$ rpki-client -vvf rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e2034373830.roa File: 323430323a323538303a3a2f33322d3332203d3e2034373830.roa (raw, json) Hash identifier: 0+BupcQQD+Xxb8XJV0M0KoMIOqsDkx/bNG7XLCZp0VU= Subject key identifier: 0A:5C:BE:29:21:64:0F:6E:0D:4D:21:8D:05:BD:B5:94:94:14:D5:F2 Certificate issuer: /CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D Certificate serial: 47E141ECF026CB19EA82766E9B283919115DE6AF Authority key identifier: 61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e2034373830.roa Signing time: Mon 11 May 2026 16:45:43 +0000 ROA not before: Mon 11 May 2026 16:40:43 +0000 ROA not after: Mon 10 May 2027 16:45:43 +0000 asID: 4780 IP address blocks: 2402:2580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e1:41:ec:f0:26:cb:19:ea:82:76:6e:9b:28:39:19:11:5d:e6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D Validity Not Before: May 11 16:40:43 2026 GMT Not After : May 10 16:45:43 2027 GMT Subject: CN=0A5CBE2921640F6E0D4D218D05BDB5949414D5F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4b:05:bb:d2:a6:0a:4d:43:8f:e2:76:87:90: b8:e7:40:53:70:28:bb:74:77:38:a8:34:3c:ca:c5: 1b:46:47:75:1d:73:4f:a5:21:0f:5d:bd:a3:4d:a1: 26:b2:1e:a5:44:fc:b4:f3:14:20:13:e7:68:7e:8f: 8c:d2:ce:cc:9b:b6:39:40:44:90:60:40:f3:0c:ee: 5e:48:6c:0f:a7:ab:df:37:13:86:85:bd:6b:b0:78: 86:f6:28:8e:e0:64:cb:27:1f:b7:8c:c9:1a:39:11: 77:40:6a:db:26:95:c7:2b:0c:0c:1d:d5:1c:5e:26: d5:69:c9:a3:d0:a4:db:85:f7:64:fa:77:79:1d:a1: c4:56:5c:5f:5f:d3:6e:55:91:ce:11:ee:e9:e2:d0: ea:bc:53:50:22:2d:2c:32:50:e5:72:09:7c:5a:b0: 88:dc:e1:7a:db:96:bc:0c:8b:9a:c0:cf:36:0b:55: ef:0b:07:cf:62:6f:03:9f:91:f9:99:7e:54:90:f7: cd:e9:ae:7d:cd:f1:7b:20:f8:02:ad:1f:2e:ae:16: ad:f6:91:c7:6b:1b:16:fb:59:09:ba:7e:5b:26:e6: cc:92:62:02:da:e0:19:d5:d0:31:d5:ba:7b:5f:76: 33:86:18:df:ae:20:65:ea:e7:3d:ec:58:35:a6:b6: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5C:BE:29:21:64:0F:6E:0D:4D:21:8D:05:BD:B5:94:94:14:D5:F2 X509v3 Authority Key Identifier: keyid:61:B9:0F:DE:CC:1D:EA:73:75:22:68:F9:A6:D7:F9:D9:F8:F8:79:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/61B90FDECC1DEA73752268F9A6D7F9D9F8F8793D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e2034373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:2580::/32 Signature Algorithm: sha256WithRSAEncryption 0f:79:ef:1d:bc:12:e2:55:7e:8b:1f:47:c4:17:86:07:77:b2: 34:6a:cc:b6:50:14:15:4b:e1:6c:41:1a:96:f9:62:37:a1:d9: 13:c0:c1:7b:cb:ec:0e:6a:57:d1:99:83:f2:64:a7:4c:89:f5: 45:a2:bb:67:03:e5:3d:6f:df:9d:75:04:e6:22:01:a3:91:c1: ab:94:51:12:d0:7b:30:fb:f0:ce:f3:42:c0:ed:16:fa:96:42: ad:5a:9a:5a:b9:54:d4:08:85:b6:ee:89:58:9f:70:be:1e:fd: c7:62:11:6b:8d:71:99:c9:81:82:ff:30:de:24:4f:97:f2:d6: 57:d8:0d:0b:2a:0a:55:27:f8:6d:79:d0:2f:ba:a3:1f:a5:7d: 3b:5b:09:28:f4:af:cd:b1:ed:9b:59:a3:2f:69:89:60:c1:97: c9:07:fc:83:85:75:52:1d:b2:50:a2:30:76:7a:7a:8b:d8:dc: 29:62:ae:1e:9d:78:48:02:84:07:f0:47:ed:5d:31:72:00:32: b9:76:1b:af:bb:77:00:a8:50:e2:70:c7:76:11:a4:e7:b2:ad: 52:4b:ca:8a:cf:99:22:b9:03:4d:7f:d0:34:59:8c:bc:24:75: dd:67:ed:26:89:81:43:0e:7b:d3:67:9a:df:f0:56:9c:f0:32: 94:45:35:f9 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUR+FB7PAmyxnqgnZumyg5GRFd5q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjFCOTBGREVDQzFERUE3Mzc1MjI2OEY5QTZEN0Y5RDlG OEY4NzkzRDAeFw0yNjA1MTExNjQwNDNaFw0yNzA1MTAxNjQ1NDNaMDMxMTAvBgNV BAMTKDBBNUNCRTI5MjE2NDBGNkUwRDREMjE4RDA1QkRCNTk0OTQxNEQ1RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgSwW70qYKTUOP4naHkLjnQFNw KLt0dzioNDzKxRtGR3Udc0+lIQ9dvaNNoSayHqVE/LTzFCAT52h+j4zSzsybtjlA RJBgQPMM7l5IbA+nq983E4aFvWuweIb2KI7gZMsnH7eMyRo5EXdAatsmlccrDAwd 1RxeJtVpyaPQpNuF92T6d3kdocRWXF9f025Vkc4R7uni0Oq8U1AiLSwyUOVyCXxa sIjc4XrblrwMi5rAzzYLVe8LB89ibwOfkfmZflSQ983prn3N8Xsg+AKtHy6uFq32 kcdrGxb7WQm6flsm5sySYgLa4BnV0DHVuntfdjOGGN+uIGXq5z3sWDWmtkeRAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUCly+KSFkD24NTSGNBb21lJQU1fIwHwYDVR0j BBgwFoAUYbkP3swd6nN1Imj5ptf52fj4eT0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC82MUI5MEZERUNDMURFQTczNzUyMjY4RjlBNkQ3RjlEOUY4Rjg3OTNELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzYxQjkwRkRFQ0MxREVBNzM3NTIyNjhGOUE2RDdG OUQ5RjhGODc5M0QuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMyMzQzMDMyM2EzMjM1 MzgzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM0MzczODMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA JAIlgDANBgkqhkiG9w0BAQsFAAOCAQEAD3nvHbwS4lV+ix9HxBeGB3eyNGrMtlAU FUvhbEEalvliN6HZE8DBe8vsDmpX0ZmD8mSnTIn1RaK7ZwPlPW/fnXUE5iIBo5HB q5RREtB7MPvwzvNCwO0W+pZCrVqaWrlU1AiFtu6JWJ9wvh79x2IRa41xmcmBgv8w 3iRPl/LWV9gNCyoKVSf4bXnQL7qjH6V9O1sJKPSvzbHtm1mjL2mJYMGXyQf8g4V1 Uh2yUKIwdnp6i9jcKWKuHp14SAKEB/BH7V0xcgAyuXYbr7t3AKhQ4nDHdhGk57Kt UkvKis+ZIrkDTX/QNFmMvCR13WftJomBQw5702ea3/BWnPAylEU1+Q== -----END CERTIFICATE-----Generated at Wed May 13 21:17:45 2026 by rpki-client