$ rpki-client -vvf rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35372e302f32342d3234203d3e203338383433.roa File: 3232332e32372e35372e302f32342d3234203d3e203338383433.roa (raw, json) Hash identifier: reOhXDMLhiFDUVrQvlUBuYoxTXIQAUhw5RwGxO3MPa8= Subject key identifier: F1:62:9A:51:1A:0D:43:75:C6:66:A4:54:C9:EF:75:C6:6D:A0:D4:EE Certificate issuer: /CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791 Certificate serial: 5E5948BC19BE096E092CDB20B1EBBDEC2A65FE19 Authority key identifier: 1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35372e302f32342d3234203d3e203338383433.roa Signing time: Mon 11 May 2026 17:11:25 +0000 ROA not before: Mon 11 May 2026 17:06:25 +0000 ROA not after: Mon 10 May 2027 17:11:25 +0000 asID: 38843 IP address blocks: 223.27.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:59:48:bc:19:be:09:6e:09:2c:db:20:b1:eb:bd:ec:2a:65:fe:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791 Validity Not Before: May 11 17:06:25 2026 GMT Not After : May 10 17:11:25 2027 GMT Subject: CN=F1629A511A0D4375C666A454C9EF75C66DA0D4EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c4:7d:eb:5e:af:ea:00:9d:5d:fe:d2:6e:11: 36:27:e2:ef:19:9a:a6:d7:de:ac:0f:8c:12:4f:8e: 66:59:0a:cb:55:29:6f:14:bb:c0:fa:98:07:46:14: 1e:c8:e5:0d:f3:c9:0f:db:8c:de:ec:59:3b:e6:da: 62:db:82:53:ff:26:9a:df:0c:57:a9:7f:df:fb:c0: 55:c8:ba:eb:3c:72:74:e2:ec:79:1e:1c:04:2e:60: b7:eb:3c:ba:a1:29:46:9d:94:32:05:49:05:6e:74: 65:1a:ff:f0:94:a6:f5:53:a4:b2:40:58:ad:81:29: 58:d7:58:e3:ec:b5:46:c5:68:d9:84:07:fd:f6:31: 9f:b1:c1:95:c9:fa:89:e4:b4:23:05:1f:e2:68:32: a2:4b:27:13:07:53:4c:ef:bf:a8:bd:9a:1d:40:5a: 1e:22:95:25:0d:b5:b7:b0:4a:ce:c4:d7:66:1d:ef: 8b:fd:b3:35:2b:f1:50:fc:ca:04:69:c2:55:f2:65: 18:6b:f9:f9:b1:8d:f4:18:53:c0:2c:c0:b0:27:7b: d2:70:de:5c:70:4e:87:fe:19:83:10:cf:2d:52:22: 2a:94:92:42:9b:e5:6e:e1:ec:44:ef:ec:4f:11:97: 3d:66:3d:43:3e:88:16:55:f6:79:af:f3:d4:cd:fa: e5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:62:9A:51:1A:0D:43:75:C6:66:A4:54:C9:EF:75:C6:6D:A0:D4:EE X509v3 Authority Key Identifier: keyid:1E:EC:4F:A1:A8:F8:AC:D4:08:33:BD:2C:3E:ED:B2:B7:08:2C:17:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1EEC4FA1A8F8ACD40833BD2C3EEDB2B7082C1791.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PUMO/0/3232332e32372e35372e302f32342d3234203d3e203338383433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.27.57.0/24 Signature Algorithm: sha256WithRSAEncryption 53:bc:94:b0:d9:d5:1f:40:f7:7f:d7:e7:32:47:dc:9a:18:2a: bc:f9:30:2c:d3:40:e4:3c:77:42:34:d0:93:03:bc:a5:37:49: 05:f9:a3:af:09:ad:49:55:79:88:b8:0f:68:54:9d:9f:97:24: 93:bc:53:bc:96:36:2d:f0:2b:7d:de:d8:92:d4:f4:5e:c2:d9: 7b:20:35:a0:1c:9e:d4:e6:95:86:9c:41:65:62:db:3a:39:97: 45:dd:a8:c1:ff:0f:f9:9c:71:63:a5:e9:2c:0e:44:22:23:02: 7a:14:8c:71:a1:37:d2:ac:ad:6e:0f:9a:21:e3:c5:13:26:f5: d8:2b:f1:42:19:bd:c5:39:12:0d:c9:03:96:c2:0a:75:d4:8a: f2:e3:06:4c:6e:14:31:8b:b9:6c:14:17:54:86:77:26:04:74: 57:ce:77:85:ac:c8:21:3d:01:ff:bb:2e:9a:74:a1:b8:b7:a2: 87:bf:c7:9a:9c:53:c9:cf:88:f2:d4:d8:e2:b5:71:59:09:96: 8c:92:f0:83:5f:4d:f8:e6:28:2b:03:98:87:51:be:65:97:79: 47:85:cf:34:eb:7d:fd:9d:cd:aa:a1:c5:9e:6d:71:e0:97:67: 0a:f9:d9:20:f8:b6:42:25:8e:b4:2a:8e:f0:21:54:17:af:65: 78:fd:87:83 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUXllIvBm+CW4JLNsgseu97Cpl/hkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIyQjcw ODJDMTc5MTAeFw0yNjA1MTExNzA2MjVaFw0yNzA1MTAxNzExMjVaMDMxMTAvBgNV BAMTKEYxNjI5QTUxMUEwRDQzNzVDNjY2QTQ1NEM5RUY3NUM2NkRBMEQ0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPxH3rXq/qAJ1d/tJuETYn4u8Z mqbX3qwPjBJPjmZZCstVKW8Uu8D6mAdGFB7I5Q3zyQ/bjN7sWTvm2mLbglP/Jprf DFepf9/7wFXIuus8cnTi7HkeHAQuYLfrPLqhKUadlDIFSQVudGUa//CUpvVTpLJA WK2BKVjXWOPstUbFaNmEB/32MZ+xwZXJ+onktCMFH+JoMqJLJxMHU0zvv6i9mh1A Wh4ilSUNtbewSs7E12Yd74v9szUr8VD8ygRpwlXyZRhr+fmxjfQYU8AswLAne9Jw 3lxwTof+GYMQzy1SIiqUkkKb5W7h7ETv7E8Rlz1mPUM+iBZV9nmv89TN+uWlAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQU8WKaURoNQ3XGZqRUye91xm2g1O4wHwYDVR0j BBgwFoAUHuxPoaj4rNQIM70sPu2ytwgsF5EwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUFVNTy8w LzFFRUM0RkExQThGOEFDRDQwODMzQkQyQzNFRURCMkI3MDgyQzE3OTEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMUVFQzRGQTFBOEY4QUNENDA4MzNCRDJDM0VFREIy QjcwODJDMTc5MS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1BVTU8vMC8zMjMyMzMyZTMyMzcyZTM1 MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM4MzgzNDMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 3xs5MA0GCSqGSIb3DQEBCwUAA4IBAQBTvJSw2dUfQPd/1+cyR9yaGCq8+TAs00Dk PHdCNNCTA7ylN0kF+aOvCa1JVXmIuA9oVJ2flySTvFO8ljYt8Ct93tiS1PRewtl7 IDWgHJ7U5pWGnEFlYts6OZdF3ajB/w/5nHFjpeksDkQiIwJ6FIxxoTfSrK1uD5oh 48UTJvXYK/FCGb3FORINyQOWwgp11Iry4wZMbhQxi7lsFBdUhncmBHRXzneFrMgh PQH/uy6adKG4t6KHv8eanFPJz4jy1NjitXFZCZaMkvCDX0345igrA5iHUb5ll3lH hc806339nc2qocWebXHgl2cK+dkg+LZCJY60Ko7wIVQXr2V4/YeD -----END CERTIFICATE-----Generated at Wed May 13 21:16:51 2026 by rpki-client