$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234342e302f32332d3332203d3e20313331363538.roa File: 3138372e37392e3234342e302f32332d3332203d3e20313331363538.roa (raw, json) Hash identifier: yumD0lxBQJ+80NWqiC1APAnKFuIvqRgJ6DwlCxndQ/c= Subject key identifier: C8:20:35:61:73:13:41:9A:71:91:1E:A0:99:2F:60:EB:16:09:B8:4A Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 6E5AA53B139CD8B7D152012C9254E3C92154E6CE Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234342e302f32332d3332203d3e20313331363538.roa Signing time: Thu 20 Aug 2026 09:24:01 +0000 ROA not before: Thu 20 Aug 2026 09:19:01 +0000 ROA not after: Thu 19 Aug 2027 09:24:01 +0000 asID: 131658 IP address blocks: 187.79.244.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 13:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:5a:a5:3b:13:9c:d8:b7:d1:52:01:2c:92:54:e3:c9:21:54:e6:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Aug 20 09:19:01 2026 GMT Not After : Aug 19 09:24:01 2027 GMT Subject: CN=C82035617313419A71911EA0992F60EB1609B84A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:83:93:bc:43:f9:0a:6b:e7:41:6a:3b:f2: cc:41:f1:e3:b1:45:2c:5a:d1:cb:f7:d7:26:6c:b0: db:e4:f3:86:ad:86:33:88:e5:75:cb:2d:5c:c1:70: f9:cd:13:8d:d8:8d:bf:3d:1f:10:82:8a:2d:d0:da: da:a1:b3:80:fb:05:b1:f8:ed:fd:c0:d9:2e:16:6c: 30:dc:92:34:50:49:31:69:13:c7:4e:e5:f3:43:85: 00:9a:c2:e6:22:0d:56:56:83:13:c3:35:79:01:89: 49:93:77:67:66:d7:cd:82:72:57:95:96:b1:04:4c: 7a:5b:27:80:b9:8e:a9:f4:0a:16:be:6f:40:29:13: 12:0b:7e:e8:a2:59:f3:de:59:9a:04:a9:4b:66:64: 17:ab:38:fa:05:4b:9a:34:60:c0:b5:64:6c:cd:48: 00:82:f3:10:70:e7:1b:0d:a0:ef:e0:2c:05:71:ed: e0:1a:06:37:02:c4:4d:83:83:ee:75:5e:9b:a6:31: 43:88:08:d0:53:d8:73:c7:5d:b7:61:a2:66:d5:18: dc:ed:a7:01:df:14:89:ab:8d:78:24:22:87:e3:d3: cd:8e:ed:f9:b6:84:a4:b7:1a:00:fd:0b:11:96:33: cb:3e:c4:97:ad:79:2d:d9:d9:f7:42:c7:f8:e8:b2: d8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:20:35:61:73:13:41:9A:71:91:1E:A0:99:2F:60:EB:16:09:B8:4A X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234342e302f32332d3332203d3e20313331363538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.79.244.0/23 Signature Algorithm: sha256WithRSAEncryption c2:c3:ae:59:42:d5:77:0c:d8:f2:41:4c:59:02:00:c6:0f:49: cc:7e:bf:7a:0b:2d:bc:bd:2d:44:6c:04:26:e1:c9:0e:75:2d: 7e:e9:8e:3f:55:c7:98:ab:93:ba:b3:88:68:9a:9f:9e:07:ce: 07:64:68:25:4c:c7:84:ff:7f:f6:94:6a:76:cc:ff:65:68:bc: 7d:37:3b:dd:b0:55:24:c4:d1:26:15:48:3d:4c:a3:80:aa:d7: 98:61:bd:5a:67:91:26:5c:bc:23:b5:a7:0a:69:dd:68:8b:c7: 68:12:1e:ba:95:6c:28:d1:eb:06:7d:89:22:c2:f2:04:bf:bc: c8:1f:01:2b:36:3b:92:8b:ba:63:c9:f1:23:af:fa:42:c7:5b: d1:31:b6:2b:d9:37:fe:22:d3:0d:ac:1b:4a:1d:01:1d:71:ee: d4:b8:59:03:3d:fd:89:ac:c1:56:d8:c0:78:51:ac:5c:44:7b: e1:fe:0d:aa:c1:73:bd:e3:d0:82:2a:65:97:e7:0c:57:56:bd: 54:ec:8b:6d:f9:14:c1:2c:39:f0:89:25:e9:26:ff:9e:d4:36: 62:46:1b:c7:a1:55:c1:c8:f5:1f:49:03:f5:be:d9:d5:d6:be: 12:4f:13:82:08:6d:63:d0:4d:8a:bb:e9:ed:d1:85:c6:18:62: 4e:78:bf:be -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUblqlOxOc2LfRUgEsklTjySFU5s4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjA4MjAwOTE5MDFaFw0yNzA4MTkwOTI0MDFaMDMxMTAvBgNV BAMTKEM4MjAzNTYxNzMxMzQxOUE3MTkxMUVBMDk5MkY2MEVCMTYwOUI4NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiuYOTvEP5CmvnQWo78sxB8eOx RSxa0cv31yZssNvk84athjOI5XXLLVzBcPnNE43Yjb89HxCCii3Q2tqhs4D7BbH4 7f3A2S4WbDDckjRQSTFpE8dO5fNDhQCawuYiDVZWgxPDNXkBiUmTd2dm182CcleV lrEETHpbJ4C5jqn0Cha+b0ApExILfuiiWfPeWZoEqUtmZBerOPoFS5o0YMC1ZGzN SACC8xBw5xsNoO/gLAVx7eAaBjcCxE2Dg+51XpumMUOICNBT2HPHXbdhombVGNzt pwHfFImrjXgkIofj082O7fm2hKS3GgD9CxGWM8s+xJeteS3Z2fdCx/jostgvAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUyCA1YXMTQZpxkR6gmS9g6xYJuEowHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvMzEzODM3MmUzNzM5MmUzMjM0 MzQyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMTMzMzEzNjM1Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAG7T/QwDQYJKoZIhvcNAQELBQADggEBAMLDrllC1XcM2PJBTFkCAMYPScx+v3oL Lby9LURsBCbhyQ51LX7pjj9Vx5irk7qziGian54HzgdkaCVMx4T/f/aUanbM/2Vo vH03O92wVSTE0SYVSD1Mo4Cq15hhvVpnkSZcvCO1pwpp3WiLx2gSHrqVbCjR6wZ9 iSLC8gS/vMgfASs2O5KLumPJ8SOv+kLHW9ExtivZN/4i0w2sG0odAR1x7tS4WQM9 /YmswVbYwHhRrFxEe+H+DarBc73j0IIqZZfnDFdWvVTsi235FMEsOfCJJekm/57U NmJGG8ehVcHI9R9JA/W+2dXWvhJPE4IIbWPQTYq76e3RhcYYYk54v74= -----END CERTIFICATE-----Generated at Thu Sep 10 07:29:45 2026 by rpki-client