$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133312e302f32342d3234203d3e203338383433.roa File: 3132342e3135302e3133312e302f32342d3234203d3e203338383433.roa (raw, json) Hash identifier: BVFoLOrvZ6B4ZF8eJdP7vxfunfx+xrzXNciYudOpwio= Subject key identifier: 3A:2E:48:0D:90:82:95:4A:35:64:84:EE:5E:5D:E6:1E:FE:C2:03:F2 Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791 Certificate serial: 1EA61800A5651D75D8B141E5AAA9CD733DF18775 Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133312e302f32342d3234203d3e203338383433.roa Signing time: Mon 11 May 2026 17:08:19 +0000 ROA not before: Mon 11 May 2026 17:03:19 +0000 ROA not after: Mon 10 May 2027 17:08:19 +0000 asID: 38843 IP address blocks: 124.150.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a6:18:00:a5:65:1d:75:d8:b1:41:e5:aa:a9:cd:73:3d:f1:87:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791 Validity Not Before: May 11 17:03:19 2026 GMT Not After : May 10 17:08:19 2027 GMT Subject: CN=3A2E480D9082954A356484EE5E5DE61EFEC203F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:14:fc:e2:e8:36:f1:74:7d:30:38:20:40: 83:52:bd:0c:af:b3:2a:3a:49:e5:7b:4c:4a:32:2c: d8:a2:6b:c2:09:67:d6:1c:f5:28:8c:d2:6c:b3:25: aa:ab:d9:fa:35:7d:6a:11:a9:16:b8:7a:ed:06:8f: 10:b9:d7:2c:8c:ad:60:25:c3:ec:71:ea:4c:76:1b: db:d8:d2:9e:c5:d5:2c:18:d5:18:52:20:91:d2:0b: 7a:44:2e:8b:32:74:0d:57:38:39:0f:66:9c:7c:47: 70:ee:35:90:5f:e5:36:f3:2d:79:94:27:bb:58:75: e3:da:ef:3a:e5:1e:f7:c1:bd:cb:09:e1:9b:fc:ec: cf:d0:3e:6a:31:ce:6d:b9:8e:69:c8:70:bf:11:f6: 4c:54:bc:d5:1b:cc:ae:5d:65:ea:6e:c6:98:a2:2e: af:96:39:c4:e2:c9:06:30:fa:f3:18:db:5a:26:77: 92:c8:8c:84:c5:3d:66:23:0b:68:18:1e:ca:31:99: c5:27:0c:0f:e0:a9:d0:0b:2f:5b:74:90:04:ca:76: fa:7e:57:d3:0b:88:67:12:62:e2:d2:9f:31:7a:77: d5:2c:fb:c7:f2:88:a6:13:73:41:64:da:a2:d0:34: 09:f3:6b:e5:4d:3e:76:cc:7d:42:d9:7a:a3:a1:a5: b2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2E:48:0D:90:82:95:4A:35:64:84:EE:5E:5D:E6:1E:FE:C2:03:F2 X509v3 Authority Key Identifier: keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133312e302f32342d3234203d3e203338383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.150.131.0/24 Signature Algorithm: sha256WithRSAEncryption 13:0c:a3:fd:97:fb:33:a7:5a:f7:91:93:00:62:6d:7e:c2:0c: dc:f8:c9:e6:0b:2d:ea:37:47:a8:7f:9d:78:20:67:1a:87:a1: 2e:d2:24:e8:3d:2f:03:2f:82:16:1b:5f:2a:03:45:3d:b3:55: 4d:6c:c6:11:b1:00:2d:e2:6f:30:37:6e:80:f2:4e:5e:5a:79: 50:19:be:d6:6a:49:a1:09:a3:06:57:84:cb:21:79:4e:64:02: 82:be:28:81:6e:7c:06:68:cc:0c:2e:cf:3c:00:70:aa:bb:d0: 90:cd:1b:3b:1b:8e:c1:73:dc:e1:56:8e:fb:81:30:27:3c:17: c6:57:ed:3f:29:cc:b2:37:eb:2d:83:d0:26:b3:0f:e3:83:65: 9b:7e:11:a7:fb:d1:86:3a:95:1d:46:a4:b1:bf:45:02:b3:ca: 32:82:51:fc:4a:d3:07:19:65:0d:93:07:3f:33:ed:fc:e2:60: c5:8f:b5:c7:3f:61:ac:63:78:5e:10:08:a4:ee:78:ee:61:01: 7d:30:d6:d2:66:36:40:22:69:9f:29:14:a9:62:b3:2d:09:de: aa:1d:6b:7c:db:08:d1:a4:22:ee:80:cb:bb:66:de:0f:eb:f2: cc:b1:10:44:bd:ec:01:b1:dd:20:84:a4:4e:2c:c0:56:7e:85: 44:2e:36:bf -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUHqYYAKVlHXXYsUHlqqnNcz3xh3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIyQjcw ODJDMTc5MTAeFw0yNjA1MTExNzAzMTlaFw0yNzA1MTAxNzA4MTlaMDMxMTAvBgNV BAMTKDNBMkU0ODBEOTA4Mjk1NEEzNTY0ODRFRTVFNURFNjFFRkVDMjAzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWxT84ug28XR9MDggQINSvQyv syo6SeV7TEoyLNiia8IJZ9Yc9SiM0myzJaqr2fo1fWoRqRa4eu0GjxC51yyMrWAl w+xx6kx2G9vY0p7F1SwY1RhSIJHSC3pELosydA1XODkPZpx8R3DuNZBf5TbzLXmU J7tYdePa7zrlHvfBvcsJ4Zv87M/QPmoxzm25jmnIcL8R9kxUvNUbzK5dZepuxpii Lq+WOcTiyQYw+vMY21omd5LIjITFPWYjC2gYHsoxmcUnDA/gqdALL1t0kATKdvp+ V9MLiGcSYuLSnzF6d9Us+8fyiKYTc0Fk2qLQNAnza+VNPnbMfULZeqOhpbI1AgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUOi5IDZCClUo1ZITuXl3mHv7CA/IwHwYDVR0j BBgwFoAUHuxPoaj4rNQIM70sPu2ytwgsF5EwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUFVNTy8w LzFFRUM0RkExQThGOEFDRDQwODMzQkQyQzNFRURCMkI3MDgyQzE3OTEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIy QjcwODJDMTc5MS5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1BVTU8vMC8zMTMyMzQyZTMxMzUzMDJl MzEzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODM4MzQzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHyWgzANBgkqhkiG9w0BAQsFAAOCAQEAEwyj/Zf7M6da95GTAGJtfsIM3PjJ 5gst6jdHqH+deCBnGoehLtIk6D0vAy+CFhtfKgNFPbNVTWzGEbEALeJvMDdugPJO Xlp5UBm+1mpJoQmjBleEyyF5TmQCgr4ogW58BmjMDC7PPABwqrvQkM0bOxuOwXPc 4VaO+4EwJzwXxlftPynMsjfrLYPQJrMP44Nlm34Rp/vRhjqVHUaksb9FArPKMoJR /ErTBxllDZMHPzPt/OJgxY+1xz9hrGN4XhAIpO547mEBfTDW0mY2QCJpnykUqWKz LQneqh1rfNsI0aQi7oDLu2beD+vyzLEQRL3sAbHdIISkTizAVn6FRC42vw== -----END CERTIFICATE-----Generated at Wed May 13 21:16:30 2026 by rpki-client