$ rpki-client -vvf rpkica.twnic.tw/rpki/SECUNET/0/3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa File: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (raw, json) Hash identifier: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc= Subject key identifier: C4:87:EE:FC:8E:8C:AE:56:5D:61:D8:49:3D:55:38:9D:EC:79:F2:0D Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Certificate serial: 10FA5D336F2B6850368CD95E9CA588F2C7CE408F Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa Signing time: Mon 11 May 2026 17:37:48 +0000 ROA not before: Mon 11 May 2026 17:32:48 +0000 ROA not after: Mon 10 May 2027 17:37:48 +0000 asID: 7538 IP address blocks: 103.198.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:fa:5d:33:6f:2b:68:50:36:8c:d9:5e:9c:a5:88:f2:c7:ce:40:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6 Validity Not Before: May 11 17:32:48 2026 GMT Not After : May 10 17:37:48 2027 GMT Subject: CN=C487EEFC8E8CAE565D61D8493D55389DEC79F20D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:f5:be:e0:be:05:d9:16:8e:57:6d:58:c2: 2a:9e:75:bb:20:45:b1:3f:90:aa:33:4a:f2:de:fd: 2f:65:ae:93:b5:e3:c2:7d:dd:6e:75:8d:98:40:af: ab:23:46:0d:a5:28:2d:86:5e:bf:3c:f5:86:93:00: 6c:6e:04:aa:77:a4:f0:2b:a2:1b:4b:c5:4f:bb:89: 35:65:95:b0:9c:ab:92:88:ab:38:f6:1d:21:70:ef: ec:03:b6:f6:33:b5:ee:0f:70:cb:da:2a:af:20:4b: 9b:89:20:50:af:0b:bd:ce:dc:7d:c3:b0:0c:00:42: da:e4:95:e6:30:c3:19:a5:11:6b:55:22:9f:59:c7: 92:5a:a2:5b:da:22:9a:6c:82:09:02:7c:08:ed:e6: 3d:f0:b9:6e:3a:79:4f:d4:dd:98:f2:74:b6:8a:45: 44:3d:02:38:a3:66:1d:4c:e8:47:98:c2:b4:c8:c0: e5:a7:03:a1:d5:5c:13:2d:50:8a:88:28:63:c6:01: 97:2e:a1:c6:3e:f8:a0:e4:d3:de:43:8b:5e:d1:af: eb:9d:4b:fa:e3:e6:48:77:7a:22:6b:e2:fa:6e:67: 8b:c9:fc:02:dd:c2:9f:42:c3:cd:bf:68:e6:47:30: 50:d0:3e:e2:57:2e:69:4c:4a:4b:97:9c:1c:6f:0d: e9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:87:EE:FC:8E:8C:AE:56:5D:61:D8:49:3D:55:38:9D:EC:79:F2:0D X509v3 Authority Key Identifier: keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.198.152.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:70:c4:4b:8d:ef:89:e6:43:11:e0:02:8d:0f:07:1a:d8:07: ae:d0:ed:b6:b6:e1:dc:69:14:bb:9c:b8:fd:11:b0:b2:55:08: 18:18:65:72:3d:52:1c:69:0e:ad:3a:71:87:36:ff:28:4c:7b: 3c:3d:17:e9:ea:81:ba:91:31:d1:64:52:99:b8:e6:e5:c7:c6: dd:1e:ae:f2:84:0c:57:28:5b:eb:e8:c0:43:ba:53:d6:d5:7b: ed:ad:1d:38:bc:ce:25:7c:cc:46:2a:f5:bf:b6:c7:dc:f0:63: d4:3d:44:3e:15:49:8a:29:aa:9b:0a:c8:98:82:23:f6:d4:f6: 5c:5b:ad:28:7f:d1:82:bf:7f:68:ea:ea:bc:16:03:7a:b4:f6: 88:13:6a:40:15:d5:05:8b:13:9b:c8:fb:8a:70:4d:e6:bb:b8: c9:87:46:45:7d:97:21:b8:42:f4:e4:24:db:11:96:b1:11:3a: c0:05:25:19:ca:77:62:11:20:c9:56:27:f7:17:ef:c0:65:e7: 87:5a:3c:f5:85:10:4c:b5:be:38:b6:78:a8:12:fe:3e:47:d4: 5c:88:ba:3f:17:e9:88:8f:2c:6f:fa:41:38:e5:41:ee:4f:90: f2:7b:f2:54:28:04:ea:f3:f7:86:d1:a2:ef:e7:2f:0f:6c:7e: 85:fe:27:83 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUEPpdM28raFA2jNlenKWI8sfOQI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFDMjdENTI0 NjZBQzdFNjAeFw0yNjA1MTExNzMyNDhaFw0yNzA1MTAxNzM3NDhaMDMxMTAvBgNV BAMTKEM0ODdFRUZDOEU4Q0FFNTY1RDYxRDg0OTNENTUzODlERUM3OUYyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1f/W+4L4F2RaOV21Ywiqedbsg RbE/kKozSvLe/S9lrpO148J93W51jZhAr6sjRg2lKC2GXr889YaTAGxuBKp3pPAr ohtLxU+7iTVllbCcq5KIqzj2HSFw7+wDtvYzte4PcMvaKq8gS5uJIFCvC73O3H3D sAwAQtrkleYwwxmlEWtVIp9Zx5JaolvaIppsggkCfAjt5j3wuW46eU/U3ZjydLaK RUQ9AjijZh1M6EeYwrTIwOWnA6HVXBMtUIqIKGPGAZcuocY++KDk095Di17Rr+ud S/rj5kh3eiJr4vpuZ4vJ/ALdwp9Cw82/aOZHMFDQPuJXLmlMSkuXnBxvDek1AgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUxIfu/I6MrlZdYdhJPVU4nex58g0wHwYDVR0j BBgwFoAUTU29KLvriSCzeqYEisJ9UkZqx+YwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0VDVU5F VC8wLzRENERCRDI4QkJFQjg5MjBCMzdBQTYwNDhBQzI3RDUyNDY2QUM3RTYuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNEQ0REJEMjhCQkVCODkyMEIzN0FBNjA0OEFD MjdENTI0NjZBQzdFNi5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NFQ1VORVQvMC8zMTMwMzMyZTMx MzkzODJlMzEzNTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzczNTMzMzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnxpgwDQYJKoZIhvcNAQELBQADggEBAFtwxEuN74nmQxHgAo0PBxrY B67Q7ba24dxpFLucuP0RsLJVCBgYZXI9UhxpDq06cYc2/yhMezw9F+nqgbqRMdFk Upm45uXHxt0ervKEDFcoW+vowEO6U9bVe+2tHTi8ziV8zEYq9b+2x9zwY9Q9RD4V SYopqpsKyJiCI/bU9lxbrSh/0YK/f2jq6rwWA3q09ogTakAV1QWLE5vI+4pwTea7 uMmHRkV9lyG4QvTkJNsRlrEROsAFJRnKd2IRIMlWJ/cX78Bl54daPPWFEEy1vji2 eKgS/j5H1FyIuj8X6YiPLG/6QTjlQe5PkPJ78lQoBOrz94bRou/nLw9sfoX+J4M= -----END CERTIFICATE-----Generated at Wed May 13 21:17:22 2026 by rpki-client