$ rpki-client -vvf rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e302e302f31382d3138203d3e2039343136.roa File: 3132332e3235322e302e302f31382d3138203d3e2039343136.roa (raw, json) Hash identifier: ERhjaQIXwvyOB2XFTJS7sS0ge8NmOyER/FKPC6xegWQ= Subject key identifier: 4B:B4:58:55:C5:B3:7D:63:4D:C0:3E:21:C2:7F:9C:4F:0B:5B:16:36 Certificate issuer: /CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B Certificate serial: 56B8BAC019B91826FD8C4BAA9E3E3E11E4A07CAC Authority key identifier: 04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e302e302f31382d3138203d3e2039343136.roa Signing time: Mon 11 May 2026 17:09:18 +0000 ROA not before: Mon 11 May 2026 17:04:18 +0000 ROA not after: Mon 10 May 2027 17:09:18 +0000 asID: 9416 IP address blocks: 123.252.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b8:ba:c0:19:b9:18:26:fd:8c:4b:aa:9e:3e:3e:11:e4:a0:7c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=049D4DBCFAA5EE28A79BF49E623E87CD23324E4B Validity Not Before: May 11 17:04:18 2026 GMT Not After : May 10 17:09:18 2027 GMT Subject: CN=4BB45855C5B37D634DC03E21C27F9C4F0B5B1636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ab:ca:37:41:59:c3:eb:42:c8:5c:3c:1c:4b: 3a:67:34:29:b9:57:db:4b:c7:aa:aa:8d:b8:5e:2c: 92:06:02:d2:75:03:62:2c:46:82:0a:57:e0:e3:3d: 26:0b:12:e4:51:f3:63:c0:51:d1:c3:78:9e:ab:5f: 07:be:63:bf:c9:ac:5d:4f:1b:d3:53:65:d3:64:71: d9:a6:9f:f2:53:cd:58:f2:6c:fe:00:9b:ee:a1:60: c6:b0:d7:b0:47:ad:26:ab:40:80:2d:2c:f6:38:a0: 54:8f:24:bf:5a:16:96:12:80:6a:59:fd:c2:f1:6d: 53:e4:78:0e:27:1a:97:c5:83:05:85:b8:6d:7b:ee: f6:e5:96:b0:c0:95:62:7f:b6:81:96:5e:69:6f:ad: 1a:d2:19:31:8d:d0:95:8d:38:39:d7:d8:41:05:8b: 6e:87:ac:93:21:18:85:c1:c3:03:6b:15:75:e0:8b: 5b:8c:88:6d:eb:28:8f:97:26:8b:90:38:50:d8:62: 7d:86:4e:02:d2:af:2f:bd:53:d6:6d:87:6e:13:0a: c7:06:6e:93:36:7c:15:21:f4:32:50:ab:12:0a:a3: c4:00:97:a1:a6:a8:ea:ca:4c:33:84:53:02:ca:0b: 58:86:ed:2f:34:c4:07:a0:ef:b3:e3:0e:3c:77:b1: 90:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B4:58:55:C5:B3:7D:63:4D:C0:3E:21:C2:7F:9C:4F:0B:5B:16:36 X509v3 Authority Key Identifier: keyid:04:9D:4D:BC:FA:A5:EE:28:A7:9B:F4:9E:62:3E:87:CD:23:32:4E:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/049D4DBCFAA5EE28A79BF49E623E87CD23324E4B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KE-ING/0/3132332e3235322e302e302f31382d3138203d3e2039343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.252.0.0/18 Signature Algorithm: sha256WithRSAEncryption 2d:28:c3:99:4d:67:c0:9b:d8:a8:a2:63:44:96:68:2a:6f:65: 19:02:ba:3c:01:81:00:3b:b9:f4:5a:b2:76:38:7a:78:19:4e: 3d:50:bb:92:ef:18:4c:02:18:97:df:06:00:0b:04:b5:b1:23: 41:94:75:bc:97:69:52:1f:c8:0b:7c:bd:6b:7e:ef:0d:78:8d: 81:da:c5:4e:97:44:fa:1f:bf:68:4e:fd:c3:7e:5b:38:dd:f5: 37:f6:f0:ca:e2:c3:43:fb:16:c5:fe:03:41:e0:3e:b2:b0:59: db:fb:3e:e8:a8:6f:bd:f7:0b:ed:b1:8d:b3:af:10:16:42:76: 20:2c:16:81:3e:8f:02:d3:4d:a3:c1:8f:4c:a0:36:c2:32:88: e7:2c:a2:e5:e1:43:3a:38:cf:b9:c1:11:19:18:f8:dd:04:48: d6:f5:4c:96:c7:d5:d2:00:6f:a7:8c:d9:ba:c0:77:2a:fb:05: a1:18:d5:d8:a8:1e:b0:07:b4:28:22:93:e4:3b:5f:1a:9f:a9: 60:24:a1:c0:f1:1e:52:54:4d:52:46:d3:12:39:36:6f:d7:84: d0:3a:32:bc:fd:99:9a:86:b4:5c:f0:a7:3f:1d:08:38:ef:a2: 32:14:82:a0:90:59:4b:ac:49:3a:ce:f3:7b:e9:f3:9c:4c:f2: 6e:8b:d1:93 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUVri6wBm5GCb9jEuqnj4+EeSgfKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0Qy MzMyNEU0QjAeFw0yNjA1MTExNzA0MThaFw0yNzA1MTAxNzA5MThaMDMxMTAvBgNV BAMTKDRCQjQ1ODU1QzVCMzdENjM0REMwM0UyMUMyN0Y5QzRGMEI1QjE2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzq8o3QVnD60LIXDwcSzpnNCm5 V9tLx6qqjbheLJIGAtJ1A2IsRoIKV+DjPSYLEuRR82PAUdHDeJ6rXwe+Y7/JrF1P G9NTZdNkcdmmn/JTzVjybP4Am+6hYMaw17BHrSarQIAtLPY4oFSPJL9aFpYSgGpZ /cLxbVPkeA4nGpfFgwWFuG177vbllrDAlWJ/toGWXmlvrRrSGTGN0JWNODnX2EEF i26HrJMhGIXBwwNrFXXgi1uMiG3rKI+XJouQOFDYYn2GTgLSry+9U9Zth24TCscG bpM2fBUh9DJQqxIKo8QAl6GmqOrKTDOEUwLKC1iG7S80xAeg77PjDjx3sZC3AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUS7RYVcWzfWNNwD4hwn+cTwtbFjYwHwYDVR0j BBgwFoAUBJ1NvPql7iinm/SeYj6HzSMyTkswDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5H LzAvMDQ5RDREQkNGQUE1RUUyOEE3OUJGNDlFNjIzRTg3Q0QyMzMyNEU0Qi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8wNDlENERCQ0ZBQTVFRTI4QTc5QkY0OUU2MjNF ODdDRDIzMzI0RTRCLmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0UtSU5HLzAvMzEzMjMzMmUzMjM1 MzIyZTMwMmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzkzNDMxMzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAZ7/AAwDQYJKoZIhvcNAQELBQADggEBAC0ow5lNZ8Cb2KiiY0SWaCpvZRkCujwB gQA7ufRasnY4engZTj1Qu5LvGEwCGJffBgALBLWxI0GUdbyXaVIfyAt8vWt+7w14 jYHaxU6XRPofv2hO/cN+Wzjd9Tf28Mriw0P7FsX+A0HgPrKwWdv7Puiob733C+2x jbOvEBZCdiAsFoE+jwLTTaPBj0ygNsIyiOcsouXhQzo4z7nBERkY+N0ESNb1TJbH 1dIAb6eM2brAdyr7BaEY1dioHrAHtCgik+Q7XxqfqWAkocDxHlJUTVJG0xI5Nm/X hNA6Mrz9mZqGtFzwpz8dCDjvojIUgqCQWUusSTrO83vp85xM8m6L0ZM= -----END CERTIFICATE-----Generated at Wed May 13 21:11:19 2026 by rpki-client