$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234352e302f32342d3234203d3e20323138353230.roa File: 3138372e37392e3234352e302f32342d3234203d3e20323138353230.roa (raw, json) Hash identifier: EB0X9wsz9uJJnmVKIE2PXOMjly0K4UEREeZz8rtv7l4= Subject key identifier: E9:53:3C:17:61:5D:FB:26:48:45:F6:3F:BA:0E:B0:1C:10:1D:9C:A8 Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 3108A15859BFB1D9E513373FF413CC432B9B8C90 Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234352e302f32342d3234203d3e20323138353230.roa Signing time: Mon 05 Oct 2026 12:04:00 +0000 ROA not before: Mon 05 Oct 2026 11:59:00 +0000 ROA not after: Mon 04 Oct 2027 12:04:00 +0000 asID: 218520 IP address blocks: 187.79.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 22:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:08:a1:58:59:bf:b1:d9:e5:13:37:3f:f4:13:cc:43:2b:9b:8c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Oct 5 11:59:00 2026 GMT Not After : Oct 4 12:04:00 2027 GMT Subject: CN=E9533C17615DFB264845F63FBA0EB01C101D9CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:97:0b:97:61:1a:3b:e7:d7:43:1e:66:e6: 7c:8f:3d:66:7c:87:94:80:e6:f9:06:62:81:04:d0: 2f:bc:81:41:d5:b0:2f:72:9a:92:a2:db:fd:0b:40: 34:33:b9:bb:38:fe:d0:a0:54:3d:82:61:d8:a3:19: fa:55:74:54:64:7c:6d:2c:5a:8a:4f:57:ae:8c:29: 51:42:ea:0d:96:6f:22:ee:cf:d7:0a:5e:94:74:75: 79:bb:e4:a1:74:ee:8e:d0:07:e3:8b:ae:d1:70:c0: 3c:0e:61:1a:4f:10:63:30:f8:66:9a:0c:b4:76:81: 91:22:11:3b:04:36:33:c4:72:b9:5e:3d:89:10:d6: 03:aa:7b:71:f4:86:f4:22:9a:6d:42:ad:d1:db:09: 6f:c9:74:f6:5c:6f:38:09:71:a0:fb:c8:20:ff:8b: d3:6a:b1:44:cd:a3:c8:20:b1:cf:7a:6e:fb:34:2b: fd:ec:1b:79:04:63:f1:e9:74:a4:23:82:49:c0:d7: 41:56:b2:ad:e9:31:cd:4c:fe:f3:06:cc:36:29:a3: e8:3a:e9:09:37:fb:b5:30:9d:6b:60:5d:f2:21:5d: 51:11:47:f8:5e:34:61:0d:46:97:fc:ee:6e:13:0a: 77:bb:14:dd:76:a7:62:1e:6f:7b:96:f2:02:2b:54: 05:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:53:3C:17:61:5D:FB:26:48:45:F6:3F:BA:0E:B0:1C:10:1D:9C:A8 X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234352e302f32342d3234203d3e20323138353230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.79.245.0/24 Signature Algorithm: sha256WithRSAEncryption bf:fc:21:90:59:78:ad:79:1b:87:bd:a3:48:5b:0f:6a:2d:53: dd:51:57:02:69:04:c9:8b:bb:4d:dc:39:7f:a3:3c:c3:3a:74: 97:0c:dd:d1:52:d4:11:c9:d0:e2:4f:8d:36:8d:4d:c1:1f:42: 54:96:ce:8a:19:63:13:f9:34:12:92:a2:d1:71:b2:0c:34:2e: 03:52:46:88:0b:0d:65:71:a2:05:62:2f:ae:de:9c:61:98:78: ba:d5:21:8e:20:20:29:55:98:50:fe:5f:5f:e4:14:c3:67:27: 60:af:20:a8:ff:ef:dd:12:0d:8a:ef:d6:99:5f:eb:34:31:94: c6:51:d8:c0:0d:fd:f0:bb:1c:4a:fe:c0:4a:2b:5c:50:79:01: fb:80:aa:7d:41:37:78:06:ef:d3:a7:65:7c:b9:44:d2:a6:85: f2:59:f9:4d:56:54:2c:fa:10:b7:80:1c:e7:51:22:7f:af:75: b8:05:3f:41:a2:d5:be:07:69:c0:ca:a9:c2:b9:c2:13:bc:cd: ee:14:6b:a3:2c:f5:24:68:3e:a5:c3:f2:3d:05:66:b7:05:18: 95:0e:4b:cf:21:f9:05:3c:ec:b8:cb:7b:99:06:f2:76:0d:8c: 9a:b6:32:9c:e0:71:dc:67:41:e1:52:2a:2c:d7:24:da:e5:22: 2c:5a:37:72 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUMQihWFm/sdnlEzc/9BPMQyubjJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjEwMDUxMTU5MDBaFw0yNzEwMDQxMjA0MDBaMDMxMTAvBgNV BAMTKEU5NTMzQzE3NjE1REZCMjY0ODQ1RjYzRkJBMEVCMDFDMTAxRDlDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3ZcLl2EaO+fXQx5m5nyPPWZ8 h5SA5vkGYoEE0C+8gUHVsC9ympKi2/0LQDQzubs4/tCgVD2CYdijGfpVdFRkfG0s WopPV66MKVFC6g2WbyLuz9cKXpR0dXm75KF07o7QB+OLrtFwwDwOYRpPEGMw+Gaa DLR2gZEiETsENjPEcrlePYkQ1gOqe3H0hvQimm1CrdHbCW/JdPZcbzgJcaD7yCD/ i9NqsUTNo8ggsc96bvs0K/3sG3kEY/HpdKQjgknA10FWsq3pMc1M/vMGzDYpo+g6 6Qk3+7UwnWtgXfIhXVERR/heNGENRpf87m4TCne7FN12p2Ieb3uW8gIrVAV/AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU6VM8F2Fd+yZIRfY/ug6wHBAdnKgwHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvMzEzODM3MmUzNzM5MmUzMjM0 MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzNTMyMzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC7T/UwDQYJKoZIhvcNAQELBQADggEBAL/8IZBZeK15G4e9o0hbD2otU91RVwJp BMmLu03cOX+jPMM6dJcM3dFS1BHJ0OJPjTaNTcEfQlSWzooZYxP5NBKSotFxsgw0 LgNSRogLDWVxogViL67enGGYeLrVIY4gIClVmFD+X1/kFMNnJ2CvIKj/790SDYrv 1plf6zQxlMZR2MAN/fC7HEr+wEorXFB5AfuAqn1BN3gG79OnZXy5RNKmhfJZ+U1W VCz6ELeAHOdRIn+vdbgFP0Gi1b4HacDKqcK5whO8ze4Ua6Ms9SRoPqXD8j0FZrcF GJUOS88h+QU87LjLe5kG8nYNjJq2MpzgcdxnQeFSKizXJNrlIixaN3I= -----END CERTIFICATE-----Generated at Mon Oct 26 08:54:59 2026 by rpki-client