$ rpki-client -vvf rpkica.twnic.tw/rpki/NCREE/0/3130332e3138392e3133322e302f32332d3233203d3e203138313833.roa File: 3130332e3138392e3133322e302f32332d3233203d3e203138313833.roa (raw, json) Hash identifier: 52gdtA1LdP2xK0dCg/MXu3Df1UL36Mp+kCidYA74Lo8= Subject key identifier: F3:42:8F:C3:20:DF:39:EF:B1:D2:ED:39:02:BE:7B:D4:5B:30:50:1C Certificate issuer: /CN=97D4884F986D543782ED0796247DD5237461E32E Certificate serial: 656865B562C37B6EA8EED6F6E46F4A4B1FC4AB69 Authority key identifier: 97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCREE/0/3130332e3138392e3133322e302f32332d3233203d3e203138313833.roa Signing time: Mon 11 May 2026 17:38:39 +0000 ROA not before: Mon 11 May 2026 17:33:39 +0000 ROA not after: Mon 10 May 2027 17:38:39 +0000 asID: 18183 IP address blocks: 103.189.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:68:65:b5:62:c3:7b:6e:a8:ee:d6:f6:e4:6f:4a:4b:1f:c4:ab:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97D4884F986D543782ED0796247DD5237461E32E Validity Not Before: May 11 17:33:39 2026 GMT Not After : May 10 17:38:39 2027 GMT Subject: CN=F3428FC320DF39EFB1D2ED3902BE7BD45B30501C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c5:9b:9e:31:3d:d9:e4:ed:f9:4a:60:21:01: 29:ee:1b:69:57:af:1b:a9:b5:bc:aa:21:7e:c7:ec: 2b:6c:fe:d3:9b:8c:1a:06:2a:6f:fb:29:b5:22:e8: da:bc:f7:3c:1b:c2:41:ea:a6:36:45:a1:fa:04:d4: 8f:93:50:cb:db:73:64:be:72:26:80:95:a6:50:a2: a5:39:8b:ee:fa:5e:fd:66:89:f5:09:5e:7e:13:16: 3b:92:be:82:b0:b5:e6:a2:d1:07:bb:c2:05:18:ca: 36:78:b3:f6:e8:1e:8b:95:61:52:98:a5:cb:9a:33: d1:17:88:b8:9e:60:8d:99:1e:5e:df:c6:71:55:84: 71:9a:8a:c3:58:a4:0c:61:ea:20:5e:37:f2:8b:d2: 79:0c:a7:18:c9:32:8a:a5:ad:c0:d7:54:74:8b:96: 59:43:a7:63:48:9f:44:08:cf:67:50:14:07:50:ee: 61:76:d6:66:50:4a:70:ef:d2:e7:d9:43:97:e5:14: 5b:a5:86:9d:5e:f1:9c:ff:36:f1:b6:ed:68:28:7a: 00:79:62:09:d1:b4:3a:fd:a0:46:14:24:de:e8:79: 13:1e:c8:71:23:ec:20:0b:b4:43:0c:67:6c:d4:ff: ac:ee:a5:41:65:75:df:96:71:56:41:4b:2c:5b:63: 62:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:42:8F:C3:20:DF:39:EF:B1:D2:ED:39:02:BE:7B:D4:5B:30:50:1C X509v3 Authority Key Identifier: keyid:97:D4:88:4F:98:6D:54:37:82:ED:07:96:24:7D:D5:23:74:61:E3:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/97D4884F986D543782ED0796247DD5237461E32E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/97D4884F986D543782ED0796247DD5237461E32E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCREE/0/3130332e3138392e3133322e302f32332d3233203d3e203138313833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.132.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:85:c0:3e:23:8a:c5:06:8a:1b:42:4c:cc:9e:40:ff:db:55: 2c:09:07:aa:00:9f:99:fd:16:d4:4e:c3:ab:36:c1:a7:d4:4f: d1:02:9b:45:33:5c:79:72:d5:2c:e7:ce:5a:67:78:be:fd:e4: a2:10:f2:66:10:ce:3d:b3:51:81:84:3f:78:5e:65:3e:6f:ad: 51:c4:1b:75:bd:21:d1:e5:f1:4f:6a:92:31:89:0e:c7:26:65: a9:2c:76:83:a8:71:d6:1e:c0:4b:b7:2e:7d:42:a0:fd:ad:80: 57:b4:4e:50:0f:1b:ca:99:a4:ea:c3:15:02:f6:2a:c8:9d:34: 73:07:28:dc:4f:49:08:9f:11:8c:84:bf:f3:ae:8b:a7:0f:df: 6c:a2:6f:fd:44:7d:12:2b:c9:fc:8a:29:21:de:12:33:14:f8: dd:f3:e1:dc:09:ac:81:80:40:04:a7:04:10:d2:4f:39:a0:b1: d6:1c:fd:22:ee:4e:67:21:9a:e5:27:b1:ea:e5:cb:60:ed:8e: 1d:7a:41:2b:e7:ed:3b:de:73:71:df:9c:29:f3:93:5a:e8:be: a9:c7:eb:9f:68:23:89:98:81:0c:9b:c8:05:39:cb:5e:c4:b0: d8:60:5a:43:54:32:82:c4:3d:97:42:29:b4:4d:77:73:79:73: 5e:cb:ce:69 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZWhltWLDe26o7tb25G9KSx/Eq2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdENDg4NEY5ODZENTQzNzgyRUQwNzk2MjQ3REQ1MjM3 NDYxRTMyRTAeFw0yNjA1MTExNzMzMzlaFw0yNzA1MTAxNzM4MzlaMDMxMTAvBgNV BAMTKEYzNDI4RkMzMjBERjM5RUZCMUQyRUQzOTAyQkU3QkQ0NUIzMDUwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIxZueMT3Z5O35SmAhASnuG2lX rxuptbyqIX7H7Cts/tObjBoGKm/7KbUi6Nq89zwbwkHqpjZFofoE1I+TUMvbc2S+ ciaAlaZQoqU5i+76Xv1mifUJXn4TFjuSvoKwteai0Qe7wgUYyjZ4s/boHouVYVKY pcuaM9EXiLieYI2ZHl7fxnFVhHGaisNYpAxh6iBeN/KL0nkMpxjJMoqlrcDXVHSL lllDp2NIn0QIz2dQFAdQ7mF21mZQSnDv0ufZQ5flFFulhp1e8Zz/NvG27WgoegB5 YgnRtDr9oEYUJN7oeRMeyHEj7CALtEMMZ2zU/6zupUFldd+WcVZBSyxbY2LJAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQU80KPwyDfOe+x0u05Ar571FswUBwwHwYDVR0j BBgwFoAUl9SIT5htVDeC7QeWJH3VI3Rh4y4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNSRUUv MC85N0Q0ODg0Rjk4NkQ1NDM3ODJFRDA3OTYyNDdERDUyMzc0NjFFMzJFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzk3RDQ4ODRGOTg2RDU0Mzc4MkVEMDc5NjI0N0RE NTIzNzQ2MUUzMkUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9OQ1JFRS8wLzMxMzAzMzJlMzEzODM5 MmUzMTMzMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMTM4MzEzODMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ72EMA0GCSqGSIb3DQEBCwUAA4IBAQAvhcA+I4rFBoobQkzMnkD/21Us CQeqAJ+Z/RbUTsOrNsGn1E/RAptFM1x5ctUs585aZ3i+/eSiEPJmEM49s1GBhD94 XmU+b61RxBt1vSHR5fFPapIxiQ7HJmWpLHaDqHHWHsBLty59QqD9rYBXtE5QDxvK maTqwxUC9irInTRzByjcT0kInxGMhL/zrounD99som/9RH0SK8n8iikh3hIzFPjd 8+HcCayBgEAEpwQQ0k85oLHWHP0i7k5nIZrlJ7Hq5ctg7Y4dekEr5+073nNx35wp 85Na6L6px+ufaCOJmIEMm8gFOctexLDYYFpDVDKCxD2XQim0TXdzeXNey85p -----END CERTIFICATE-----Generated at Wed May 13 21:17:46 2026 by rpki-client