$ rpki-client -vvf rpkica.twnic.tw/rpki/NARL/0/3231312e37332e36342e302f31392d3234203d3e2037353339.roa File: 3231312e37332e36342e302f31392d3234203d3e2037353339.roa (raw, json) Hash identifier: 2F7wVvWL/EB7PGkj0VVEyWuWlBMkBD3Mrsqa9Y9SivA= Subject key identifier: 1F:84:AC:D3:FE:B7:63:46:33:2D:55:6E:BD:1B:31:7F:70:20:CE:A3 Certificate issuer: /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1 Certificate serial: 0D538EC74BB96C5A63E0C8CB16ECC2C04C0D0A74 Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NARL/0/3231312e37332e36342e302f31392d3234203d3e2037353339.roa Signing time: Fri 05 Jun 2026 09:24:19 +0000 ROA not before: Fri 05 Jun 2026 09:19:19 +0000 ROA not after: Fri 04 Jun 2027 09:24:19 +0000 asID: 7539 IP address blocks: 211.73.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jun 2026 04:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:53:8e:c7:4b:b9:6c:5a:63:e0:c8:cb:16:ec:c2:c0:4c:0d:0a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1 Validity Not Before: Jun 5 09:19:19 2026 GMT Not After : Jun 4 09:24:19 2027 GMT Subject: CN=1F84ACD3FEB76346332D556EBD1B317F7020CEA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e3:e6:3f:55:d5:c9:50:cb:71:c5:99:40:d4: 19:9a:2f:16:20:9c:d3:4a:bc:65:97:ad:20:f2:e4: 66:6f:b8:e4:36:8e:16:5a:84:37:b6:a5:ac:eb:08: f7:be:0a:fe:70:0b:dc:df:12:a6:ec:b5:a9:9f:39: 36:6b:78:f8:9c:d2:b1:99:46:f2:42:c2:c2:e4:a0: 58:ab:68:e1:bb:44:a1:ea:a5:83:c5:92:e0:31:5e: e3:31:04:e5:05:c6:6d:68:d8:aa:b4:9b:11:b9:0b: e6:f2:5c:5f:25:49:58:c6:9c:0e:77:c4:6e:09:f3: db:24:8d:9c:ee:c4:38:f8:57:25:17:cd:59:42:b6: b7:35:09:03:e5:21:97:31:bc:4f:b0:44:be:62:9d: 28:0f:d4:c5:96:e9:d4:86:61:68:70:65:be:4d:8c: 35:d5:de:ec:21:34:57:be:11:7b:12:6a:0c:a9:bc: 3d:51:09:2e:51:d1:e8:d9:60:6d:63:d3:c0:03:91: 4b:33:e8:8c:31:cc:48:8a:f4:1b:ca:35:13:51:56: b5:9c:db:ab:05:8e:e0:d4:2d:af:04:a6:05:a9:29: 36:ce:58:b4:23:36:62:0b:82:58:3e:d5:c4:44:87: 41:76:b0:6f:0b:bd:db:18:4f:92:5a:79:4d:7e:2f: 87:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:84:AC:D3:FE:B7:63:46:33:2D:55:6E:BD:1B:31:7F:70:20:CE:A3 X509v3 Authority Key Identifier: keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/3231312e37332e36342e302f31392d3234203d3e2037353339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.73.64.0/19 Signature Algorithm: sha256WithRSAEncryption c1:15:bd:d8:40:6b:75:2c:68:88:85:ef:c1:d0:cd:4b:d7:6a: 0f:e5:9b:e2:80:4c:68:a3:d8:aa:86:29:32:42:23:aa:e0:fd: d8:46:31:b2:90:06:c0:08:62:31:62:96:2d:5b:7c:b7:24:d7: 2b:eb:f4:9d:c5:10:ec:71:94:b8:39:9c:75:07:2e:60:3a:33: 6a:f5:3e:5a:84:2a:3d:b2:3c:53:d8:93:bc:0b:54:7c:85:6f: 95:af:f6:ec:cb:96:93:6b:85:21:36:f5:02:8b:5c:d6:dd:bb: fc:40:83:fa:13:9c:65:81:9c:71:34:41:8f:9a:63:a7:ef:f6: 7f:3f:7a:e1:ff:ad:3f:1e:bd:ae:31:67:5b:56:18:73:df:0c: 19:24:26:98:0a:85:d6:81:41:c8:76:e7:43:a1:02:97:19:98: 0c:6a:a2:d4:d7:45:56:f1:80:55:39:29:53:59:a5:37:d7:f0: 73:69:ce:b7:57:57:3d:c3:e1:6e:96:e2:2b:77:ae:c5:f5:85: 8e:fb:87:b2:90:b1:5e:39:20:85:fc:2b:46:83:dc:58:d2:73: 45:d6:bf:6b:a1:03:f4:db:43:ae:37:ee:4f:5f:99:60:a8:d3: 5f:91:00:ea:cd:9a:66:7f:0b:58:e0:67:07:2c:9d:ec:e8:ba: 5b:53:0e:ab -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUDVOOx0u5bFpj4MjLFuzCwEwNCnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNBRkFD QzhFQTZDMTAeFw0yNjA2MDUwOTE5MTlaFw0yNzA2MDQwOTI0MTlaMDMxMTAvBgNV BAMTKDFGODRBQ0QzRkVCNzYzNDYzMzJENTU2RUJEMUIzMTdGNzAyMENFQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4+Y/VdXJUMtxxZlA1BmaLxYg nNNKvGWXrSDy5GZvuOQ2jhZahDe2pazrCPe+Cv5wC9zfEqbstamfOTZrePic0rGZ RvJCwsLkoFiraOG7RKHqpYPFkuAxXuMxBOUFxm1o2Kq0mxG5C+byXF8lSVjGnA53 xG4J89skjZzuxDj4VyUXzVlCtrc1CQPlIZcxvE+wRL5inSgP1MWW6dSGYWhwZb5N jDXV3uwhNFe+EXsSagypvD1RCS5R0ejZYG1j08ADkUsz6IwxzEiK9BvKNRNRVrWc 26sFjuDULa8EpgWpKTbOWLQjNmILglg+1cREh0F2sG8LvdsYT5JaeU1+L4c9AgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUH4Ss0/63Y0YzLVVuvRsxf3AgzqMwHwYDVR0j BBgwFoAUnYW7jZMAbTWG4o0NZhLK+syOpsEwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkFSTC8w LzlEODVCQjhEOTMwMDZEMzU4NkUyOEQwRDY2MTJDQUZBQ0M4RUE2QzEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNB RkFDQzhFQTZDMS5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05BUkwvMC8zMjMxMzEyZTM3MzMyZTM2 MzQyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzNzM1MzMzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdNJ QDANBgkqhkiG9w0BAQsFAAOCAQEAwRW92EBrdSxoiIXvwdDNS9dqD+Wb4oBMaKPY qoYpMkIjquD92EYxspAGwAhiMWKWLVt8tyTXK+v0ncUQ7HGUuDmcdQcuYDozavU+ WoQqPbI8U9iTvAtUfIVvla/27MuWk2uFITb1Aotc1t27/ECD+hOcZYGccTRBj5pj p+/2fz964f+tPx69rjFnW1YYc98MGSQmmAqF1oFByHbnQ6EClxmYDGqi1NdFVvGA VTkpU1mlN9fwc2nOt1dXPcPhbpbiK3euxfWFjvuHspCxXjkghfwrRoPcWNJzRda/ a6ED9NtDrjfuT1+ZYKjTX5EA6s2aZn8LWOBnByyd7Oi6W1MOqw== -----END CERTIFICATE-----Generated at Sat Jun 6 21:41:40 2026 by rpki-client