$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/0/3130332e3135372e34322e302f32332d3332203d3e20313331363432.roa File: 3130332e3135372e34322e302f32332d3332203d3e20313331363432.roa (raw, json) Hash identifier: spfGeWFJdUeuEjJPQ+8MnYaXyZJ0WumSmDpey5VZQ7o= Subject key identifier: 02:2D:31:CC:EA:8F:9B:04:BF:53:CD:AF:6E:8F:03:B1:72:7D:E3:F9 Certificate issuer: /CN=9F4621BE2CEB15DD74809D52692588598490FABF Certificate serial: 020D8F4AEB5F8562C42FBCBD0AED38304556BEF7 Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e3135372e34322e302f32332d3332203d3e20313331363432.roa Signing time: Thu 20 Aug 2026 09:04:00 +0000 ROA not before: Thu 20 Aug 2026 08:59:00 +0000 ROA not after: Thu 19 Aug 2027 09:04:00 +0000 asID: 131642 IP address blocks: 103.157.42.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 05:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0d:8f:4a:eb:5f:85:62:c4:2f:bc:bd:0a:ed:38:30:45:56:be:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF Validity Not Before: Aug 20 08:59:00 2026 GMT Not After : Aug 19 09:04:00 2027 GMT Subject: CN=022D31CCEA8F9B04BF53CDAF6E8F03B1727DE3F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:74:53:f5:e9:c4:25:46:e4:fb:8c:e9:7b:23: 2a:fe:45:bf:5b:a0:6e:44:2f:0f:62:7a:2d:c2:5d: 94:22:d1:e9:4e:cd:ac:03:f1:fd:ff:21:10:ad:93: eb:ec:f9:3e:00:dd:23:c9:4b:82:aa:8c:c1:83:56: b2:4e:41:1c:db:7c:c1:ad:73:10:5a:a5:7f:78:fa: b9:39:f9:bc:b3:ce:5a:5d:e3:90:1f:45:f8:86:05: 4e:d6:92:7e:d8:8d:45:0b:82:16:49:7c:2e:7d:2a: b8:8b:8e:ac:8e:c3:19:38:a1:07:be:62:9b:45:dd: cc:54:76:68:7f:27:17:c2:9f:ef:35:31:27:d4:7c: 8a:d8:0b:b7:e3:bc:c5:d2:10:ae:83:80:db:0b:46: bd:76:dc:2f:8a:5a:6b:33:88:44:50:77:4d:89:e1: 43:61:21:d6:6e:e1:c0:c7:cf:76:8f:41:7b:a2:4c: 6d:a0:aa:78:ff:a2:08:29:74:eb:73:b7:20:d0:1d: 83:51:6f:97:d8:9d:5e:ac:c9:81:92:22:eb:d7:09: 9c:5e:ae:c4:98:76:94:83:34:20:d2:c4:11:ff:5c: c2:3c:ad:aa:4f:24:55:3e:b9:a9:39:4f:5d:ca:de: c8:c4:ed:c4:79:43:9c:9b:4d:e6:8e:52:43:7c:6a: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2D:31:CC:EA:8F:9B:04:BF:53:CD:AF:6E:8F:03:B1:72:7D:E3:F9 X509v3 Authority Key Identifier: keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e3135372e34322e302f32332d3332203d3e20313331363432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.42.0/23 Signature Algorithm: sha256WithRSAEncryption cf:f4:15:54:90:1d:c3:6e:69:55:a4:9a:b2:36:f5:09:b7:c6: 64:94:df:27:6b:e0:0b:d2:52:ed:d2:d4:4b:b9:52:28:0b:db: 99:f4:8d:38:92:9c:5b:48:64:43:1d:6e:e3:5e:5b:1d:a8:4f: 90:d9:fa:3e:cc:d1:bc:32:11:01:19:b3:20:5f:f0:83:f0:5a: b1:13:5a:a9:a7:24:e2:cd:9b:7d:25:7b:55:75:a3:64:97:6b: 40:a6:56:6b:e9:88:b9:89:2a:1c:b7:10:34:64:6f:62:81:25: aa:d8:b6:71:2f:c6:61:41:6a:b0:5d:c9:6d:42:b1:05:70:ed: 07:25:0c:d8:d4:21:ca:ab:c7:1a:16:a7:3e:35:25:6c:6b:ce: 2d:0e:2b:50:92:12:e8:3e:ba:5b:f1:aa:53:e3:ad:61:9c:50: 2f:2a:b6:93:68:ed:ec:98:cf:29:9d:7d:30:3a:f0:1f:62:dd: 07:35:b8:c5:cd:b5:73:9c:a7:48:0a:5c:8a:f7:fa:92:cb:ff: d6:6c:f0:c0:e0:0c:5f:6e:3a:83:a3:2d:99:73:d7:35:38:ad: da:32:af:66:b9:10:9b:36:40:0e:5c:54:58:12:99:a0:73:c2: ca:7f:19:4c:64:c2:18:da:f9:c5:66:8d:31:2d:a2:05:70:47: 06:f5:85:48 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUAg2PSutfhWLEL7y9Cu04MEVWvvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4 NDkwRkFCRjAeFw0yNjA4MjAwODU5MDBaFw0yNzA4MTkwOTA0MDBaMDMxMTAvBgNV BAMTKDAyMkQzMUNDRUE4RjlCMDRCRjUzQ0RBRjZFOEYwM0IxNzI3REUzRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTdFP16cQlRuT7jOl7Iyr+Rb9b oG5ELw9iei3CXZQi0elOzawD8f3/IRCtk+vs+T4A3SPJS4KqjMGDVrJOQRzbfMGt cxBapX94+rk5+byzzlpd45AfRfiGBU7Wkn7YjUULghZJfC59KriLjqyOwxk4oQe+ YptF3cxUdmh/JxfCn+81MSfUfIrYC7fjvMXSEK6DgNsLRr123C+KWmsziERQd02J 4UNhIdZu4cDHz3aPQXuiTG2gqnj/oggpdOtztyDQHYNRb5fYnV6syYGSIuvXCZxe rsSYdpSDNCDSxBH/XMI8rapPJFU+uak5T13K3sjE7cR5Q5ybTeaOUkN8aqTlAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUAi0xzOqPmwS/U82vbo8DsXJ94/kwHwYDVR0j BBgwFoAUn0YhvizrFd10gJ1SaSWIWYSQ+r8wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAv OUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4NDkwRkFCRi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85RjQ2MjFCRTJDRUIxNURENzQ4MDlENTI2OTI1ODg1 OTg0OTBGQUJGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAvMzEzMDMzMmUzMTM1MzcyZTM0 MzIyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMTMzMzEzNjM0MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnnSowDQYJKoZIhvcNAQELBQADggEBAM/0FVSQHcNuaVWkmrI29Qm3xmSU3ydr 4AvSUu3S1Eu5UigL25n0jTiSnFtIZEMdbuNeWx2oT5DZ+j7M0bwyEQEZsyBf8IPw WrETWqmnJOLNm30le1V1o2SXa0CmVmvpiLmJKhy3EDRkb2KBJarYtnEvxmFBarBd yW1CsQVw7QclDNjUIcqrxxoWpz41JWxrzi0OK1CSEug+ulvxqlPjrWGcUC8qtpNo 7eyYzymdfTA68B9i3Qc1uMXNtXOcp0gKXIr3+pLL/9Zs8MDgDF9uOoOjLZlz1zU4 rdoyr2a5EJs2QA5cVFgSmaBzwsp/GUxkwhja+cVmjTEtogVwRwb1hUg= -----END CERTIFICATE-----Generated at Thu Sep 10 10:14:03 2026 by rpki-client