$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/36312e35382e3135362e302f32342d3234203d3e2034373830.roa File: 36312e35382e3135362e302f32342d3234203d3e2034373830.roa (raw, json) Hash identifier: ydt9hMckPX29HhaelI1yEn5OVWjFOsSp+qBDl1RekUg= Subject key identifier: 46:1F:F2:DC:3A:A1:19:63:8E:71:D6:AF:14:77:0A:55:31:15:B0:CC Certificate issuer: /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F Certificate serial: 7D5649BED82C71EC054136B8D881CCCDB0F5A660 Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TINP/0/36312e35382e3135362e302f32342d3234203d3e2034373830.roa Signing time: Mon 11 May 2026 17:07:56 +0000 ROA not before: Mon 11 May 2026 17:02:56 +0000 ROA not after: Mon 10 May 2027 17:07:56 +0000 asID: 4780 IP address blocks: 61.58.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:56:49:be:d8:2c:71:ec:05:41:36:b8:d8:81:cc:cd:b0:f5:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F Validity Not Before: May 11 17:02:56 2026 GMT Not After : May 10 17:07:56 2027 GMT Subject: CN=461FF2DC3AA119638E71D6AF14770A553115B0CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fa:63:f0:6f:62:b1:b5:32:37:3f:25:98:58: 02:2e:0a:89:d7:74:db:b5:13:3b:a6:62:b5:61:fa: f4:d5:72:7e:f9:56:cc:61:11:ff:3e:09:f2:f1:7d: 9d:d1:eb:f6:b6:cf:c2:83:2d:fa:55:15:6c:62:d2: d3:52:bf:ca:b4:dc:5e:c7:ce:74:eb:2d:96:80:a3: e2:6b:82:c2:a5:e9:4c:b0:ee:74:d8:86:36:23:33: 2e:80:df:1a:a8:39:d5:61:74:44:81:c0:fb:8a:cc: 5c:b8:bf:44:0e:28:39:d3:95:1a:d3:2d:3b:39:96: ae:2e:99:25:36:28:1d:31:e2:b3:0f:e9:ac:66:79: 61:1c:92:9e:00:07:04:b5:79:0c:f3:29:b3:26:c3: 82:a5:d9:4d:4e:16:02:ae:dd:08:23:05:f5:11:7b: 5e:04:29:84:d0:d0:10:a1:4f:87:fe:04:2a:35:e5: 18:cd:02:1a:08:74:12:54:32:3f:9c:17:f6:fe:f7: e9:17:c7:45:8f:95:1c:64:ad:20:e0:55:24:b3:61: 23:ae:23:98:f0:e7:99:4b:c4:15:b2:31:37:d0:aa: 4b:58:d9:91:f8:25:32:5b:2b:cb:ee:25:bb:84:19: 51:90:29:1b:e8:0d:90:14:f5:2b:7b:7d:ff:79:d4: a8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1F:F2:DC:3A:A1:19:63:8E:71:D6:AF:14:77:0A:55:31:15:B0:CC X509v3 Authority Key Identifier: keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/36312e35382e3135362e302f32342d3234203d3e2034373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.58.156.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:0e:60:bc:e4:4d:2f:32:e8:28:ed:d5:25:df:d9:1f:83:e7: 9d:9f:a4:8d:1b:da:af:5c:79:8f:b7:f0:54:86:dd:d0:8f:f9: 49:5a:db:39:32:ed:d8:29:a5:2f:cb:82:1a:be:68:f1:e5:5f: 2f:53:d5:73:8d:28:6a:89:d7:52:0a:46:67:e4:ee:fc:f3:b8: 78:37:81:6f:1a:50:1f:b3:14:07:e4:05:e2:c7:06:32:20:eb: 86:52:50:1c:49:b6:4d:0d:32:c8:a9:46:47:8b:9c:63:99:0a: ba:7e:28:aa:88:fc:48:cb:59:3e:52:d1:6e:e2:48:64:6e:53: cb:a9:ca:9e:1c:e9:d5:46:8a:9a:a2:c4:8f:92:ca:2c:52:ca: 1e:94:6b:d8:02:c0:c5:87:07:0f:9a:34:99:6f:0a:c3:13:48: a0:a1:1b:a4:ca:60:e5:53:e1:1e:40:b1:c7:8f:d4:27:05:5d: 42:24:b5:5d:39:69:9e:6a:fe:71:60:2f:1b:fb:83:13:36:ee: 49:6d:52:4d:69:a4:6a:51:81:0d:6f:01:1b:20:58:4f:1a:52: ea:2a:e8:b9:91:21:48:1b:7d:e7:42:09:69:2d:5c:22:2e:7f: 1b:da:55:05:f0:39:25:d7:f8:52:e3:76:7a:9f:12:68:da:d9: 32:d3:93:82 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUfVZJvtgscewFQTa42IHMzbD1pmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3M0Qy NDdBNTYwRjAeFw0yNjA1MTExNzAyNTZaFw0yNzA1MTAxNzA3NTZaMDMxMTAvBgNV BAMTKDQ2MUZGMkRDM0FBMTE5NjM4RTcxRDZBRjE0NzcwQTU1MzExNUIwQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX+mPwb2KxtTI3PyWYWAIuConX dNu1EzumYrVh+vTVcn75VsxhEf8+CfLxfZ3R6/a2z8KDLfpVFWxi0tNSv8q03F7H znTrLZaAo+JrgsKl6Uyw7nTYhjYjMy6A3xqoOdVhdESBwPuKzFy4v0QOKDnTlRrT LTs5lq4umSU2KB0x4rMP6axmeWEckp4ABwS1eQzzKbMmw4Kl2U1OFgKu3QgjBfUR e14EKYTQ0BChT4f+BCo15RjNAhoIdBJUMj+cF/b+9+kXx0WPlRxkrSDgVSSzYSOu I5jw55lLxBWyMTfQqktY2ZH4JTJbK8vuJbuEGVGQKRvoDZAU9St7ff951Kg/AgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQURh/y3DqhGWOOcdavFHcKVTEVsMwwHwYDVR0j BBgwFoAUvML37QzVZ3yYh+DyS6jnPSR6Vg8wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElOUC8w L0JDQzJGN0VEMENENTY3N0M5ODg3RTBGMjRCQThFNzNEMjQ3QTU2MEYuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3 M0QyNDdBNTYwRi5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RJTlAvMC8zNjMxMmUzNTM4MmUzMTM1 MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzgzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD06 nDANBgkqhkiG9w0BAQsFAAOCAQEATA5gvORNLzLoKO3VJd/ZH4PnnZ+kjRvar1x5 j7fwVIbd0I/5SVrbOTLt2CmlL8uCGr5o8eVfL1PVc40oaonXUgpGZ+Tu/PO4eDeB bxpQH7MUB+QF4scGMiDrhlJQHEm2TQ0yyKlGR4ucY5kKun4oqoj8SMtZPlLRbuJI ZG5Ty6nKnhzp1UaKmqLEj5LKLFLKHpRr2ALAxYcHD5o0mW8KwxNIoKEbpMpg5VPh HkCxx4/UJwVdQiS1XTlpnmr+cWAvG/uDEzbuSW1STWmkalGBDW8BGyBYTxpS6iro uZEhSBt950IJaS1cIi5/G9pVBfA5Jdf4UuN2ep8SaNrZMtOTgg== -----END CERTIFICATE-----Generated at Wed May 13 21:08:53 2026 by rpki-client