$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/35382e39392e36342e302f31382d3234203d3e203138303439.roa File: 35382e39392e36342e302f31382d3234203d3e203138303439.roa (raw, json) Hash identifier: y0aWcVRtgQos8yX3SOGsgmafs7OuToLrYIr2HfBsxIY= Subject key identifier: 3A:67:FD:5E:4A:B9:A1:FD:49:6B:A3:61:D4:DE:E7:89:BF:27:7C:A9 Certificate issuer: /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F Certificate serial: 5E7B993149BA746860D4B4A43E51150540663E55 Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TINP/0/35382e39392e36342e302f31382d3234203d3e203138303439.roa Signing time: Mon 11 May 2026 16:42:13 +0000 ROA not before: Mon 11 May 2026 16:37:13 +0000 ROA not after: Mon 10 May 2027 16:42:13 +0000 asID: 18049 IP address blocks: 58.99.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:7b:99:31:49:ba:74:68:60:d4:b4:a4:3e:51:15:05:40:66:3e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F Validity Not Before: May 11 16:37:13 2026 GMT Not After : May 10 16:42:13 2027 GMT Subject: CN=3A67FD5E4AB9A1FD496BA361D4DEE789BF277CA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d9:51:5e:33:f8:9f:c2:8b:44:79:7a:e6:bc: 4b:9e:a0:63:16:49:fd:90:93:0b:6b:2b:c6:23:96: 1c:9f:f7:30:01:36:9d:ca:06:2f:30:a3:75:fa:32: 81:6c:40:f5:05:a2:94:7e:ea:6b:86:d7:42:7c:bc: 37:72:cf:dd:e1:a2:30:88:0b:26:b3:6e:20:3b:9f: 06:85:f9:35:21:86:16:9f:53:17:d7:db:72:54:21: b2:20:ce:69:a2:c7:a5:55:30:96:c2:c4:f0:56:c3: 89:05:0d:72:57:ea:28:53:f9:95:6c:64:1c:30:b8: fc:90:1b:fd:53:f5:9b:ae:45:f8:af:86:99:35:b7: 0e:a2:73:0b:cd:28:b9:63:68:14:41:f8:48:6d:6a: 1d:d0:f2:59:7b:8e:f2:85:c1:94:b1:b9:ce:b0:1a: ef:8f:08:51:73:e9:ba:39:52:a6:b5:87:40:17:6c: 7b:58:cc:3b:0c:f1:50:65:da:2e:26:f6:11:f4:13: 95:01:bd:48:83:c6:bb:22:36:46:fc:63:0b:e5:89: e3:22:bd:31:91:07:7a:41:15:40:22:64:18:40:ce: 15:43:a8:46:3e:85:cc:b9:92:5c:1e:de:1a:ee:13: c2:98:44:fe:fb:86:17:f9:07:24:c5:bb:01:23:17: 17:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:67:FD:5E:4A:B9:A1:FD:49:6B:A3:61:D4:DE:E7:89:BF:27:7C:A9 X509v3 Authority Key Identifier: keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/35382e39392e36342e302f31382d3234203d3e203138303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.99.64.0/18 Signature Algorithm: sha256WithRSAEncryption 0d:6e:05:90:3e:d4:49:f5:80:f8:e8:40:9f:b4:24:92:82:76: d5:29:75:1c:a1:10:cc:3e:b4:63:25:ba:cd:3a:70:f2:1e:19: 6c:d4:87:bc:bb:d3:d9:73:02:53:e7:f5:e5:f6:4f:d1:0f:e0: 10:0a:d3:f8:63:70:46:93:4c:ee:10:9d:3d:88:0c:83:b9:b7: fd:a8:b8:89:8c:8d:c1:1f:80:5e:7d:e1:df:cb:05:44:1a:64: d8:fd:cf:e9:55:90:b9:46:c6:0f:62:16:54:a3:a8:ac:18:d0: df:e7:f3:9e:b0:58:33:69:05:81:da:15:9e:dd:ff:58:84:95: ad:29:24:5e:5d:1a:dc:64:c4:21:6f:df:3a:da:86:cb:5c:35: 80:fd:4b:69:e2:21:6d:4f:73:f5:7b:68:7c:49:72:19:be:19: 48:0d:3c:e2:56:00:92:9b:10:66:97:38:1c:12:a3:93:7b:3a: 1f:2b:7e:3b:92:50:e8:50:37:4f:c4:a3:cf:28:d4:eb:6a:5b: d1:4d:db:65:ab:a8:f1:75:e7:50:20:51:c7:8e:6c:e6:f7:ab: 1d:97:bc:c6:3e:4a:fd:86:95:66:c1:eb:48:a6:6b:d2:bf:f4: a6:0b:a4:83:a6:86:ac:16:f3:c8:c1:d5:e2:28:34:71:e5:75: e6:30:3c:41 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUXnuZMUm6dGhg1LSkPlEVBUBmPlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3M0Qy NDdBNTYwRjAeFw0yNjA1MTExNjM3MTNaFw0yNzA1MTAxNjQyMTNaMDMxMTAvBgNV BAMTKDNBNjdGRDVFNEFCOUExRkQ0OTZCQTM2MUQ0REVFNzg5QkYyNzdDQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD2VFeM/ifwotEeXrmvEueoGMW Sf2QkwtrK8Yjlhyf9zABNp3KBi8wo3X6MoFsQPUFopR+6muG10J8vDdyz93hojCI CyazbiA7nwaF+TUhhhafUxfX23JUIbIgzmmix6VVMJbCxPBWw4kFDXJX6ihT+ZVs ZBwwuPyQG/1T9ZuuRfivhpk1tw6icwvNKLljaBRB+Ehtah3Q8ll7jvKFwZSxuc6w Gu+PCFFz6bo5Uqa1h0AXbHtYzDsM8VBl2i4m9hH0E5UBvUiDxrsiNkb8YwvlieMi vTGRB3pBFUAiZBhAzhVDqEY+hcy5klwe3hruE8KYRP77hhf5ByTFuwEjFxeTAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUOmf9Xkq5of1Ja6Nh1N7nib8nfKkwHwYDVR0j BBgwFoAUvML37QzVZ3yYh+DyS6jnPSR6Vg8wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElOUC8w L0JDQzJGN0VEMENENTY3N0M5ODg3RTBGMjRCQThFNzNEMjQ3QTU2MEYuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3 M0QyNDdBNTYwRi5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RJTlAvMC8zNTM4MmUzOTM5MmUzNjM0 MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzODMwMzQzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBjpj QDANBgkqhkiG9w0BAQsFAAOCAQEADW4FkD7USfWA+OhAn7QkkoJ21Sl1HKEQzD60 YyW6zTpw8h4ZbNSHvLvT2XMCU+f15fZP0Q/gEArT+GNwRpNM7hCdPYgMg7m3/ai4 iYyNwR+AXn3h38sFRBpk2P3P6VWQuUbGD2IWVKOorBjQ3+fznrBYM2kFgdoVnt3/ WISVrSkkXl0a3GTEIW/fOtqGy1w1gP1LaeIhbU9z9XtofElyGb4ZSA084lYAkpsQ Zpc4HBKjk3s6Hyt+O5JQ6FA3T8SjzyjU62pb0U3bZauo8XXnUCBRx45s5verHZe8 xj5K/YaVZsHrSKZr0r/0pgukg6aGrBbzyMHV4ig0ceV15jA8QQ== -----END CERTIFICATE-----Generated at Wed May 13 21:08:51 2026 by rpki-client