$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3132392e302f32342d3234203d3e203338383433.roa File: 3132342e3135302e3132392e302f32342d3234203d3e203338383433.roa (raw, json) Hash identifier: 9bn1ekea7T8R54cjT8NcvFUCoYBwx8++6VqIH9OQqxk= Subject key identifier: C1:60:F0:B3:48:FA:F2:0F:3A:76:EA:65:A8:FE:DC:7A:4A:BA:91:C2 Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791 Certificate serial: 5212C592F07E06E13E98F96A9697D0F0BC38212F Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3132392e302f32342d3234203d3e203338383433.roa Signing time: Mon 11 May 2026 17:08:18 +0000 ROA not before: Mon 11 May 2026 17:03:18 +0000 ROA not after: Mon 10 May 2027 17:08:18 +0000 asID: 38843 IP address blocks: 124.150.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:12:c5:92:f0:7e:06:e1:3e:98:f9:6a:96:97:d0:f0:bc:38:21:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791 Validity Not Before: May 11 17:03:18 2026 GMT Not After : May 10 17:08:18 2027 GMT Subject: CN=C160F0B348FAF20F3A76EA65A8FEDC7A4ABA91C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:64:4f:2c:3d:d6:0f:60:18:cd:c1:66:48:64: dd:a7:b9:1b:36:ed:5e:1c:2a:b6:bb:db:5b:12:32: 5d:fe:c7:61:d1:bd:6c:13:a1:e0:e7:24:e8:c9:48: e6:ba:1b:2d:76:64:3f:eb:d1:cf:46:e5:45:f2:23: ef:7c:4f:3d:9f:a4:99:96:8e:25:a3:78:2d:86:ef: 06:be:23:71:9c:80:53:fc:03:a5:3c:0c:fb:9d:48: a5:ef:5e:5d:49:ff:e9:f3:44:29:0c:19:e2:e5:fc: be:59:1b:ec:95:68:b4:a1:80:7c:f7:cf:7f:46:9b: da:61:5d:c5:fa:78:d5:fc:2e:19:2e:78:ab:25:cc: 3f:17:22:41:0c:f5:90:96:d7:60:e4:e1:f3:32:2c: 1e:76:9e:87:86:a9:bf:04:7e:30:5e:f1:58:43:62: 51:7d:01:ea:9a:69:c8:1b:13:5e:4f:c3:64:50:98: 29:6d:4b:a4:ba:e4:db:17:87:9f:68:e5:c4:e8:5b: a4:ca:21:b4:7b:4b:06:f9:2e:50:8e:d8:37:6a:76: ed:48:ea:66:76:52:36:d1:2f:71:22:e2:4a:83:6e: 7a:16:b8:77:cf:4d:74:80:34:b6:50:14:5c:2d:8e: 3c:1e:06:6d:d6:63:e5:42:db:d4:40:09:ca:01:c2: f1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:60:F0:B3:48:FA:F2:0F:3A:76:EA:65:A8:FE:DC:7A:4A:BA:91:C2 X509v3 Authority Key Identifier: keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3132392e302f32342d3234203d3e203338383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.150.129.0/24 Signature Algorithm: sha256WithRSAEncryption 54:77:85:fc:9e:29:8b:29:39:a0:85:68:6b:e4:34:3c:42:f1: 2a:8f:a2:82:9d:79:09:bf:bd:9c:a8:61:f3:56:a8:2a:07:aa: 69:70:63:c8:69:87:5c:48:f6:9f:43:a5:e5:08:50:95:20:bb: 72:94:b9:3b:a6:b2:48:15:ca:05:10:55:06:af:e4:bc:48:5a: 5c:2c:7d:97:aa:b6:5e:04:7e:97:b5:b2:b2:15:8a:3a:e9:d5: f6:e4:d3:52:b5:a0:25:fc:14:7e:13:58:92:4e:0c:4a:f8:f8: a4:a1:8b:53:b7:e6:d0:e5:3b:65:b0:27:08:95:fb:c3:c4:d7: 08:9a:e3:b3:31:3f:14:24:7c:64:f1:f7:e8:53:ba:2d:89:1b: 2f:1c:b3:f9:b1:67:c7:38:77:d0:36:e4:3f:d5:2f:bf:f2:c1: 6b:a4:9f:5f:73:19:d1:a9:c4:20:a2:db:ad:f6:64:92:d9:44: ee:86:56:c3:11:d8:8c:bc:99:c6:8d:b0:09:e9:46:f4:74:31: 47:b2:88:46:f1:80:e6:4a:5b:2f:49:d3:8d:de:f6:a9:8f:c1: de:d9:15:8d:8b:4e:fc:d9:cf:be:98:35:db:89:ff:01:78:82: 5e:1b:52:88:01:ca:c1:66:1c:da:56:0f:25:b8:07:ad:d6:92: 8b:cb:53:de -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUUhLFkvB+BuE+mPlqlpfQ8Lw4IS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIyQjcw ODJDMTc5MTAeFw0yNjA1MTExNzAzMThaFw0yNzA1MTAxNzA4MThaMDMxMTAvBgNV BAMTKEMxNjBGMEIzNDhGQUYyMEYzQTc2RUE2NUE4RkVEQzdBNEFCQTkxQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXZE8sPdYPYBjNwWZIZN2nuRs2 7V4cKra721sSMl3+x2HRvWwToeDnJOjJSOa6Gy12ZD/r0c9G5UXyI+98Tz2fpJmW jiWjeC2G7wa+I3GcgFP8A6U8DPudSKXvXl1J/+nzRCkMGeLl/L5ZG+yVaLShgHz3 z39Gm9phXcX6eNX8LhkueKslzD8XIkEM9ZCW12Dk4fMyLB52noeGqb8EfjBe8VhD YlF9AeqaacgbE15Pw2RQmCltS6S65NsXh59o5cToW6TKIbR7Swb5LlCO2Ddqdu1I 6mZ2UjbRL3Ei4kqDbnoWuHfPTXSANLZQFFwtjjweBm3WY+VC29RACcoBwvHNAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUwWDws0j68g86duplqP7cekq6kcIwHwYDVR0j BBgwFoAUHuxPoaj4rNQIM70sPu2ytwgsF5EwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUFVNTy8w LzFFRUM0RkExQThGOEFDRDQwODMzQkQyQzNFRURCMkI3MDgyQzE3OTEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIy QjcwODJDMTc5MS5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1BVTU8vMC8zMTMyMzQyZTMxMzUzMDJl MzEzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODM4MzQzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHyWgTANBgkqhkiG9w0BAQsFAAOCAQEAVHeF/J4piyk5oIVoa+Q0PELxKo+i gp15Cb+9nKhh81aoKgeqaXBjyGmHXEj2n0Ol5QhQlSC7cpS5O6aySBXKBRBVBq/k vEhaXCx9l6q2XgR+l7WyshWKOunV9uTTUrWgJfwUfhNYkk4MSvj4pKGLU7fm0OU7 ZbAnCJX7w8TXCJrjszE/FCR8ZPH36FO6LYkbLxyz+bFnxzh30DbkP9Uvv/LBa6Sf X3MZ0anEIKLbrfZkktlE7oZWwxHYjLyZxo2wCelG9HQxR7KIRvGA5kpbL0nTjd72 qY/B3tkVjYtO/NnPvpg124n/AXiCXhtSiAHKwWYc2lYPJbgHrdaSi8tT3g== -----END CERTIFICATE-----Generated at Wed May 13 21:16:33 2026 by rpki-client