$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133342e302f32342d3234203d3e203338383433.roa File: 3132342e3135302e3133342e302f32342d3234203d3e203338383433.roa (raw, json) Hash identifier: fHtLbETDus7MPpoX7lV7SjUkgWewaSo9qQ61nJ2DFjs= Subject key identifier: 58:26:DC:61:F4:C8:D5:CE:7C:92:2B:5B:6C:44:F6:3B:78:A0:B1:D6 Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791 Certificate serial: 5DB80F83AB74C86410F539B501779E579FB9DBD8 Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133342e302f32342d3234203d3e203338383433.roa Signing time: Mon 11 May 2026 17:08:21 +0000 ROA not before: Mon 11 May 2026 17:03:21 +0000 ROA not after: Mon 10 May 2027 17:08:21 +0000 asID: 38843 IP address blocks: 124.150.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b8:0f:83:ab:74:c8:64:10:f5:39:b5:01:77:9e:57:9f:b9:db:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791 Validity Not Before: May 11 17:03:21 2026 GMT Not After : May 10 17:08:21 2027 GMT Subject: CN=5826DC61F4C8D5CE7C922B5B6C44F63B78A0B1D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:a7:d7:73:eb:01:55:41:f5:2a:b2:62:42: 19:a7:a7:82:dd:2f:ad:25:5b:8e:e8:1e:87:4c:35: 59:93:6d:71:60:a7:7b:39:08:df:01:15:eb:c5:9e: 2c:13:9a:d0:76:5d:4d:bf:8d:1d:b9:74:65:ca:e4: 63:48:17:2c:7b:4c:22:29:c2:bd:0a:06:05:08:02: 43:b9:90:41:ef:8e:81:d5:61:63:a3:19:71:82:01: 66:c8:8a:77:bf:b9:3c:c0:35:5a:9f:f3:d3:c8:14: 5d:5a:b0:58:eb:4f:df:44:c9:22:6c:96:02:9d:dd: de:94:da:6a:20:41:15:48:97:24:85:61:c4:02:72: 49:ce:2e:c5:8f:1b:25:1f:b3:7b:a9:7f:50:3a:e8: 70:7c:ec:5c:a3:c0:4d:72:9c:81:1a:f8:23:47:40: 35:57:91:13:24:a0:cc:c8:05:de:ad:09:09:f2:41: ed:f4:6d:09:34:09:6d:d9:f8:38:04:84:bf:c9:3b: bf:ba:90:00:85:e9:7f:9e:16:07:59:fa:de:bd:45: 28:f4:bf:6f:76:bb:fa:31:4f:6e:11:af:4b:33:bc: 76:02:17:27:97:68:c5:5d:a4:70:41:ae:ca:35:48: f6:f8:ea:01:61:fe:27:aa:ca:8a:11:fd:e9:78:7a: 71:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:26:DC:61:F4:C8:D5:CE:7C:92:2B:5B:6C:44:F6:3B:78:A0:B1:D6 X509v3 Authority Key Identifier: keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3132342e3135302e3133342e302f32342d3234203d3e203338383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.150.134.0/24 Signature Algorithm: sha256WithRSAEncryption 89:c3:55:82:1d:86:37:0e:87:eb:b8:c7:38:13:a3:ce:e7:7f: da:dc:c1:dc:f3:12:41:ab:c7:12:f5:7b:13:b3:3b:be:45:28: 08:f1:17:be:98:0f:9d:24:33:25:a0:4f:64:ab:bc:8d:1e:59: a8:90:1d:fb:98:a7:aa:fb:4c:eb:32:72:c7:57:76:01:ff:3c: 7a:3d:6b:38:47:60:bc:0b:d6:52:89:de:59:a7:fd:5b:ef:35: a4:9c:d8:97:3b:94:48:3c:1d:a4:e1:bd:7b:1a:ae:4c:b4:e7: f8:cd:82:35:d7:bc:2c:03:dc:6d:7b:f2:e3:4c:31:d9:ee:46: d9:45:a0:60:90:cc:e8:2b:98:ad:ab:d4:a0:43:64:2f:de:95: 16:a4:66:96:d2:73:07:20:a6:d2:2c:bb:1b:1c:7b:0b:08:a5: 98:c0:f8:cd:6d:fe:e6:2d:b4:6a:a4:05:86:a5:d5:36:96:9d: f3:5a:4b:97:2a:4d:6b:80:ae:9f:97:c2:e1:1e:cb:de:d2:49: ba:0a:29:bd:80:e6:3b:6a:f5:9f:63:db:19:e2:14:c9:6a:bd: 6d:8f:d3:9c:72:dd:e0:d0:ef:bd:39:af:bc:cf:3a:5a:bf:7a: 96:2c:e7:4f:3f:fb:40:d2:22:21:e8:8d:c8:28:3a:d4:ad:98: 2a:4f:d6:fc -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUXbgPg6t0yGQQ9Tm1AXeeV5+529gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIyQjcw ODJDMTc5MTAeFw0yNjA1MTExNzAzMjFaFw0yNzA1MTAxNzA4MjFaMDMxMTAvBgNV BAMTKDU4MjZEQzYxRjRDOEQ1Q0U3QzkyMkI1QjZDNDRGNjNCNzhBMEIxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/KfXc+sBVUH1KrJiQhmnp4Ld L60lW47oHodMNVmTbXFgp3s5CN8BFevFniwTmtB2XU2/jR25dGXK5GNIFyx7TCIp wr0KBgUIAkO5kEHvjoHVYWOjGXGCAWbIine/uTzANVqf89PIFF1asFjrT99EySJs lgKd3d6U2mogQRVIlySFYcQCcknOLsWPGyUfs3upf1A66HB87FyjwE1ynIEa+CNH QDVXkRMkoMzIBd6tCQnyQe30bQk0CW3Z+DgEhL/JO7+6kACF6X+eFgdZ+t69RSj0 v292u/oxT24Rr0szvHYCFyeXaMVdpHBBrso1SPb46gFh/ieqyooR/el4enElAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUWCbcYfTI1c58kitbbET2O3igsdYwHwYDVR0j BBgwFoAUHuxPoaj4rNQIM70sPu2ytwgsF5EwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUFVNTy8w LzFFRUM0RkExQThGOEFDRDQwODMzQkQyQzNFRURCMkI3MDgyQzE3OTEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIy QjcwODJDMTc5MS5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1BVTU8vMC8zMTMyMzQyZTMxMzUzMDJl MzEzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzODM4MzQzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHyWhjANBgkqhkiG9w0BAQsFAAOCAQEAicNVgh2GNw6H67jHOBOjzud/2tzB 3PMSQavHEvV7E7M7vkUoCPEXvpgPnSQzJaBPZKu8jR5ZqJAd+5inqvtM6zJyx1d2 Af88ej1rOEdgvAvWUoneWaf9W+81pJzYlzuUSDwdpOG9exquTLTn+M2CNde8LAPc bXvy40wx2e5G2UWgYJDM6CuYravUoENkL96VFqRmltJzByCm0iy7Gxx7CwilmMD4 zW3+5i20aqQFhqXVNpad81pLlypNa4Cun5fC4R7L3tJJugopvYDmO2r1n2PbGeIU yWq9bY/TnHLd4NDvvTmvvM86Wr96liznTz/7QNIiIeiNyCg61K2YKk/W/A== -----END CERTIFICATE-----Generated at Wed May 13 21:15:57 2026 by rpki-client