$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f32312d3234203d3e20313331353936.roa File: 35392e3130322e3132382e302f32312d3234203d3e20313331353936.roa (raw, json) Hash identifier: UC1h3XKjMaKXHWlcgJCHXHR/Gx919hvnDNN6HmWEJGI= Subject key identifier: 65:DA:48:DA:1F:6B:9A:DA:0D:A2:82:6A:06:84:1E:75:B1:52:ED:9D Certificate issuer: /CN=C0ACF76C345159D3241315F2997526806968CB40 Certificate serial: 5A0207B8FD043E9EBE536E0471C9EDC36D336C1B Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f32312d3234203d3e20313331353936.roa Signing time: Mon 11 May 2026 17:28:46 +0000 ROA not before: Mon 11 May 2026 17:23:46 +0000 ROA not after: Mon 10 May 2027 17:28:46 +0000 asID: 131596 IP address blocks: 59.102.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:02:07:b8:fd:04:3e:9e:be:53:6e:04:71:c9:ed:c3:6d:33:6c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40 Validity Not Before: May 11 17:23:46 2026 GMT Not After : May 10 17:28:46 2027 GMT Subject: CN=65DA48DA1F6B9ADA0DA2826A06841E75B152ED9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d4:6a:d4:5a:84:e4:3b:9e:63:a3:ab:09:9e: 4c:eb:c3:c5:d9:75:b4:6a:59:2b:81:e2:d6:07:72: 10:0c:2e:a9:07:c3:0b:0f:00:9d:52:88:ef:d5:6a: 6f:ea:72:0f:cf:fc:75:39:b8:ae:83:4a:35:70:eb: 9c:0e:e0:ea:3b:cc:3b:86:5e:20:03:50:e5:1c:13: 9e:71:02:07:f7:56:e7:a8:dd:2c:45:ff:e3:fc:ce: ed:49:3f:ec:5b:0d:c3:47:db:3e:09:6c:1e:9f:99: 82:08:4d:57:08:de:83:19:38:f6:29:45:3e:33:0b: 15:b5:b0:4c:e1:87:55:be:d4:f8:30:2b:0e:8a:1e: f7:d2:e6:72:d2:4a:31:3a:7d:5b:67:5e:0d:b2:d7: a9:fa:0b:bb:4a:da:8c:2a:c3:2b:db:04:24:7d:22: e3:03:b9:9b:28:8a:99:b1:91:7a:4b:d9:4a:9b:d2: 1a:4c:2e:e0:bc:08:ae:06:4a:ec:0b:d3:f4:3a:e1: bf:19:82:4a:1f:74:8c:60:43:71:9d:6d:02:2b:3c: c7:c4:00:6d:2e:eb:06:53:a8:7c:1a:d8:f7:8e:65: 46:13:5d:a6:a2:31:f7:8e:8c:65:9e:66:b8:df:15: 4d:7d:33:35:f1:af:8d:1b:f5:71:f0:63:8e:e6:57: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DA:48:DA:1F:6B:9A:DA:0D:A2:82:6A:06:84:1E:75:B1:52:ED:9D X509v3 Authority Key Identifier: keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f32312d3234203d3e20313331353936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.102.128.0/21 Signature Algorithm: sha256WithRSAEncryption 0d:5a:a8:8a:12:8b:46:47:e5:0e:be:43:be:30:71:ba:f7:fd: aa:26:e3:4d:f0:17:24:b2:dc:88:d3:5e:23:f5:8b:4a:91:63: f5:73:a0:39:24:0e:ab:02:2c:14:8a:30:70:6b:44:eb:b6:6c: 52:75:b2:fd:88:48:4e:72:49:c2:33:90:6c:4e:5f:1a:8a:81: 45:eb:1f:23:7c:cd:1f:db:01:81:b8:2c:c5:27:84:f5:8c:f6: 93:c2:62:bf:a5:6c:d8:88:36:2e:1c:85:c0:07:3a:c3:b4:7b: ee:dd:61:76:79:4c:44:f3:5e:e3:f4:58:14:4d:40:b1:51:e3: e0:d2:1f:7f:ea:33:44:22:4f:30:0a:7a:d5:f1:f2:2a:94:c7: 64:80:02:4d:4c:7e:e1:bd:c0:24:03:04:23:de:17:67:27:b7: 1f:97:6c:98:57:2e:57:7b:43:eb:bc:b1:29:42:8f:06:ca:de: 03:4a:a3:fa:e9:44:77:64:73:ae:95:6b:ea:fc:0a:fd:91:e4: a7:77:34:3f:54:4a:dc:eb:79:ee:7d:ed:06:a2:e4:8f:95:37: dc:29:8a:40:0b:4a:b2:5d:e7:13:12:13:2c:2e:01:a7:b5:a9: 71:18:e2:08:e3:0f:e2:ee:44:7c:9d:e3:78:62:4d:ce:43:ce: 90:b3:aa:26 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWgIHuP0EPp6+U24Eccntw20zbBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBBQ0Y3NkMzNDUxNTlEMzI0MTMxNUYyOTk3NTI2ODA2 OTY4Q0I0MDAeFw0yNjA1MTExNzIzNDZaFw0yNzA1MTAxNzI4NDZaMDMxMTAvBgNV BAMTKDY1REE0OERBMUY2QjlBREEwREEyODI2QTA2ODQxRTc1QjE1MkVEOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD11GrUWoTkO55jo6sJnkzrw8XZ dbRqWSuB4tYHchAMLqkHwwsPAJ1SiO/Vam/qcg/P/HU5uK6DSjVw65wO4Oo7zDuG XiADUOUcE55xAgf3Vueo3SxF/+P8zu1JP+xbDcNH2z4JbB6fmYIITVcI3oMZOPYp RT4zCxW1sEzhh1W+1PgwKw6KHvfS5nLSSjE6fVtnXg2y16n6C7tK2owqwyvbBCR9 IuMDuZsoipmxkXpL2Uqb0hpMLuC8CK4GSuwL0/Q64b8ZgkofdIxgQ3GdbQIrPMfE AG0u6wZTqHwa2PeOZUYTXaaiMfeOjGWeZrjfFU19MzXxr40b9XHwY47mV/UfAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUZdpI2h9rmtoNooJqBoQedbFS7Z0wHwYDVR0j BBgwFoAUwKz3bDRRWdMkExXymXUmgGloy0AwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEJDT00v MC9DMEFDRjc2QzM0NTE1OUQzMjQxMzE1RjI5OTc1MjY4MDY5NjhDQjQwLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0MwQUNGNzZDMzQ1MTU5RDMyNDEzMTVGMjk5NzUy NjgwNjk2OENCNDAuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQkNPTS8wLzM1MzkyZTMxMzAzMjJl MzEzMjM4MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzMzMxMzUzOTM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQDO2aAMA0GCSqGSIb3DQEBCwUAA4IBAQANWqiKEotGR+UOvkO+MHG69/2q JuNN8BckstyI014j9YtKkWP1c6A5JA6rAiwUijBwa0TrtmxSdbL9iEhOcknCM5Bs Tl8aioFF6x8jfM0f2wGBuCzFJ4T1jPaTwmK/pWzYiDYuHIXABzrDtHvu3WF2eUxE 817j9FgUTUCxUePg0h9/6jNEIk8wCnrV8fIqlMdkgAJNTH7hvcAkAwQj3hdnJ7cf l2yYVy5Xe0PrvLEpQo8Gyt4DSqP66UR3ZHOulWvq/Ar9keSndzQ/VErc63nufe0G ouSPlTfcKYpAC0qyXecTEhMsLgGntalxGOII4w/i7kR8neN4Yk3OQ86Qs6om -----END CERTIFICATE-----Generated at Wed May 13 21:11:53 2026 by rpki-client