$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3133342e3230382e302e302f31362d3136203d3e203137373131.roa File: 3133342e3230382e302e302f31362d3136203d3e203137373131.roa (raw, json) Hash identifier: /rQLY1G246aG6fwnstadOD+BMnJKVOBPD88l8lv1r2g= Subject key identifier: 07:62:74:6C:73:87:C2:86:79:C5:2B:04:C0:19:0E:3B:C8:4F:4F:4E Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 702CD3B65276D023A22E5FB6F153A8B395C2BBEC Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3133342e3230382e302e302f31362d3136203d3e203137373131.roa Signing time: Tue 04 Aug 2026 07:24:00 +0000 ROA not before: Tue 04 Aug 2026 07:19:00 +0000 ROA not after: Tue 03 Aug 2027 07:24:00 +0000 asID: 17711 IP address blocks: 134.208.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 22:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2c:d3:b6:52:76:d0:23:a2:2e:5f:b6:f1:53:a8:b3:95:c2:bb:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: Aug 4 07:19:00 2026 GMT Not After : Aug 3 07:24:00 2027 GMT Subject: CN=0762746C7387C28679C52B04C0190E3BC84F4F4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:c8:c6:8f:9a:3c:90:ea:a7:1a:cd:33:1c: b7:ba:d0:4e:18:25:06:4f:31:9f:b7:81:0e:8c:56: 7e:ff:54:95:f5:16:3c:b7:ec:1e:28:d5:8b:c4:e9: c3:12:4a:a7:f8:35:c7:b2:a2:a3:5d:41:f7:af:b3: c8:af:59:7b:cc:d4:06:23:9a:3e:f7:55:ef:ff:28: 41:44:3c:14:bd:bd:ef:eb:90:55:6a:f7:47:32:4f: 83:2b:ae:8e:32:d1:6d:44:0c:84:17:a4:39:4c:5a: 28:ea:2a:35:f8:06:71:8f:6a:7e:60:bc:29:ce:ef: 6e:0e:a1:9b:bc:6c:fd:78:cc:85:5f:12:59:c9:48: d2:c0:a7:e3:8b:7e:d9:d2:50:77:25:23:a9:db:91: f8:9a:87:48:b9:9c:15:0e:ef:00:e5:38:33:a5:7a: 0d:34:e3:60:b5:b5:1d:20:ee:ef:74:1e:ef:1c:d4: 3d:00:38:0b:62:8b:c2:58:9a:9e:f1:45:67:b1:30: cf:d9:0b:a2:7b:b9:85:4b:e4:f5:30:fb:67:d6:95: a0:53:22:7e:38:56:cf:7f:c5:2d:7b:9a:a2:4f:ae: bd:15:ee:1c:e6:cc:8c:65:e6:bd:3a:62:f9:b5:f3: e5:bc:33:3d:45:8a:5e:b8:00:be:8e:4e:49:05:96: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:62:74:6C:73:87:C2:86:79:C5:2B:04:C0:19:0E:3B:C8:4F:4F:4E X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3133342e3230382e302e302f31362d3136203d3e203137373131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.208.0.0/16 Signature Algorithm: sha256WithRSAEncryption 08:98:a8:19:25:9d:7f:aa:21:03:8a:74:e4:86:be:73:c4:1a: 1d:cf:75:96:9e:f3:b3:02:e9:91:8b:e0:84:ee:8b:03:e9:ca: 37:02:e6:dd:e0:3c:89:2e:5d:ed:1f:44:75:61:59:a2:ab:15: e7:60:85:43:ad:91:00:94:62:06:9f:f3:2f:d2:70:52:4e:c4: 10:29:83:88:99:5d:05:47:7d:78:cf:24:22:84:67:aa:30:d1: c4:c3:56:f1:84:dd:88:21:19:7b:e4:06:da:79:fd:2d:2d:e1: 67:fa:e2:6b:27:3d:93:47:91:12:9b:76:ed:39:8c:a8:5e:8a: 22:a8:9a:4e:6b:b3:0b:d8:5a:b8:d6:1e:4c:58:16:c5:8c:37: 72:da:1e:da:21:9a:5e:23:4a:95:36:28:a9:50:a1:66:8a:a0: a0:a1:c4:7d:ae:e5:f3:3c:9e:f6:24:d6:db:5e:22:39:0e:f4: 8c:9e:92:40:17:60:ba:af:53:1a:c7:86:90:0c:23:1e:fa:67: 3d:73:c1:b1:dc:9e:b7:a7:0c:77:7b:15:75:5f:25:97:cb:1f: 8c:20:e4:e0:85:2e:45:b8:d7:ff:6d:8e:74:e5:cc:33:c4:54: de:b2:bb:e8:e1:47:6c:9e:8a:58:85:80:80:a6:e5:b9:03:74: e3:3a:8b:55 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUcCzTtlJ20COiLl+28VOos5XCu+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA4MDQwNzE5MDBaFw0yNzA4MDMwNzI0MDBaMDMxMTAvBgNV BAMTKDA3NjI3NDZDNzM4N0MyODY3OUM1MkIwNEMwMTkwRTNCQzg0RjRGNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCYcjGj5o8kOqnGs0zHLe60E4Y JQZPMZ+3gQ6MVn7/VJX1Fjy37B4o1YvE6cMSSqf4NceyoqNdQfevs8ivWXvM1AYj mj73Ve//KEFEPBS9ve/rkFVq90cyT4Mrro4y0W1EDIQXpDlMWijqKjX4BnGPan5g vCnO724OoZu8bP14zIVfElnJSNLAp+OLftnSUHclI6nbkfiah0i5nBUO7wDlODOl eg0042C1tR0g7u90Hu8c1D0AOAtii8JYmp7xRWexMM/ZC6J7uYVL5PUw+2fWlaBT In44Vs9/xS17mqJPrr0V7hzmzIxl5r06Yvm18+W8Mz1Fil64AL6OTkkFlmUDAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUB2J0bHOHwoZ5xSsEwBkOO8hPT04wHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzMzNDJlMzIzMDM4 MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNkM2UyMDMxMzczNzMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwCG0DANBgkqhkiG9w0BAQsFAAOCAQEACJioGSWdf6ohA4p05Ia+c8QaHc91lp7z swLpkYvghO6LA+nKNwLm3eA8iS5d7R9EdWFZoqsV52CFQ62RAJRiBp/zL9JwUk7E ECmDiJldBUd9eM8kIoRnqjDRxMNW8YTdiCEZe+QG2nn9LS3hZ/riayc9k0eREpt2 7TmMqF6KIqiaTmuzC9hauNYeTFgWxYw3ctoe2iGaXiNKlTYoqVChZoqgoKHEfa7l 8zye9iTW214iOQ70jJ6SQBdguq9TGseGkAwjHvpnPXPBsdyet6cMd3sVdV8ll8sf jCDk4IUuRbjX/22OdOXMM8RU3rK76OFHbJ6KWIWAgKbluQN04zqLVQ== -----END CERTIFICATE-----Generated at Wed Aug 5 12:34:08 2026 by rpki-client