$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230302e302f32342d3234203d3e203137393939.roa File: 3138372e37392e3230302e302f32342d3234203d3e203137393939.roa (raw, json) Hash identifier: Ms8KWMiqHBUeweg6G85Jzg70gg1CWi1Nsi+XQu4djsw= Subject key identifier: CD:1B:15:3D:57:AD:08:FA:CA:74:59:ED:1A:6B:93:8B:6C:0D:4D:98 Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50 Certificate serial: 47ED1A23F4C82C5B826A0F814B245DE9A4E750C4 Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230302e302f32342d3234203d3e203137393939.roa Signing time: Tue 25 Aug 2026 18:04:00 +0000 ROA not before: Tue 25 Aug 2026 17:59:00 +0000 ROA not after: Tue 24 Aug 2027 18:04:00 +0000 asID: 17999 IP address blocks: 187.79.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 13:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:ed:1a:23:f4:c8:2c:5b:82:6a:0f:81:4b:24:5d:e9:a4:e7:50:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50 Validity Not Before: Aug 25 17:59:00 2026 GMT Not After : Aug 24 18:04:00 2027 GMT Subject: CN=CD1B153D57AD08FACA7459ED1A6B938B6C0D4D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:1a:43:00:be:70:49:78:5e:04:79:58:b1: d5:0c:97:45:a4:44:81:71:c7:c9:86:29:ec:1f:3d: 2b:b8:8a:0e:43:0b:dd:0d:92:3b:4c:8d:5d:42:57: 7d:c1:e9:86:c4:1b:8f:7b:96:90:fa:58:81:39:be: e8:a2:d5:8c:e0:2a:06:04:64:73:98:f2:19:e5:ce: e7:52:a1:ab:fb:f4:62:27:4b:ea:0c:d4:04:ee:40: 21:81:3d:6d:1a:9d:39:42:2b:df:77:0d:09:9d:1b: c1:42:b3:2b:4d:41:e1:3d:88:f7:18:85:d3:c4:f3: 4f:7a:99:95:63:12:69:e1:4a:45:6c:7d:22:08:db: 08:ae:65:6e:ae:33:69:39:0b:ed:0d:3c:de:50:4f: 7c:ac:e8:e7:a0:f3:e5:bb:7e:5f:d0:e8:02:24:15: ba:c6:2b:7c:dd:03:df:7a:61:1d:42:95:3e:b5:84: 3c:dc:ef:4e:33:9f:41:12:86:13:77:bd:79:32:86: b7:12:a6:e8:93:4f:56:c1:0f:95:98:80:4c:76:c9: e2:88:01:8a:32:80:5e:cc:c9:23:50:3c:9f:d9:ee: 44:1f:f5:f1:ac:57:87:f8:de:ff:f0:6c:95:53:89: 4f:f9:1c:7e:50:c4:53:e7:35:1c:3d:f7:c5:0d:c9: ee:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1B:15:3D:57:AD:08:FA:CA:74:59:ED:1A:6B:93:8B:6C:0D:4D:98 X509v3 Authority Key Identifier: keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3230302e302f32342d3234203d3e203137393939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.79.200.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:06:3e:4d:e4:a0:e1:3b:e0:4c:6e:17:d9:25:a4:67:e9:92: f6:ec:cc:6c:1f:2c:cb:5d:a2:35:06:1c:6b:55:6e:ed:cb:02: 09:c6:6a:8e:38:cc:14:27:8a:26:9d:1f:a7:4d:6b:5d:61:fd: 80:78:97:4a:f7:f5:c9:e9:68:52:1b:9d:cd:1f:54:be:4c:8c: a0:44:c7:5f:2f:8e:33:60:99:d0:50:83:ac:53:c3:85:ad:50: 56:a0:26:04:a5:84:0c:41:17:73:37:a2:3d:8f:6f:f4:6e:ef: ed:7d:cf:9c:37:33:fd:a0:90:3c:16:78:26:c5:28:b1:87:e1: b9:4d:09:62:20:84:bd:dc:0c:3d:d9:8d:d9:3a:d1:6c:58:79: c1:7a:2d:ac:b7:0a:6a:a9:48:79:74:29:04:b0:3a:32:e9:15: a0:28:b1:09:c8:18:11:7c:f8:3a:b2:f9:6f:f9:b0:c5:25:00: cc:d3:3e:a3:6c:aa:a6:4d:1b:a4:cb:cd:1a:25:7e:ba:45:fd: 6a:22:31:9a:53:af:49:3c:1a:f3:8c:35:1b:19:fd:14:25:c4: da:5f:bf:0a:07:a2:59:49:98:c5:03:2d:c4:f7:97:8f:fe:21: 11:cb:a7:d1:e5:88:82:44:fe:43:2e:36:09:f7:f6:20:49:5d: 10:5e:7a:b0 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUR+0aI/TILFuCag+BSyRd6aTnUMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBRDg3NzM1Qjk2RTM4QzVCMTY0NTBEMDZGMUUzRjA1 RDFDMEI1MDAeFw0yNjA4MjUxNzU5MDBaFw0yNzA4MjQxODA0MDBaMDMxMTAvBgNV BAMTKENEMUIxNTNENTdBRDA4RkFDQTc0NTlFRDFBNkI5MzhCNkMwRDREOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXxpDAL5wSXheBHlYsdUMl0Wk RIFxx8mGKewfPSu4ig5DC90NkjtMjV1CV33B6YbEG497lpD6WIE5vuii1YzgKgYE ZHOY8hnlzudSoav79GInS+oM1ATuQCGBPW0anTlCK993DQmdG8FCsytNQeE9iPcY hdPE8096mZVjEmnhSkVsfSII2wiuZW6uM2k5C+0NPN5QT3ys6Oeg8+W7fl/Q6AIk FbrGK3zdA996YR1ClT61hDzc704zn0EShhN3vXkyhrcSpuiTT1bBD5WYgEx2yeKI AYoygF7MySNQPJ/Z7kQf9fGsV4f43v/wbJVTiU/5HH5QxFPnNRw998UNye6DAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUzRsVPVetCPrKdFntGmuTi2wNTZgwHwYDVR0j BBgwFoAU362Hc1uW44xbFkUNBvHj8F0cC1AwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U Vy8xL0RGQUQ4NzczNUI5NkUzOEM1QjE2NDUwRDA2RjFFM0YwNUQxQzBCNTAuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzIvREZBRDg3NzM1Qjk2RTM4QzVCMTY0NTBEMDZG MUUzRjA1RDFDMEI1MC5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wtVFcvMS8zMTM4MzcyZTM3 MzkyZTMyMzAzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzczOTM5Mzkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAC7T8gwDQYJKoZIhvcNAQELBQADggEBAC4GPk3koOE74ExuF9klpGfp kvbszGwfLMtdojUGHGtVbu3LAgnGao44zBQniiadH6dNa11h/YB4l0r39cnpaFIb nc0fVL5MjKBEx18vjjNgmdBQg6xTw4WtUFagJgSlhAxBF3M3oj2Pb/Ru7+19z5w3 M/2gkDwWeCbFKLGH4blNCWIghL3cDD3Zjdk60WxYecF6Lay3CmqpSHl0KQSwOjLp FaAosQnIGBF8+Dqy+W/5sMUlAMzTPqNsqqZNG6TLzRolfrpF/WoiMZpTr0k8GvOM NRsZ/RQlxNpfvwoHollJmMUDLcT3l4/+IRHLp9HliIJE/kMuNgn39iBJXRBeerA= -----END CERTIFICATE-----Generated at Thu Sep 10 06:01:11 2026 by rpki-client