$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/36312e37302e302e302f31352d3135203d3e203138303432.roa File: 36312e37302e302e302f31352d3135203d3e203138303432.roa (raw, json) Hash identifier: 7g+q3XVeZahajVbKUXjx0l7SSjh9C9+mUimFImuKkJg= Subject key identifier: 6E:52:1D:66:7D:90:65:13:80:E1:F3:11:14:8B:F8:55:6D:4E:06:89 Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 280BB03CB9C5B0C93E98DDCC71E1B5F556BE3A41 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/36312e37302e302e302f31352d3135203d3e203138303432.roa Signing time: Thu 25 Jun 2026 02:43:56 +0000 ROA not before: Thu 25 Jun 2026 02:38:56 +0000 ROA not after: Thu 24 Jun 2027 02:43:56 +0000 asID: 18042 IP address blocks: 61.70.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:0b:b0:3c:b9:c5:b0:c9:3e:98:dd:cc:71:e1:b5:f5:56:be:3a:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 25 02:38:56 2026 GMT Not After : Jun 24 02:43:56 2027 GMT Subject: CN=6E521D667D90651380E1F311148BF8556D4E0689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:85:51:f7:dd:c9:5a:63:a2:f1:ee:a7:c2: 32:f4:20:8f:23:1d:76:82:fd:14:44:e8:87:ed:e5: 67:f4:9a:ac:3b:59:9c:ee:07:fb:8a:0c:26:96:d2: 38:9c:ad:9c:9f:5a:2e:cf:bf:03:a1:4b:24:5c:de: 52:29:f0:58:04:15:17:2b:1a:d2:b7:0f:66:f1:34: ac:80:72:46:84:e1:13:36:1b:4b:75:0c:95:bd:89: a6:98:44:dc:90:f5:1b:83:4a:e3:5f:92:bd:98:9d: af:7a:bb:f6:f2:81:0d:49:ca:15:76:e4:0a:72:2c: 6a:64:11:a7:4f:a5:e6:1b:c1:1c:1e:4a:b4:9a:1c: 3f:b7:98:78:13:8a:2a:e1:17:0c:e8:77:07:26:1b: 98:d8:84:82:9b:e4:9a:bd:56:07:89:62:28:85:09: 09:a4:47:2b:79:c1:0a:83:2c:77:b7:f2:75:70:80: 3c:1f:8c:2a:34:7d:73:ab:fc:c3:8b:9b:8c:cf:9f: e2:42:76:9c:99:bc:11:d3:df:e7:1d:1a:b0:37:33: e0:b6:3e:19:94:a5:55:b9:8a:2f:11:ab:d6:26:66: 88:03:65:36:04:23:0d:62:6f:5c:7c:e6:41:4c:3e: ff:0f:99:cc:27:e1:60:e8:d3:8b:5f:1f:8b:76:08: 6c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:52:1D:66:7D:90:65:13:80:E1:F3:11:14:8B:F8:55:6D:4E:06:89 X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/36312e37302e302e302f31352d3135203d3e203138303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.70.0.0/15 Signature Algorithm: sha256WithRSAEncryption aa:da:e0:d3:61:68:9c:69:47:0c:e0:1b:46:13:0e:b6:e2:d4: bf:4d:9b:57:3a:e0:dd:14:39:5f:81:7e:24:f3:86:e4:77:73: e6:7e:4c:18:53:f1:20:4b:a1:f8:24:80:f6:f8:af:a2:62:1b: 71:f2:d9:50:97:e6:39:ce:7b:e9:88:c4:c0:84:66:2d:33:9f: 17:35:eb:01:ec:43:0d:5d:3e:5a:ff:a7:66:02:17:39:8b:c4: e7:d4:35:e8:02:60:d5:74:e5:83:5b:26:5b:22:05:f5:ca:cf: af:e9:c2:ea:9d:b0:aa:0a:a2:10:b3:9f:7d:0e:e3:8d:d5:c7: a9:f6:a8:ff:43:1c:88:e8:3c:8c:5a:9b:00:da:fd:d9:af:07: 57:cf:ce:9d:76:92:e2:ea:f6:1c:fe:51:73:f7:33:79:a0:7c: b4:ec:31:cc:09:fd:d5:a7:b9:33:11:cb:59:24:88:19:c2:e9: 2a:f0:a3:b3:2e:b3:8c:fa:f0:3f:5d:c4:36:2e:5d:3d:e1:c4: ad:7d:f7:e5:20:78:1e:08:34:7d:75:15:b9:4c:11:31:2a:a6: 59:1c:37:21:f5:ac:eb:40:2b:a5:82:dd:49:b4:5a:bb:ed:64: a2:18:ca:ac:f5:ee:00:fa:ff:4c:14:56:8a:ba:b8:84:17:75: 37:45:c0:05 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgIUKAuwPLnFsMk+mN3MceG19Va+OkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjUwMjM4NTZaFw0yNzA2MjQwMjQzNTZaMDMxMTAvBgNV BAMTKDZFNTIxRDY2N0Q5MDY1MTM4MEUxRjMxMTE0OEJGODU1NkQ0RTA2ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHTIVR993JWmOi8e6nwjL0II8j HXaC/RRE6Ift5Wf0mqw7WZzuB/uKDCaW0jicrZyfWi7PvwOhSyRc3lIp8FgEFRcr GtK3D2bxNKyAckaE4RM2G0t1DJW9iaaYRNyQ9RuDSuNfkr2Yna96u/bygQ1JyhV2 5ApyLGpkEadPpeYbwRweSrSaHD+3mHgTiirhFwzodwcmG5jYhIKb5Jq9VgeJYiiF CQmkRyt5wQqDLHe38nVwgDwfjCo0fXOr/MOLm4zPn+JCdpyZvBHT3+cdGrA3M+C2 PhmUpVW5ii8Rq9YmZogDZTYEIw1ib1x85kFMPv8Pmcwn4WDo04tfH4t2CGydAgMB AAGjggHWMIIB0jAdBgNVHQ4EFgQUblIdZn2QZROA4fMRFIv4VW1OBokwHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjBzBggrBgEFBQcBCwRnMGUwYwYIKwYBBQUHMAuGV3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzYzMTJlMzczMDJlMzAyZTMw MmYzMTM1MmQzMTM1MjAzZDNlMjAzMTM4MzAzNDMyLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBPUYwDQYJ KoZIhvcNAQELBQADggEBAKra4NNhaJxpRwzgG0YTDrbi1L9Nm1c64N0UOV+BfiTz huR3c+Z+TBhT8SBLofgkgPb4r6JiG3Hy2VCX5jnOe+mIxMCEZi0znxc16wHsQw1d Plr/p2YCFzmLxOfUNegCYNV05YNbJlsiBfXKz6/pwuqdsKoKohCzn30O443Vx6n2 qP9DHIjoPIxamwDa/dmvB1fPzp12kuLq9hz+UXP3M3mgfLTsMcwJ/dWnuTMRy1kk iBnC6Srwo7Mus4z68D9dxDYuXT3hxK199+UgeB4INH11FblMETEqplkcNyH1rOtA K6WC3Um0WrvtZKIYyqz17gD6/0wUVoq6uIQXdTdFwAU= -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:03 2026 by rpki-client