$ rpki-client -vvf rpkica.twnic.tw/rpki/NSS/0/323430333a663363303a3a2f33322d3332203d3e20313331363236.roa File: 323430333a663363303a3a2f33322d3332203d3e20313331363236.roa (raw, json) Hash identifier: U+TwGMruloppvfph33ur/zLTpQNWHiQ2kQh2YCvkqAQ= Subject key identifier: 94:B4:15:AE:14:01:ED:B2:84:64:E0:2A:AE:5F:40:5E:55:F2:38:1F Certificate issuer: /CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E Certificate serial: 4CF9F98F6FE0857F25BA79B7BB00863781CE1702 Authority key identifier: 9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NSS/0/323430333a663363303a3a2f33322d3332203d3e20313331363236.roa Signing time: Mon 11 May 2026 17:36:55 +0000 ROA not before: Mon 11 May 2026 17:31:55 +0000 ROA not after: Mon 10 May 2027 17:36:55 +0000 asID: 131626 IP address blocks: 2403:f3c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:f9:f9:8f:6f:e0:85:7f:25:ba:79:b7:bb:00:86:37:81:ce:17:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E Validity Not Before: May 11 17:31:55 2026 GMT Not After : May 10 17:36:55 2027 GMT Subject: CN=94B415AE1401EDB28464E02AAE5F405E55F2381F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ea:96:a8:87:95:89:ac:60:9f:29:26:cb:56: 0c:bc:28:a0:ea:bd:e9:9e:d0:cf:1b:cf:db:40:c2: eb:f4:74:eb:9c:c7:ef:28:d9:73:8e:66:d0:f0:38: d5:89:4b:61:f5:65:26:84:e2:da:c7:cf:95:93:60: 2a:72:75:29:04:f7:d4:75:63:13:84:44:66:e8:f0: 39:00:48:10:87:31:53:3e:4c:6f:93:60:39:08:0d: d8:e0:ae:d7:73:b4:d9:26:ce:57:e0:70:2a:bd:33: e5:b8:63:31:38:68:aa:72:10:e1:1c:8d:bc:b6:01: 3b:6f:68:f7:b7:35:e6:93:01:51:38:bb:5b:97:66: d3:bc:05:e7:7d:1f:d4:84:9a:ab:60:f9:b1:3a:6c: 99:24:18:84:60:96:db:8b:6b:2a:ba:5b:58:c8:8f: 79:11:7a:7d:e4:ab:14:66:0a:6f:7f:90:3f:89:36: 9a:46:cb:f3:9e:79:fb:b1:e4:de:fd:7a:f3:e8:9f: 46:a4:0b:61:68:48:bc:ca:68:ea:21:30:46:01:79: 23:55:21:db:70:6c:11:06:83:78:c8:87:bc:9c:0e: 27:3c:c6:1c:82:23:b9:e7:ea:e1:20:c0:4c:69:cd: f9:79:41:ed:b8:b0:74:7c:19:34:0f:6c:a3:b1:fa: d0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B4:15:AE:14:01:ED:B2:84:64:E0:2A:AE:5F:40:5E:55:F2:38:1F X509v3 Authority Key Identifier: keyid:9E:13:5A:CA:9B:3B:7E:42:3F:6A:6E:49:C9:22:E7:C9:FF:9D:04:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NSS/0/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9E135ACA9B3B7E423F6A6E49C922E7C9FF9D043E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NSS/0/323430333a663363303a3a2f33322d3332203d3e20313331363236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:f3c0::/32 Signature Algorithm: sha256WithRSAEncryption 35:41:7d:00:ff:47:b6:1a:5c:6a:39:0a:df:48:20:40:90:89: e7:e5:20:a7:08:5f:7f:99:d6:d9:b8:2c:6d:06:9f:ad:0d:10: 92:5d:dd:4f:ea:99:30:fb:95:fd:00:9d:62:db:84:96:0e:d2: b8:95:5f:b6:3a:e6:2c:ee:84:29:44:35:67:0f:ae:e9:6c:a2: 52:41:c9:b3:18:17:1a:32:0c:95:a9:b9:68:d4:06:e6:6d:e8: 34:4f:33:fb:00:6c:77:d8:8f:c2:e1:1f:08:59:13:77:4e:2c: a7:03:08:50:d0:3c:2d:f8:51:0a:be:d1:3c:2c:ed:21:75:ed: c3:1b:41:77:cc:23:72:ae:0b:a3:23:7e:92:5c:7d:23:ed:83: 7e:6c:ee:39:e4:51:ff:40:f9:ea:fe:8a:81:b8:6c:32:f3:39: fe:4a:fe:0f:30:e3:d7:1c:49:a1:c0:93:3e:ce:0e:97:76:51: 7c:b9:09:05:68:77:82:b1:54:48:8b:e5:7a:4b:e3:4c:90:0e: ea:1d:e2:62:3d:ce:7a:22:9b:c1:68:b1:40:f3:a2:01:32:9a: 6a:ee:c8:a8:1c:df:ea:62:4b:c9:e3:70:7d:0f:55:f4:c7:8e: 45:5d:ff:b2:24:aa:c9:d4:cb:e3:48:14:e6:f4:41:2d:2e:9c: 01:28:62:7d -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUTPn5j2/ghX8lunm3uwCGN4HOFwIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUUxMzVBQ0E5QjNCN0U0MjNGNkE2RTQ5QzkyMkU3QzlG RjlEMDQzRTAeFw0yNjA1MTExNzMxNTVaFw0yNzA1MTAxNzM2NTVaMDMxMTAvBgNV BAMTKDk0QjQxNUFFMTQwMUVEQjI4NDY0RTAyQUFFNUY0MDVFNTVGMjM4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL6paoh5WJrGCfKSbLVgy8KKDq veme0M8bz9tAwuv0dOucx+8o2XOOZtDwONWJS2H1ZSaE4trHz5WTYCpydSkE99R1 YxOERGbo8DkASBCHMVM+TG+TYDkIDdjgrtdztNkmzlfgcCq9M+W4YzE4aKpyEOEc jby2ATtvaPe3NeaTAVE4u1uXZtO8Bed9H9SEmqtg+bE6bJkkGIRgltuLayq6W1jI j3kRen3kqxRmCm9/kD+JNppGy/Oeefux5N79evPon0akC2FoSLzKaOohMEYBeSNV IdtwbBEGg3jIh7ycDic8xhyCI7nn6uEgwExpzfl5Qe24sHR8GTQPbKOx+tBZAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUlLQVrhQB7bKEZOAqrl9AXlXyOB8wHwYDVR0j BBgwFoAUnhNayps7fkI/am5JySLnyf+dBD4wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTLzAv OUUxMzVBQ0E5QjNCN0U0MjNGNkE2RTQ5QzkyMkU3QzlGRjlEMDQzRS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85RTEzNUFDQTlCM0I3RTQyM0Y2QTZFNDlDOTIyRTdD OUZGOUQwNDNFLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlNTLzAvMzIzNDMwMzMzYTY2MzM2MzMw M2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzEzMzMxMzYzMjM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA JAPzwDANBgkqhkiG9w0BAQsFAAOCAQEANUF9AP9HthpcajkK30ggQJCJ5+Ugpwhf f5nW2bgsbQafrQ0Qkl3dT+qZMPuV/QCdYtuElg7SuJVftjrmLO6EKUQ1Zw+u6Wyi UkHJsxgXGjIMlam5aNQG5m3oNE8z+wBsd9iPwuEfCFkTd04spwMIUNA8LfhRCr7R PCztIXXtwxtBd8wjcq4LoyN+klx9I+2DfmzuOeRR/0D56v6KgbhsMvM5/kr+DzDj 1xxJocCTPs4Ol3ZRfLkJBWh3grFUSIvlekvjTJAO6h3iYj3OeiKbwWixQPOiATKa au7IqBzf6mJLyeNwfQ9V9MeORV3/siSqydTL40gU5vRBLS6cAShifQ== -----END CERTIFICATE-----Generated at Wed May 13 21:17:45 2026 by rpki-client