$ rpki-client -vvf rpkica.twnic.tw/rpki/TAIFO7716/0/3130312e332e3230382e302f32322d3234203d3e203138303436.roa File: 3130312e332e3230382e302f32322d3234203d3e203138303436.roa (raw, json) Hash identifier: XM87/9ON2Xf/QGzj6rT0RtKfM2PuEXNJ74A1Cnr1n74= Subject key identifier: FB:2A:C8:04:B5:10:04:A5:E8:11:46:BC:DA:B3:37:C2:6D:2C:D8:8F Certificate issuer: /CN=E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B Certificate serial: 5BD0C20281CF9D0F4CB172829D297004586EF0F4 Authority key identifier: E7:E1:DA:39:A6:AC:AC:13:A4:43:4C:0B:07:A1:5F:DD:6D:C3:93:4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/3130312e332e3230382e302f32322d3234203d3e203138303436.roa Signing time: Mon 11 May 2026 17:40:10 +0000 ROA not before: Mon 11 May 2026 17:35:10 +0000 ROA not after: Mon 10 May 2027 17:40:10 +0000 asID: 18046 IP address blocks: 101.3.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.crl rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d0:c2:02:81:cf:9d:0f:4c:b1:72:82:9d:29:70:04:58:6e:f0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B Validity Not Before: May 11 17:35:10 2026 GMT Not After : May 10 17:40:10 2027 GMT Subject: CN=FB2AC804B51004A5E81146BCDAB337C26D2CD88F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:7b:fb:39:cf:9b:c9:52:25:bd:26:76:b8: 1b:a5:8d:0c:2a:21:94:82:9d:72:c1:f9:15:3d:e7: 15:8f:4f:84:74:94:7a:65:0b:4d:d7:75:3d:bd:48: 1c:ee:93:fc:c9:46:44:cc:0a:b7:33:46:77:fb:be: e4:27:1f:09:ce:3c:8f:07:84:31:25:b2:e6:4a:d2: b4:9f:23:52:eb:0c:53:34:2b:15:49:06:e8:35:b3: 61:60:21:91:06:5c:92:14:76:ef:c9:cd:f1:63:1e: ab:9d:3e:a1:b4:83:96:87:bc:73:ab:39:07:88:e3: 77:98:a2:e8:e5:1a:10:0c:a8:72:7c:b5:5c:8e:26: cb:f0:90:a2:8d:77:8f:94:cc:46:08:df:8e:0d:a2: 4b:fe:3c:84:02:fe:dd:86:76:a0:55:0b:14:26:ed: 39:d1:d4:be:a2:10:30:b8:4f:be:5b:9b:d9:dc:94: 00:00:d4:73:83:76:3f:32:00:f3:68:b9:ca:3d:bd: 93:63:0a:91:50:9d:88:b0:a6:a1:8c:6f:8d:7f:7d: 75:8c:9d:88:ca:3c:8d:4b:2f:cc:24:9a:e7:27:58: 9c:02:c5:45:8b:a4:1e:2f:9e:7a:66:7d:17:35:29: ff:df:90:0b:a0:27:01:77:83:69:9b:2c:72:89:c4: eb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2A:C8:04:B5:10:04:A5:E8:11:46:BC:DA:B3:37:C2:6D:2C:D8:8F X509v3 Authority Key Identifier: keyid:E7:E1:DA:39:A6:AC:AC:13:A4:43:4C:0B:07:A1:5F:DD:6D:C3:93:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E7E1DA39A6ACAC13A4434C0B07A15FDD6DC3934B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TAIFO7716/0/3130312e332e3230382e302f32322d3234203d3e203138303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.3.208.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:68:49:02:15:88:da:fb:01:de:2a:42:76:f7:dc:81:02:9c: fa:86:ee:9c:70:de:10:75:54:a3:c2:d0:6c:d7:00:1b:82:55: ce:34:b0:e8:68:bf:14:55:c8:ff:04:f5:98:0f:8a:5d:ab:c6: fa:a7:f1:67:6a:eb:92:7c:1f:15:ff:aa:09:0f:f9:7d:b7:16: 8d:d0:ae:30:d9:ad:f5:09:86:73:df:3e:34:9f:11:41:e5:36: c7:07:a0:7e:43:d2:54:d1:c6:c5:69:15:53:21:5b:a7:3c:58: 9a:88:da:74:55:4c:61:2e:4c:73:f4:5f:e9:92:1e:39:f0:6a: 03:77:5b:82:1f:f6:74:e2:d1:77:d1:66:6e:39:4b:05:15:ff: f5:5e:6e:89:68:e6:c8:15:cd:1d:7e:0c:12:5f:4f:33:5d:5c: 9b:ce:d2:03:37:df:e3:a3:5a:e6:e4:58:74:d5:86:a8:81:eb: 5f:f0:52:d4:bb:67:a2:cc:7b:0f:7d:12:0c:37:9c:40:ac:4f: 4c:ca:20:9c:0c:b2:39:2f:da:80:ab:1f:73:2a:0f:53:13:10: b6:05:a1:93:a2:14:06:c6:4d:34:2b:91:be:d0:3f:da:4a:82: c5:37:7b:d0:fb:15:73:fd:c8:b3:c1:cd:e0:7a:85:ca:5b:b4: 22:22:f0:74 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUW9DCAoHPnQ9MsXKCnSlwBFhu8PQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdFMURBMzlBNkFDQUMxM0E0NDM0QzBCMDdBMTVGREQ2 REMzOTM0QjAeFw0yNjA1MTExNzM1MTBaFw0yNzA1MTAxNzQwMTBaMDMxMTAvBgNV BAMTKEZCMkFDODA0QjUxMDA0QTVFODExNDZCQ0RBQjMzN0MyNkQyQ0Q4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3o3v7Oc+byVIlvSZ2uBuljQwq IZSCnXLB+RU95xWPT4R0lHplC03XdT29SBzuk/zJRkTMCrczRnf7vuQnHwnOPI8H hDElsuZK0rSfI1LrDFM0KxVJBug1s2FgIZEGXJIUdu/JzfFjHqudPqG0g5aHvHOr OQeI43eYoujlGhAMqHJ8tVyOJsvwkKKNd4+UzEYI344Nokv+PIQC/t2GdqBVCxQm 7TnR1L6iEDC4T75bm9nclAAA1HODdj8yAPNouco9vZNjCpFQnYiwpqGMb41/fXWM nYjKPI1LL8wkmucnWJwCxUWLpB4vnnpmfRc1Kf/fkAugJwF3g2mbLHKJxOv5AgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQU+yrIBLUQBKXoEUa82rM3wm0s2I8wHwYDVR0j BBgwFoAU5+HaOaasrBOkQ0wLB6Ff3W3Dk0swDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFJRk83 NzE2LzAvRTdFMURBMzlBNkFDQUMxM0E0NDM0QzBCMDdBMTVGREQ2REMzOTM0Qi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9FN0UxREEzOUE2QUNBQzEzQTQ0MzRDMEIw N0ExNUZERDZEQzM5MzRCLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuG YXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFJRk83NzE2LzAvMzEzMDMx MmUzMzJlMzIzMDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzODMwMzQzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmUD0DANBgkqhkiG9w0BAQsFAAOCAQEATWhJAhWI2vsB3ipCdvfc gQKc+obunHDeEHVUo8LQbNcAG4JVzjSw6Gi/FFXI/wT1mA+KXavG+qfxZ2rrknwf Ff+qCQ/5fbcWjdCuMNmt9QmGc98+NJ8RQeU2xwegfkPSVNHGxWkVUyFbpzxYmoja dFVMYS5Mc/Rf6ZIeOfBqA3dbgh/2dOLRd9FmbjlLBRX/9V5uiWjmyBXNHX4MEl9P M11cm87SAzff46Na5uRYdNWGqIHrX/BS1Ltnosx7D30SDDecQKxPTMognAyyOS/a gKsfcyoPUxMQtgWhk6IUBsZNNCuRvtA/2kqCxTd70PsVc/3Is8HN4HqFylu0IiLw dA== -----END CERTIFICATE-----Generated at Wed May 13 21:11:41 2026 by rpki-client