$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/35382e38362e35352e302f32342d3234203d3e203138303432.roa File: 35382e38362e35352e302f32342d3234203d3e203138303432.roa (raw, json) Hash identifier: KkVa24xos9Fuk/zK5QNXL7bbcuon6oRl3ddHtvNm2Eg= Subject key identifier: F7:70:2A:57:91:48:C9:0B:42:52:62:A9:55:83:5E:5F:23:DC:E8:9B Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 635C0569A5478BF08A45DAA0A40C5DE744646B42 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/35382e38362e35352e302f32342d3234203d3e203138303432.roa Signing time: Mon 11 May 2026 16:48:46 +0000 ROA not before: Mon 11 May 2026 16:43:46 +0000 ROA not after: Mon 10 May 2027 16:48:46 +0000 asID: 18042 IP address blocks: 58.86.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:5c:05:69:a5:47:8b:f0:8a:45:da:a0:a4:0c:5d:e7:44:64:6b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: May 11 16:43:46 2026 GMT Not After : May 10 16:48:46 2027 GMT Subject: CN=F7702A579148C90B425262A955835E5F23DCE89B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:48:a4:11:7c:a9:96:08:fa:f9:c1:d3:7d: 37:02:b9:35:a3:7f:d3:df:06:5c:18:34:67:47:cb: 40:f8:ac:6e:04:69:5c:b9:17:1d:0a:26:1b:04:56: ea:d0:8d:8a:27:49:55:bb:18:ff:0a:a9:48:e1:78: a1:ac:cc:e0:9c:25:03:4d:da:95:c0:b9:69:ff:a1: 9c:d6:80:1a:f7:ce:d2:8b:e6:96:09:d3:35:3a:02: 71:33:f0:8d:5a:57:55:1e:55:a1:d4:35:98:18:24: c6:b7:d8:66:93:41:83:a7:44:ae:e4:9c:96:81:97: 3f:73:64:ca:88:13:84:5b:30:08:8c:e0:86:d3:dc: b8:6b:4c:9d:14:93:71:e2:a4:4c:bc:02:f6:f4:44: fe:28:30:58:16:c8:b3:b5:08:81:c1:4b:48:0a:c0: c7:df:8d:c6:09:2a:8d:3a:0a:28:2f:31:c1:1e:f4: 5b:30:2a:4a:98:16:20:8b:65:95:9e:e7:5a:3b:07: ca:57:75:9f:a5:45:df:19:05:bf:1b:9e:41:2f:91: 7e:ac:03:31:0b:09:df:c2:8b:81:f6:dd:c8:a5:9a: 39:5f:ea:cb:29:19:74:e4:c5:e6:f4:32:99:24:75: f0:37:fa:9b:55:d8:43:a8:78:f4:d8:73:28:e4:6d: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:70:2A:57:91:48:C9:0B:42:52:62:A9:55:83:5E:5F:23:DC:E8:9B X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/35382e38362e35352e302f32342d3234203d3e203138303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.86.55.0/24 Signature Algorithm: sha256WithRSAEncryption a9:8c:1c:f7:42:c0:59:e0:3c:31:24:32:52:cc:c7:d6:c0:7c: 4a:28:95:1b:ab:8b:b6:c7:c1:2b:9c:c8:60:1b:0c:66:8e:97: 76:1c:4d:78:97:86:10:f2:ed:b3:a7:21:af:98:5e:55:b9:cf: f2:3a:48:ef:e5:51:d2:4c:28:37:dc:a3:25:33:44:f6:dc:47: c4:fd:09:95:14:c8:5e:0a:a6:1d:c9:e1:25:cd:f2:fe:1a:2d: c4:d7:3e:f1:fb:8a:0d:93:ad:ba:65:dd:50:ef:7f:08:f5:14: b7:04:7f:11:d1:1a:76:ad:6f:f9:4d:88:33:75:26:40:f0:94: 84:f8:2d:91:a5:5a:f1:8a:36:fd:aa:df:a0:6c:0e:08:59:29: 1f:dd:5e:ea:cc:5f:4b:36:3f:ca:20:55:29:57:fc:73:ec:ac: cb:8d:73:96:e6:f0:c3:ab:00:87:9e:8f:ea:34:3a:ec:ec:32: 1c:62:90:82:68:f0:64:94:d4:28:71:5e:b4:31:82:f7:b8:f6: 07:f8:dd:f0:9e:8c:9c:c7:b2:df:36:2a:f2:95:6c:87:1a:64: 17:52:96:a3:68:96:4c:bf:b5:c2:19:00:42:76:60:d4:3a:a7: 1b:8f:ca:f0:9a:ca:d1:a8:db:54:57:ca:3f:cc:f7:32:46:0a: 06:1c:eb:54 -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgIUY1wFaaVHi/CKRdqgpAxd50Rka0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA1MTExNjQzNDZaFw0yNzA1MTAxNjQ4NDZaMDMxMTAvBgNV BAMTKEY3NzAyQTU3OTE0OEM5MEI0MjUyNjJBOTU1ODM1RTVGMjNEQ0U4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+xkikEXyplgj6+cHTfTcCuTWj f9PfBlwYNGdHy0D4rG4EaVy5Fx0KJhsEVurQjYonSVW7GP8KqUjheKGszOCcJQNN 2pXAuWn/oZzWgBr3ztKL5pYJ0zU6AnEz8I1aV1UeVaHUNZgYJMa32GaTQYOnRK7k nJaBlz9zZMqIE4RbMAiM4IbT3LhrTJ0Uk3HipEy8Avb0RP4oMFgWyLO1CIHBS0gK wMffjcYJKo06CigvMcEe9FswKkqYFiCLZZWe51o7B8pXdZ+lRd8ZBb8bnkEvkX6s AzELCd/Ci4H23cilmjlf6sspGXTkxeb0MpkkdfA3+ptV2EOoePTYcyjkbY83AgMB AAGjggHZMIIB1TAdBgNVHQ4EFgQU93AqV5FIyQtCUmKpVYNeXyPc6JswHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjB1BggrBgEFBQcBCwRpMGcwZQYIKwYBBQUHMAuGWXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzUzODJlMzgzNjJlMzUzNTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzgzMDM0MzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA6Vjcw DQYJKoZIhvcNAQELBQADggEBAKmMHPdCwFngPDEkMlLMx9bAfEoolRuri7bHwSuc yGAbDGaOl3YcTXiXhhDy7bOnIa+YXlW5z/I6SO/lUdJMKDfcoyUzRPbcR8T9CZUU yF4Kph3J4SXN8v4aLcTXPvH7ig2Trbpl3VDvfwj1FLcEfxHRGnatb/lNiDN1JkDw lIT4LZGlWvGKNv2q36BsDghZKR/dXurMX0s2P8ogVSlX/HPsrMuNc5bm8MOrAIee j+o0OuzsMhxikIJo8GSU1ChxXrQxgve49gf43fCejJzHst82KvKVbIcaZBdSlqNo lky/tcIZAEJ2YNQ6pxuPyvCaytGo21RXyj/M9zJGCgYc61Q= -----END CERTIFICATE-----Generated at Wed May 13 21:08:44 2026 by rpki-client