$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/32372e3130302e36342e302f31382d3234203d3e203138303439.roa File: 32372e3130302e36342e302f31382d3234203d3e203138303439.roa (raw, json) Hash identifier: IgGiKlZi1ecHyeOA+vgVdG2q10raoZibLTHe2fRKeuA= Subject key identifier: E1:95:45:C2:0E:57:DD:22:7B:56:0C:97:1A:64:8B:BD:F3:EF:BD:FB Certificate issuer: /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F Certificate serial: 41986E3D2F4335F8F752731EDAF3AD8CE756C9BF Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TINP/0/32372e3130302e36342e302f31382d3234203d3e203138303439.roa Signing time: Mon 11 May 2026 16:42:11 +0000 ROA not before: Mon 11 May 2026 16:37:11 +0000 ROA not after: Mon 10 May 2027 16:42:11 +0000 asID: 18049 IP address blocks: 27.100.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:98:6e:3d:2f:43:35:f8:f7:52:73:1e:da:f3:ad:8c:e7:56:c9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F Validity Not Before: May 11 16:37:11 2026 GMT Not After : May 10 16:42:11 2027 GMT Subject: CN=E19545C20E57DD227B560C971A648BBDF3EFBDFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:04:58:f0:0b:97:c6:fd:bb:54:04:13:10:d1: 4e:58:1a:25:ac:e6:7b:d9:29:36:c5:37:ff:a2:a4: 66:e4:63:5d:0e:b9:13:2e:6c:ef:f8:ad:06:68:e6: a5:89:00:9b:04:e3:3f:45:9d:40:f0:2b:a9:2e:61: 29:41:a6:a5:5a:9c:29:f6:d3:d5:96:e6:80:71:95: 54:14:9c:0b:57:5c:07:ae:6e:99:de:8c:9c:2f:63: b0:79:c0:61:3f:aa:44:3d:37:ab:72:9c:28:72:31: f6:82:03:3f:a5:07:ab:c2:71:10:3f:fb:8e:7d:5d: 81:02:1e:57:54:b8:3b:22:cd:94:6a:88:f0:59:eb: e3:88:6a:5e:57:22:1b:91:41:84:a0:c4:f1:28:9c: 12:1d:cc:6a:be:31:5c:b0:2a:75:ac:e2:b7:e0:44: 48:ed:3c:26:d3:65:62:53:fb:42:22:37:3b:da:75: 3d:20:e9:16:15:91:fb:3d:33:ed:b9:a8:ff:fa:c3: f2:fe:5a:14:2b:4d:45:0b:39:17:6b:68:94:22:2b: 74:ed:61:29:52:55:ee:31:95:b1:36:a3:81:48:78: 23:e3:2a:e0:20:d1:56:9b:26:f1:21:bb:a1:5f:63: cf:8b:61:89:3c:3e:7d:21:25:d0:dc:fe:36:2c:d3: f8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:95:45:C2:0E:57:DD:22:7B:56:0C:97:1A:64:8B:BD:F3:EF:BD:FB X509v3 Authority Key Identifier: keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/32372e3130302e36342e302f31382d3234203d3e203138303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.100.64.0/18 Signature Algorithm: sha256WithRSAEncryption 58:b5:af:1d:8c:a5:f5:c2:de:15:4f:aa:a6:6b:ed:bf:e0:5b: 2d:a0:17:3c:35:12:80:66:f8:ad:ff:f5:f1:e1:e2:fa:2a:df: 95:c1:d8:b3:f8:8b:61:f0:0e:99:c6:7a:0d:13:c2:db:46:c5: 56:45:41:65:04:86:04:1b:3b:d3:9a:d7:87:d0:b8:bc:2d:6c: 58:22:8d:b3:b4:b0:b4:fa:69:6a:72:f3:04:66:01:88:e3:d2: c7:4f:7a:f1:1e:75:94:dd:d1:9b:7e:e7:f1:99:90:53:3b:6a: 6b:7f:b2:8e:fa:7b:ab:5e:3f:5a:da:94:86:89:04:d1:24:fd: bf:89:3d:b8:dc:11:2d:79:0b:d8:93:fe:48:79:63:2f:14:8f: 93:16:04:7c:d1:93:f1:b8:3b:e5:85:7b:98:e8:dd:27:f4:de: 62:ed:18:c7:3f:b4:68:8e:dc:15:62:42:ae:f8:ef:a7:36:ca: 5c:92:04:14:97:fd:a2:45:7d:1d:37:ba:8b:f4:ad:04:36:6f: e9:96:a5:15:4d:62:c7:d7:a5:98:e6:00:4d:1f:31:3d:8c:f0: c8:80:2b:b2:fe:92:3e:58:e3:29:a4:42:a5:d4:b5:20:4e:09: 3c:d3:f3:1a:6c:e1:47:c1:fd:61:ba:e2:b4:f7:bb:89:f3:df: 60:75:bd:fe -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUQZhuPS9DNfj3UnMe2vOtjOdWyb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3M0Qy NDdBNTYwRjAeFw0yNjA1MTExNjM3MTFaFw0yNzA1MTAxNjQyMTFaMDMxMTAvBgNV BAMTKEUxOTU0NUMyMEU1N0REMjI3QjU2MEM5NzFBNjQ4QkJERjNFRkJERkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLBFjwC5fG/btUBBMQ0U5YGiWs 5nvZKTbFN/+ipGbkY10OuRMubO/4rQZo5qWJAJsE4z9FnUDwK6kuYSlBpqVanCn2 09WW5oBxlVQUnAtXXAeubpnejJwvY7B5wGE/qkQ9N6tynChyMfaCAz+lB6vCcRA/ +459XYECHldUuDsizZRqiPBZ6+OIal5XIhuRQYSgxPEonBIdzGq+MVywKnWs4rfg REjtPCbTZWJT+0IiNzvadT0g6RYVkfs9M+25qP/6w/L+WhQrTUULORdraJQiK3Tt YSlSVe4xlbE2o4FIeCPjKuAg0VabJvEhu6FfY8+LYYk8Pn0hJdDc/jYs0/hNAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQU4ZVFwg5X3SJ7VgyXGmSLvfPvvfswHwYDVR0j BBgwFoAUvML37QzVZ3yYh+DyS6jnPSR6Vg8wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElOUC8w L0JDQzJGN0VEMENENTY3N0M5ODg3RTBGMjRCQThFNzNEMjQ3QTU2MEYuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3 M0QyNDdBNTYwRi5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RJTlAvMC8zMjM3MmUzMTMwMzAyZTM2 MzQyZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTM4MzAzNDM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG G2RAMA0GCSqGSIb3DQEBCwUAA4IBAQBYta8djKX1wt4VT6qma+2/4FstoBc8NRKA Zvit//Xx4eL6Kt+Vwdiz+Ith8A6ZxnoNE8LbRsVWRUFlBIYEGzvTmteH0Li8LWxY Io2ztLC0+mlqcvMEZgGI49LHT3rxHnWU3dGbfufxmZBTO2prf7KO+nurXj9a2pSG iQTRJP2/iT243BEteQvYk/5IeWMvFI+TFgR80ZPxuDvlhXuY6N0n9N5i7RjHP7Ro jtwVYkKu+O+nNspckgQUl/2iRX0dN7qL9K0ENm/plqUVTWLH16WY5gBNHzE9jPDI gCuy/pI+WOMppEKl1LUgTgk80/MabOFHwf1huuK097uJ899gdb3+ -----END CERTIFICATE-----Generated at Wed May 13 21:08:52 2026 by rpki-client