$ rpki-client -vvf rpkica.twnic.tw/rpki/PAGIC/0/323430333a396630303a3a2f33322d3634203d3e203137343230.roa File: 323430333a396630303a3a2f33322d3634203d3e203137343230.roa (raw, json) Hash identifier: ZPdza9V56kgRWx9pLYMA7jGn3u5jYbB10LgeaN0WcCQ= Subject key identifier: E1:15:39:27:46:4E:E4:7B:D1:B3:AB:5A:AB:52:EB:AE:C7:1D:84:68 Certificate issuer: /CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D Certificate serial: 45C7637041D10BCD28501B0E6D76104F12BB404E Authority key identifier: 13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PAGIC/0/323430333a396630303a3a2f33322d3634203d3e203137343230.roa Signing time: Mon 11 May 2026 17:06:34 +0000 ROA not before: Mon 11 May 2026 17:01:34 +0000 ROA not after: Mon 10 May 2027 17:06:34 +0000 asID: 17420 IP address blocks: 2403:9f00::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c7:63:70:41:d1:0b:cd:28:50:1b:0e:6d:76:10:4f:12:bb:40:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D Validity Not Before: May 11 17:01:34 2026 GMT Not After : May 10 17:06:34 2027 GMT Subject: CN=E1153927464EE47BD1B3AB5AAB52EBAEC71D8468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:30:fd:14:ed:cc:77:a6:f0:c3:bd:c5:6e: db:f3:67:01:ce:6b:e6:a7:6a:9e:82:48:f2:76:b4: ee:76:e8:8f:3c:0b:d6:40:dd:f0:82:03:29:1b:b4: 8a:c7:41:a7:dd:b5:c3:50:82:af:d1:43:9a:3c:55: e1:31:2f:59:21:35:73:fa:6f:03:25:9c:08:8f:72: 8c:b2:a3:8d:bc:aa:68:f3:09:81:d9:06:4f:b4:4b: 52:0d:3a:f5:44:df:b6:48:2d:ca:13:71:e6:e1:15: 96:46:e1:51:7b:cb:72:03:05:0a:1d:de:31:a1:58: 22:54:26:64:4d:fe:e0:74:7f:a0:36:67:c7:54:a6: 64:9c:78:40:3f:e6:2a:70:eb:0e:5d:ad:63:76:9f: 88:e4:50:ab:01:9a:2e:9c:e0:45:3f:06:5f:52:5c: 93:22:6e:6f:f3:10:bd:ba:6d:61:b8:e2:d1:ea:3f: 39:3c:ba:62:d3:fb:26:23:2c:3c:05:ff:f0:e4:31: 65:e9:42:cf:ab:94:12:66:5c:6f:ef:c1:a8:3d:fb: f9:55:ac:c7:de:ff:9a:42:e8:04:88:a2:6f:0e:45: e1:ab:4f:7a:f3:53:95:54:f4:ee:3e:d8:e0:c6:b1: 71:ec:f7:63:bd:2d:d4:4d:1e:73:2d:72:a9:c7:c8: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:15:39:27:46:4E:E4:7B:D1:B3:AB:5A:AB:52:EB:AE:C7:1D:84:68 X509v3 Authority Key Identifier: keyid:13:0A:AF:47:5B:CC:02:CD:BB:DB:4C:97:44:EB:E3:1C:EE:EE:30:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/130AAF475BCC02CDBBDB4C9744EBE31CEEEE306D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PAGIC/0/323430333a396630303a3a2f33322d3634203d3e203137343230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:9f00::/32 Signature Algorithm: sha256WithRSAEncryption 0a:37:c7:20:d1:10:3e:45:23:29:d0:36:71:c6:57:c7:7f:b6: 1f:da:2b:f5:17:fb:65:9a:de:b6:de:fb:f8:18:bf:60:b8:f6: d3:a1:bf:c5:f2:65:52:34:86:10:23:ee:15:7b:a2:b2:3b:67: d6:e3:52:90:92:44:45:31:f4:f2:0b:13:c0:4b:fc:61:db:72: 8e:43:22:73:9f:5e:77:92:4c:a1:d7:eb:fe:cf:68:c8:66:71: 36:89:fa:7c:cb:98:49:06:9a:3d:39:e4:c7:ed:0a:ef:b7:de: a4:2e:1d:aa:00:7d:0c:9b:26:fd:48:40:42:43:f4:b4:22:9f: 18:2a:00:81:8b:82:43:34:54:84:4a:d7:2e:23:38:84:8d:29: 92:2b:ec:90:89:a1:37:12:42:44:31:d2:a3:ce:53:36:1b:b7: d5:12:a2:b2:5b:7a:f6:9d:73:e6:aa:73:3f:41:68:c6:7a:d3: f8:42:7d:31:99:89:8c:09:24:c4:9b:14:d6:ea:fa:94:0d:07: 6c:a3:da:52:16:d7:87:21:ab:ae:f6:41:ac:9a:91:b5:7b:4e: 22:72:0d:15:16:22:a1:45:dc:cd:09:bf:f9:2f:c6:8b:5b:95: 5a:91:27:86:9e:16:42:15:9d:9e:11:d6:ff:cc:0c:a4:8f:3a: 66:0e:f6:bb -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIURcdjcEHRC80oUBsObXYQTxK7QE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMwQUFGNDc1QkNDMDJDREJCREI0Qzk3NDRFQkUzMUNF RUVFMzA2RDAeFw0yNjA1MTExNzAxMzRaFw0yNzA1MTAxNzA2MzRaMDMxMTAvBgNV BAMTKEUxMTUzOTI3NDY0RUU0N0JEMUIzQUI1QUFCNTJFQkFFQzcxRDg0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAHDD9FO3Md6bww73FbtvzZwHO a+anap6CSPJ2tO526I88C9ZA3fCCAykbtIrHQafdtcNQgq/RQ5o8VeExL1khNXP6 bwMlnAiPcoyyo428qmjzCYHZBk+0S1INOvVE37ZILcoTcebhFZZG4VF7y3IDBQod 3jGhWCJUJmRN/uB0f6A2Z8dUpmSceEA/5ipw6w5drWN2n4jkUKsBmi6c4EU/Bl9S XJMibm/zEL26bWG44tHqPzk8umLT+yYjLDwF//DkMWXpQs+rlBJmXG/vwag9+/lV rMfe/5pC6ASIom8OReGrT3rzU5VU9O4+2ODGsXHs92O9LdRNHnMtcqnHyLyTAgMB AAGjggHgMIIB3DAdBgNVHQ4EFgQU4RU5J0ZO5HvRs6taq1LrrscdhGgwHwYDVR0j BBgwFoAUEwqvR1vMAs2720yXROvjHO7uMG0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUEFHSUMv MC8xMzBBQUY0NzVCQ0MwMkNEQkJEQjRDOTc0NEVCRTMxQ0VFRUUzMDZELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzEzMEFBRjQ3NUJDQzAyQ0RCQkRCNEM5NzQ0RUJF MzFDRUVFRTMwNkQuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9QQUdJQy8wLzMyMzQzMDMzM2EzOTY2 MzAzMDNhM2EyZjMzMzIyZDM2MzQyMDNkM2UyMDMxMzczNDMyMzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkA58AMA0GCSqGSIb3DQEBCwUAA4IBAQAKN8cg0RA+RSMp0DZxxlfHf7Yf2iv1 F/tlmt623vv4GL9guPbTob/F8mVSNIYQI+4Ve6KyO2fW41KQkkRFMfTyCxPAS/xh 23KOQyJzn153kkyh1+v+z2jIZnE2ifp8y5hJBpo9OeTH7Qrvt96kLh2qAH0Mmyb9 SEBCQ/S0Ip8YKgCBi4JDNFSEStcuIziEjSmSK+yQiaE3EkJEMdKjzlM2G7fVEqKy W3r2nXPmqnM/QWjGetP4Qn0xmYmMCSTEmxTW6vqUDQdso9pSFteHIauu9kGsmpG1 e04icg0VFiKhRdzNCb/5L8aLW5VakSeGnhZCFZ2eEdb/zAykjzpmDva7 -----END CERTIFICATE-----Generated at Wed May 13 21:09:44 2026 by rpki-client