$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3133372e32322e302f32332d3234203d3e20313334383233.roa File: 3130332e3133372e32322e302f32332d3234203d3e20313334383233.roa (raw, json) Hash identifier: aDavL8rxqoo8KxGhzDJFgULMoFY3AbxQ+AV5uzJ9ekY= Subject key identifier: D3:21:36:F5:59:FD:E2:FC:2F:20:C0:B3:A7:85:9E:7C:DB:6E:07:6C Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE Certificate serial: 24EEF823A7849336D7F6A554B8B507D1B1313402 Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3133372e32322e302f32332d3234203d3e20313334383233.roa Signing time: Mon 11 May 2026 17:37:44 +0000 ROA not before: Mon 11 May 2026 17:32:44 +0000 ROA not after: Mon 10 May 2027 17:37:44 +0000 asID: 134823 IP address blocks: 103.137.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ee:f8:23:a7:84:93:36:d7:f6:a5:54:b8:b5:07:d1:b1:31:34:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE Validity Not Before: May 11 17:32:44 2026 GMT Not After : May 10 17:37:44 2027 GMT Subject: CN=D32136F559FDE2FC2F20C0B3A7859E7CDB6E076C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:03:47:02:5a:f0:b1:76:3e:50:1a:f2:6b:0c: 5f:8c:28:3e:d3:d5:b9:0b:f2:83:0f:a3:47:b9:f4: d4:4b:c2:8c:28:b0:9e:f2:f8:e5:32:d4:c2:7e:09: f3:2d:95:48:f1:09:24:c7:a1:75:c5:14:21:b3:0a: c0:84:ee:d4:23:7c:8c:61:46:09:2c:64:de:45:c6: 31:d7:1f:89:cb:dd:b2:35:5f:5f:b5:1d:30:f9:14: 09:c2:c5:90:5f:d1:53:99:89:8a:0d:0f:87:3c:86: fd:56:27:87:c7:64:ba:5e:69:b8:d6:59:57:45:51: 00:55:40:bd:13:ca:4b:f2:78:d9:80:c2:98:98:a6: 0c:be:55:3f:31:a6:e3:d3:b0:03:7a:bf:41:b1:98: d5:cb:d0:ae:46:c8:ae:f4:d3:1e:d1:53:5f:d4:4f: a9:fa:0e:d5:cb:55:85:14:dd:61:42:a5:73:43:56: 7e:1b:96:f6:e6:a2:a4:97:5d:3d:bc:2e:aa:91:d9: 03:e4:41:b2:44:04:97:2d:85:9a:d2:d9:39:24:9b: 81:fe:40:ff:b5:3c:6b:39:bb:ca:3e:84:42:ce:32: f6:a9:32:9f:9e:c7:ab:82:0f:79:a5:84:08:4a:75: e2:8e:ca:71:b3:42:bd:90:97:01:36:f5:5f:1f:e3: 7f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:21:36:F5:59:FD:E2:FC:2F:20:C0:B3:A7:85:9E:7C:DB:6E:07:6C X509v3 Authority Key Identifier: keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/3130332e3133372e32322e302f32332d3234203d3e20313334383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.137.22.0/23 Signature Algorithm: sha256WithRSAEncryption 08:9a:cc:46:e0:77:43:17:7c:76:84:b3:48:57:7d:5f:19:b2: 9e:b6:b6:17:8c:ef:6e:e3:64:b9:d5:87:87:6f:9d:22:1b:14: ef:ab:16:42:3f:17:58:66:45:82:95:61:ca:69:71:0c:56:a0: a4:32:a4:fa:2d:29:2b:f1:3c:b5:86:80:a3:0d:58:ba:19:4e: ac:c9:97:2a:7b:77:b5:a3:ad:0d:30:f7:98:2e:6c:1d:7b:ec: f6:2e:46:64:65:9b:11:1d:b1:4f:f7:3f:99:31:9e:b2:22:a1: 9d:25:32:d7:df:ea:93:b0:4e:1b:0a:52:c3:6d:6e:67:7c:5a: 0f:ec:8e:84:12:79:c8:13:9c:07:f7:10:ce:f4:61:bd:7d:ee: 31:81:a9:32:03:b8:d2:35:7c:3a:ce:f0:c5:c5:7d:e2:24:01: e2:46:78:5a:8f:42:ea:37:80:5b:2c:06:35:9c:05:cc:09:c7: 7c:44:c8:43:1c:b0:53:5b:df:23:2d:02:b7:c0:3c:1b:62:d4: 06:ff:75:6c:ae:0b:3c:b3:fa:fc:81:b6:57:4e:53:54:6e:d0: f1:91:93:29:36:d0:b8:22:f6:2c:6a:88:de:ca:df:fe:72:3a: aa:1f:b0:3d:51:4b:6f:c2:5a:60:2e:0b:1d:0e:2b:4a:f6:0e: ae:07:ca:16 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJO74I6eEkzbX9qVUuLUH0bExNAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1QzQ5OUZE MTQ0RkVBRTAeFw0yNjA1MTExNzMyNDRaFw0yNzA1MTAxNzM3NDRaMDMxMTAvBgNV BAMTKEQzMjEzNkY1NTlGREUyRkMyRjIwQzBCM0E3ODU5RTdDREI2RTA3NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuA0cCWvCxdj5QGvJrDF+MKD7T 1bkL8oMPo0e59NRLwowosJ7y+OUy1MJ+CfMtlUjxCSTHoXXFFCGzCsCE7tQjfIxh RgksZN5FxjHXH4nL3bI1X1+1HTD5FAnCxZBf0VOZiYoND4c8hv1WJ4fHZLpeabjW WVdFUQBVQL0TykvyeNmAwpiYpgy+VT8xpuPTsAN6v0GxmNXL0K5GyK700x7RU1/U T6n6DtXLVYUU3WFCpXNDVn4blvbmoqSXXT28LqqR2QPkQbJEBJcthZrS2Tkkm4H+ QP+1PGs5u8o+hELOMvapMp+ex6uCD3mlhAhKdeKOynGzQr2QlwE29V8f43/ZAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQU0yE29Vn94vwvIMCzp4WefNtuB2wwHwYDVR0j BBgwFoAUzhG91E9md2YkxNm+FFxJn9FE/q4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U Vy8wL0NFMTFCREQ0NEY2Njc3NjYyNEM0RDlCRTE0NUM0OTlGRDE0NEZFQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1 QzQ5OUZEMTQ0RkVBRS5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wtVFcvMC8zMTMwMzMyZTMx MzMzNzJlMzIzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzMzNDM4MzIzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeJFjANBgkqhkiG9w0BAQsFAAOCAQEACJrMRuB3Qxd8doSzSFd9 Xxmynra2F4zvbuNkudWHh2+dIhsU76sWQj8XWGZFgpVhymlxDFagpDKk+i0pK/E8 tYaAow1YuhlOrMmXKnt3taOtDTD3mC5sHXvs9i5GZGWbER2xT/c/mTGesiKhnSUy 19/qk7BOGwpSw21uZ3xaD+yOhBJ5yBOcB/cQzvRhvX3uMYGpMgO40jV8Os7wxcV9 4iQB4kZ4Wo9C6jeAWywGNZwFzAnHfETIQxywU1vfIy0Ct8A8G2LUBv91bK4LPLP6 /IG2V05TVG7Q8ZGTKTbQuCL2LGqI3srf/nI6qh+wPVFLb8JaYC4LHQ4rSvYOrgfK Fg== -----END CERTIFICATE-----Generated at Wed May 13 21:11:21 2026 by rpki-client