$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234362e302f32332d3234203d3e203138313738.roa File: 3138372e37392e3234362e302f32332d3234203d3e203138313738.roa (raw, json) Hash identifier: lvDvOodv8M6LrOgAyDJTwNdJGzoBoLeykAhTF1kRzCI= Subject key identifier: 59:44:FF:FF:DF:BF:97:24:A5:76:93:BB:2C:A5:F9:48:9F:94:6A:F3 Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 01D40C17B7D4F5FB0633C395481FF5AB79B6CE6D Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234362e302f32332d3234203d3e203138313738.roa Signing time: Thu 16 Jul 2026 12:43:50 +0000 ROA not before: Thu 16 Jul 2026 12:38:50 +0000 ROA not after: Thu 15 Jul 2027 12:43:50 +0000 asID: 18178 IP address blocks: 187.79.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Jul 2026 00:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d4:0c:17:b7:d4:f5:fb:06:33:c3:95:48:1f:f5:ab:79:b6:ce:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Jul 16 12:38:50 2026 GMT Not After : Jul 15 12:43:50 2027 GMT Subject: CN=5944FFFFDFBF9724A57693BB2CA5F9489F946AF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:d4:a4:82:99:84:79:0b:11:4c:44:33:74: 5a:72:37:8b:fd:bb:41:fa:b2:8f:ff:90:37:36:93: 33:d6:72:09:cb:a5:97:f1:86:76:a5:4b:57:1f:a2: ad:a3:cc:bd:4c:e6:fd:1e:87:40:fb:e8:88:fe:6f: 31:41:f3:05:a7:10:59:c5:4a:57:15:25:c3:95:85: e4:75:60:12:26:33:60:bd:71:a4:0e:4f:8e:44:2f: 0a:90:58:f9:c8:2b:21:de:78:48:94:4a:d0:de:f4: 51:40:9a:87:00:73:10:e3:20:89:1e:5d:ba:2a:76: d7:00:7b:32:4d:b7:24:d0:15:83:ce:3c:01:a3:f9: bc:3d:e1:a1:53:47:0d:63:90:f6:a3:82:1e:87:8e: 6b:4d:5a:54:2f:fd:2e:5e:2d:04:33:32:10:e4:64: 45:3f:07:f5:88:a1:f3:d2:87:3b:d2:48:da:42:22: b3:f8:41:bf:e9:f8:6f:33:cd:bc:59:ea:fb:77:a6: c5:f2:37:b8:12:f9:ba:a2:cc:fb:88:c6:80:10:76: 1a:0b:5f:f6:1c:83:96:a2:40:d3:34:a9:d9:ff:af: 60:21:43:c9:ff:c5:14:ef:54:c5:9c:15:c1:f6:43: 85:38:9c:15:a5:ff:71:d7:c9:10:68:e3:24:22:0b: 28:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:44:FF:FF:DF:BF:97:24:A5:76:93:BB:2C:A5:F9:48:9F:94:6A:F3 X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234362e302f32332d3234203d3e203138313738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.79.246.0/23 Signature Algorithm: sha256WithRSAEncryption 31:87:a8:bd:c1:10:5d:ad:3f:94:e7:77:d3:dc:ab:0e:07:dd: 6c:6b:62:90:09:4c:c9:80:6f:ff:70:68:49:21:01:08:e4:c0: 3b:4e:bf:1b:9c:87:45:b6:6b:93:bd:88:cd:b7:6c:62:33:bc: 17:03:44:70:dc:0d:3a:a8:a4:7a:fa:72:b8:a3:d2:2d:a0:f8: 56:c1:72:d8:bd:2e:98:21:b0:69:34:6a:4c:27:17:ca:0f:80: 36:e5:5a:cf:48:b7:f8:fa:ee:f4:d9:dc:0c:fe:95:53:34:dc: 90:ec:f1:0e:3d:0e:45:fc:8d:c7:3c:a9:a4:08:b4:22:74:3d: 15:ee:7d:bc:d5:ed:74:9e:ec:d9:3c:6c:59:02:de:15:f4:6b: a0:e4:2f:7d:a7:a8:d3:0d:d7:4c:f5:4f:8b:35:c5:bc:b0:14: 72:65:d1:c7:21:b6:7d:67:2f:68:5d:b6:3d:4e:96:b6:f6:73: a1:fa:dc:de:e6:24:9f:97:6d:21:9b:f6:d2:97:8e:55:39:aa: a5:8d:17:61:d9:58:f3:e6:27:e1:9a:6c:72:a6:66:1e:00:7c: f3:f9:62:7e:73:95:f2:4f:8e:ce:3c:93:31:ff:a2:52:38:1e: d8:a5:70:38:33:e3:4f:42:1f:dc:22:5c:83:07:af:3c:c2:ba: 32:d6:b4:62 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUAdQMF7fU9fsGM8OVSB/1q3m2zm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjA3MTYxMjM4NTBaFw0yNzA3MTUxMjQzNTBaMDMxMTAvBgNV BAMTKDU5NDRGRkZGREZCRjk3MjRBNTc2OTNCQjJDQTVGOTQ4OUY5NDZBRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PNSkgpmEeQsRTEQzdFpyN4v9 u0H6so//kDc2kzPWcgnLpZfxhnalS1cfoq2jzL1M5v0eh0D76Ij+bzFB8wWnEFnF SlcVJcOVheR1YBImM2C9caQOT45ELwqQWPnIKyHeeEiUStDe9FFAmocAcxDjIIke XboqdtcAezJNtyTQFYPOPAGj+bw94aFTRw1jkPajgh6HjmtNWlQv/S5eLQQzMhDk ZEU/B/WIofPShzvSSNpCIrP4Qb/p+G8zzbxZ6vt3psXyN7gS+bqizPuIxoAQdhoL X/Ycg5aiQNM0qdn/r2AhQ8n/xRTvVMWcFcH2Q4U4nBWl/3HXyRBo4yQiCyh7AgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUWUT//9+/lySldpO7LKX5SJ+UavMwHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvMzEzODM3MmUzNzM5MmUzMjM0 MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTM4MzEzNzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB u0/2MA0GCSqGSIb3DQEBCwUAA4IBAQAxh6i9wRBdrT+U53fT3KsOB91sa2KQCUzJ gG//cGhJIQEI5MA7Tr8bnIdFtmuTvYjNt2xiM7wXA0Rw3A06qKR6+nK4o9ItoPhW wXLYvS6YIbBpNGpMJxfKD4A25VrPSLf4+u702dwM/pVTNNyQ7PEOPQ5F/I3HPKmk CLQidD0V7n281e10nuzZPGxZAt4V9Gug5C99p6jTDddM9U+LNcW8sBRyZdHHIbZ9 Zy9oXbY9Tpa29nOh+tze5iSfl20hm/bSl45VOaqljRdh2Vjz5ifhmmxypmYeAHzz +WJ+c5XyT47OPJMx/6JSOB7YpXA4M+NPQh/cIlyDB688wroy1rRi -----END CERTIFICATE-----Generated at Sat Jul 18 06:08:39 2026 by rpki-client