$ rpki-client -vvf rpkica.twnic.tw/rpki/NCHC/0/323030313a6531303a3a2f33322d3634203d3e2037353339.roa File: 323030313a6531303a3a2f33322d3634203d3e2037353339.roa (raw, json) Hash identifier: rxuyl6k2OoUV5iBtmSctIGPqbqwV5R2ky+GQxjpTB7Y= Subject key identifier: EA:3D:DB:87:1D:26:CE:A0:E8:03:0C:E8:73:26:00:D7:C4:33:EA:DC Certificate issuer: /CN=2C4838ED872E38E97456B74C33E4178C4E1253A2 Certificate serial: 2CE6DB2B4FEDB1C233A4E59F07A1D2C0CA599578 Authority key identifier: 2C:48:38:ED:87:2E:38:E9:74:56:B7:4C:33:E4:17:8C:4E:12:53:A2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2C4838ED872E38E97456B74C33E4178C4E1253A2.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCHC/0/323030313a6531303a3a2f33322d3634203d3e2037353339.roa Signing time: Mon 11 May 2026 16:42:10 +0000 ROA not before: Mon 11 May 2026 16:37:10 +0000 ROA not after: Mon 10 May 2027 16:42:10 +0000 asID: 7539 IP address blocks: 2001:e10::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCHC/0/2C4838ED872E38E97456B74C33E4178C4E1253A2.crl rsync://rpkica.twnic.tw/rpki/NCHC/0/2C4838ED872E38E97456B74C33E4178C4E1253A2.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2C4838ED872E38E97456B74C33E4178C4E1253A2.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e6:db:2b:4f:ed:b1:c2:33:a4:e5:9f:07:a1:d2:c0:ca:59:95:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C4838ED872E38E97456B74C33E4178C4E1253A2 Validity Not Before: May 11 16:37:10 2026 GMT Not After : May 10 16:42:10 2027 GMT Subject: CN=EA3DDB871D26CEA0E8030CE8732600D7C433EADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:63:6f:68:b8:f8:16:cf:ca:79:f3:2f:a7:c1: a6:54:16:7f:76:76:ed:04:ed:78:0c:a9:16:64:e9: 8a:b3:cd:ae:fb:e3:74:b3:81:29:9b:9e:15:16:9c: 8c:2f:e6:98:1a:6a:3f:97:02:e1:59:cd:2e:eb:a0: fd:ee:78:60:88:ad:89:5a:29:23:a9:08:45:b6:3a: ac:da:79:a8:93:7c:b3:db:1b:ca:63:95:51:83:9d: 95:8d:2c:05:78:30:43:c6:f5:44:a1:92:17:60:30: 6c:04:23:76:53:77:b1:cb:af:53:6c:04:7c:fc:b8: 71:a8:70:58:d2:63:02:02:0a:b5:39:90:ac:25:20: 94:32:5c:97:4a:50:a8:03:8c:49:e8:cc:1a:d5:42: 9a:d3:02:df:71:0d:28:04:e5:8f:84:b4:92:6c:ca: fa:d2:2f:8c:43:b3:b9:a9:a3:45:57:74:57:c8:08: 88:bf:ea:32:83:28:06:c1:de:97:b0:11:2c:a1:d3: 45:52:0e:62:8f:cc:c7:b6:6e:ac:2e:de:c5:ce:49: 91:e6:41:4c:51:ef:23:f9:e3:7d:f7:2f:28:fe:87: 20:1f:d6:40:fd:89:69:54:d6:94:bb:b1:11:e8:07: 73:15:14:1a:ca:30:0c:be:92:04:12:cf:5a:a3:67: 20:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3D:DB:87:1D:26:CE:A0:E8:03:0C:E8:73:26:00:D7:C4:33:EA:DC X509v3 Authority Key Identifier: keyid:2C:48:38:ED:87:2E:38:E9:74:56:B7:4C:33:E4:17:8C:4E:12:53:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCHC/0/2C4838ED872E38E97456B74C33E4178C4E1253A2.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2C4838ED872E38E97456B74C33E4178C4E1253A2.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCHC/0/323030313a6531303a3a2f33322d3634203d3e2037353339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:e10::/32 Signature Algorithm: sha256WithRSAEncryption 0c:e5:28:5f:53:3a:4e:fe:eb:16:0f:37:b4:0f:53:22:59:2d: db:90:b5:5d:d0:02:06:36:aa:be:9d:bf:f4:60:09:48:15:b0: 22:76:bf:d1:ec:85:0d:38:c9:27:83:9a:8b:83:85:02:70:ad: 0f:01:b8:7a:ce:9f:21:ec:78:84:0e:16:eb:18:d2:73:16:bc: d2:54:e9:28:6b:4f:30:dc:21:4e:d7:e5:08:4d:11:9a:5c:31: 18:05:13:db:7e:14:f5:c3:f5:8d:3e:57:2e:33:b6:b7:c5:b2: 1a:e4:0e:e2:77:87:b6:7d:c0:69:6f:46:0a:2c:9f:91:87:e4: e3:0f:c0:5b:a5:d1:3e:47:40:78:68:a2:1d:28:f1:67:40:f6: 8c:c6:51:36:6a:bc:1e:3b:70:9a:52:97:59:ba:a6:7e:d1:80: f1:17:b9:32:78:bd:2d:cd:24:07:2e:34:10:63:0b:8e:6b:6c: ca:09:83:5d:66:cf:d5:62:93:b8:ac:93:5b:15:51:13:ff:0e: 58:78:b0:f5:f8:18:a1:22:91:96:4a:ff:24:59:ec:7d:2e:94: 3d:62:bf:21:a5:26:94:3a:2b:5c:e9:4a:b8:6a:ce:19:4c:97: f6:41:59:68:e1:29:84:36:ba:10:5f:e1:9a:62:d9:2b:d7:b5: 63:40:6d:17 -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgIULObbK0/tscIzpOWfB6HSwMpZlXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM0ODM4RUQ4NzJFMzhFOTc0NTZCNzRDMzNFNDE3OEM0 RTEyNTNBMjAeFw0yNjA1MTExNjM3MTBaFw0yNzA1MTAxNjQyMTBaMDMxMTAvBgNV BAMTKEVBM0REQjg3MUQyNkNFQTBFODAzMENFODczMjYwMEQ3QzQzM0VBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmY29ouPgWz8p58y+nwaZUFn92 du0E7XgMqRZk6Yqzza7743SzgSmbnhUWnIwv5pgaaj+XAuFZzS7roP3ueGCIrYla KSOpCEW2OqzaeaiTfLPbG8pjlVGDnZWNLAV4MEPG9UShkhdgMGwEI3ZTd7HLr1Ns BHz8uHGocFjSYwICCrU5kKwlIJQyXJdKUKgDjEnozBrVQprTAt9xDSgE5Y+EtJJs yvrSL4xDs7mpo0VXdFfICIi/6jKDKAbB3pewESyh00VSDmKPzMe2bqwu3sXOSZHm QUxR7yP54333Lyj+hyAf1kD9iWlU1pS7sRHoB3MVFBrKMAy+kgQSz1qjZyBDAgMB AAGjggHaMIIB1jAdBgNVHQ4EFgQU6j3bhx0mzqDoAwzocyYA18Qz6twwHwYDVR0j BBgwFoAULEg47YcuOOl0VrdMM+QXjE4SU6IwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNIQy8w LzJDNDgzOEVEODcyRTM4RTk3NDU2Qjc0QzMzRTQxNzhDNEUxMjUzQTIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMkM0ODM4RUQ4NzJFMzhFOTc0NTZCNzRDMzNFNDE3 OEM0RTEyNTNBMi5jZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSEMvMC8zMjMwMzAzMTNhNjUzMTMw M2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzczNTMzMzkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAQ4Q MA0GCSqGSIb3DQEBCwUAA4IBAQAM5ShfUzpO/usWDze0D1MiWS3bkLVd0AIGNqq+ nb/0YAlIFbAidr/R7IUNOMkng5qLg4UCcK0PAbh6zp8h7HiEDhbrGNJzFrzSVOko a08w3CFO1+UITRGaXDEYBRPbfhT1w/WNPlcuM7a3xbIa5A7id4e2fcBpb0YKLJ+R h+TjD8BbpdE+R0B4aKIdKPFnQPaMxlE2arweO3CaUpdZuqZ+0YDxF7kyeL0tzSQH LjQQYwuOa2zKCYNdZs/VYpO4rJNbFVET/w5YeLD1+BihIpGWSv8kWex9LpQ9Yr8h pSaUOitc6Uq4as4ZTJf2QVlo4SmENroQX+GaYtkr17VjQG0X -----END CERTIFICATE-----Generated at Wed May 13 21:13:35 2026 by rpki-client