$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/36312e37312e302e302f31362d3234203d3e2039343136.roa File: 36312e37312e302e302f31362d3234203d3e2039343136.roa (raw, json) Hash identifier: zDzk5h+fILeo27WpMt91bnJ4xvMJaWRwQroo+CS2AuA= Subject key identifier: 2B:D1:A5:92:D8:53:26:52:53:3B:8E:C4:E5:DF:6F:90:BA:97:D5:A3 Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 140227B19B8C43F297DEE5D8BAAAAA9BDDCCB926 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/36312e37312e302e302f31362d3234203d3e2039343136.roa Signing time: Thu 25 Jun 2026 02:44:00 +0000 ROA not before: Thu 25 Jun 2026 02:39:00 +0000 ROA not after: Thu 24 Jun 2027 02:44:00 +0000 asID: 9416 IP address blocks: 61.71.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:02:27:b1:9b:8c:43:f2:97:de:e5:d8:ba:aa:aa:9b:dd:cc:b9:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 25 02:39:00 2026 GMT Not After : Jun 24 02:44:00 2027 GMT Subject: CN=2BD1A592D8532652533B8EC4E5DF6F90BA97D5A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9f:cb:2c:e9:19:ba:1f:fa:ad:0d:6f:f9:cf: e3:37:6d:2a:fb:17:c8:86:78:0f:31:e2:53:82:3b: c0:b8:46:f8:d9:aa:e2:19:16:86:48:ab:b7:70:2c: e0:8f:09:7e:2e:9d:60:47:fa:2a:8a:74:ce:88:27: 0c:01:1d:1b:0b:fb:d7:45:ff:a2:ae:a3:82:c9:be: 43:90:70:f4:76:5a:9c:e2:79:c0:5d:39:59:7f:8e: 1b:54:01:ec:f6:b0:02:35:b1:e0:6c:ec:25:93:15: db:81:8e:b9:c6:7e:ce:96:0e:33:8b:7e:13:91:a8: b1:81:c9:d7:00:d0:c5:89:39:88:c6:be:9c:b4:5c: 3c:ab:bd:3d:7e:1b:6e:20:cb:77:40:ee:7a:c6:27: fd:e7:4f:48:5c:19:c0:dc:82:04:1f:e1:5a:09:04: 68:f4:bc:56:c4:f9:7a:27:7a:7a:5d:03:1a:37:a8: 8b:59:f1:6d:24:26:e7:bf:d6:9f:ea:3d:be:4d:7a: 99:2e:f1:a3:26:18:ca:ee:ee:fc:a8:41:c0:46:10: 5f:04:02:80:16:32:1e:4d:dc:c3:f6:cd:9a:ed:d7: 5f:3b:48:73:bb:35:fa:2e:19:96:0b:44:43:43:68: 07:28:b2:a7:ec:bd:75:02:b0:69:99:3e:c5:0c:0a: ea:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D1:A5:92:D8:53:26:52:53:3B:8E:C4:E5:DF:6F:90:BA:97:D5:A3 X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/36312e37312e302e302f31362d3234203d3e2039343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.71.0.0/16 Signature Algorithm: sha256WithRSAEncryption 82:d9:08:5f:3e:be:3d:a9:e0:08:e0:28:3f:2c:0e:b4:b2:4f: f9:16:5d:3b:1a:ae:d6:d7:26:48:cb:fa:b8:87:7f:01:5b:87: 84:d9:e8:1c:30:27:93:ba:99:65:90:30:57:56:00:ad:6a:ca: 56:fa:d0:80:b2:e4:d1:12:43:8a:9b:31:09:be:8a:a6:ce:a4: 58:64:8c:2e:71:cf:c5:ce:e8:08:4d:de:01:26:86:0b:93:c3: 15:7a:19:a7:24:67:68:72:1a:49:e0:f6:f2:76:53:8d:a8:f0: db:1d:17:da:10:d8:8f:f1:0e:ee:98:b2:d0:92:3b:4f:cb:59: 1a:a2:f8:46:19:43:04:b6:88:53:43:cd:01:35:a8:36:87:64: be:4c:9a:e4:bb:d4:0c:da:93:eb:20:9e:f2:6e:a2:40:3e:09: 63:ec:ef:87:1e:51:35:3d:8d:b8:2d:84:2a:4a:d0:2c:05:a9: 59:ec:15:be:8a:cb:81:40:bd:e6:06:fc:e2:5c:3c:9e:53:d6: 75:65:93:c7:4c:b3:35:82:38:0b:b0:0f:21:90:52:37:08:c7: fa:38:38:16:95:ba:bd:ce:6f:0c:67:e8:5b:4e:1c:10:80:1d: 06:70:67:9c:7c:0f:be:14:aa:e7:d5:41:4f:73:e7:f0:49:ec: 37:f8:d5:89 -----BEGIN CERTIFICATE----- MIIEyjCCA7KgAwIBAgIUFAInsZuMQ/KX3uXYuqqqm93MuSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjUwMjM5MDBaFw0yNzA2MjQwMjQ0MDBaMDMxMTAvBgNV BAMTKDJCRDFBNTkyRDg1MzI2NTI1MzNCOEVDNEU1REY2RjkwQkE5N0Q1QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDan8ss6Rm6H/qtDW/5z+M3bSr7 F8iGeA8x4lOCO8C4RvjZquIZFoZIq7dwLOCPCX4unWBH+iqKdM6IJwwBHRsL+9dF /6Kuo4LJvkOQcPR2WpziecBdOVl/jhtUAez2sAI1seBs7CWTFduBjrnGfs6WDjOL fhORqLGBydcA0MWJOYjGvpy0XDyrvT1+G24gy3dA7nrGJ/3nT0hcGcDcggQf4VoJ BGj0vFbE+XonenpdAxo3qItZ8W0kJue/1p/qPb5Nepku8aMmGMru7vyoQcBGEF8E AoAWMh5N3MP2zZrt1187SHO7NfouGZYLRENDaAcosqfsvXUCsGmZPsUMCuo1AgMB AAGjggHUMIIB0DAdBgNVHQ4EFgQUK9GlkthTJlJTO47E5d9vkLqX1aMwHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuGVXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzYzMTJlMzczMTJlMzAyZTMw MmYzMTM2MmQzMjM0MjAzZDNlMjAzOTM0MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAD1HMA0GCSqG SIb3DQEBCwUAA4IBAQCC2QhfPr49qeAI4Cg/LA60sk/5Fl07Gq7W1yZIy/q4h38B W4eE2egcMCeTupllkDBXVgCtaspW+tCAsuTREkOKmzEJvoqmzqRYZIwucc/FzugI Td4BJoYLk8MVehmnJGdochpJ4PbydlONqPDbHRfaENiP8Q7umLLQkjtPy1kaovhG GUMEtohTQ80BNag2h2S+TJrku9QM2pPrIJ7ybqJAPglj7O+HHlE1PY24LYQqStAs BalZ7BW+isuBQL3mBvziXDyeU9Z1ZZPHTLM1gjgLsA8hkFI3CMf6ODgWlbq9zm8M Z+hbThwQgB0GcGecfA++FKrn1UFPc+fwSew3+NWJ -----END CERTIFICATE-----Generated at Tue Jun 30 20:13:03 2026 by rpki-client