$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3132302e302e302f31362d3136203d3e2031363539.roa File: 3134302e3132302e302e302f31362d3136203d3e2031363539.roa (raw, json) Hash identifier: LcjaTYORzFCgY/2s1oF9kqf/A2rB0E7VcqP7ZAbPXwI= Subject key identifier: CB:91:7F:8E:C7:30:5D:CC:96:72:65:2D:F5:B2:B8:A8:CB:83:F8:68 Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 439120A1C75404932EA2083AF7EEFF3535B141EE Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132302e302e302f31362d3136203d3e2031363539.roa Signing time: Tue 04 Aug 2026 02:44:06 +0000 ROA not before: Tue 04 Aug 2026 02:39:06 +0000 ROA not after: Tue 03 Aug 2027 02:44:06 +0000 asID: 1659 IP address blocks: 140.120.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 22:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:91:20:a1:c7:54:04:93:2e:a2:08:3a:f7:ee:ff:35:35:b1:41:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: Aug 4 02:39:06 2026 GMT Not After : Aug 3 02:44:06 2027 GMT Subject: CN=CB917F8EC7305DCC9672652DF5B2B8A8CB83F868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:c8:6e:1a:e5:cf:7c:e0:dd:bc:83:2b:ce: 9c:6d:f0:8a:c1:a6:d6:4c:99:f7:74:8e:54:fb:2f: 05:20:20:f2:0e:be:a2:4f:6a:2a:3f:54:4e:0b:5b: a9:53:a2:f0:25:a5:73:03:25:73:52:13:52:5c:87: f4:8d:ad:2c:26:75:d4:f4:f6:b8:75:62:b9:3b:2f: e2:13:a6:63:b9:6c:61:e8:b6:59:21:41:11:c0:b5: d9:51:a1:d7:d6:1e:4f:d2:98:f2:89:7c:fb:a2:27: ea:13:a1:0b:d4:ba:7c:37:ea:0d:66:f0:17:03:ee: d3:2a:96:fb:2e:cf:b1:3a:7b:9f:d1:bf:4a:bf:50: 2d:6e:16:80:4e:eb:5d:cc:ca:0a:e9:d1:52:7b:2e: 11:82:67:c8:a9:f3:5c:92:f7:51:db:e1:aa:19:b9: d6:61:7b:d9:5d:2f:30:ad:6c:4d:b2:db:3e:a5:95: bc:d6:5d:91:89:ea:b4:18:71:96:94:0c:6a:e6:0d: dd:da:40:a0:1a:ae:59:a5:17:8f:7a:43:48:7e:c5: 86:a4:2c:3c:1c:13:81:9f:dd:5a:9d:29:2b:5e:73: 40:00:d0:28:c7:87:49:9f:72:c1:0f:09:46:73:6e: 8f:f3:cc:c2:be:53:4c:fb:e1:40:79:54:c9:49:0f: 78:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:91:7F:8E:C7:30:5D:CC:96:72:65:2D:F5:B2:B8:A8:CB:83:F8:68 X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3132302e302e302f31362d3136203d3e2031363539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.120.0.0/16 Signature Algorithm: sha256WithRSAEncryption 95:5c:4b:3d:bb:63:ff:6a:91:2b:fa:ff:a2:80:1c:cc:79:98: 5b:06:70:a1:3c:44:59:7a:4a:e4:ee:ac:46:78:5f:08:3c:4b: 01:1e:9e:51:92:53:37:d9:b5:26:06:0d:f2:b5:bb:82:4f:be: 0a:94:d3:68:da:ce:0a:5e:91:55:8a:c7:40:fe:ab:9e:5e:5d: 53:65:a0:11:bb:1d:4a:2a:00:77:6c:c9:02:c6:58:ae:8a:e2: d8:b1:dd:92:8d:ce:52:04:4b:8b:46:19:4e:12:7c:2d:0d:b1: fc:05:9c:1a:e7:98:2a:f5:bc:ac:74:29:d8:6e:c9:ea:14:1b: 15:a1:07:fe:a8:00:50:a3:d6:4c:26:69:e4:1a:7d:d9:e2:cc: 69:4c:d7:1f:a3:fd:a9:e7:a9:e2:c4:df:a9:00:a6:dc:9b:27: d1:92:2e:bf:ad:07:3d:63:aa:99:36:a0:9d:bf:f5:8b:e9:82: 0a:fb:42:7c:d8:13:a4:e6:a5:11:b1:f2:22:0d:ad:67:f6:84: e9:f2:a6:8f:13:9c:53:63:57:83:7a:d5:da:db:bc:5b:c7:cd: 47:14:b8:5d:d8:f5:c8:d9:f7:b2:10:19:84:1c:1e:92:14:a1: f5:55:47:94:8b:12:98:59:25:19:cd:45:58:18:c2:0d:67:c6: 79:52:69:a4 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUQ5EgocdUBJMuogg69+7/NTWxQe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA4MDQwMjM5MDZaFw0yNzA4MDMwMjQ0MDZaMDMxMTAvBgNV BAMTKENCOTE3RjhFQzczMDVEQ0M5NjcyNjUyREY1QjJCOEE4Q0I4M0Y4NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDchuGuXPfODdvIMrzpxt8IrB ptZMmfd0jlT7LwUgIPIOvqJPaio/VE4LW6lTovAlpXMDJXNSE1Jch/SNrSwmddT0 9rh1Yrk7L+ITpmO5bGHotlkhQRHAtdlRodfWHk/SmPKJfPuiJ+oToQvUunw36g1m 8BcD7tMqlvsuz7E6e5/Rv0q/UC1uFoBO613Mygrp0VJ7LhGCZ8ip81yS91Hb4aoZ udZhe9ldLzCtbE2y2z6llbzWXZGJ6rQYcZaUDGrmDd3aQKAarlmlF496Q0h+xYak LDwcE4Gf3VqdKStec0AA0CjHh0mfcsEPCUZzbo/zzMK+U0z74UB5VMlJD3gfAgMB AAGjggHcMIIB2DAdBgNVHQ4EFgQUy5F/jscwXcyWcmUt9bK4qMuD+GgwHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzQzMDJlMzEzMjMw MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNkM2UyMDMxMzYzNTM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA jHgwDQYJKoZIhvcNAQELBQADggEBAJVcSz27Y/9qkSv6/6KAHMx5mFsGcKE8RFl6 SuTurEZ4Xwg8SwEenlGSUzfZtSYGDfK1u4JPvgqU02jazgpekVWKx0D+q55eXVNl oBG7HUoqAHdsyQLGWK6K4tix3ZKNzlIES4tGGU4SfC0NsfwFnBrnmCr1vKx0Kdhu yeoUGxWhB/6oAFCj1kwmaeQafdnizGlM1x+j/annqeLE36kAptybJ9GSLr+tBz1j qpk2oJ2/9Yvpggr7QnzYE6TmpRGx8iINrWf2hOnypo8TnFNjV4N61drbvFvHzUcU uF3Y9cjZ97IQGYQcHpIUofVVR5SLEphZJRnNRVgYwg1nxnlSaaQ= -----END CERTIFICATE-----Generated at Wed Aug 5 12:34:46 2026 by rpki-client