$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/0/323430313a643632303a3a2f33322d3332203d3e203633393038.roa File: 323430313a643632303a3a2f33322d3332203d3e203633393038.roa (raw, json) Hash identifier: ofLPjBKTBs9W0l0wBzO55kfak8bQwY7CY2cd13YbZdk= Subject key identifier: 8A:D7:16:87:6C:54:90:E2:C2:44:88:B3:AC:87:8C:54:57:9C:E4:01 Certificate issuer: /CN=21CAA92944B74031E7B05249B1D84BA3997C6E82 Certificate serial: 093A206B235F0F94AF9F525459CA2F13B3A484C9 Authority key identifier: 21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TCSKY/0/323430313a643632303a3a2f33322d3332203d3e203633393038.roa Signing time: Mon 11 May 2026 17:39:22 +0000 ROA not before: Mon 11 May 2026 17:34:22 +0000 ROA not after: Mon 10 May 2027 17:39:22 +0000 asID: 63908 IP address blocks: 2401:d620::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:3a:20:6b:23:5f:0f:94:af:9f:52:54:59:ca:2f:13:b3:a4:84:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21CAA92944B74031E7B05249B1D84BA3997C6E82 Validity Not Before: May 11 17:34:22 2026 GMT Not After : May 10 17:39:22 2027 GMT Subject: CN=8AD716876C5490E2C24488B3AC878C54579CE401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:e0:fd:e7:90:2a:62:e4:a7:d4:d8:98:de: 7d:4b:d0:34:39:27:b4:da:c7:62:3e:37:3f:4d:78: 4a:6e:c9:46:96:8e:fc:73:5f:74:49:95:be:4c:12: 96:c0:ee:6b:b9:2b:1c:0d:47:cd:e3:7a:66:b0:1c: ec:e7:fd:25:bf:9e:d9:f1:1d:d9:b5:32:14:70:9c: f2:29:1d:89:7e:f7:0f:13:7b:33:27:12:5b:9a:a7: 81:83:f9:a6:c7:f1:60:11:41:d4:91:fd:0c:aa:36: 76:fc:be:35:af:68:2b:83:b0:17:80:54:24:a3:5a: a7:c8:fe:2f:0b:e8:4c:a6:7d:50:54:da:29:a8:e6: 1f:6e:69:50:96:b7:fd:4c:22:c7:a8:bd:56:5e:74: 2d:c5:b5:8b:f7:8f:de:12:ea:1c:57:73:36:05:49: 2b:63:6c:69:b6:3e:8e:5f:46:fb:c6:57:f8:1d:42: d9:a7:f5:9a:94:de:89:79:1c:8e:77:f2:52:5e:74: d2:25:db:36:f7:2b:9c:78:e7:fb:ec:64:5e:87:8d: 6b:9d:74:8d:ed:65:a2:12:7e:02:9c:c3:07:06:50: 82:8c:b4:ba:1d:ee:a4:06:42:d0:8c:ad:9e:f2:7a: ed:46:ab:24:23:b8:61:20:8d:21:09:d9:7a:74:60: 99:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D7:16:87:6C:54:90:E2:C2:44:88:B3:AC:87:8C:54:57:9C:E4:01 X509v3 Authority Key Identifier: keyid:21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/323430313a643632303a3a2f33322d3332203d3e203633393038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:d620::/32 Signature Algorithm: sha256WithRSAEncryption 78:13:35:81:ea:a4:4e:27:76:2e:67:ef:fe:cf:44:ef:96:e2: d7:8e:62:ea:02:87:31:72:96:d4:b0:1f:31:18:50:3b:3d:ca: c7:c6:83:a4:ea:29:0a:34:1e:b7:ae:1f:55:7a:e9:b8:66:7e: ad:c1:d1:b2:41:68:9e:e4:2f:15:33:eb:8d:84:9b:b8:9d:c9: 94:28:f8:d5:36:62:b7:55:10:b6:f9:48:29:9c:1c:57:7f:bd: 57:c5:81:88:d8:75:9a:f4:57:ae:ed:2f:fb:13:4a:cd:62:fa: 71:18:c4:f7:fe:57:ee:4f:80:76:ec:b7:5f:83:2a:40:0f:cb: 8e:5d:e0:21:d9:17:8f:6b:8a:14:2b:4c:f9:e4:17:c1:ca:ea: 43:2a:8c:df:d7:c2:65:2f:56:3c:a0:df:db:6c:3f:48:e5:fd: 77:f9:ea:ca:26:0d:2a:54:43:d7:5b:b4:7f:4b:4a:37:a5:65: 27:64:5a:c1:43:9b:04:76:8e:ba:04:e7:f5:0f:c0:fc:fb:bf: 74:a3:c4:b8:9a:38:d9:c9:06:94:f8:3f:3d:27:99:b2:4c:69: ca:3e:ae:fe:60:53:75:6e:69:b1:cb:88:92:a8:8d:7f:e9:86: bf:e0:7d:16:d5:f6:43:37:68:a4:81:25:18:34:21:ca:2d:09: 1a:ec:7a:39 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIUCTogayNfD5Svn1JUWcovE7OkhMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFDQUE5Mjk0NEI3NDAzMUU3QjA1MjQ5QjFEODRCQTM5 OTdDNkU4MjAeFw0yNjA1MTExNzM0MjJaFw0yNzA1MTAxNzM5MjJaMDMxMTAvBgNV BAMTKDhBRDcxNjg3NkM1NDkwRTJDMjQ0ODhCM0FDODc4QzU0NTc5Q0U0MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpUOD955AqYuSn1NiY3n1L0DQ5 J7Tax2I+Nz9NeEpuyUaWjvxzX3RJlb5MEpbA7mu5KxwNR83jemawHOzn/SW/ntnx Hdm1MhRwnPIpHYl+9w8TezMnEluap4GD+abH8WARQdSR/QyqNnb8vjWvaCuDsBeA VCSjWqfI/i8L6EymfVBU2imo5h9uaVCWt/1MIseovVZedC3FtYv3j94S6hxXczYF SStjbGm2Po5fRvvGV/gdQtmn9ZqU3ol5HI538lJedNIl2zb3K5x45/vsZF6HjWud dI3tZaISfgKcwwcGUIKMtLod7qQGQtCMrZ7yeu1GqyQjuGEgjSEJ2Xp0YJmNAgMB AAGjggHgMIIB3DAdBgNVHQ4EFgQUitcWh2xUkOLCRIizrIeMVFec5AEwHwYDVR0j BBgwFoAUIcqpKUS3QDHnsFJJsdhLo5l8boIwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVENTS1kv MC8yMUNBQTkyOTQ0Qjc0MDMxRTdCMDUyNDlCMUQ4NEJBMzk5N0M2RTgyLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzIxQ0FBOTI5NDRCNzQwMzFFN0IwNTI0OUIxRDg0 QkEzOTk3QzZFODIuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQ1NLWS8wLzMyMzQzMDMxM2E2NDM2 MzIzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM2MzMzOTMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAdYgMA0GCSqGSIb3DQEBCwUAA4IBAQB4EzWB6qROJ3YuZ+/+z0TvluLXjmLq AocxcpbUsB8xGFA7PcrHxoOk6ikKNB63rh9Veum4Zn6twdGyQWie5C8VM+uNhJu4 ncmUKPjVNmK3VRC2+UgpnBxXf71XxYGI2HWa9Feu7S/7E0rNYvpxGMT3/lfuT4B2 7LdfgypAD8uOXeAh2RePa4oUK0z55BfByupDKozf18JlL1Y8oN/bbD9I5f13+erK Jg0qVEPXW7R/S0o3pWUnZFrBQ5sEdo66BOf1D8D8+790o8S4mjjZyQaU+D89J5my TGnKPq7+YFN1bmmxy4iSqI1/6Ya/4H0W1fZDN2ikgSUYNCHKLQka7Ho5 -----END CERTIFICATE-----Generated at Wed May 13 21:14:45 2026 by rpki-client