$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e38302e302f32302d3234203d3e203137373039.roa File: 36312e35382e38302e302f32302d3234203d3e203137373039.roa (raw, json) Hash identifier: sCtA+OAE0f0KQqLGbdVeOxPQonQasHdJPFtCicNm3Sk= Subject key identifier: 8F:A5:C2:CF:15:BE:3B:C6:36:F0:81:19:25:39:B2:65:5A:3B:9B:25 Certificate issuer: /CN=C0ACF76C345159D3241315F2997526806968CB40 Certificate serial: 75B258939CBD006A1D93D839CA0103D88206778F Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e38302e302f32302d3234203d3e203137373039.roa Signing time: Mon 11 May 2026 17:37:11 +0000 ROA not before: Mon 11 May 2026 17:32:11 +0000 ROA not after: Mon 10 May 2027 17:37:11 +0000 asID: 17709 IP address blocks: 61.58.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b2:58:93:9c:bd:00:6a:1d:93:d8:39:ca:01:03:d8:82:06:77:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40 Validity Not Before: May 11 17:32:11 2026 GMT Not After : May 10 17:37:11 2027 GMT Subject: CN=8FA5C2CF15BE3BC636F081192539B2655A3B9B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:16:b9:ab:2a:30:72:48:8e:d5:e8:1d:2a: 09:03:b7:35:86:13:b0:9e:df:d0:82:1f:48:55:31: fc:8c:dd:d2:37:99:4b:17:84:47:94:d2:2f:d2:a2: b6:f7:98:56:9b:15:fa:00:c8:79:8e:fe:3a:94:8c: 9f:68:57:6f:f4:eb:0c:0f:20:21:4a:c6:29:5b:8b: cc:57:c3:f8:29:a3:c4:9b:1c:a6:76:98:78:31:f2: 79:8c:22:94:0e:25:44:5e:00:3e:4f:77:b1:05:98: ff:02:f8:73:15:e0:37:f6:c9:6b:ef:a5:e0:53:05: c7:4e:0c:f0:a6:b2:b4:95:0b:d4:95:d6:53:2c:12: 56:00:c1:53:6c:81:75:45:d6:2f:13:75:9d:87:0e: 27:40:5d:7c:09:92:34:98:b8:33:50:9d:87:ce:40: 01:fb:0d:d9:a3:84:a7:84:22:5e:47:41:99:6e:a5: 9d:70:60:c2:4c:ed:11:ef:ef:c1:10:6f:c0:7b:f7: 18:18:59:ce:05:fb:7a:14:04:c6:05:14:af:4b:88: d5:1a:df:3b:fc:b6:37:ea:a1:f7:94:f7:1d:b0:b7: 89:db:60:0c:1a:6c:93:f8:30:ee:3a:fd:fd:1e:17: b2:87:61:fc:a9:46:ad:49:2a:33:b3:7b:bd:62:3d: 1a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A5:C2:CF:15:BE:3B:C6:36:F0:81:19:25:39:B2:65:5A:3B:9B:25 X509v3 Authority Key Identifier: keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e38302e302f32302d3234203d3e203137373039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.58.80.0/20 Signature Algorithm: sha256WithRSAEncryption 6d:39:ca:91:5a:2e:ab:cd:b8:2b:1d:cc:a8:f9:4b:79:b9:b3: 5b:cb:50:26:2e:26:04:ef:b0:de:22:98:5a:ff:5d:9d:07:3c: 03:6e:29:05:da:15:49:52:8c:62:86:95:22:0e:e1:bf:87:5e: 1e:79:16:2f:68:38:7d:54:ad:49:f3:bf:ee:ee:0f:6c:1f:ed: 01:da:1d:51:a4:c9:bb:d7:bb:29:1b:08:15:51:4f:6a:4d:32: 43:ee:72:50:62:5c:c9:76:a3:09:93:f7:da:53:76:f8:1c:4e: c2:da:43:2b:64:78:e6:75:de:b4:05:89:ee:0b:05:36:44:04: 5c:20:ea:b9:f8:c7:87:a4:e7:ab:5a:81:70:1d:0c:09:00:f2: 5c:c7:54:6e:6e:4f:47:29:c5:71:cd:3d:40:6d:67:d9:64:97: 43:54:b4:ed:bf:a5:8e:36:2d:6f:97:93:1d:46:ca:8c:cf:f8: 99:c5:56:75:2e:cf:f6:a5:97:25:c1:61:4f:ee:1b:a9:26:34: 72:79:c7:33:75:38:96:4d:82:07:81:e9:30:a8:f5:10:2c:52: 62:e1:8f:17:01:54:b7:68:30:a9:07:8b:3b:87:ac:36:8f:44: 7a:f9:b0:50:10:8e:8d:d3:af:64:ef:6e:3f:70:ab:3a:5f:8e: 53:f9:19:e8 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUdbJYk5y9AGodk9g5ygED2IIGd48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBBQ0Y3NkMzNDUxNTlEMzI0MTMxNUYyOTk3NTI2ODA2 OTY4Q0I0MDAeFw0yNjA1MTExNzMyMTFaFw0yNzA1MTAxNzM3MTFaMDMxMTAvBgNV BAMTKDhGQTVDMkNGMTVCRTNCQzYzNkYwODExOTI1MzlCMjY1NUEzQjlCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2Ba5qyowckiO1egdKgkDtzWG E7Ce39CCH0hVMfyM3dI3mUsXhEeU0i/Sorb3mFabFfoAyHmO/jqUjJ9oV2/06wwP ICFKxilbi8xXw/gpo8SbHKZ2mHgx8nmMIpQOJUReAD5Pd7EFmP8C+HMV4Df2yWvv peBTBcdODPCmsrSVC9SV1lMsElYAwVNsgXVF1i8TdZ2HDidAXXwJkjSYuDNQnYfO QAH7DdmjhKeEIl5HQZlupZ1wYMJM7RHv78EQb8B79xgYWc4F+3oUBMYFFK9LiNUa 3zv8tjfqofeU9x2wt4nbYAwabJP4MO46/f0eF7KHYfypRq1JKjOze71iPRprAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUj6XCzxW+O8Y28IEZJTmyZVo7myUwHwYDVR0j BBgwFoAUwKz3bDRRWdMkExXymXUmgGloy0AwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEJDT00v MC9DMEFDRjc2QzM0NTE1OUQzMjQxMzE1RjI5OTc1MjY4MDY5NjhDQjQwLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0MwQUNGNzZDMzQ1MTU5RDMyNDEzMTVGMjk5NzUy NjgwNjk2OENCNDAuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQkNPTS8wLzM2MzEyZTM1MzgyZTM4 MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTM3MzczMDM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE PTpQMA0GCSqGSIb3DQEBCwUAA4IBAQBtOcqRWi6rzbgrHcyo+Ut5ubNby1AmLiYE 77DeIpha/12dBzwDbikF2hVJUoxihpUiDuG/h14eeRYvaDh9VK1J87/u7g9sH+0B 2h1RpMm717spGwgVUU9qTTJD7nJQYlzJdqMJk/faU3b4HE7C2kMrZHjmdd60BYnu CwU2RARcIOq5+MeHpOerWoFwHQwJAPJcx1Rubk9HKcVxzT1AbWfZZJdDVLTtv6WO Ni1vl5MdRsqMz/iZxVZ1Ls/2pZclwWFP7hupJjRyecczdTiWTYIHgekwqPUQLFJi 4Y8XAVS3aDCpB4s7h6w2j0R6+bBQEI6N069k724/cKs6X45T+Rno -----END CERTIFICATE-----Generated at Wed May 13 21:52:01 2026 by rpki-client