$ rpki-client -vvf rpkica.twnic.tw/rpki/TW1033/0/323430323a346465303a3a2f33322d3438203d3e20323135393933.roa File: 323430323a346465303a3a2f33322d3438203d3e20323135393933.roa (raw, json) Hash identifier: hn8g2szDRcwiFI4NluomCU2oCcAtBWUgOMXavAqk71Y= Subject key identifier: CD:E5:86:CA:B4:17:DC:BE:F8:F0:30:20:36:66:9C:D3:66:BA:06:12 Certificate issuer: /CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Certificate serial: 2CCA6095E5F997AC38611C1498B3DE8FE030D26D Authority key identifier: 68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/0/323430323a346465303a3a2f33322d3438203d3e20323135393933.roa Signing time: Mon 11 May 2026 17:58:14 +0000 ROA not before: Mon 11 May 2026 17:53:14 +0000 ROA not after: Mon 10 May 2027 17:58:14 +0000 asID: 215993 IP address blocks: 2402:4de0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ca:60:95:e5:f9:97:ac:38:61:1c:14:98:b3:de:8f:e0:30:d2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68C2C435D736FC21F07F0FD09824C8408E615E50 Validity Not Before: May 11 17:53:14 2026 GMT Not After : May 10 17:58:14 2027 GMT Subject: CN=CDE586CAB417DCBEF8F0302036669CD366BA0612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:10:c2:ef:cd:f0:96:9b:c2:7a:d6:75:8f: 7c:73:1d:8c:f0:02:1e:81:e3:ba:18:43:d6:ef:81: 16:6c:d5:a0:57:0a:30:25:4e:20:9a:a6:85:32:e2: ee:f9:60:de:2f:e1:6a:98:40:3a:57:2d:33:dc:29: 3e:84:82:66:1c:3f:87:57:df:b0:4b:17:7b:fa:59: ed:13:29:35:95:32:e4:25:18:3e:14:f3:ab:28:0e: 3d:cc:69:94:ac:c1:40:7c:30:38:b0:36:62:4e:76: 9f:8c:b1:c3:6c:b5:b5:7f:65:3a:ed:be:89:fe:30: dc:8a:7e:de:e1:a2:ab:d8:29:d5:65:37:1a:40:11: e3:1c:10:4b:9e:87:f3:ef:8a:83:5f:f7:3f:2b:86: 80:de:7d:5a:dc:ec:33:d3:83:b1:f5:b8:19:88:d6: 0b:e5:87:e1:64:eb:eb:f3:92:b6:9e:f3:9c:b5:dc: 81:d6:5f:f5:b3:f3:40:3b:44:ef:7c:d5:5a:3e:80: d5:15:b3:51:63:39:72:4a:05:6e:54:6b:c4:33:11: 1b:45:6e:83:0a:b4:13:8e:5f:9e:a2:49:b5:a1:99: 4b:78:57:c7:99:ee:e3:6a:c3:f2:81:13:38:bd:da: ef:7f:50:fa:b7:18:db:1e:26:50:8f:41:33:a2:6c: 1e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E5:86:CA:B4:17:DC:BE:F8:F0:30:20:36:66:9C:D3:66:BA:06:12 X509v3 Authority Key Identifier: keyid:68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/323430323a346465303a3a2f33322d3438203d3e20323135393933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4de0::/32 Signature Algorithm: sha256WithRSAEncryption 1b:26:f0:0b:c7:85:f6:6e:35:7f:3c:32:12:dd:9c:a0:3f:7f: 64:57:32:f1:20:aa:60:b0:13:03:a8:86:db:9c:13:7c:2b:81: f9:60:ff:2e:5d:7f:ff:f2:60:12:f0:fb:3f:37:08:53:1d:b1: 53:14:4f:76:32:63:4a:d9:39:2b:96:6e:49:98:f9:ec:eb:37: fe:53:12:63:d3:ac:7e:0e:55:ee:f1:50:56:35:3a:dd:1f:ac: 0f:c8:7d:be:00:7d:36:7b:41:73:3e:86:31:c4:d5:ed:75:bf: fa:2a:62:ea:8a:b5:d6:86:47:56:04:9b:19:a8:65:53:07:42: d9:8b:d3:7e:d0:71:5b:be:2f:18:0c:76:e0:4a:08:28:b0:87: 19:e1:56:a0:ec:01:a8:a8:99:b5:9f:06:73:3e:d7:49:07:f0: b9:0a:c4:f1:7f:bb:10:fc:9f:70:84:c4:ff:34:6e:5c:67:dc: 58:6e:6d:e7:9d:27:99:c4:fc:28:b1:07:e9:47:dc:e0:1c:85: 55:0f:9e:b7:48:34:f8:65:78:0c:5c:d3:ea:24:14:c9:92:e5: 1f:d4:7f:e4:e4:f2:82:65:1e:51:31:51:07:0e:25:04:96:e0: a7:61:43:bf:de:43:8a:17:90:0b:1b:76:83:10:71:48:8c:dd: 26:f0:4b:c4 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIULMpgleX5l6w4YRwUmLPej+Aw0m0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4 RTYxNUU1MDAeFw0yNjA1MTExNzUzMTRaFw0yNzA1MTAxNzU4MTRaMDMxMTAvBgNV BAMTKENERTU4NkNBQjQxN0RDQkVGOEYwMzAyMDM2NjY5Q0QzNjZCQTA2MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgxDC783wlpvCetZ1j3xzHYzw Ah6B47oYQ9bvgRZs1aBXCjAlTiCapoUy4u75YN4v4WqYQDpXLTPcKT6EgmYcP4dX 37BLF3v6We0TKTWVMuQlGD4U86soDj3MaZSswUB8MDiwNmJOdp+MscNstbV/ZTrt von+MNyKft7hoqvYKdVlNxpAEeMcEEueh/PvioNf9z8rhoDefVrc7DPTg7H1uBmI 1gvlh+Fk6+vzkrae85y13IHWX/Wz80A7RO981Vo+gNUVs1FjOXJKBW5Ua8QzERtF boMKtBOOX56iSbWhmUt4V8eZ7uNqw/KBEzi92u9/UPq3GNseJlCPQTOibB5jAgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQUzeWGyrQX3L748DAgNmac02a6BhIwHwYDVR0j BBgwFoAUaMLENdc2/CHwfw/QmCTIQI5hXlAwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMz LzAvNjhDMkM0MzVENzM2RkMyMUYwN0YwRkQwOTgyNEM4NDA4RTYxNUU1MC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS82OEMyQzQzNUQ3MzZGQzIxRjA3RjBGRDA5ODI0 Qzg0MDhFNjE1RTUwLmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMzLzAvMzIzNDMwMzIzYTM0 NjQ2NTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzMTM1MzkzOTMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAJN4DANBgkqhkiG9w0BAQsFAAOCAQEAGybwC8eF9m41fzwyEt2coD9/ ZFcy8SCqYLATA6iG25wTfCuB+WD/Ll1///JgEvD7PzcIUx2xUxRPdjJjStk5K5Zu SZj57Os3/lMSY9Osfg5V7vFQVjU63R+sD8h9vgB9NntBcz6GMcTV7XW/+ipi6oq1 1oZHVgSbGahlUwdC2YvTftBxW74vGAx24EoIKLCHGeFWoOwBqKiZtZ8Gcz7XSQfw uQrE8X+7EPyfcITE/zRuXGfcWG5t550nmcT8KLEH6Ufc4ByFVQ+et0g0+GV4DFzT 6iQUyZLlH9R/5OTygmUeUTFRBw4lBJbgp2FDv95DiheQCxt2gxBxSIzdJvBLxA== -----END CERTIFICATE-----Generated at Wed May 13 21:09:31 2026 by rpki-client