$ rpki-client -vvf rpkica.twnic.tw/rpki/MFE/0/3130332e3131372e3133322e302f32332d3234203d3e203133333335.roa File: 3130332e3131372e3133322e302f32332d3234203d3e203133333335.roa (raw, json) Hash identifier: yNF0rjdZhiThfjXcp9q9ny7hpelDoujpqo41tWTYbEo= Subject key identifier: 49:02:24:EA:FC:48:DB:AE:F2:47:6E:4F:C3:2B:A0:32:7B:04:78:11 Certificate issuer: /CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Certificate serial: 2739664CEB612F12D226F9E386673258DC07F28B Authority key identifier: 21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MFE/0/3130332e3131372e3133322e302f32332d3234203d3e203133333335.roa Signing time: Mon 11 May 2026 17:57:19 +0000 ROA not before: Mon 11 May 2026 17:52:19 +0000 ROA not after: Mon 10 May 2027 17:57:19 +0000 asID: 13335 IP address blocks: 103.117.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:39:66:4c:eb:61:2f:12:d2:26:f9:e3:86:67:32:58:dc:07:f2:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21B62D60E1AB53803B229CCF83C179FD3FCFB5B3 Validity Not Before: May 11 17:52:19 2026 GMT Not After : May 10 17:57:19 2027 GMT Subject: CN=490224EAFC48DBAEF2476E4FC32BA0327B047811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:06:a7:84:16:45:96:3d:3f:2b:e2:52:2f:98: 12:49:68:a4:82:d9:6c:c7:ed:9c:56:50:8d:1e:ac: 53:5a:e5:ed:2b:c4:8d:96:fb:1c:23:cd:e6:b0:57: 0e:b1:6a:16:af:b6:f9:59:87:77:31:f1:9e:b6:2b: b7:0f:15:ed:6d:07:30:8d:b4:c3:42:43:87:d6:1f: d9:63:1f:95:2e:cc:3e:07:a7:11:34:cd:a7:14:c1: 41:fb:98:aa:70:ab:e4:c1:d8:89:18:04:56:8f:b2: bd:3b:dc:11:af:9b:c0:5e:94:17:d5:9d:0a:62:d5: 3d:fc:aa:16:e7:a3:f1:ec:30:6a:fe:30:28:1d:9c: 9a:04:28:85:28:b9:26:5a:cf:7c:50:8f:39:f5:74: c6:fc:aa:4f:ca:b7:5d:32:a8:c9:70:9f:18:ff:54: ed:b4:ed:a0:13:ee:89:72:18:6c:f2:74:26:4b:e7: a9:fa:99:c9:df:3f:23:5f:06:8a:a3:4f:7c:1c:a0: 79:dc:ea:b2:2d:99:04:90:ba:2a:aa:d6:5d:e3:00: 4a:17:ef:93:ea:82:c1:e6:01:e6:3f:f0:3c:b1:42: 63:70:a9:20:fb:d2:dc:0e:06:88:b7:bf:26:f1:5f: d0:f7:c0:b4:0f:d4:5a:cf:26:29:fe:64:f6:80:77: cc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:02:24:EA:FC:48:DB:AE:F2:47:6E:4F:C3:2B:A0:32:7B:04:78:11 X509v3 Authority Key Identifier: keyid:21:B6:2D:60:E1:AB:53:80:3B:22:9C:CF:83:C1:79:FD:3F:CF:B5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MFE/0/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21B62D60E1AB53803B229CCF83C179FD3FCFB5B3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MFE/0/3130332e3131372e3133322e302f32332d3234203d3e203133333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.117.132.0/23 Signature Algorithm: sha256WithRSAEncryption 18:48:84:23:c2:1b:de:35:f4:d6:b2:94:d7:c2:a8:dc:ca:ff: be:af:88:2f:c7:fe:30:b3:87:ce:30:9b:26:b7:71:8b:27:89: 87:ae:2a:81:c2:7c:87:83:5f:1e:c7:56:32:34:28:d1:d8:73: 55:14:29:19:00:e4:36:7b:ca:70:df:29:33:68:c1:42:93:0e: 1d:7f:b5:2c:1f:48:c8:b9:6c:13:80:6a:21:56:7a:75:17:3c: 9b:07:24:ab:a8:c6:7e:a7:a5:c2:3f:2d:27:5a:c5:db:0a:b0: ed:1b:a5:df:91:00:94:f4:10:c2:a8:06:a2:f6:cf:a7:7b:3e: b2:b5:90:81:a9:66:0a:c9:f4:f7:65:b4:24:3e:b5:71:d6:40: 5c:5d:bc:65:78:4a:dd:83:1f:88:e3:ab:c2:2f:d0:82:45:1d: 50:4b:4c:4c:20:99:b1:a5:e5:8e:3c:aa:47:55:d2:4a:e2:c7: ee:cb:da:ee:97:82:11:dd:65:45:51:7e:41:da:1c:ba:30:ef: 75:f7:81:73:20:7e:e5:ce:cf:1c:59:48:6d:f3:e6:ca:af:57: 37:46:45:c4:87:64:63:ab:54:01:cf:b2:6e:ff:7c:4a:19:27: d3:c9:99:7c:1a:2a:8c:b0:bf:b7:b5:89:a7:41:aa:77:ef:8d: 79:25:4a:f6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUJzlmTOthLxLSJvnjhmcyWNwH8oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQz RkNGQjVCMzAeFw0yNjA1MTExNzUyMTlaFw0yNzA1MTAxNzU3MTlaMDMxMTAvBgNV BAMTKDQ5MDIyNEVBRkM0OERCQUVGMjQ3NkU0RkMzMkJBMDMyN0IwNDc4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqBqeEFkWWPT8r4lIvmBJJaKSC 2WzH7ZxWUI0erFNa5e0rxI2W+xwjzeawVw6xahavtvlZh3cx8Z62K7cPFe1tBzCN tMNCQ4fWH9ljH5UuzD4HpxE0zacUwUH7mKpwq+TB2IkYBFaPsr073BGvm8BelBfV nQpi1T38qhbno/HsMGr+MCgdnJoEKIUouSZaz3xQjzn1dMb8qk/Kt10yqMlwnxj/ VO207aAT7olyGGzydCZL56n6mcnfPyNfBoqjT3wcoHnc6rItmQSQuiqq1l3jAEoX 75PqgsHmAeY/8DyxQmNwqSD70twOBoi3vybxX9D3wLQP1FrPJin+ZPaAd8zFAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUSQIk6vxI267yR25PwyugMnsEeBEwHwYDVR0j BBgwFoAUIbYtYOGrU4A7IpzPg8F5/T/PtbMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAv MjFCNjJENjBFMUFCNTM4MDNCMjI5Q0NGODNDMTc5RkQzRkNGQjVCMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8yMUI2MkQ2MEUxQUI1MzgwM0IyMjlDQ0Y4M0MxNzlG RDNGQ0ZCNUIzLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUZFLzAvMzEzMDMzMmUzMTMxMzcyZTMx MzMzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzMzMzMzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFndYQwDQYJKoZIhvcNAQELBQADggEBABhIhCPCG9419NaylNfCqNzK/76viC/H /jCzh84wmya3cYsniYeuKoHCfIeDXx7HVjI0KNHYc1UUKRkA5DZ7ynDfKTNowUKT Dh1/tSwfSMi5bBOAaiFWenUXPJsHJKuoxn6npcI/LSdaxdsKsO0bpd+RAJT0EMKo BqL2z6d7PrK1kIGpZgrJ9PdltCQ+tXHWQFxdvGV4St2DH4jjq8Iv0IJFHVBLTEwg mbGl5Y48qkdV0krix+7L2u6XghHdZUVRfkHaHLow73X3gXMgfuXOzxxZSG3z5sqv VzdGRcSHZGOrVAHPsm7/fEoZJ9PJmXwaKoywv7e1iadBqnfvjXklSvY= -----END CERTIFICATE-----Generated at Wed May 13 21:09:09 2026 by rpki-client