$ rpki-client -vvf rpkica.twnic.tw/rpki/MERCYCAT/0/323430373a643234303a3a2f33322d3438203d3e203138343238.roa File: 323430373a643234303a3a2f33322d3438203d3e203138343238.roa (raw, json) Hash identifier: rBUhV/xvRZeEelrs2jyNJogNIGW8G/cMNY2z96YxdgM= Subject key identifier: 98:42:70:30:6D:32:8D:F8:B5:AA:FC:73:24:82:D0:40:BB:34:3B:52 Certificate issuer: /CN=C4FE0149FC774090A5B6304E8968380A1F1B0426 Certificate serial: 03A458D00B98178EE82805183B99DB830CAFDF97 Authority key identifier: C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/323430373a643234303a3a2f33322d3438203d3e203138343238.roa Signing time: Mon 11 May 2026 17:31:14 +0000 ROA not before: Mon 11 May 2026 17:26:14 +0000 ROA not after: Mon 10 May 2027 17:31:14 +0000 asID: 18428 IP address blocks: 2407:d240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a4:58:d0:0b:98:17:8e:e8:28:05:18:3b:99:db:83:0c:af:df:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FE0149FC774090A5B6304E8968380A1F1B0426 Validity Not Before: May 11 17:26:14 2026 GMT Not After : May 10 17:31:14 2027 GMT Subject: CN=984270306D328DF8B5AAFC732482D040BB343B52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c1:d4:21:98:fb:50:d4:31:20:28:5f:36:3c: 1a:f3:72:7b:b6:c0:f8:79:48:bb:85:d5:db:0d:81: f7:2c:19:0e:dd:6e:58:55:d2:6a:d4:7f:b6:1a:04: 77:e1:59:5d:12:f9:30:b9:35:cd:9d:76:0a:10:d7: c8:0d:7e:a4:01:93:0e:83:2c:8f:5d:e0:1c:ae:85: 88:f4:44:32:48:a4:93:ca:55:3a:f9:85:c5:a5:66: 5f:1c:82:70:d5:c2:7a:c8:d0:00:51:da:ac:32:e7: a7:b5:1b:d2:03:50:58:c6:b4:3f:4c:31:42:c3:49: bf:a7:d9:2a:fc:cd:0f:1d:13:fc:86:8b:7b:bc:0f: 41:a1:a8:8f:ec:33:13:4c:77:ab:0b:8b:3e:e8:8c: c6:83:e2:84:cf:76:d8:d4:a3:80:d0:6e:71:d4:00: 6a:7b:cf:98:2b:55:82:af:71:24:ac:a3:54:56:ba: be:8d:4f:f5:56:c7:30:67:56:2b:02:ac:35:32:51: ae:f3:dd:6c:f4:9f:33:dd:7b:97:68:15:22:08:ac: 3b:54:ba:cb:ac:c3:2c:cf:2a:7c:e1:85:6e:0d:4e: ca:cb:c4:6d:42:8a:0c:b3:15:bc:52:04:9f:b9:03: ab:13:64:5d:ba:b6:9b:a7:a5:be:b9:12:0f:10:86: a1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:42:70:30:6D:32:8D:F8:B5:AA:FC:73:24:82:D0:40:BB:34:3B:52 X509v3 Authority Key Identifier: keyid:C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/323430373a643234303a3a2f33322d3438203d3e203138343238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:d240::/32 Signature Algorithm: sha256WithRSAEncryption 36:34:5a:d6:ea:25:06:67:75:da:29:0f:05:2c:91:83:ce:4f: 1b:49:9a:32:c9:43:dc:80:02:b2:21:83:3a:ad:a9:1c:1b:41: 20:6f:3c:9a:d8:fc:2f:9e:b7:34:5c:aa:1a:f2:06:f4:97:a9: 47:68:de:79:09:e2:81:fe:66:b1:b0:31:30:08:e3:8d:21:cb: 9f:ab:79:41:02:37:b4:57:89:ab:03:4b:19:4f:a9:08:40:eb: 14:09:ad:37:87:4c:91:cc:5e:bf:b2:2f:23:f7:1d:1a:73:88: 87:a2:e9:d2:97:14:7f:6e:a9:0f:ab:0f:1a:a9:ac:7b:e7:18: 9e:05:d7:b4:7b:d0:51:f4:03:a2:29:b1:13:51:f1:f4:ea:f9: 6a:a2:72:65:56:3f:4b:e7:c3:d5:1e:5e:12:9e:f0:84:cb:da: 0d:d6:c1:27:e7:85:79:a5:07:63:59:f5:be:48:2d:0b:96:0a: d8:b3:3a:cc:d1:cb:3c:73:2b:60:3b:a6:d8:24:06:6b:b6:a5: c1:02:c7:cd:43:4a:78:b8:c9:ca:c2:f6:6c:88:34:8b:56:a8: 3d:17:23:db:72:2b:c8:bf:1b:04:b8:ac:e3:ab:42:fe:c8:60: 36:ec:63:6a:60:ec:fa:16:4f:ac:1e:46:d0:e7:08:95:8d:9e: c1:08:7b:b9 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUA6RY0AuYF47oKAUYO5nbgwyv35cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGRTAxNDlGQzc3NDA5MEE1QjYzMDRFODk2ODM4MEEx RjFCMDQyNjAeFw0yNjA1MTExNzI2MTRaFw0yNzA1MTAxNzMxMTRaMDMxMTAvBgNV BAMTKDk4NDI3MDMwNkQzMjhERjhCNUFBRkM3MzI0ODJEMDQwQkIzNDNCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcwdQhmPtQ1DEgKF82PBrzcnu2 wPh5SLuF1dsNgfcsGQ7dblhV0mrUf7YaBHfhWV0S+TC5Nc2ddgoQ18gNfqQBkw6D LI9d4ByuhYj0RDJIpJPKVTr5hcWlZl8cgnDVwnrI0ABR2qwy56e1G9IDUFjGtD9M MULDSb+n2Sr8zQ8dE/yGi3u8D0GhqI/sMxNMd6sLiz7ojMaD4oTPdtjUo4DQbnHU AGp7z5grVYKvcSSso1RWur6NT/VWxzBnVisCrDUyUa7z3Wz0nzPde5doFSIIrDtU ususwyzPKnzhhW4NTsrLxG1CigyzFbxSBJ+5A6sTZF26tpunpb65Eg8QhqHpAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUmEJwMG0yjfi1qvxzJILQQLs0O1IwHwYDVR0j BBgwFoAUxP4BSfx3QJCltjBOiWg4Ch8bBCYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUVSQ1lD QVQvMC9DNEZFMDE0OUZDNzc0MDkwQTVCNjMwNEU4OTY4MzgwQTFGMUIwNDI2LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0M0RkUwMTQ5RkM3NzQwOTBBNUI2MzA0RTg5 NjgzODBBMUYxQjA0MjYuY2VyMHwGCCsGAQUFBwELBHAwbjBsBggrBgEFBQcwC4Zg cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9NRVJDWUNBVC8wLzMyMzQzMDM3 M2E2NDMyMzQzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzgzNDMyMzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkB9JAMA0GCSqGSIb3DQEBCwUAA4IBAQA2NFrW6iUGZ3XaKQ8FLJGD zk8bSZoyyUPcgAKyIYM6rakcG0Egbzya2Pwvnrc0XKoa8gb0l6lHaN55CeKB/max sDEwCOONIcufq3lBAje0V4mrA0sZT6kIQOsUCa03h0yRzF6/si8j9x0ac4iHounS lxR/bqkPqw8aqax75xieBde0e9BR9AOiKbETUfH06vlqonJlVj9L58PVHl4SnvCE y9oN1sEn54V5pQdjWfW+SC0LlgrYszrM0cs8cytgO6bYJAZrtqXBAsfNQ0p4uMnK wvZsiDSLVqg9FyPbcivIvxsEuKzjq0L+yGA27GNqYOz6Fk+sHkbQ5wiVjZ7BCHu5 -----END CERTIFICATE-----Generated at Wed May 13 21:11:55 2026 by rpki-client