$ rpki-client -vvf rpkica.twnic.tw/rpki/NSS/0/3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa File: 3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa (raw, json) Hash identifier: 7ZYOaD4BiHJMT5uylYeAq6oBkT9jOAeVwRTnZzrlVB0= Subject key identifier: 04:49:4A:7A:B3:89:B0:F5:36:98:1B:34:01:9F:A5:08:AA:5C:C7:0F Certificate issuer: /CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E Certificate serial: 2E055A1B9843DA68F8C261E9A25B530FEFC8A450 Authority key identifier: 9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NSS/0/3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa Signing time: Mon 11 May 2026 17:36:53 +0000 ROA not before: Mon 11 May 2026 17:31:53 +0000 ROA not after: Mon 10 May 2027 17:36:53 +0000 asID: 131626 IP address blocks: 103.118.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:05:5a:1b:98:43:da:68:f8:c2:61:e9:a2:5b:53:0f:ef:c8:a4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E Validity Not Before: May 11 17:31:53 2026 GMT Not After : May 10 17:36:53 2027 GMT Subject: CN=04494A7AB389B0F536981B34019FA508AA5CC70F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:51:bc:d7:20:97:b5:7a:ac:89:db:a7:f8: 09:7a:0c:ed:7e:1e:28:69:6e:a6:58:50:d6:99:c2: 33:f2:e5:2f:3b:57:23:b1:26:d7:fb:fd:54:0c:d1: 0c:5c:57:fb:9b:06:9c:ee:d7:54:69:fe:00:40:a8: 8f:0b:1f:d8:91:6f:4c:24:a0:8d:c9:3f:9e:9f:cc: b0:64:67:ea:c2:b8:ea:1a:3e:1e:82:f1:ec:77:3d: b2:45:78:fb:15:6b:90:19:d2:87:52:a4:14:b6:7b: 5b:ca:23:f0:ad:5d:4a:8c:a9:26:31:41:de:aa:3a: 01:8a:ce:24:38:e5:d6:5f:0e:78:f6:d1:c9:a6:a7: cf:e8:28:e8:fe:d2:0d:1d:1e:29:9b:8c:47:f0:14: 63:d1:2c:3d:11:17:6a:61:65:da:2b:83:d6:68:88: 9e:58:59:dc:b7:ae:e8:30:57:a1:5a:b7:13:d4:07: 10:fd:49:d1:5a:26:a5:72:20:88:20:21:f8:ca:1a: d6:40:f3:ed:82:59:04:77:32:96:3f:28:18:9c:f4: b6:de:39:98:7a:ae:37:6b:68:55:df:27:25:dc:cb: 68:f4:97:a4:76:8d:3a:9d:58:e4:73:df:40:47:d0: 5b:fd:30:64:2a:d8:08:3c:4f:1b:85:cd:8d:3f:b6: 9c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:49:4A:7A:B3:89:B0:F5:36:98:1B:34:01:9F:A5:08:AA:5C:C7:0F X509v3 Authority Key Identifier: keyid:9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/3130332e3131382e32342e302f32322d3234203d3e20313331363236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.24.0/22 Signature Algorithm: sha256WithRSAEncryption 86:b7:db:a5:90:94:eb:51:34:4b:b9:a0:9a:7d:9c:19:1e:d1: 67:bd:c8:8f:ba:c8:1c:aa:d4:64:1a:ab:e2:c5:d3:c6:0e:f5: 87:2f:ad:f3:23:5d:9e:9c:47:28:40:95:cf:54:5a:39:16:eb: a0:a7:f2:ec:b4:35:85:ce:b9:43:fa:00:0e:be:00:bb:72:7a: 6c:85:4a:bb:e3:4c:3b:5f:2f:2a:37:a5:d8:a4:33:24:66:9d: 5f:0a:6d:36:83:5d:5d:40:02:75:f2:ed:94:44:92:01:c9:03: 44:a8:6d:90:52:db:5b:ee:13:9a:ad:bc:88:f6:07:fe:6b:61: 32:2f:74:bc:78:ae:34:bb:a2:56:ef:69:4c:c8:fe:41:fc:65: 66:bc:b9:dc:60:0f:2e:f6:8a:cf:2f:91:79:34:02:c4:6d:f6: c2:d3:7d:d8:e6:0c:2e:79:ad:04:0c:96:c0:86:31:d2:60:fc: 4a:a4:b1:29:a9:76:ee:8b:64:16:4f:28:ae:41:76:1c:6e:cf: 94:c2:4b:42:7e:5c:c7:c7:f8:04:ec:fc:0a:08:a1:b8:74:99: bf:f3:3a:1d:0e:57:b3:2d:9c:c8:13:a4:87:f9:90:76:01:26: c1:1b:67:63:e8:a1:47:84:ec:ba:27:36:13:a9:a4:48:ae:df: 51:3c:b1:65 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIULgVaG5hD2mj4wmHpoltTD+/IpFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxMzVBQ0E5QjNCN0U0MjNGNkE2RTQ5QzkyMkU3QzlG RjlEMDQzRTAeFw0yNjA1MTExNzMxNTNaFw0yNzA1MTAxNzM2NTNaMDMxMTAvBgNV BAMTKDA0NDk0QTdBQjM4OUIwRjUzNjk4MUIzNDAxOUZBNTA4QUE1Q0M3MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLiFG81yCXtXqsidun+Al6DO1+ HihpbqZYUNaZwjPy5S87VyOxJtf7/VQM0QxcV/ubBpzu11Rp/gBAqI8LH9iRb0wk oI3JP56fzLBkZ+rCuOoaPh6C8ex3PbJFePsVa5AZ0odSpBS2e1vKI/CtXUqMqSYx Qd6qOgGKziQ45dZfDnj20cmmp8/oKOj+0g0dHimbjEfwFGPRLD0RF2phZdorg9Zo iJ5YWdy3rugwV6FatxPUBxD9SdFaJqVyIIggIfjKGtZA8+2CWQR3MpY/KBic9Lbe OZh6rjdraFXfJyXcy2j0l6R2jTqdWORz30BH0Fv9MGQq2Ag8TxuFzY0/tpyVAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUBElKerOJsPU2mBs0AZ+lCKpcxw8wHwYDVR0j BBgwFoAUnhNayps7fkI/am5JySLnyf+dBD4wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTLzAv OUUxMzVBQ0E5QjNCN0U0MjNGNkE2RTQ5QzkyMkU3QzlGRjlEMDQzRS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85RTEzNUFDQTlCM0I3RTQyM0Y2QTZFNDlDOTIyRTdD OUZGOUQwNDNFLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTLzAvMzEzMDMzMmUzMTMxMzgyZTMy MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTMzMzEzNjMyMzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJndhgwDQYJKoZIhvcNAQELBQADggEBAIa326WQlOtRNEu5oJp9nBke0We9yI+6 yByq1GQaq+LF08YO9YcvrfMjXZ6cRyhAlc9UWjkW66Cn8uy0NYXOuUP6AA6+ALty emyFSrvjTDtfLyo3pdikMyRmnV8KbTaDXV1AAnXy7ZREkgHJA0SobZBS21vuE5qt vIj2B/5rYTIvdLx4rjS7olbvaUzI/kH8ZWa8udxgDy72is8vkXk0AsRt9sLTfdjm DC55rQQMlsCGMdJg/EqksSmpdu6LZBZPKK5Bdhxuz5TCS0J+XMfH+ATs/AoIobh0 mb/zOh0OV7MtnMgTpIf5kHYBJsEbZ2PooUeE7LonNhOppEiu31E8sWU= -----END CERTIFICATE-----Generated at Wed May 13 21:15:57 2026 by rpki-client