$ rpki-client -vvf rpkica.twnic.tw/rpki/MKY/0/3231312e37362e302e302f31392d3139203d3e2037343738.roa File: 3231312e37362e302e302f31392d3139203d3e2037343738.roa (raw, json) Hash identifier: kS4UeB9bSZUO5PaEgviQEGNKSk9y0LCLxXLeAUQgMz0= Subject key identifier: F7:7A:A5:8F:0B:AF:71:4A:F6:CE:E2:CA:F7:44:CF:12:37:24:4C:AD Certificate issuer: /CN=AAED3548B647C9B95804411BAB19736F229C5A54 Certificate serial: 0C9048002A5D7B6F7DC7FDA8118810F7FA9F6EED Authority key identifier: AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MKY/0/3231312e37362e302e302f31392d3139203d3e2037343738.roa Signing time: Mon 11 May 2026 17:01:21 +0000 ROA not before: Mon 11 May 2026 16:56:21 +0000 ROA not after: Mon 10 May 2027 17:01:21 +0000 asID: 7478 IP address blocks: 211.76.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:90:48:00:2a:5d:7b:6f:7d:c7:fd:a8:11:88:10:f7:fa:9f:6e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AAED3548B647C9B95804411BAB19736F229C5A54 Validity Not Before: May 11 16:56:21 2026 GMT Not After : May 10 17:01:21 2027 GMT Subject: CN=F77AA58F0BAF714AF6CEE2CAF744CF1237244CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:71:f2:22:9d:c2:d5:a6:92:80:73:38:84:4f: 68:75:68:4e:0e:2f:3a:07:b3:bb:90:95:db:6d:ec: 7d:18:a3:b3:53:44:c9:25:ef:12:a0:67:76:c9:ad: 09:8e:06:4d:25:9f:f2:5c:0e:6a:9d:3f:ac:b2:4b: d3:d7:ba:ce:6c:53:4d:59:0d:8f:08:82:cd:f3:90: 27:f9:62:bc:08:c4:d5:ce:31:b3:a7:49:95:5f:9e: 99:ca:a1:db:e5:9d:8d:0c:4f:d8:04:de:2d:cd:cd: 2b:a1:3e:19:3d:ef:ba:ca:38:21:4f:76:a8:90:67: 3e:ff:69:73:cd:89:c7:f6:f2:18:b1:8b:81:9c:7b: 91:72:69:ca:b4:d6:cc:71:7f:37:17:28:7f:ac:f2: 40:55:1e:86:a1:7c:05:bf:6f:dc:34:7c:4d:c3:08: df:cc:46:5f:c9:0f:f9:13:92:2c:96:72:5b:fb:bf: 28:51:4f:fd:00:df:76:01:0f:54:ec:29:13:49:29: 3e:d9:c5:ec:14:88:b4:b0:1a:b7:25:3b:1b:06:36: 42:83:fb:0e:22:9e:f5:fb:fc:7c:69:6c:08:c6:98: 79:23:a2:45:91:78:28:30:f3:fc:c7:96:92:cc:bf: 18:6d:37:8a:41:52:31:9f:f0:ac:93:da:32:c6:2f: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7A:A5:8F:0B:AF:71:4A:F6:CE:E2:CA:F7:44:CF:12:37:24:4C:AD X509v3 Authority Key Identifier: keyid:AA:ED:35:48:B6:47:C9:B9:58:04:41:1B:AB:19:73:6F:22:9C:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MKY/0/AAED3548B647C9B95804411BAB19736F229C5A54.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AAED3548B647C9B95804411BAB19736F229C5A54.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MKY/0/3231312e37362e302e302f31392d3139203d3e2037343738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.76.0.0/19 Signature Algorithm: sha256WithRSAEncryption 8c:01:ff:18:aa:8f:69:0a:27:17:9e:3d:67:72:59:ee:0d:86: 3d:6d:30:05:e6:ef:11:99:c2:a9:93:92:61:e5:33:86:95:51: 83:55:68:1b:eb:fb:9b:1c:49:80:04:d8:32:2a:86:ca:dd:28: b1:66:d1:26:d7:92:3f:a5:3f:fb:2e:95:f0:bd:5f:bb:c4:68: 55:f4:94:5b:57:9c:0c:ff:ce:10:b0:ee:f0:65:8f:7f:2b:4d: ee:38:58:ea:bb:39:09:5e:28:02:2b:2b:9f:75:4c:e0:bc:35: 0d:a6:c2:f6:44:d9:c8:ef:42:d9:c4:71:eb:42:37:12:e3:86: 1d:3c:d4:b0:cd:46:b8:8b:1a:5b:21:05:97:cc:75:41:1a:84: 74:6f:c3:88:1f:e2:6a:2f:44:b3:d4:f1:01:20:0f:68:41:3f: 0e:21:01:1f:cf:f2:8b:62:41:77:76:2a:aa:ea:05:a1:58:b9: a8:4b:9b:7d:3f:93:1a:a9:38:1d:9b:df:f8:8d:b1:b7:7f:81: cc:09:72:b0:b3:61:a1:17:8c:0e:9d:a9:64:78:8a:d1:24:5e: b6:2d:64:97:e1:b0:23:58:90:06:4f:90:75:20:87:78:f7:9a: 4c:e1:d6:ee:b3:2d:88:7b:a2:ba:c2:7d:03:85:9a:df:72:24: 02:3d:a5:63 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgIUDJBIACpde299x/2oEYgQ9/qfbu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUFFRDM1NDhCNjQ3QzlCOTU4MDQ0MTFCQUIxOTczNkYy MjlDNUE1NDAeFw0yNjA1MTExNjU2MjFaFw0yNzA1MTAxNzAxMjFaMDMxMTAvBgNV BAMTKEY3N0FBNThGMEJBRjcxNEFGNkNFRTJDQUY3NDRDRjEyMzcyNDRDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/cfIincLVppKAcziET2h1aE4O LzoHs7uQldtt7H0Yo7NTRMkl7xKgZ3bJrQmOBk0ln/JcDmqdP6yyS9PXus5sU01Z DY8Igs3zkCf5YrwIxNXOMbOnSZVfnpnKodvlnY0MT9gE3i3NzSuhPhk977rKOCFP dqiQZz7/aXPNicf28hixi4Gce5Fyacq01sxxfzcXKH+s8kBVHoahfAW/b9w0fE3D CN/MRl/JD/kTkiyWclv7vyhRT/0A33YBD1TsKRNJKT7ZxewUiLSwGrclOxsGNkKD +w4invX7/HxpbAjGmHkjokWReCgw8/zHlpLMvxhtN4pBUjGf8KyT2jLGLwJ3AgMB AAGjggHXMIIB0zAdBgNVHQ4EFgQU93qljwuvcUr2zuLK90TPEjckTK0wHwYDVR0j BBgwFoAUqu01SLZHyblYBEEbqxlzbyKcWlQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUtZLzAv QUFFRDM1NDhCNjQ3QzlCOTU4MDQ0MTFCQUIxOTczNkYyMjlDNUE1NC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9BQUVEMzU0OEI2NDdDOUI5NTgwNDQxMUJBQjE5NzM2 RjIyOUM1QTU0LmNlcjBzBggrBgEFBQcBCwRnMGUwYwYIKwYBBQUHMAuGV3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUtZLzAvMzIzMTMxMmUzNzM2MmUzMDJl MzAyZjMxMzkyZDMxMzkyMDNkM2UyMDM3MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF00wAMA0G CSqGSIb3DQEBCwUAA4IBAQCMAf8Yqo9pCicXnj1nclnuDYY9bTAF5u8RmcKpk5Jh 5TOGlVGDVWgb6/ubHEmABNgyKobK3SixZtEm15I/pT/7LpXwvV+7xGhV9JRbV5wM /84QsO7wZY9/K03uOFjquzkJXigCKyufdUzgvDUNpsL2RNnI70LZxHHrQjcS44Yd PNSwzUa4ixpbIQWXzHVBGoR0b8OIH+JqL0Sz1PEBIA9oQT8OIQEfz/KLYkF3diqq 6gWhWLmoS5t9P5MaqTgdm9/4jbG3f4HMCXKws2GhF4wOnalkeIrRJF62LWSX4bAj WJAGT5B1IId495pM4dbusy2Ie6K6wn0DhZrfciQCPaVj -----END CERTIFICATE-----Generated at Wed May 13 21:11:11 2026 by rpki-client