$ rpki-client -vvf rpkica.twnic.tw/rpki/PAGIC/0/3231302e36332e39382e302f32342d3234203d3e2034373831.roa File: 3231302e36332e39382e302f32342d3234203d3e2034373831.roa (raw, json) Hash identifier: LZZyhIKiYAfs1G4qbQO9LGz3ToSYlMJ9OrfP9EV4Tq0= Subject key identifier: 90:2B:62:55:BD:EA:71:50:A6:EA:CE:23:80:64:18:C3:2F:ED:6A:38 Certificate issuer: /CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D Certificate serial: 1E9F27308BDA1C08E954140A1075DFF0ADF11ADE Authority key identifier: 13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PAGIC/0/3231302e36332e39382e302f32342d3234203d3e2034373831.roa Signing time: Mon 11 May 2026 17:06:36 +0000 ROA not before: Mon 11 May 2026 17:01:36 +0000 ROA not after: Mon 10 May 2027 17:06:36 +0000 asID: 4781 IP address blocks: 210.63.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9f:27:30:8b:da:1c:08:e9:54:14:0a:10:75:df:f0:ad:f1:1a:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D Validity Not Before: May 11 17:01:36 2026 GMT Not After : May 10 17:06:36 2027 GMT Subject: CN=902B6255BDEA7150A6EACE23806418C32FED6A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:1b:b6:91:00:94:b6:14:11:1e:6c:e3:fd: e3:7d:bb:63:12:12:9d:f8:ea:36:aa:67:f3:a0:d6: fb:29:19:e1:47:38:06:21:2c:c2:6c:01:51:2c:26: ce:d6:f5:2f:77:b7:16:65:c4:6c:c5:37:d7:b1:b3: 6b:72:3d:49:4b:8a:a2:04:f1:5d:a8:94:ef:58:b5: 58:8d:c3:c5:d5:21:41:3a:91:63:8d:2e:24:ad:74: f0:ac:14:79:a1:0e:bb:0f:73:02:74:5c:63:5b:16: e5:1a:57:43:13:ae:40:e0:4f:68:39:0d:46:d6:02: 82:43:4f:cc:e3:15:16:34:ba:37:12:f7:61:0b:87: 0f:c2:ce:e6:9c:f7:f7:d6:38:9f:3b:e1:5e:33:e3: 38:8b:cf:77:54:09:de:a5:e5:84:0c:d1:be:8f:66: ac:91:09:a4:48:fd:ea:e6:32:ba:71:9e:c1:fe:71: 67:ae:b7:13:8b:c9:47:ea:2c:bc:b7:b6:cf:67:64: 48:b1:66:cc:14:a8:64:31:65:47:46:a0:8f:c5:b2: a8:0d:4e:68:6a:0d:d3:50:3e:1e:1c:dc:42:24:d2: c7:5e:69:12:6e:9b:36:d5:dd:74:c6:a2:3d:2e:dd: 95:b9:04:bf:d2:dc:00:04:93:39:5d:33:62:34:55: 0b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2B:62:55:BD:EA:71:50:A6:EA:CE:23:80:64:18:C3:2F:ED:6A:38 X509v3 Authority Key Identifier: keyid:13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/3231302e36332e39382e302f32342d3234203d3e2034373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.63.98.0/24 Signature Algorithm: sha256WithRSAEncryption 35:60:6d:4f:ba:7c:dd:5b:6c:fe:62:a8:23:00:73:79:cf:bc: a9:8e:6a:23:b6:95:c6:e1:dc:af:7d:13:2b:6a:8f:6f:08:a6: b3:14:64:0a:3f:3f:24:55:f0:9e:4d:99:00:71:c1:04:f5:26: 9b:68:0e:46:91:c8:25:d1:b6:44:04:35:b7:dc:fc:33:8b:25: 5e:1d:2f:13:89:36:fa:3f:19:ef:22:b7:eb:18:89:10:26:81: 5c:5a:58:ce:c6:cd:f4:27:f6:84:5c:94:e0:43:39:3d:15:0f: d5:a6:c2:ff:57:9a:0f:58:87:41:2e:8e:7d:83:2b:ed:a4:38: f2:6e:c5:31:17:30:d6:74:c2:c7:1d:06:be:02:55:41:5e:2a: 2e:ca:89:ed:aa:85:e4:e0:d1:25:4e:a4:d0:f9:42:8b:7f:ab: 70:d7:e5:32:ae:8b:b1:3e:5f:f3:7b:c0:61:ee:ae:25:9a:e0: 60:65:2e:62:f1:9e:66:d1:bd:0b:70:63:1a:83:20:79:17:7d: 06:d4:28:81:dc:cb:95:7f:d9:7f:ba:a9:70:2b:bb:0f:15:73: 74:f9:23:6a:c2:57:87:62:5f:5a:f9:f4:9e:aa:a9:ad:7c:2d: f4:79:df:41:2e:d9:b9:12:07:3e:76:8c:d4:c0:27:0b:c2:58: 5c:e5:4f:f7 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUHp8nMIvaHAjpVBQKEHXf8K3xGt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMwQUFGNDc1QkNDMDJDREJCREI0Qzk3NDRFQkUzMUNF RUVFMzA2RDAeFw0yNjA1MTExNzAxMzZaFw0yNzA1MTAxNzA2MzZaMDMxMTAvBgNV BAMTKDkwMkI2MjU1QkRFQTcxNTBBNkVBQ0UyMzgwNjQxOEMzMkZFRDZBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvLRu2kQCUthQRHmzj/eN9u2MS Ep346jaqZ/Og1vspGeFHOAYhLMJsAVEsJs7W9S93txZlxGzFN9exs2tyPUlLiqIE 8V2olO9YtViNw8XVIUE6kWONLiStdPCsFHmhDrsPcwJ0XGNbFuUaV0MTrkDgT2g5 DUbWAoJDT8zjFRY0ujcS92ELhw/Czuac9/fWOJ874V4z4ziLz3dUCd6l5YQM0b6P ZqyRCaRI/ermMrpxnsH+cWeutxOLyUfqLLy3ts9nZEixZswUqGQxZUdGoI/FsqgN TmhqDdNQPh4c3EIk0sdeaRJumzbV3XTGoj0u3ZW5BL/S3AAEkzldM2I0VQsLAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUkCtiVb3qcVCm6s4jgGQYwy/tajgwHwYDVR0j BBgwFoAUEwqvR1vMAs2720yXROvjHO7uMG0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUEFHSUMv MC8xMzBBQUY0NzVCQ0MwMkNEQkJEQjRDOTc0NEVCRTMxQ0VFRUUzMDZELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzEzMEFBRjQ3NUJDQzAyQ0RCQkRCNEM5NzQ0RUJF MzFDRUVFRTMwNkQuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9QQUdJQy8wLzMyMzEzMDJlMzYzMzJl MzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzczODMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 0j9iMA0GCSqGSIb3DQEBCwUAA4IBAQA1YG1PunzdW2z+YqgjAHN5z7ypjmojtpXG 4dyvfRMrao9vCKazFGQKPz8kVfCeTZkAccEE9SabaA5Gkcgl0bZEBDW33PwziyVe HS8TiTb6PxnvIrfrGIkQJoFcWljOxs30J/aEXJTgQzk9FQ/VpsL/V5oPWIdBLo59 gyvtpDjybsUxFzDWdMLHHQa+AlVBXiouyontqoXk4NElTqTQ+UKLf6tw1+Uyroux Pl/ze8Bh7q4lmuBgZS5i8Z5m0b0LcGMagyB5F30G1CiB3MuVf9l/uqlwK7sPFXN0 +SNqwleHYl9a+fSeqqmtfC30ed9BLtm5Egc+dozUwCcLwlhc5U/3 -----END CERTIFICATE-----Generated at Wed May 13 21:09:14 2026 by rpki-client