$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e34372e302f32342d3234203d3e203338383433.roa File: 3232332e32372e34372e302f32342d3234203d3e203338383433.roa (raw, json) Hash identifier: 5XyAw0HlNnYLSn3dJYvJeF0ArWV93PDd1/S2lv+qcmA= Subject key identifier: 31:68:CD:E3:D5:D7:A9:8C:6C:81:85:D9:E0:CF:5E:40:3D:6D:24:8D Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791 Certificate serial: 03285E17D371907EF414552479B8B8CD344B6B63 Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e34372e302f32342d3234203d3e203338383433.roa Signing time: Mon 11 May 2026 17:08:28 +0000 ROA not before: Mon 11 May 2026 17:03:28 +0000 ROA not after: Mon 10 May 2027 17:08:28 +0000 asID: 38843 IP address blocks: 223.27.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:28:5e:17:d3:71:90:7e:f4:14:55:24:79:b8:b8:cd:34:4b:6b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791 Validity Not Before: May 11 17:03:28 2026 GMT Not After : May 10 17:08:28 2027 GMT Subject: CN=3168CDE3D5D7A98C6C8185D9E0CF5E403D6D248D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bf:76:0b:f8:99:87:21:ac:94:3a:28:e8:fb: ce:93:4a:61:ae:03:e4:8e:c4:e5:85:68:01:d8:54: 5d:d2:42:d6:0e:b5:83:4a:dd:58:93:4b:f0:3e:9b: 6e:7a:eb:13:82:61:54:31:26:eb:df:32:ca:64:8b: 5b:2b:d5:9c:44:9a:c8:e4:0b:18:35:f9:21:1e:ac: 53:fb:1b:7d:e1:40:e5:fe:67:e1:3c:86:40:02:64: 99:3f:c7:fe:56:87:ea:75:fe:2b:bd:87:97:b4:8b: 56:3c:0b:08:ae:c8:31:0d:a0:82:f5:47:47:e5:6e: d7:eb:b0:da:cd:e3:31:11:e4:a9:7c:6b:42:b0:aa: 48:35:35:e0:87:ce:1e:47:20:cf:5a:46:c4:97:d5: c7:95:47:c6:b3:f6:fd:2b:75:15:19:5e:ab:6b:91: 1f:d0:17:53:cf:89:79:3e:d3:96:57:1b:92:36:6b: 91:9f:d6:56:2b:08:03:04:44:92:d7:35:44:4c:e6: 33:b1:41:13:15:e2:45:09:b4:99:eb:8c:0c:10:ff: d2:36:cc:bd:c3:93:72:07:c2:9c:6d:5c:9b:bb:f0: c5:0e:1c:29:e1:2e:cb:48:44:78:d0:f6:4e:f2:04: 92:9a:60:0a:18:fd:02:7b:24:51:e4:1f:18:05:ef: 0d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:68:CD:E3:D5:D7:A9:8C:6C:81:85:D9:E0:CF:5E:40:3D:6D:24:8D X509v3 Authority Key Identifier: keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e34372e302f32342d3234203d3e203338383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.27.47.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:27:67:ef:d0:44:5e:1c:0d:6c:3c:7c:12:29:75:70:ed:39: dc:83:76:24:ef:4c:0b:29:a9:67:78:e8:de:84:64:7a:99:95: a8:76:d3:80:73:ca:fe:fc:21:36:09:63:a4:5e:fc:7e:22:47: cc:5e:0b:e3:c2:bb:31:f5:72:74:ef:53:b2:fd:8f:89:6f:36: 7d:cd:01:e3:3c:ef:b8:17:c8:fd:6b:01:51:24:25:fb:a0:ec: 88:7b:32:6f:bc:20:fb:45:a8:d8:64:10:18:4a:ee:8c:01:58: d6:33:46:cc:87:23:c9:33:62:26:84:e1:be:1b:02:61:91:be: 18:7b:44:3a:21:75:c5:12:c9:7f:ad:74:6a:43:31:2a:6e:65: 37:a1:bc:63:76:3a:d6:37:30:33:72:29:7c:11:1d:04:1e:14: b3:c1:b2:0d:9f:b5:91:12:b1:41:16:16:95:e8:5b:8b:c7:8b: 46:6a:70:b8:e8:fe:28:ce:51:d6:35:b5:20:b4:0d:45:03:4a: 2f:fa:42:46:9b:ee:b6:83:ef:4d:c5:d0:85:65:bd:82:0e:fe: 21:cb:09:c6:f1:f3:41:dc:fe:1a:de:0c:97:b4:b5:1e:4a:c7: 2d:f8:6e:d4:7f:03:77:a9:17:b4:ad:fc:7f:1e:34:0d:d0:51: b7:fe:d1:aa -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUAyheF9NxkH70FFUkebi4zTRLa2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIyQjcw ODJDMTc5MTAeFw0yNjA1MTExNzAzMjhaFw0yNzA1MTAxNzA4MjhaMDMxMTAvBgNV BAMTKDMxNjhDREUzRDVEN0E5OEM2QzgxODVEOUUwQ0Y1RTQwM0Q2RDI0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkv3YL+JmHIayUOijo+86TSmGu A+SOxOWFaAHYVF3SQtYOtYNK3ViTS/A+m2566xOCYVQxJuvfMspki1sr1ZxEmsjk Cxg1+SEerFP7G33hQOX+Z+E8hkACZJk/x/5Wh+p1/iu9h5e0i1Y8CwiuyDENoIL1 R0flbtfrsNrN4zER5Kl8a0Kwqkg1NeCHzh5HIM9aRsSX1ceVR8az9v0rdRUZXqtr kR/QF1PPiXk+05ZXG5I2a5Gf1lYrCAMERJLXNURM5jOxQRMV4kUJtJnrjAwQ/9I2 zL3Dk3IHwpxtXJu78MUOHCnhLstIRHjQ9k7yBJKaYAoY/QJ7JFHkHxgF7w07AgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUMWjN49XXqYxsgYXZ4M9eQD1tJI0wHwYDVR0j BBgwFoAUHuxPoaj4rNQIM70sPu2ytwgsF5EwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUFVNTy8w LzFFRUM0RkExQThGOEFDRDQwODMzQkQyQzNFRURCMkI3MDgyQzE3OTEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIy QjcwODJDMTc5MS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1BVTU8vMC8zMjMyMzMyZTMyMzcyZTM0 MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM4MzgzNDMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 3xsvMA0GCSqGSIb3DQEBCwUAA4IBAQBtJ2fv0EReHA1sPHwSKXVw7Tncg3Yk70wL KalneOjehGR6mZWodtOAc8r+/CE2CWOkXvx+IkfMXgvjwrsx9XJ071Oy/Y+JbzZ9 zQHjPO+4F8j9awFRJCX7oOyIezJvvCD7RajYZBAYSu6MAVjWM0bMhyPJM2ImhOG+ GwJhkb4Ye0Q6IXXFEsl/rXRqQzEqbmU3obxjdjrWNzAzcil8ER0EHhSzwbINn7WR ErFBFhaV6FuLx4tGanC46P4ozlHWNbUgtA1FA0ov+kJGm+62g+9NxdCFZb2CDv4h ywnG8fNB3P4a3gyXtLUeSsct+G7UfwN3qRe0rfx/HjQN0FG3/tGq -----END CERTIFICATE-----Generated at Wed May 13 21:16:50 2026 by rpki-client