$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234352e302f32342d3332203d3e20313530373638.roa File: 3138372e37392e3234352e302f32342d3332203d3e20313530373638.roa (raw, json) Hash identifier: Hs6nQhcgL92iGp+zVUZzGJBIRibLpPYWP2j8Qnvkw6Y= Subject key identifier: 28:47:6A:5A:F7:B5:EA:A9:67:AC:1D:2F:1E:D7:ED:89:B6:CC:4A:D2 Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 5D5F66554985FEF6C18BB6F1AC6690CDD2EA5382 Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234352e302f32342d3332203d3e20313530373638.roa Signing time: Thu 20 Aug 2026 09:24:00 +0000 ROA not before: Thu 20 Aug 2026 09:19:00 +0000 ROA not after: Thu 19 Aug 2027 09:24:00 +0000 asID: 150768 IP address blocks: 187.79.245.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 13:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:5f:66:55:49:85:fe:f6:c1:8b:b6:f1:ac:66:90:cd:d2:ea:53:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Aug 20 09:19:00 2026 GMT Not After : Aug 19 09:24:00 2027 GMT Subject: CN=28476A5AF7B5EAA967AC1D2F1ED7ED89B6CC4AD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a4:ec:a5:4c:31:a0:ca:50:f8:fb:69:23:71: ad:6c:86:76:ea:68:2a:17:d2:03:dc:27:23:34:5c: d9:eb:8e:5d:9e:9c:07:27:c0:49:cd:a0:bc:d7:c1: 9c:f0:e4:15:f7:3f:2d:f7:8a:42:59:69:cc:be:ae: 19:a0:9b:a7:7c:d2:b1:72:0e:ff:be:38:43:65:6b: be:c5:ef:aa:ae:6c:8a:98:40:40:de:e8:c8:0a:2c: 9b:24:7a:f0:dd:50:52:b1:59:6d:56:7a:c2:e3:fc: 81:d1:85:f7:07:f2:0f:d4:35:d8:46:85:69:4a:ab: 6c:7e:fc:84:07:0d:f0:bd:3d:69:3a:a2:f6:df:48: 74:d3:64:09:9e:b9:ee:d0:19:c1:00:29:6e:fc:5b: 45:f3:ff:3b:ae:29:cd:3b:6b:6d:94:91:f6:f9:3b: fc:27:3a:03:97:1f:d3:03:e7:a0:d4:36:ed:b1:41: c3:39:71:6d:1e:95:54:19:13:6a:fd:04:97:35:17: 81:37:ee:72:d3:1f:24:53:a6:9e:3f:9d:85:4e:d2: 24:f4:a6:19:11:6c:2e:d5:eb:ee:2d:eb:9e:b5:c5: 91:75:46:c6:92:3c:72:d4:3e:09:d7:b8:96:f5:66: f8:0a:ff:f3:bb:84:b0:37:2f:70:b5:e5:9b:4f:0d: fe:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:47:6A:5A:F7:B5:EA:A9:67:AC:1D:2F:1E:D7:ED:89:B6:CC:4A:D2 X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234352e302f32342d3332203d3e20313530373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.79.245.0/24 Signature Algorithm: sha256WithRSAEncryption 78:c5:fc:e9:e0:25:f3:43:70:9d:a4:ca:ba:0b:c3:fd:97:f1: 61:91:1b:a2:ab:e9:06:36:b4:c1:e1:90:02:d8:9e:c2:13:27: 51:5b:f5:27:af:67:14:64:c1:c0:20:08:5a:6a:1a:3f:22:44: 6a:36:65:d0:05:30:f9:3f:06:eb:bd:c4:70:c9:06:3d:49:72: a2:b6:df:f6:db:50:17:6b:8a:da:5e:b4:ce:b8:69:e2:99:49: 2b:43:97:92:71:73:6e:2c:86:aa:db:66:2b:62:f5:77:0b:02: d9:a1:74:77:46:94:52:19:c2:a3:54:fd:33:9b:e9:43:27:cf: 9e:aa:49:e3:ec:bc:2c:db:41:7b:4c:95:ec:0b:c4:a2:1d:18: ed:52:52:19:41:3e:2d:62:2a:bb:c0:f2:19:05:1e:89:b4:52: b3:25:4a:2f:67:4c:d6:5f:34:e5:5b:db:6e:b4:52:d2:50:3c: a0:93:31:47:74:eb:cb:7f:f3:8a:df:3e:a4:2d:70:6f:44:10: 18:ed:8e:c5:a7:f2:9a:fd:22:73:db:e0:22:38:50:5f:1d:e6: 76:a6:a1:63:3f:d3:12:40:1e:dd:80:b2:fd:fb:a9:87:2e:f0: 26:5b:fc:95:17:42:b3:8a:06:98:4d:a0:02:cd:d2:02:41:6f: 26:ae:1f:eb -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUXV9mVUmF/vbBi7bxrGaQzdLqU4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjA4MjAwOTE5MDBaFw0yNzA4MTkwOTI0MDBaMDMxMTAvBgNV BAMTKDI4NDc2QTVBRjdCNUVBQTk2N0FDMUQyRjFFRDdFRDg5QjZDQzRBRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpOylTDGgylD4+2kjca1shnbq aCoX0gPcJyM0XNnrjl2enAcnwEnNoLzXwZzw5BX3Py33ikJZacy+rhmgm6d80rFy Dv++OENla77F76qubIqYQEDe6MgKLJskevDdUFKxWW1WesLj/IHRhfcH8g/UNdhG hWlKq2x+/IQHDfC9PWk6ovbfSHTTZAmeue7QGcEAKW78W0Xz/zuuKc07a22Ukfb5 O/wnOgOXH9MD56DUNu2xQcM5cW0elVQZE2r9BJc1F4E37nLTHyRTpp4/nYVO0iT0 phkRbC7V6+4t6561xZF1RsaSPHLUPgnXuJb1ZvgK//O7hLA3L3C15ZtPDf5zAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUKEdqWve16qlnrB0vHtftibbMStIwHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvMzEzODM3MmUzNzM5MmUzMjM0 MzUyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTM1MzAzNzM2Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC7T/UwDQYJKoZIhvcNAQELBQADggEBAHjF/OngJfNDcJ2kyroLw/2X8WGRG6Kr 6QY2tMHhkALYnsITJ1Fb9SevZxRkwcAgCFpqGj8iRGo2ZdAFMPk/Buu9xHDJBj1J cqK23/bbUBdritpetM64aeKZSStDl5Jxc24shqrbZiti9XcLAtmhdHdGlFIZwqNU /TOb6UMnz56qSePsvCzbQXtMlewLxKIdGO1SUhlBPi1iKrvA8hkFHom0UrMlSi9n TNZfNOVb2260UtJQPKCTMUd068t/84rfPqQtcG9EEBjtjsWn8pr9InPb4CI4UF8d 5namoWM/0xJAHt2Asv37qYcu8CZb/JUXQrOKBphNoALN0gJBbyauH+s= -----END CERTIFICATE-----Generated at Thu Sep 10 07:29:44 2026 by rpki-client