$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3132322e39392e302e302f31382d3234203d3e2039343136.roa File: 3132322e39392e302e302f31382d3234203d3e2039343136.roa (raw, json) Hash identifier: OPSFIJrW3fmKKJ0pvE28KRzPkCAaJ+W8WzXaI+ME20c= Subject key identifier: C0:4F:52:A0:31:72:42:26:5A:F6:12:3D:70:AB:04:8B:4C:C4:C1:7D Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B Certificate serial: 403F3E10E98248002DE8153CEBCBA2EC58C1700B Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132322e39392e302e302f31382d3234203d3e2039343136.roa Signing time: Mon 11 May 2026 17:04:18 +0000 ROA not before: Mon 11 May 2026 16:59:18 +0000 ROA not after: Mon 10 May 2027 17:04:18 +0000 asID: 9416 IP address blocks: 122.99.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:3f:3e:10:e9:82:48:00:2d:e8:15:3c:eb:cb:a2:ec:58:c1:70:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B Validity Not Before: May 11 16:59:18 2026 GMT Not After : May 10 17:04:18 2027 GMT Subject: CN=C04F52A0317242265AF6123D70AB048B4CC4C17D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:60:66:05:e1:f6:15:b6:16:83:e7:36:da:80: 36:c0:8f:3b:af:62:8f:51:2a:af:76:ad:5a:2c:65: 34:2a:28:35:66:45:60:eb:56:37:50:67:9c:f7:8b: b5:3e:7c:26:6a:9c:11:b0:33:44:ca:83:b3:64:7b: 12:49:b4:d2:a3:27:07:76:9e:33:12:95:b0:a0:ae: bc:8f:64:b7:68:94:d9:3c:55:ab:c6:e6:0b:0c:4a: 41:b8:e1:44:5f:1f:30:7e:62:bc:c2:81:f0:31:b2: ca:89:65:40:58:b2:02:bf:a3:f9:7e:41:97:ce:ee: e4:b4:f4:d0:0a:fe:79:f2:a9:13:ec:25:af:48:ef: e0:eb:83:90:50:3f:ba:6d:b4:2c:bc:f8:46:68:61: 2f:49:0c:e6:18:5c:a7:ef:5b:fe:ab:f8:6c:ad:9c: 0c:f8:da:6a:b6:9b:a6:20:73:dc:87:cb:9d:0b:44: 8b:be:da:e5:91:e1:09:ee:7b:aa:77:de:b1:0a:9e: 99:83:ff:04:c7:09:5a:e0:59:9a:9a:fa:b0:ba:92: 0c:6c:ab:b7:4c:74:69:af:7b:a8:af:30:50:b5:c0: 82:3c:e6:66:b8:25:52:5c:d2:ec:09:c3:09:3c:73: a5:26:42:9b:b1:7b:3f:25:fc:c6:c7:2a:bb:bc:d2: 10:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4F:52:A0:31:72:42:26:5A:F6:12:3D:70:AB:04:8B:4C:C4:C1:7D X509v3 Authority Key Identifier: keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132322e39392e302e302f31382d3234203d3e2039343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.99.0.0/18 Signature Algorithm: sha256WithRSAEncryption 76:99:21:75:4f:ee:36:c6:d3:72:9d:d8:0e:96:2e:e4:ca:ef: 1b:d3:d7:6a:3e:f4:58:6e:61:be:34:07:aa:fa:12:13:b7:59: fd:8d:1e:ef:a6:e7:14:5b:da:42:94:cc:98:1e:de:48:41:7f: 8c:18:4a:1d:de:d6:ba:a4:4f:d6:4e:05:ef:af:40:23:77:1f: 4c:41:32:7e:2d:ca:47:b4:0a:f4:d0:e9:07:71:9b:59:4d:76: 8d:ad:06:b5:02:f9:e8:69:33:1a:57:21:0c:bc:ae:85:5e:68: f5:da:f5:9d:e2:7c:7e:79:f9:37:b4:f9:1d:ea:e5:23:35:11: ad:f1:1c:5f:8b:a1:62:d7:78:f8:56:82:c9:26:0f:cd:45:b8: 37:31:af:6a:40:73:a3:9b:c7:8c:38:9c:49:9d:32:56:51:64: 37:aa:b6:d5:a7:65:02:64:da:fa:68:d3:89:1d:48:55:a1:5d: 72:3e:8e:b2:6e:9e:78:99:6e:48:5c:b0:ae:6c:64:3f:2c:57: f4:6f:04:d6:04:e5:cf:07:d5:dd:29:e9:eb:4c:6a:32:5e:ec: ad:5e:37:8d:da:c8:dd:a0:4f:c8:39:54:08:5e:95:32:45:16: fd:26:ee:2c:12:d0:5b:28:1b:89:ba:57:b8:23:bd:e8:e0:8e: 27:c1:02:c1 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUQD8+EOmCSAAt6BU868ui7FjBcAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0Qy MzMyNEU0QjAeFw0yNjA1MTExNjU5MThaFw0yNzA1MTAxNzA0MThaMDMxMTAvBgNV BAMTKEMwNEY1MkEwMzE3MjQyMjY1QUY2MTIzRDcwQUIwNDhCNENDNEMxN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaYGYF4fYVthaD5zbagDbAjzuv Yo9RKq92rVosZTQqKDVmRWDrVjdQZ5z3i7U+fCZqnBGwM0TKg7NkexJJtNKjJwd2 njMSlbCgrryPZLdolNk8VavG5gsMSkG44URfHzB+YrzCgfAxssqJZUBYsgK/o/l+ QZfO7uS09NAK/nnyqRPsJa9I7+Drg5BQP7pttCy8+EZoYS9JDOYYXKfvW/6r+Gyt nAz42mq2m6Ygc9yHy50LRIu+2uWR4Qnue6p33rEKnpmD/wTHCVrgWZqa+rC6kgxs q7dMdGmve6ivMFC1wII85ma4JVJc0uwJwwk8c6UmQpuxez8l/MbHKru80hDZAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUwE9SoDFyQiZa9hI9cKsEi0zEwX0wHwYDVR0j BBgwFoAUBJ1NvPql7iinm/SeYj6HzSMyTkswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5H LzAvMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0QyMzMyNEU0Qi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8wNDlENERCQ0ZBQTVFRTI4QTc5QkY0OUU2MjNF ODdDRDIzMzI0RTRCLmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5HLzAvMzEzMjMyMmUzOTM5 MmUzMDJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDM5MzQzMTM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG emMAMA0GCSqGSIb3DQEBCwUAA4IBAQB2mSF1T+42xtNyndgOli7kyu8b09dqPvRY bmG+NAeq+hITt1n9jR7vpucUW9pClMyYHt5IQX+MGEod3ta6pE/WTgXvr0Ajdx9M QTJ+LcpHtAr00OkHcZtZTXaNrQa1AvnoaTMaVyEMvK6FXmj12vWd4nx+efk3tPkd 6uUjNRGt8Rxfi6Fi13j4VoLJJg/NRbg3Ma9qQHOjm8eMOJxJnTJWUWQ3qrbVp2UC ZNr6aNOJHUhVoV1yPo6ybp54mW5IXLCubGQ/LFf0bwTWBOXPB9XdKenrTGoyXuyt XjeN2sjdoE/IOVQIXpUyRRb9Ju4sEtBbKBuJule4I73o4I4nwQLB -----END CERTIFICATE-----Generated at Wed May 13 21:11:17 2026 by rpki-client