$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/323430353a393230303a3a2f33322d3634203d3e203137373039.roa File: 323430353a393230303a3a2f33322d3634203d3e203137373039.roa (raw, json) Hash identifier: 28k8Ox2zQm8UDsug3hppILrCiP0LcEmw441pIEp7dLI= Subject key identifier: 33:9B:E0:1A:44:09:B3:77:71:11:D4:1A:F0:92:B6:9F:6A:BF:8D:67 Certificate issuer: /CN=C0ACF76C345159D3241315F2997526806968CB40 Certificate serial: 587D725B821C16505C2FD8E2D9925A9809EA67E4 Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TBCOM/0/323430353a393230303a3a2f33322d3634203d3e203137373039.roa Signing time: Mon 11 May 2026 17:37:04 +0000 ROA not before: Mon 11 May 2026 17:32:04 +0000 ROA not after: Mon 10 May 2027 17:37:04 +0000 asID: 17709 IP address blocks: 2405:9200::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7d:72:5b:82:1c:16:50:5c:2f:d8:e2:d9:92:5a:98:09:ea:67:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40 Validity Not Before: May 11 17:32:04 2026 GMT Not After : May 10 17:37:04 2027 GMT Subject: CN=339BE01A4409B3777111D41AF092B69F6ABF8D67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:a8:9b:c3:64:63:f3:76:8c:98:8b:9e:e4: c9:a1:2f:15:16:56:c3:cf:99:05:1c:a0:f3:4a:34: f5:5f:16:e8:fb:12:c8:fb:74:ec:dd:bf:6f:61:a0: 80:11:bb:41:9d:50:1a:5b:cf:ab:e3:e0:f3:70:fe: de:70:67:ae:e5:a3:81:76:5d:59:3f:92:91:3c:2e: d2:94:1e:65:da:ee:ec:8d:f0:d8:2c:e8:5f:55:0e: 2d:4c:d1:8a:e8:37:db:f7:07:ce:96:27:9c:66:4d: 0d:7d:13:ff:bd:2c:df:ac:5d:c8:80:fb:c6:76:78: 53:1b:de:0e:1f:d1:48:7b:c3:ca:9d:d0:68:14:e4: ed:74:20:48:6c:a2:d1:7c:26:b5:86:c3:73:71:59: 0e:50:c3:82:dc:de:ce:de:ea:a0:a6:0a:27:bc:ea: 2a:ee:cd:d3:01:6d:8d:09:50:87:8d:0b:4a:0e:44: 2b:de:07:1d:9c:6a:62:51:6f:d8:eb:d2:e4:d2:7c: 56:d4:eb:f0:51:16:33:5d:43:6f:d6:3e:84:48:19: 4e:f4:c0:ec:a0:dd:cc:c2:19:30:a7:4f:05:5d:fc: 91:c6:36:8b:56:66:e0:80:c4:0e:c9:e5:d7:63:b1: 44:53:14:ab:4c:a1:35:3e:a6:eb:6a:32:74:38:a9: 0f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9B:E0:1A:44:09:B3:77:71:11:D4:1A:F0:92:B6:9F:6A:BF:8D:67 X509v3 Authority Key Identifier: keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/323430353a393230303a3a2f33322d3634203d3e203137373039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:9200::/32 Signature Algorithm: sha256WithRSAEncryption 4e:4a:e2:c3:3f:23:c5:83:1d:af:6d:f4:78:87:5b:3e:0b:86: 36:c6:5c:e1:db:c2:11:63:0b:4d:17:03:33:85:ad:5b:59:d2: 6f:72:da:16:e1:7a:dc:a3:44:6c:c0:9b:1a:f1:37:7d:5e:62: a5:43:48:61:0e:ee:87:5c:07:a7:01:ae:50:2d:e4:32:19:e6: d3:e3:d4:33:5e:6f:8c:64:23:a9:f9:52:25:98:f6:fe:b7:f4: 83:66:15:d8:a0:9d:35:62:e6:85:97:dd:25:11:89:d6:83:e4: 3e:a1:64:ec:bf:ba:14:9e:3c:c4:b9:c0:dc:fa:e2:89:7d:dd: f1:49:e0:64:8f:fe:d2:45:59:79:80:77:6e:42:74:b6:58:e9: c4:e5:62:5b:c5:4b:8f:13:92:ad:22:84:7f:9f:d8:af:59:bb: 36:16:aa:a3:15:d7:20:07:f2:18:a7:da:54:06:49:be:df:0d: 88:38:2f:74:6e:08:25:b9:0a:76:7a:c1:22:b9:d3:cd:a9:40: 1a:62:e8:6a:ee:af:37:f6:ab:35:88:06:b3:27:73:0d:13:cd: 32:2e:5c:23:9f:a9:68:e3:de:bb:99:55:9e:87:e0:f1:c1:b7: 23:f7:1e:58:e3:87:20:ca:e6:e3:09:84:40:1e:42:14:28:b5: cb:f2:57:c0 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIUWH1yW4IcFlBcL9ji2ZJamAnqZ+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBBQ0Y3NkMzNDUxNTlEMzI0MTMxNUYyOTk3NTI2ODA2 OTY4Q0I0MDAeFw0yNjA1MTExNzMyMDRaFw0yNzA1MTAxNzM3MDRaMDMxMTAvBgNV BAMTKDMzOUJFMDFBNDQwOUIzNzc3MTExRDQxQUYwOTJCNjlGNkFCRjhENjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn16ibw2Rj83aMmIue5MmhLxUW VsPPmQUcoPNKNPVfFuj7Esj7dOzdv29hoIARu0GdUBpbz6vj4PNw/t5wZ67lo4F2 XVk/kpE8LtKUHmXa7uyN8Ngs6F9VDi1M0YroN9v3B86WJ5xmTQ19E/+9LN+sXciA +8Z2eFMb3g4f0Uh7w8qd0GgU5O10IEhsotF8JrWGw3NxWQ5Qw4Lc3s7e6qCmCie8 6iruzdMBbY0JUIeNC0oORCveBx2camJRb9jr0uTSfFbU6/BRFjNdQ2/WPoRIGU70 wOyg3czCGTCnTwVd/JHGNotWZuCAxA7J5ddjsURTFKtMoTU+putqMnQ4qQ8hAgMB AAGjggHgMIIB3DAdBgNVHQ4EFgQUM5vgGkQJs3dxEdQa8JK2n2q/jWcwHwYDVR0j BBgwFoAUwKz3bDRRWdMkExXymXUmgGloy0AwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEJDT00v MC9DMEFDRjc2QzM0NTE1OUQzMjQxMzE1RjI5OTc1MjY4MDY5NjhDQjQwLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0MwQUNGNzZDMzQ1MTU5RDMyNDEzMTVGMjk5NzUy NjgwNjk2OENCNDAuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQkNPTS8wLzMyMzQzMDM1M2EzOTMy MzAzMDNhM2EyZjMzMzIyZDM2MzQyMDNkM2UyMDMxMzczNzMwMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkBZIAMA0GCSqGSIb3DQEBCwUAA4IBAQBOSuLDPyPFgx2vbfR4h1s+C4Y2xlzh 28IRYwtNFwMzha1bWdJvctoW4Xrco0RswJsa8Td9XmKlQ0hhDu6HXAenAa5QLeQy GebT49QzXm+MZCOp+VIlmPb+t/SDZhXYoJ01YuaFl90lEYnWg+Q+oWTsv7oUnjzE ucDc+uKJfd3xSeBkj/7SRVl5gHduQnS2WOnE5WJbxUuPE5KtIoR/n9ivWbs2Fqqj FdcgB/IYp9pUBkm+3w2IOC90bggluQp2esEiudPNqUAaYuhq7q839qs1iAazJ3MN E80yLlwjn6lo4967mVWeh+Dxwbcj9x5Y44cgyubjCYRAHkIUKLXL8lfA -----END CERTIFICATE-----Generated at Wed May 13 21:12:11 2026 by rpki-client