$ rpki-client -vvf rpkica.twnic.tw/rpki/NARL/0/3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa File: 3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa (raw, json) Hash identifier: gNPPk70chubQg8rvqCFhjNMJr/GwTZPy8GKS/JxLGtk= Subject key identifier: 3F:AD:D6:EA:6C:0D:71:7C:72:61:67:4A:D6:1F:E8:EE:9B:C4:E9:68 Certificate issuer: /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1 Certificate serial: 753D00982456BE71BF8CA4273E387E5DBDE556C9 Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NARL/0/3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa Signing time: Mon 11 May 2026 16:50:19 +0000 ROA not before: Mon 11 May 2026 16:45:19 +0000 ROA not after: Mon 10 May 2027 16:50:19 +0000 asID: 18426 IP address blocks: 203.145.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:3d:00:98:24:56:be:71:bf:8c:a4:27:3e:38:7e:5d:bd:e5:56:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1 Validity Not Before: May 11 16:45:19 2026 GMT Not After : May 10 16:50:19 2027 GMT Subject: CN=3FADD6EA6C0D717C7261674AD61FE8EE9BC4E968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a7:bf:57:a2:1c:fe:1d:5a:eb:8a:ca:1f:f9: fd:bb:52:a5:6f:f2:84:47:d3:cc:96:d8:76:cf:23: 9c:d9:38:32:fb:69:12:c8:39:22:d9:6e:78:2e:11: 0b:69:ee:da:c6:f6:3f:dc:cb:5e:71:c5:c8:93:22: 6b:eb:0e:da:44:32:8c:1b:56:d1:bc:cd:e5:e2:5a: 42:64:cf:34:70:c8:48:4f:5d:65:20:c9:58:99:95: e2:a3:e7:fd:e6:55:40:5c:1b:da:db:83:75:4e:7e: 58:ae:8f:ef:f4:6d:64:a9:b1:2a:bd:d8:5d:48:5d: bc:52:23:c8:f4:0e:0e:46:8e:10:4f:93:35:a5:22: 27:cc:49:bd:33:da:6a:db:62:bb:58:65:23:f0:b0: 6a:31:a1:e9:44:74:dd:d6:93:33:a3:e0:a8:d3:94: 3d:6b:3f:21:eb:f7:71:de:2d:cf:52:e5:33:9a:46: 38:0c:2a:ae:d2:7c:e4:3e:87:e6:cb:bc:0a:b3:a8: 7a:7e:a0:27:63:c1:1c:7d:14:9e:ff:76:8a:29:1e: ed:5e:65:bd:94:03:d4:e2:7d:73:15:f7:8c:b9:ed: 4b:5e:8e:0c:f3:bc:05:4b:49:50:ab:78:3c:be:59: 5b:ab:08:ce:42:b1:a4:19:00:f6:37:57:45:ea:3f: 75:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AD:D6:EA:6C:0D:71:7C:72:61:67:4A:D6:1F:E8:EE:9B:C4:E9:68 X509v3 Authority Key Identifier: keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.145.192.0/21 Signature Algorithm: sha256WithRSAEncryption ce:4b:6f:b9:4e:57:e1:eb:a0:ea:f1:2a:11:98:d9:4e:d1:56: 59:e0:4d:05:da:b3:15:79:b3:ba:63:0c:b5:fa:f0:f9:44:2d: c7:e3:e3:7a:f9:6c:cc:a6:ff:8b:b4:a3:a9:b3:0b:dc:5b:23: 91:ea:5b:b7:aa:0e:f5:9b:d0:80:4c:60:c3:7c:c3:53:38:87: a6:e5:aa:d3:0e:fc:7c:b2:91:1f:29:6e:15:9b:7a:39:99:4f: 1d:97:aa:ec:5e:c3:6b:59:cd:61:8d:54:32:f5:b0:48:18:14: dc:22:03:3e:e2:25:05:ca:c4:5a:17:3a:3c:99:eb:b1:af:b5: 29:0a:2e:42:fe:df:ab:63:46:32:df:26:4f:b9:cd:8d:a6:d4: d3:74:43:22:19:98:cf:7a:7f:9f:ec:68:93:3d:c2:76:c9:b4: 5c:5c:4c:54:df:87:9c:6c:89:39:6c:7e:cf:c0:53:e5:d5:c3: 5b:55:68:22:22:3d:0f:96:89:f2:84:7c:4a:d6:4f:65:05:15: 03:b5:17:aa:4d:f2:9a:34:ab:66:70:9e:6d:68:6b:f7:ef:b8: ec:f0:d2:e5:b5:bf:ac:9d:79:52:9a:56:8f:5b:ff:e0:44:89: 98:98:7c:ba:25:f3:12:21:95:a7:fb:48:0c:77:60:91:78:3b: 66:53:1e:77 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUdT0AmCRWvnG/jKQnPjh+Xb3lVskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNBRkFD QzhFQTZDMTAeFw0yNjA1MTExNjQ1MTlaFw0yNzA1MTAxNjUwMTlaMDMxMTAvBgNV BAMTKDNGQURENkVBNkMwRDcxN0M3MjYxNjc0QUQ2MUZFOEVFOUJDNEU5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDop79Xohz+HVrrisof+f27UqVv 8oRH08yW2HbPI5zZODL7aRLIOSLZbnguEQtp7trG9j/cy15xxciTImvrDtpEMowb VtG8zeXiWkJkzzRwyEhPXWUgyViZleKj5/3mVUBcG9rbg3VOfliuj+/0bWSpsSq9 2F1IXbxSI8j0Dg5GjhBPkzWlIifMSb0z2mrbYrtYZSPwsGoxoelEdN3WkzOj4KjT lD1rPyHr93HeLc9S5TOaRjgMKq7SfOQ+h+bLvAqzqHp+oCdjwRx9FJ7/doopHu1e Zb2UA9TifXMV94y57UtejgzzvAVLSVCreDy+WVurCM5CsaQZAPY3V0XqP3UhAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUP63W6mwNcXxyYWdK1h/o7pvE6WgwHwYDVR0j BBgwFoAUnYW7jZMAbTWG4o0NZhLK+syOpsEwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkFSTC8w LzlEODVCQjhEOTMwMDZEMzU4NkUyOEQwRDY2MTJDQUZBQ0M4RUE2QzEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNB RkFDQzhFQTZDMS5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05BUkwvMC8zMjMwMzMyZTMxMzQzNTJl MzEzOTMyMmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzODM0MzIzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8uRwDANBgkqhkiG9w0BAQsFAAOCAQEAzktvuU5X4eug6vEqEZjZTtFWWeBN BdqzFXmzumMMtfrw+UQtx+PjevlszKb/i7SjqbML3Fsjkepbt6oO9ZvQgExgw3zD UziHpuWq0w78fLKRHyluFZt6OZlPHZeq7F7Da1nNYY1UMvWwSBgU3CIDPuIlBcrE Whc6PJnrsa+1KQouQv7fq2NGMt8mT7nNjabU03RDIhmYz3p/n+xokz3Cdsm0XFxM VN+HnGyJOWx+z8BT5dXDW1VoIiI9D5aJ8oR8StZPZQUVA7UXqk3ymjSrZnCebWhr 9++47PDS5bW/rJ15UppWj1v/4ESJmJh8uiXzEiGVp/tIDHdgkXg7ZlMedw== -----END CERTIFICATE-----Generated at Wed May 13 21:11:29 2026 by rpki-client