$ rpki-client -vvf rpkica.twnic.tw/rpki/KBT/0/36312e37312e302e302f31392d3234203d3e203138303439.roa File: 36312e37312e302e302f31392d3234203d3e203138303439.roa (raw, json) Hash identifier: s5p4eBhsR9Mqz9frNik3J9MPlCLCrIja0ZlGSr7VJoA= Subject key identifier: 3E:8F:26:C0:4A:76:3B:2C:46:00:A2:CF:CA:4A:1E:9B:61:08:A9:8E Certificate issuer: /CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Certificate serial: 7877D69E1064C0C546090397859440E829DFE612 Authority key identifier: 91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KBT/0/36312e37312e302e302f31392d3234203d3e203138303439.roa Signing time: Tue 23 Jun 2026 08:43:48 +0000 ROA not before: Tue 23 Jun 2026 08:38:48 +0000 ROA not after: Tue 22 Jun 2027 08:43:48 +0000 asID: 18049 IP address blocks: 61.71.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 08:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:77:d6:9e:10:64:c0:c5:46:09:03:97:85:94:40:e8:29:df:e6:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589 Validity Not Before: Jun 23 08:38:48 2026 GMT Not After : Jun 22 08:43:48 2027 GMT Subject: CN=3E8F26C04A763B2C4600A2CFCA4A1E9B6108A98E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a1:cd:7f:84:1d:b3:10:04:48:c2:ac:7c:0e: 09:3e:2c:35:73:da:65:ca:b4:b0:cc:03:5b:8c:18: a1:3f:51:cb:ef:fc:dc:36:c3:c6:bc:15:c9:1c:7d: 9a:22:87:56:7d:90:0e:a3:5d:41:22:04:4d:70:62: 55:4f:1e:eb:60:74:83:12:cf:66:d5:45:e3:1a:ea: 78:dc:f4:b0:1f:52:4a:8f:72:f1:b7:5b:34:30:ae: 29:3b:62:19:4b:ce:cc:1f:9b:42:48:d5:93:b7:71: 5b:e8:a8:73:04:0a:65:f6:7a:92:c7:34:7d:9b:20: c2:93:10:a2:61:0d:bc:b6:2f:d7:27:38:a3:32:70: 2b:b2:03:73:60:8b:8b:51:6b:e0:65:c3:5d:74:c4: 8e:1f:55:6b:b9:44:27:50:96:66:bb:83:61:75:72: 68:12:b6:8f:84:24:14:c4:f0:6e:cb:44:34:3b:7d: 2a:93:11:f4:61:98:25:09:52:ac:6b:af:17:81:a2: 3d:50:85:85:dd:e7:6b:77:15:ed:d3:62:32:6d:b3: 26:75:8a:ed:75:40:40:2a:1f:1d:d0:88:43:fd:9e: ac:12:54:00:e9:81:87:55:72:d6:f7:03:ff:c4:11: 34:b8:12:a2:44:73:2d:04:b5:57:ea:11:67:fb:2f: fe:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8F:26:C0:4A:76:3B:2C:46:00:A2:CF:CA:4A:1E:9B:61:08:A9:8E X509v3 Authority Key Identifier: keyid:91:40:9D:A1:C1:FA:F3:1A:A3:DF:29:36:DA:AA:2B:4A:B7:EA:15:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KBT/0/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/91409DA1C1FAF31AA3DF2936DAAA2B4AB7EA1589.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KBT/0/36312e37312e302e302f31392d3234203d3e203138303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.71.0.0/19 Signature Algorithm: sha256WithRSAEncryption 0f:bb:c6:85:9d:88:35:90:d8:99:e8:0e:d1:a6:ca:24:d5:17: a3:4f:98:61:2a:a0:f9:95:33:97:37:1e:56:bb:49:84:1e:5d: 80:50:ad:9c:18:79:9f:19:da:e8:0c:96:d0:36:51:29:8c:f2: 1f:ab:4c:ee:da:e5:68:ed:eb:5e:23:d7:62:5c:bf:7e:ed:77: 84:60:b3:08:b4:6d:83:78:b2:8c:66:92:7b:7f:a2:35:95:53: 32:b7:67:8e:f5:5c:c0:a7:57:05:9e:e1:12:a6:6c:53:2a:c4: 16:ec:32:ef:21:65:28:d2:56:c0:c8:86:c9:41:2b:d3:85:7e: 25:f8:49:a9:18:67:46:3a:24:91:72:e6:4e:fd:10:b1:bd:b1: d8:4f:99:96:34:e0:37:a5:dd:b7:ed:1d:2d:ff:21:41:0b:44: c1:33:f3:fa:92:8c:77:21:eb:69:21:c1:a0:c4:0e:23:be:4c: 29:87:a4:73:da:43:68:28:d9:ec:b0:93:fd:95:12:3f:3d:fb: da:2f:f2:2b:9e:9b:c7:8b:41:8f:eb:60:34:ad:45:03:21:3d: 49:14:2e:e8:0a:b8:46:4c:32:8c:50:aa:34:ff:aa:e3:d4:0d: dd:15:7b:d2:86:40:62:a8:b9:b7:70:70:5b:1a:09:32:01:a7: 28:b7:1e:a6 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgIUeHfWnhBkwMVGCQOXhZRA6Cnf5hIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFC N0VBMTU4OTAeFw0yNjA2MjMwODM4NDhaFw0yNzA2MjIwODQzNDhaMDMxMTAvBgNV BAMTKDNFOEYyNkMwNEE3NjNCMkM0NjAwQTJDRkNBNEExRTlCNjEwOEE5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpoc1/hB2zEARIwqx8Dgk+LDVz 2mXKtLDMA1uMGKE/Ucvv/Nw2w8a8FckcfZoih1Z9kA6jXUEiBE1wYlVPHutgdIMS z2bVReMa6njc9LAfUkqPcvG3WzQwrik7YhlLzswfm0JI1ZO3cVvoqHMECmX2epLH NH2bIMKTEKJhDby2L9cnOKMycCuyA3Ngi4tRa+Blw110xI4fVWu5RCdQlma7g2F1 cmgSto+EJBTE8G7LRDQ7fSqTEfRhmCUJUqxrrxeBoj1QhYXd52t3Fe3TYjJtsyZ1 iu11QEAqHx3QiEP9nqwSVADpgYdVctb3A//EETS4EqJEcy0EtVfqEWf7L/5hAgMB AAGjggHXMIIB0zAdBgNVHQ4EFgQUPo8mwEp2OyxGAKLPykoem2EIqY4wHwYDVR0j BBgwFoAUkUCdocH68xqj3yk22qorSrfqFYkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAv OTE0MDlEQTFDMUZBRjMxQUEzREYyOTM2REFBQTJCNEFCN0VBMTU4OS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85MTQwOURBMUMxRkFGMzFBQTNERjI5MzZEQUFBMkI0 QUI3RUExNTg5LmNlcjBzBggrBgEFBQcBCwRnMGUwYwYIKwYBBQUHMAuGV3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0JULzAvMzYzMTJlMzczMTJlMzAyZTMw MmYzMTM5MmQzMjM0MjAzZDNlMjAzMTM4MzAzNDM5LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPUcAMA0G CSqGSIb3DQEBCwUAA4IBAQAPu8aFnYg1kNiZ6A7Rpsok1RejT5hhKqD5lTOXNx5W u0mEHl2AUK2cGHmfGdroDJbQNlEpjPIfq0zu2uVo7eteI9diXL9+7XeEYLMItG2D eLKMZpJ7f6I1lVMyt2eO9VzAp1cFnuESpmxTKsQW7DLvIWUo0lbAyIbJQSvThX4l +EmpGGdGOiSRcuZO/RCxvbHYT5mWNOA3pd237R0t/yFBC0TBM/P6kox3IetpIcGg xA4jvkwph6Rz2kNoKNnssJP9lRI/PfvaL/IrnpvHi0GP62A0rUUDIT1JFC7oCrhG TDKMUKo0/6rj1A3dFXvShkBiqLm3cHBbGgkyAacotx6m -----END CERTIFICATE-----Generated at Tue Jun 30 20:12:59 2026 by rpki-client