$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/36312e37312e302e302f31362d3234203d3e203138303432.roa File: 36312e37312e302e302f31362d3234203d3e203138303432.roa (raw, json) Hash identifier: dPhU7xFB4Cir1RXfZ5+J3pzT0bsEPuI6GvyzG2pHABg= Subject key identifier: 15:0F:E9:BA:D5:DE:ED:BD:99:E2:EC:A6:AF:A7:63:91:7B:2D:F7:57 Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 2598BF3EDABAC6977BBBCBEDF35E57158F225351 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/36312e37312e302e302f31362d3234203d3e203138303432.roa Signing time: Thu 25 Jun 2026 02:43:49 +0000 ROA not before: Thu 25 Jun 2026 02:38:49 +0000 ROA not after: Thu 24 Jun 2027 02:43:49 +0000 asID: 18042 IP address blocks: 61.71.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:98:bf:3e:da:ba:c6:97:7b:bb:cb:ed:f3:5e:57:15:8f:22:53:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 25 02:38:49 2026 GMT Not After : Jun 24 02:43:49 2027 GMT Subject: CN=150FE9BAD5DEEDBD99E2ECA6AFA763917B2DF757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:66:d9:fa:00:f9:d0:58:f7:7d:45:9c:1d: f0:5c:18:ff:d4:b2:49:29:83:6b:34:81:2a:30:5f: d9:8c:e1:a6:8c:af:74:8e:07:49:0b:de:e5:45:b1: 43:27:da:44:42:96:90:05:3d:98:66:01:5c:06:b7: cf:6c:f0:ae:50:c2:62:1f:f5:7a:95:14:cc:31:34: c5:d1:84:89:86:90:88:db:03:3f:91:d4:cd:81:22: ca:a5:02:43:d7:19:67:d0:61:ed:04:29:06:dc:5e: 25:e1:8d:60:34:18:c2:eb:67:26:1a:79:5e:e0:97: 7e:63:ff:a0:60:f6:9e:74:9f:35:a6:d6:95:f5:4c: 60:f9:8a:f1:b0:4e:c9:b9:db:16:c2:3e:11:dc:0b: e3:25:48:7f:dc:c3:5f:a7:55:4f:50:ec:2c:c5:9f: 41:5b:88:f8:b8:fc:9d:e9:83:9b:53:29:ec:bf:2d: 9d:e3:c1:fa:91:7b:99:ba:ac:59:cb:43:1a:b1:f7: 34:a6:df:84:7d:85:5a:c9:84:8a:0e:ac:ac:ea:33: d5:06:40:48:8c:ad:df:75:b3:61:79:a2:c3:1c:87: 87:c2:76:c3:8e:97:dd:70:7f:c7:04:e5:c8:f0:04: e7:4b:74:00:6a:cc:47:6d:3d:e8:ac:76:8b:25:cc: 94:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0F:E9:BA:D5:DE:ED:BD:99:E2:EC:A6:AF:A7:63:91:7B:2D:F7:57 X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/36312e37312e302e302f31362d3234203d3e203138303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.71.0.0/16 Signature Algorithm: sha256WithRSAEncryption b7:b2:ff:f3:a0:0d:d4:1d:5a:05:f9:fc:9a:be:d5:ff:20:d5: 42:e4:df:e7:b0:16:47:41:71:b1:c1:51:5c:f5:30:82:21:e2: 67:70:0e:76:a6:3c:e2:5b:2d:04:6a:13:db:a0:6a:5c:ec:fa: 22:59:45:6d:d1:24:d2:29:64:34:bb:32:a9:93:a5:22:d0:46: 82:ed:69:2d:de:0a:2f:51:82:88:f9:22:3f:be:6a:f0:ab:49: 4f:b6:2e:ce:ac:cb:46:04:cc:b7:d4:7e:3c:27:b5:95:c1:ea: a0:73:24:28:f6:17:75:41:a4:9c:47:59:df:fe:0f:3b:63:40: 39:90:7b:16:99:15:0e:b5:e5:87:00:10:53:1c:0f:4f:4b:bb: e2:8d:66:59:86:41:0c:96:72:0e:d8:4e:18:c5:eb:a2:27:c6: f8:4b:9e:1c:39:7f:73:3f:e0:06:3f:da:31:19:85:08:cc:db: bc:60:00:b8:47:cd:e5:66:43:23:9c:6e:7f:b1:c7:1e:85:2a: e4:8c:3a:05:7a:72:59:e5:ac:0b:bb:80:40:9f:70:67:09:a4: d3:6f:fd:56:ba:8d:c4:8b:cc:4b:1a:00:28:28:4d:74:32:d9: 9f:89:dc:54:00:1d:38:62:3e:2e:98:60:38:76:60:3e:66:86: b9:c4:24:b6 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgIUJZi/Ptq6xpd7u8vt815XFY8iU1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjUwMjM4NDlaFw0yNzA2MjQwMjQzNDlaMDMxMTAvBgNV BAMTKDE1MEZFOUJBRDVERUVEQkQ5OUUyRUNBNkFGQTc2MzkxN0IyREY3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDbmbZ+gD50Fj3fUWcHfBcGP/U skkpg2s0gSowX9mM4aaMr3SOB0kL3uVFsUMn2kRClpAFPZhmAVwGt89s8K5QwmIf 9XqVFMwxNMXRhImGkIjbAz+R1M2BIsqlAkPXGWfQYe0EKQbcXiXhjWA0GMLrZyYa eV7gl35j/6Bg9p50nzWm1pX1TGD5ivGwTsm52xbCPhHcC+MlSH/cw1+nVU9Q7CzF n0FbiPi4/J3pg5tTKey/LZ3jwfqRe5m6rFnLQxqx9zSm34R9hVrJhIoOrKzqM9UG QEiMrd91s2F5osMch4fCdsOOl91wf8cE5cjwBOdLdABqzEdtPeisdoslzJTfAgMB AAGjggHWMIIB0jAdBgNVHQ4EFgQUFQ/putXe7b2Z4uymr6djkXst91cwHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjBzBggrBgEFBQcBCwRnMGUwYwYIKwYBBQUHMAuGV3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzYzMTJlMzczMTJlMzAyZTMw MmYzMTM2MmQzMjM0MjAzZDNlMjAzMTM4MzAzNDMyLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAPUcwDQYJ KoZIhvcNAQELBQADggEBALey//OgDdQdWgX5/Jq+1f8g1ULk3+ewFkdBcbHBUVz1 MIIh4mdwDnamPOJbLQRqE9ugalzs+iJZRW3RJNIpZDS7MqmTpSLQRoLtaS3eCi9R goj5Ij++avCrSU+2Ls6sy0YEzLfUfjwntZXB6qBzJCj2F3VBpJxHWd/+DztjQDmQ exaZFQ615YcAEFMcD09Lu+KNZlmGQQyWcg7YThjF66InxvhLnhw5f3M/4AY/2jEZ hQjM27xgALhHzeVmQyOcbn+xxx6FKuSMOgV6clnlrAu7gECfcGcJpNNv/Va6jcSL zEsaACgoTXQy2Z+J3FQAHThiPi6YYDh2YD5mhrnEJLY= -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:01 2026 by rpki-client