$ rpki-client -vvf rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37322e302f32312d3234203d3e2039333034.roa File: 3230322e3136302e37322e302f32312d3234203d3e2039333034.roa (raw, json) Hash identifier: QN6wrAiHr+yCRVTqA9Gmn5GRKU9HpL0+ox2+fDoeCa0= Subject key identifier: B3:8C:2B:82:3E:7F:09:7E:76:77:23:9F:3F:83:9A:45:04:58:FA:4E Certificate issuer: /CN=2586043D180B153CEF366A422232C20D63D92FB2 Certificate serial: 75A3DDBBAD24AA740829C6AF59D67DD5C48B67A4 Authority key identifier: 25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37322e302f32312d3234203d3e2039333034.roa Signing time: Mon 11 May 2026 17:55:30 +0000 ROA not before: Mon 11 May 2026 17:50:30 +0000 ROA not after: Mon 10 May 2027 17:55:30 +0000 asID: 9304 IP address blocks: 202.160.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:a3:dd:bb:ad:24:aa:74:08:29:c6:af:59:d6:7d:d5:c4:8b:67:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2586043D180B153CEF366A422232C20D63D92FB2 Validity Not Before: May 11 17:50:30 2026 GMT Not After : May 10 17:55:30 2027 GMT Subject: CN=B38C2B823E7F097E7677239F3F839A450458FA4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f4:52:45:12:a4:3d:25:85:bc:23:72:a8:bf: 23:cb:4e:92:3a:82:91:d8:e0:00:ee:92:f0:26:0f: 89:80:cb:54:59:6f:6f:b4:dc:c9:83:20:da:be:94: 6b:3e:a5:30:68:e8:c1:bd:77:56:9e:3b:44:51:21: be:0c:e3:30:dd:a6:d2:90:e0:52:21:09:5a:0f:4b: 82:56:f1:f1:6b:35:f1:64:6b:4d:a7:89:c4:e1:20: 0c:da:dd:33:73:6e:0f:a9:c9:c0:f1:1d:28:9b:8b: c0:65:ff:bf:9a:4f:4d:53:12:42:98:1e:b1:9d:c3: ca:0b:34:f9:a3:41:fe:75:46:40:94:cc:58:13:be: c3:9a:57:5f:c9:0d:d3:10:ce:87:34:e9:80:c5:23: 90:82:ac:18:0c:bc:a9:dd:fe:c6:e6:41:4f:57:ce: 85:75:7c:3d:13:46:2b:b5:c0:d3:54:df:c2:58:44: 74:d9:74:d8:3d:82:5d:21:72:25:34:9d:a4:f1:f6: 33:94:4f:e9:d1:11:6e:c9:e3:9b:52:de:3c:2f:8a: 9a:53:a3:dc:bc:13:8b:54:96:b2:f5:06:1d:9e:ac: b9:06:75:0e:9b:f8:dd:c5:93:5d:83:0d:f3:90:c6: d3:60:57:67:9c:45:94:2d:1c:ac:c2:e8:1a:85:19: a8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:8C:2B:82:3E:7F:09:7E:76:77:23:9F:3F:83:9A:45:04:58:FA:4E X509v3 Authority Key Identifier: keyid:25:86:04:3D:18:0B:15:3C:EF:36:6A:42:22:32:C2:0D:63:D9:2F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/2586043D180B153CEF366A422232C20D63D92FB2.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2586043D180B153CEF366A422232C20D63D92FB2.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPSILKERA/0/3230322e3136302e37322e302f32312d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.72.0/21 Signature Algorithm: sha256WithRSAEncryption a0:cc:aa:93:b4:e6:b3:52:56:8f:3a:d2:c5:29:c6:70:94:2d: 26:d7:99:c2:2b:ce:d5:4c:49:56:78:43:24:b0:99:ff:f2:73: 29:ab:63:2f:04:0a:5f:6e:4a:70:db:bd:48:13:48:53:11:31: 3a:21:3e:46:9c:83:a6:b4:ab:dc:00:32:e7:44:49:78:4c:95: 35:8f:64:8e:f5:17:57:c2:c4:9b:62:fa:1b:6f:39:50:7a:37: 50:11:c4:53:db:c3:9f:3b:86:ea:5c:c9:57:85:35:15:50:0f: 9d:b6:7b:d6:67:1d:53:73:65:78:e3:01:04:44:bd:ef:40:4c: ba:a5:68:f3:ee:ce:17:af:a6:29:fe:7a:8f:5d:91:b8:02:dc: 72:67:ce:78:fc:a1:8d:bc:77:f4:24:9c:69:5f:05:38:00:8e: b4:b3:e8:9c:be:10:d8:88:21:c4:1e:e7:91:74:78:20:75:2f: 32:a0:06:97:29:2e:3c:8e:4f:b1:fd:38:18:8c:43:8b:1e:50: 7b:b9:20:2d:45:e4:9c:db:60:ae:d5:f9:58:77:91:31:de:2b: 36:74:fc:01:bb:63:6f:b9:c5:7f:f2:a2:28:05:23:a3:fc:2e: 3a:b0:50:e0:ae:b9:91:65:08:f6:31:9d:db:ad:13:72:3b:89: be:42:0f:71 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUdaPdu60kqnQIKcavWdZ91cSLZ6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU4NjA0M0QxODBCMTUzQ0VGMzY2QTQyMjIzMkMyMEQ2 M0Q5MkZCMjAeFw0yNjA1MTExNzUwMzBaFw0yNzA1MTAxNzU1MzBaMDMxMTAvBgNV BAMTKEIzOEMyQjgyM0U3RjA5N0U3Njc3MjM5RjNGODM5QTQ1MDQ1OEZBNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa9FJFEqQ9JYW8I3KovyPLTpI6 gpHY4ADukvAmD4mAy1RZb2+03MmDINq+lGs+pTBo6MG9d1aeO0RRIb4M4zDdptKQ 4FIhCVoPS4JW8fFrNfFka02nicThIAza3TNzbg+pycDxHSibi8Bl/7+aT01TEkKY HrGdw8oLNPmjQf51RkCUzFgTvsOaV1/JDdMQzoc06YDFI5CCrBgMvKnd/sbmQU9X zoV1fD0TRiu1wNNU38JYRHTZdNg9gl0hciU0naTx9jOUT+nREW7J45tS3jwvippT o9y8E4tUlrL1Bh2erLkGdQ6b+N3Fk12DDfOQxtNgV2ecRZQtHKzC6BqFGahBAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUs4wrgj5/CX52dyOfP4OaRQRY+k4wHwYDVR0j BBgwFoAUJYYEPRgLFTzvNmpCIjLCDWPZL7IwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFBTSUxL RVJBLzAvMjU4NjA0M0QxODBCMTUzQ0VGMzY2QTQyMjIzMkMyMEQ2M0Q5MkZCMi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS8yNTg2MDQzRDE4MEIxNTNDRUYzNjZBNDIy MjMyQzIwRDYzRDkyRkIyLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuG YXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFBTSUxLRVJBLzAvMzIzMDMy MmUzMTM2MzAyZTM3MzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA8qgSDANBgkqhkiG9w0BAQsFAAOCAQEAoMyqk7Tms1JWjzrSxSnG cJQtJteZwivO1UxJVnhDJLCZ//JzKatjLwQKX25KcNu9SBNIUxExOiE+RpyDprSr 3AAy50RJeEyVNY9kjvUXV8LEm2L6G285UHo3UBHEU9vDnzuG6lzJV4U1FVAPnbZ7 1mcdU3NleOMBBES970BMuqVo8+7OF6+mKf56j12RuALccmfOePyhjbx39CScaV8F OACOtLPonL4Q2IghxB7nkXR4IHUvMqAGlykuPI5Psf04GIxDix5Qe7kgLUXknNtg rtX5WHeRMd4rNnT8Abtjb7nFf/KiKAUjo/wuOrBQ4K65kWUI9jGd260TcjuJvkIP cQ== -----END CERTIFICATE-----Generated at Wed May 13 21:11:28 2026 by rpki-client