$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/0/3231312e37362e3137362e302f32332d3332203d3e20313331363432.roa File: 3231312e37362e3137362e302f32332d3332203d3e20313331363432.roa (raw, json) Hash identifier: Neacdwz6usPvpnxdcJO7WdPsbmwrbKBYPAqd9PXlS3o= Subject key identifier: C9:7F:CC:34:3A:8F:1E:01:60:05:B5:89:D9:0F:59:5E:46:F8:38:D9 Certificate issuer: /CN=9F4621BE2CEB15DD74809D52692588598490FABF Certificate serial: 5CDDD0EE7753A6387D84FAAE4CC1F638508312D0 Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/0/3231312e37362e3137362e302f32332d3332203d3e20313331363432.roa Signing time: Mon 11 May 2026 17:56:00 +0000 ROA not before: Mon 11 May 2026 17:51:00 +0000 ROA not after: Mon 10 May 2027 17:56:00 +0000 asID: 131642 IP address blocks: 211.76.176.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:dd:d0:ee:77:53:a6:38:7d:84:fa:ae:4c:c1:f6:38:50:83:12:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF Validity Not Before: May 11 17:51:00 2026 GMT Not After : May 10 17:56:00 2027 GMT Subject: CN=C97FCC343A8F1E016005B589D90F595E46F838D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ef:3e:6e:ab:aa:f7:04:83:de:d8:cf:0b:23: d4:51:bd:62:90:ab:55:5e:6f:d9:28:75:85:e1:ff: 68:d0:ea:96:d1:fc:fb:93:3e:79:94:67:66:03:73: 20:3e:8b:4b:33:5c:e9:b7:87:bb:b2:2a:46:c2:df: eb:c9:31:91:d7:2d:51:63:4e:2c:0e:a5:14:69:86: 6d:fb:b0:74:f0:60:30:b0:c0:e5:21:15:aa:44:ec: 30:b0:45:c9:2c:52:38:c7:89:b2:b3:82:04:03:66: f7:ba:8b:f0:c2:7f:e8:f1:21:1e:cd:98:d5:7d:ed: 9b:11:dd:4e:f3:03:9b:c8:e1:00:af:c6:2f:a4:45: 9c:4d:0e:ed:4f:72:f8:e6:c7:95:29:a0:18:b6:22: 99:ed:1c:2d:c0:59:fa:83:41:04:30:0f:c1:57:6b: 73:fb:f3:e0:73:d9:28:15:04:13:f2:5c:ec:cc:fe: 88:ab:5d:22:e4:75:0f:21:f7:cf:53:d2:2e:78:5e: ce:47:2a:17:d7:e5:1f:9c:d2:06:7f:e5:fb:25:9b: a1:54:c7:63:70:c7:cf:2d:f2:13:e9:09:87:6a:10: 74:d8:f8:13:dc:d0:05:ca:23:12:c2:cf:46:47:6f: 83:96:c7:68:34:98:c8:dd:45:3d:64:28:c0:90:5a: 53:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7F:CC:34:3A:8F:1E:01:60:05:B5:89:D9:0F:59:5E:46:F8:38:D9 X509v3 Authority Key Identifier: keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/3231312e37362e3137362e302f32332d3332203d3e20313331363432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.76.176.0/23 Signature Algorithm: sha256WithRSAEncryption 23:fb:02:a2:cf:bc:3e:fa:85:62:88:1d:e7:0d:6a:69:18:09: 21:c1:8f:85:4e:d0:e4:6f:fc:86:b0:64:17:d4:f5:8f:cd:85: da:c5:29:2d:cb:1c:e5:e3:84:e7:40:35:b2:08:7d:41:8d:5d: 7c:d5:28:48:68:08:94:9f:d9:fa:83:9f:3b:5c:a8:71:71:d2: 16:ac:53:6a:d4:51:c9:25:99:9b:97:51:ad:3a:21:ae:f1:26: b7:a0:b9:a6:66:9e:cd:eb:1b:e3:94:fb:97:04:9c:5b:6d:17: 16:14:12:c3:f1:f1:b3:41:eb:c8:9e:6e:83:3a:7e:6e:66:00: 86:8d:5b:93:a5:be:57:d9:74:f7:9e:ed:a9:a1:a1:b5:89:cb: 2c:f3:a9:54:e4:3d:09:70:49:1d:e0:57:4d:13:f2:71:52:13: 64:eb:51:28:71:cd:fe:12:27:b8:15:77:91:db:93:0b:39:8c: b8:b7:07:cc:70:e2:65:90:1e:e0:eb:f4:a4:6b:6f:5f:f6:88: ce:52:58:85:39:e3:65:0a:89:ed:97:64:fe:fb:c4:c4:8a:b5: 81:e9:9b:dd:b5:0d:c1:99:59:c3:6a:30:9b:a1:3a:cd:de:d3: 40:1a:ab:c5:18:31:68:b6:af:70:04:71:06:ad:4d:ff:9f:c9: 78:9d:b7:01 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUXN3Q7ndTpjh9hPquTMH2OFCDEtAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4 NDkwRkFCRjAeFw0yNjA1MTExNzUxMDBaFw0yNzA1MTAxNzU2MDBaMDMxMTAvBgNV BAMTKEM5N0ZDQzM0M0E4RjFFMDE2MDA1QjU4OUQ5MEY1OTVFNDZGODM4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7z5uq6r3BIPe2M8LI9RRvWKQ q1Veb9kodYXh/2jQ6pbR/PuTPnmUZ2YDcyA+i0szXOm3h7uyKkbC3+vJMZHXLVFj TiwOpRRphm37sHTwYDCwwOUhFapE7DCwRcksUjjHibKzggQDZve6i/DCf+jxIR7N mNV97ZsR3U7zA5vI4QCvxi+kRZxNDu1Pcvjmx5UpoBi2IpntHC3AWfqDQQQwD8FX a3P78+Bz2SgVBBPyXOzM/oirXSLkdQ8h989T0i54Xs5HKhfX5R+c0gZ/5fslm6FU x2Nwx88t8hPpCYdqEHTY+BPc0AXKIxLCz0ZHb4OWx2g0mMjdRT1kKMCQWlP5AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUyX/MNDqPHgFgBbWJ2Q9ZXkb4ONkwHwYDVR0j BBgwFoAUn0YhvizrFd10gJ1SaSWIWYSQ+r8wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAv OUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4NDkwRkFCRi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85RjQ2MjFCRTJDRUIxNURENzQ4MDlENTI2OTI1ODg1 OTg0OTBGQUJGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAvMzIzMTMxMmUzNzM2MmUzMTM3 MzYyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMTMzMzEzNjM0MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHTTLAwDQYJKoZIhvcNAQELBQADggEBACP7AqLPvD76hWKIHecNamkYCSHBj4VO 0ORv/IawZBfU9Y/NhdrFKS3LHOXjhOdANbIIfUGNXXzVKEhoCJSf2fqDnztcqHFx 0hasU2rUUcklmZuXUa06Ia7xJreguaZmns3rG+OU+5cEnFttFxYUEsPx8bNB68ie boM6fm5mAIaNW5OlvlfZdPee7amhobWJyyzzqVTkPQlwSR3gV00T8nFSE2TrUShx zf4SJ7gVd5Hbkws5jLi3B8xw4mWQHuDr9KRrb1/2iM5SWIU542UKie2XZP77xMSK tYHpm921DcGZWcNqMJuhOs3e00Aaq8UYMWi2r3AEcQatTf+fyXidtwE= -----END CERTIFICATE-----Generated at Wed May 13 21:11:49 2026 by rpki-client