$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e302e302f31362d3234203d3e203138303432.roa File: 3131352e34332e302e302f31362d3234203d3e203138303432.roa (raw, json) Hash identifier: 8CdvHvNqCGbHptsBsqmVxO/ddNWB2NuNellpQMuTOqQ= Subject key identifier: 56:99:9B:DF:9C:1C:05:74:D8:42:16:AB:E8:8A:C8:4A:4C:A6:51:4A Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B Certificate serial: 634151513FD722F404055BDC33C72A645132E1F6 Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e302e302f31362d3234203d3e203138303432.roa Signing time: Mon 11 May 2026 16:48:48 +0000 ROA not before: Mon 11 May 2026 16:43:48 +0000 ROA not after: Mon 10 May 2027 16:48:48 +0000 asID: 18042 IP address blocks: 115.43.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:41:51:51:3f:d7:22:f4:04:05:5b:dc:33:c7:2a:64:51:32:e1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B Validity Not Before: May 11 16:43:48 2026 GMT Not After : May 10 16:48:48 2027 GMT Subject: CN=56999BDF9C1C0574D84216ABE88AC84A4CA6514A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d9:a8:7b:3d:9b:8f:10:8c:ca:b1:5e:58:86: 16:cb:d1:67:bb:d6:1a:04:a3:a2:98:a8:48:d3:9a: b4:c4:6f:bd:cb:ae:9b:6f:5f:2e:1f:8b:e5:b6:2a: 7f:d6:0f:4e:78:c2:f2:6c:92:f8:cf:80:18:ba:cf: 61:38:50:e7:ad:0e:bd:67:fb:3c:44:9a:8d:c1:63: 2c:39:73:de:e0:02:4b:55:12:d9:61:80:dc:61:d0: 7c:d9:cf:bb:20:1a:a1:a2:b8:3d:25:d2:e7:5b:b3: b1:a7:10:28:6d:62:89:5f:52:ec:ea:d8:45:b7:9e: b9:d4:cb:4a:8f:85:fc:2f:40:aa:f5:1d:bb:79:65: ce:63:0a:68:92:66:8d:74:dd:99:01:9e:14:88:6e: d0:0e:4f:14:6f:db:1c:74:a1:29:5e:4d:8b:dc:5d: cd:ce:ef:e6:77:51:13:b2:7b:f3:fc:e2:57:e5:4f: f0:72:50:45:26:f2:a6:1e:83:50:b0:17:6f:9b:5a: d5:2f:53:5d:81:73:aa:1e:11:eb:1d:c1:2e:3a:d7: 43:85:5f:b7:b3:1e:0e:f3:52:37:b3:a4:89:0f:5e: 23:06:5e:32:52:50:18:51:9e:10:ee:4b:d6:eb:dd: a0:7e:0d:be:f5:7b:ca:fc:a8:dc:3e:be:b8:a6:5c: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:99:9B:DF:9C:1C:05:74:D8:42:16:AB:E8:8A:C8:4A:4C:A6:51:4A X509v3 Authority Key Identifier: keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3131352e34332e302e302f31362d3234203d3e203138303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 115.43.0.0/16 Signature Algorithm: sha256WithRSAEncryption a5:b4:af:30:2f:99:6b:c1:23:81:f5:bf:a7:98:18:9a:e5:93: c5:36:3d:c1:94:c5:3a:4c:a0:a7:e1:d6:a2:c8:8f:3d:bd:5c: e5:b0:eb:95:fd:9f:75:d6:90:d8:b3:4b:61:9d:6c:43:64:4a: 5e:f6:d4:e6:6c:31:7a:52:7e:2a:4a:c8:dc:35:c8:66:a4:70: d5:09:2b:80:a7:21:2a:3f:d1:92:bb:de:95:e4:a7:32:5d:e0: 60:27:76:21:6a:b0:1d:d2:4a:34:93:f4:e1:1f:b9:10:c6:f0: 25:07:a3:6a:f6:fa:ca:1f:60:a2:d6:fb:da:6a:57:76:09:63: 54:61:70:6e:10:d5:39:54:d7:f5:9d:0a:07:ea:4d:33:59:c5: c7:bc:13:69:e3:1d:90:bb:8b:3b:01:bd:f7:a6:d7:66:5a:ba: c9:c5:f2:9e:94:c6:e1:1f:47:81:37:06:46:4c:22:b9:5c:6b: 54:11:3a:1e:e5:26:ac:75:06:27:fb:ff:fb:d1:24:06:8a:83: 9d:bc:17:b3:54:9b:4e:8b:12:03:52:a1:7c:4f:5f:c3:d7:3a: 65:fd:45:26:4b:fb:b1:cd:43:fb:e9:4f:3e:d3:a6:43:73:76: 45:62:d4:45:74:8a:8c:9b:e3:de:08:f0:0f:ee:c2:ae:9f:82: af:24:e2:52 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUY0FRUT/XIvQEBVvcM8cqZFEy4fYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0Qy MzMyNEU0QjAeFw0yNjA1MTExNjQzNDhaFw0yNzA1MTAxNjQ4NDhaMDMxMTAvBgNV BAMTKDU2OTk5QkRGOUMxQzA1NzREODQyMTZBQkU4OEFDODRBNENBNjUxNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg2ah7PZuPEIzKsV5YhhbL0We7 1hoEo6KYqEjTmrTEb73LrptvXy4fi+W2Kn/WD054wvJskvjPgBi6z2E4UOetDr1n +zxEmo3BYyw5c97gAktVEtlhgNxh0HzZz7sgGqGiuD0l0udbs7GnEChtYolfUuzq 2EW3nrnUy0qPhfwvQKr1Hbt5Zc5jCmiSZo103ZkBnhSIbtAOTxRv2xx0oSleTYvc Xc3O7+Z3UROye/P84lflT/ByUEUm8qYeg1CwF2+bWtUvU12Bc6oeEesdwS4610OF X7ezHg7zUjezpIkPXiMGXjJSUBhRnhDuS9br3aB+Db71e8r8qNw+vrimXEh3AgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUVpmb35wcBXTYQhar6IrISkymUUowHwYDVR0j BBgwFoAUBJ1NvPql7iinm/SeYj6HzSMyTkswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5H LzAvMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0QyMzMyNEU0Qi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8wNDlENERCQ0ZBQTVFRTI4QTc5QkY0OUU2MjNF ODdDRDIzMzI0RTRCLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5HLzAvMzEzMTM1MmUzNDMz MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMxMzgzMDM0MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwBzKzANBgkqhkiG9w0BAQsFAAOCAQEApbSvMC+Za8EjgfW/p5gYmuWTxTY9wZTF Okygp+HWosiPPb1c5bDrlf2fddaQ2LNLYZ1sQ2RKXvbU5mwxelJ+KkrI3DXIZqRw 1QkrgKchKj/RkrveleSnMl3gYCd2IWqwHdJKNJP04R+5EMbwJQejavb6yh9gotb7 2mpXdgljVGFwbhDVOVTX9Z0KB+pNM1nFx7wTaeMdkLuLOwG996bXZlq6ycXynpTG 4R9HgTcGRkwiuVxrVBE6HuUmrHUGJ/v/+9EkBoqDnbwXs1SbTosSA1KhfE9fw9c6 Zf1FJkv7sc1D++lPPtOmQ3N2RWLURXSKjJvj3gjwD+7Crp+CryTiUg== -----END CERTIFICATE-----Generated at Wed May 13 21:51:56 2026 by rpki-client