C5:05:E1:4B:29:FF:3F:D7 X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/35382e38362e34362e302f32342d3234203d3e203138303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.86.46.0/24 Signature Algorithm: sha256WithRSAEncryption af:c0:08:ac:29:8b:56:39:b8:7f:d2:18:e7:53:61:90:28:8b: 7a:6e:5a:b7:87:f1:c3:74:08:12:ea:ce:db:bf:2c:14:b1:5b: b0:30:b9:bf:44:e2:9b:45:2c:3e:5e:e9:b1:e7:ff:6f:ce:ec: c6:05:96:63:e5:ec:d2:bf:c4:f2:73:e1:f7:46:d6:c1:85:2f: a3:83:95:23:73:42:c8:11:af:f4:83:b1:32:99:7f:97:97:1c: ac:d3:84:c8:2d:6f:6c:2c:37:6d:ed:5b:f0:47:7a:30:0a:42: 7f:0c:6e:5b:49:7a:d8:b2:2b:90:78:97:f8:a7:aa:ac:8f:b7: c9:95:1a:2e:ca:93:26:0b:6e:12:fa:33:15:b6:59:e1:a4:53: 56:6d:e5:3b:ba:7b:2a:86:ac:dd:4e:e1:71:ae:bd:f6:6d:68: 09:e1:68:5f:b6:a0:e6:02:a2:2d:fa:08:59:90:2a:93:d4:49: 48:4b:94:3f:c5:da:88:96:3a:c6:c0:c2:80:98:1f:ea:5e:a5: 48:28:3c:ed:0b:2d:12:c8:b3:5f:e1:25:1a:63:3e:23:80:fc: 00:32:bd:2a:dc:93:25:fc:c6:14:a5:ac:10:12:97:2f:e0:59: 12:7b:c7:e7:12:cf:9a:d5:eb:7c:eb:ab:bd:7e:91:1c:fc:0b: 4e:ef:88:4d -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgIUX7mmGYVDZsfaKnIoK2dUtUnalpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA1MTExNjQ1MTdaFw0yNzA1MTAxNjUwMTdaMDMxMTAvBgNV BAMTKEQ3RjYzQTc3ODBGMDBCODk0NUI4MDE5N0M1MDVFMTRCMjlGRjNGRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX24QqCtgBQqmlWH5/xLrPcMLo R6J6V5nzA3zmVw+CqH0iq3YNSEE2frm/8gNnKJHjMCypkHzfahaLIFZGlokp71pN LMsUc1AtKLUC1r7KIkWEk4OWKglu9bVixenSJLBObLdhJahQ1IYzYGwrIuCbWkXl s6QLI9Ilt8NT3+uOQeHjAsVYkycXRfeFOeEUPgKLtTWOLnsN/Kp09ilhSRBCfrXs wV20XkhkIDp1eUI5flj6SS+gVfWW8f5zs02eIP/7LhfzHBu5i5xej1eSqarQ353T +zsEHFy0z1+GURnQUC7LbEE30QmZOQcoJQbPHx1PotI4qNX1oqXYFYvsIg1hAgMB AAGjggHZMIIB1TAdBgNVHQ4EFgQU1/Y6d4DwC4lFuAGXxQXhSyn/P9cwHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzUzODJlMzgzNjJlMzQzNjJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzgzMDMxMzgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA6Vi4w DQYJKoZIhvcNAQELBQADggEBAK/ACKwpi1Y5uH/SGOdTYZAoi3puWreH8cN0CBLq ztu/LBSxW7Awub9E4ptFLD5e6bHn/2/O7MYFlmPl7NK/xPJz4fdG1sGFL6ODlSNz QsgRr/SDsTKZf5eXHKzThMgtb2wsN23tW/BHejAKQn8MbltJetiyK5B4l/inqqyP t8mVGi7KkyYLbhL6MxW2WeGkU1Zt5Tu6eyqGrN1O4XGuvfZtaAnhaF+2oOYCoi36 CFmQKpPUSUhLlD/F2oiWOsbAwoCYH+pepUgoPO0LLRLIs1/hJRpjPiOA/AAyvSrc kyX8xhSlrBASly/gWRJ7x+cSz5rV63zrq71+kRz8C07viE0= -----END CERTIFICATE-----Generated at Wed May 13 21:09:09 2026 by rpki-client