$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/0/3230322e3134382e3232322e302f32332d3332203d3e20313331363432.roa File: 3230322e3134382e3232322e302f32332d3332203d3e20313331363432.roa (raw, json) Hash identifier: QSozWjihGPRSxS1l+02abUaaKtc4iDRAVQB/oWLei3c= Subject key identifier: 55:B2:73:3B:6C:98:A4:E7:8E:79:C8:A3:11:92:56:1A:89:47:DA:B0 Certificate issuer: /CN=9F4621BE2CEB15DD74809D52692588598490FABF Certificate serial: 0972CEBD14EA66784B16F0653E4F2901C62DF55A Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/0/3230322e3134382e3232322e302f32332d3332203d3e20313331363432.roa Signing time: Mon 11 May 2026 17:56:01 +0000 ROA not before: Mon 11 May 2026 17:51:01 +0000 ROA not after: Mon 10 May 2027 17:56:01 +0000 asID: 131642 IP address blocks: 202.148.222.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:72:ce:bd:14:ea:66:78:4b:16:f0:65:3e:4f:29:01:c6:2d:f5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF Validity Not Before: May 11 17:51:01 2026 GMT Not After : May 10 17:56:01 2027 GMT Subject: CN=55B2733B6C98A4E78E79C8A31192561A8947DAB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:12:f3:dd:ad:d8:46:fc:02:d6:35:74:ea:9f: 91:bd:18:30:a8:ff:c4:6e:1d:cc:cc:0c:64:56:95: 96:89:62:79:f7:ee:8e:73:7a:cf:bb:ef:2d:1b:8d: 5a:e6:3d:9f:a4:6c:0d:fd:0e:4c:f3:0f:76:33:3c: 92:e3:32:ca:56:28:09:58:aa:42:51:8b:be:78:0e: 4f:57:13:a0:b9:dd:8d:ac:82:bc:8e:9a:ab:3b:bf: 82:92:2d:04:9b:ea:ca:01:13:72:8c:86:a6:87:d0: a5:b0:37:ad:d4:ee:2d:86:13:7e:c0:57:0b:a8:73: d6:42:28:32:f8:e3:c9:93:5d:0a:60:8d:d3:4d:c0: df:9d:88:9d:e5:e7:d4:03:50:c5:6d:e5:2c:a8:e6: d3:d8:23:5f:13:1b:a3:58:9c:04:4d:6e:bc:ac:3e: bd:9c:71:4b:40:7e:1d:41:df:30:63:ee:2c:0b:94: a8:d3:43:b6:18:17:e3:cb:a7:47:bb:55:fd:3e:6c: e2:c2:6c:0c:c8:64:2e:17:5d:c0:9f:b0:0b:1e:ca: 0f:83:e8:a9:74:f3:73:88:10:49:47:f2:05:14:5e: e0:df:40:39:30:3d:08:43:ee:43:29:e4:fa:5d:4e: 65:63:60:80:dd:7a:24:ae:ed:92:6a:8e:44:71:6d: bc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B2:73:3B:6C:98:A4:E7:8E:79:C8:A3:11:92:56:1A:89:47:DA:B0 X509v3 Authority Key Identifier: keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/3230322e3134382e3232322e302f32332d3332203d3e20313331363432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.222.0/23 Signature Algorithm: sha256WithRSAEncryption 28:70:38:37:fc:99:84:8e:1d:fa:5b:df:e3:9f:56:b8:c7:d1: db:b2:b0:78:56:b0:88:f0:a4:4e:dc:f8:83:64:60:58:f3:cb: 76:de:3a:6f:34:e8:1b:82:74:1a:be:65:6f:7e:e5:e5:66:f3: d0:0b:fa:81:6d:e3:55:c6:43:94:1c:33:a3:67:2f:8b:8b:ed: e9:62:8b:5e:b4:5e:b7:69:a7:0e:b9:d6:5f:27:73:9c:04:e7: 63:69:4e:3b:54:ec:1d:04:24:48:8d:21:70:24:8d:b3:37:ad: bb:9a:ce:e8:b0:e1:47:b0:47:b8:b8:16:8b:9d:ec:ba:22:23: 41:47:ea:ed:1b:ef:bf:7d:da:65:1d:2a:67:df:36:da:76:94: 83:0b:69:74:3d:98:6a:f7:24:64:54:7b:c5:2b:b0:05:e4:83: 2b:d5:db:ac:3d:f4:1d:b2:e6:68:d6:1d:ca:cc:3c:72:a4:45: 8b:45:2c:d8:fc:cb:06:af:1e:4e:fa:53:cc:cc:44:31:08:fc: b0:9e:76:fe:f2:f5:30:66:55:fa:7f:c4:3a:4d:b2:bb:8f:95: 75:64:22:31:9a:a7:55:82:7c:33:95:55:42:a2:e6:a5:ad:eb: e1:9b:da:49:1e:ea:70:64:75:1b:0b:c7:f7:7f:30:b8:e9:c5: 56:fc:64:a9 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUCXLOvRTqZnhLFvBlPk8pAcYt9VowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4 NDkwRkFCRjAeFw0yNjA1MTExNzUxMDFaFw0yNzA1MTAxNzU2MDFaMDMxMTAvBgNV BAMTKDU1QjI3MzNCNkM5OEE0RTc4RTc5QzhBMzExOTI1NjFBODk0N0RBQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfEvPdrdhG/ALWNXTqn5G9GDCo /8RuHczMDGRWlZaJYnn37o5zes+77y0bjVrmPZ+kbA39DkzzD3YzPJLjMspWKAlY qkJRi754Dk9XE6C53Y2sgryOmqs7v4KSLQSb6soBE3KMhqaH0KWwN63U7i2GE37A Vwuoc9ZCKDL448mTXQpgjdNNwN+diJ3l59QDUMVt5Syo5tPYI18TG6NYnARNbrys Pr2ccUtAfh1B3zBj7iwLlKjTQ7YYF+PLp0e7Vf0+bOLCbAzIZC4XXcCfsAseyg+D 6Kl083OIEElH8gUUXuDfQDkwPQhD7kMp5PpdTmVjYIDdeiSu7ZJqjkRxbbxdAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUVbJzO2yYpOeOecijEZJWGolH2rAwHwYDVR0j BBgwFoAUn0YhvizrFd10gJ1SaSWIWYSQ+r8wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAv OUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4NDkwRkFCRi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85RjQ2MjFCRTJDRUIxNURENzQ4MDlENTI2OTI1ODg1 OTg0OTBGQUJGLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAvMzIzMDMyMmUzMTM0MzgyZTMy MzIzMjJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMxMzMzMTM2MzQzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAcqU3jANBgkqhkiG9w0BAQsFAAOCAQEAKHA4N/yZhI4d+lvf459WuMfR27Kw eFawiPCkTtz4g2RgWPPLdt46bzToG4J0Gr5lb37l5Wbz0Av6gW3jVcZDlBwzo2cv i4vt6WKLXrRet2mnDrnWXydznATnY2lOO1TsHQQkSI0hcCSNszetu5rO6LDhR7BH uLgWi53suiIjQUfq7Rvvv33aZR0qZ9822naUgwtpdD2YavckZFR7xSuwBeSDK9Xb rD30HbLmaNYdysw8cqRFi0Us2PzLBq8eTvpTzMxEMQj8sJ52/vL1MGZV+n/EOk2y u4+VdWQiMZqnVYJ8M5VVQqLmpa3r4ZvaSR7qcGR1GwvH938wuOnFVvxkqQ== -----END CERTIFICATE-----Generated at Wed May 13 21:12:19 2026 by rpki-client