$ rpki-client -vvf rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138322e302f32342d3234203d3e20313334353232.roa File: 3231312e37362e3138322e302f32342d3234203d3e20313334353232.roa (raw, json) Hash identifier: uAa17/lhm+61c0Btt+bZUFg6KW73rR0lwUGaXhSBPU8= Subject key identifier: 37:32:91:E2:40:4D:4C:2A:84:9B:6A:AD:C5:E7:7E:BB:00:13:29:7F Certificate issuer: /CN=4592562459B88E861D7E40B269B64ECC6927CDE5 Certificate serial: 338012C21CC8520E972C2B93967FE5D315CF3AD9 Authority key identifier: 45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138322e302f32342d3234203d3e20313334353232.roa Signing time: Mon 11 May 2026 17:56:32 +0000 ROA not before: Mon 11 May 2026 17:51:32 +0000 ROA not after: Mon 10 May 2027 17:56:32 +0000 asID: 134522 IP address blocks: 211.76.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:80:12:c2:1c:c8:52:0e:97:2c:2b:93:96:7f:e5:d3:15:cf:3a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4592562459B88E861D7E40B269B64ECC6927CDE5 Validity Not Before: May 11 17:51:32 2026 GMT Not After : May 10 17:56:32 2027 GMT Subject: CN=373291E2404D4C2A849B6AADC5E77EBB0013297F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:97:8b:91:9f:ab:ce:dd:85:f5:7d:84:e6:fa: cb:cd:89:2c:73:72:b2:4c:53:8f:be:dd:da:c6:fd: 41:7b:36:3a:bb:16:22:48:08:09:6c:28:e3:10:a0: c3:ec:0f:8c:2f:89:ad:ef:67:e3:e9:05:74:d9:26: 9c:69:be:c0:d1:39:4d:56:e0:7c:2c:b0:fd:b0:69: 5b:71:68:42:ad:0d:79:c7:c4:de:a1:8f:e2:98:e6: e5:63:22:37:a8:27:3c:a4:48:e9:4f:d7:be:7d:1a: 70:1d:1b:07:3f:5b:d9:c9:57:37:f0:a3:f2:5e:f8: cd:4f:d2:f4:72:d9:a6:e2:8d:fa:98:9f:8d:17:64: 64:15:ff:7f:f9:68:30:67:de:55:f6:b4:8c:91:fd: 17:a3:0f:3a:16:12:67:ae:c3:33:3b:d0:e7:dc:f3: 08:33:1e:f1:43:02:81:e3:c6:e6:a9:07:38:9b:be: 52:f9:f3:11:f4:17:d0:f6:67:6c:93:1a:37:bc:ee: 4e:97:37:45:98:b4:68:cf:43:fd:69:06:9a:b3:60: b6:c8:d1:51:a4:9c:da:a5:41:a5:35:02:36:8d:76: d6:cb:d7:17:f5:a8:5d:3a:fa:99:0a:74:79:93:19: 9b:45:eb:72:92:c3:c5:4c:57:a3:f2:be:62:c8:82: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:32:91:E2:40:4D:4C:2A:84:9B:6A:AD:C5:E7:7E:BB:00:13:29:7F X509v3 Authority Key Identifier: keyid:45:92:56:24:59:B8:8E:86:1D:7E:40:B2:69:B6:4E:CC:69:27:CD:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/4592562459B88E861D7E40B269B64ECC6927CDE5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4592562459B88E861D7E40B269B64ECC6927CDE5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWBESTWARE/0/3231312e37362e3138322e302f32342d3234203d3e20313334353232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.76.182.0/24 Signature Algorithm: sha256WithRSAEncryption 11:7d:05:64:de:b9:c6:e8:48:b5:e6:60:66:bf:b7:d4:3d:3a: 18:24:16:5c:09:3a:90:68:86:35:36:07:e8:76:51:c4:f3:89: e5:81:75:63:f1:55:35:ab:f8:80:92:20:d9:34:7c:65:69:30: b7:22:44:fd:ff:69:f4:48:2f:dc:e9:c6:2f:01:3e:d6:a7:f3: d1:6d:3d:2a:a9:cd:5e:f7:3d:b6:ff:21:2d:72:a5:5b:31:e4: ff:71:fa:81:05:30:a5:9a:4b:18:db:aa:65:99:91:d1:aa:d2: 6d:9f:64:7c:fe:2c:78:39:eb:06:19:f2:be:a4:99:8c:19:62: 84:16:28:58:f7:5d:cc:6f:ad:e3:5d:c8:a5:1c:05:f0:4a:bf: ff:45:b3:e7:85:ef:f4:ed:81:1d:84:a8:73:1d:c0:c1:e2:9f: c5:a0:4a:1f:52:f7:74:ca:3a:81:96:cd:31:0a:01:ae:db:83: 11:c7:37:52:d7:33:e3:5c:5b:32:06:e2:aa:d7:d8:64:60:b1: 18:36:2f:f2:36:a1:20:05:56:8d:9d:65:4d:fc:3a:f0:99:7b: de:5f:ba:98:9b:a7:43:50:a0:d8:f1:28:90:70:57:c9:07:b7: fe:83:8a:3e:d4:a4:f8:5f:d5:f3:a2:06:1f:54:45:d5:69:2b: 4b:36:db:35 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUM4ASwhzIUg6XLCuTln/l0xXPOtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU5MjU2MjQ1OUI4OEU4NjFEN0U0MEIyNjlCNjRFQ0M2 OTI3Q0RFNTAeFw0yNjA1MTExNzUxMzJaFw0yNzA1MTAxNzU2MzJaMDMxMTAvBgNV BAMTKDM3MzI5MUUyNDA0RDRDMkE4NDlCNkFBREM1RTc3RUJCMDAxMzI5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGl4uRn6vO3YX1fYTm+svNiSxz crJMU4++3drG/UF7Njq7FiJICAlsKOMQoMPsD4wvia3vZ+PpBXTZJpxpvsDROU1W 4HwssP2waVtxaEKtDXnHxN6hj+KY5uVjIjeoJzykSOlP1759GnAdGwc/W9nJVzfw o/Je+M1P0vRy2abijfqYn40XZGQV/3/5aDBn3lX2tIyR/RejDzoWEmeuwzM70Ofc 8wgzHvFDAoHjxuapBzibvlL58xH0F9D2Z2yTGje87k6XN0WYtGjPQ/1pBpqzYLbI 0VGknNqlQaU1AjaNdtbL1xf1qF06+pkKdHmTGZtF63KSw8VMV6PyvmLIgiNPAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUNzKR4kBNTCqEm2qtxed+uwATKX8wHwYDVR0j BBgwFoAURZJWJFm4joYdfkCyabZOzGknzeUwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdCRVNU V0FSRS8wLzQ1OTI1NjI0NTlCODhFODYxRDdFNDBCMjY5QjY0RUNDNjkyN0NERTUu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNDU5MjU2MjQ1OUI4OEU4NjFEN0U0MEIy NjlCNjRFQ0M2OTI3Q0RFNS5jZXIwgYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcw C4ZmcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV0JFU1RXQVJFLzAvMzIz MTMxMmUzNzM2MmUzMTM4MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzQz NTMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB Af8EEDAOMAwEAgABMAYDBADTTLYwDQYJKoZIhvcNAQELBQADggEBABF9BWTeucbo SLXmYGa/t9Q9OhgkFlwJOpBohjU2B+h2UcTzieWBdWPxVTWr+ICSINk0fGVpMLci RP3/afRIL9zpxi8BPtan89FtPSqpzV73Pbb/IS1ypVsx5P9x+oEFMKWaSxjbqmWZ kdGq0m2fZHz+LHg56wYZ8r6kmYwZYoQWKFj3XcxvreNdyKUcBfBKv/9Fs+eF7/Tt gR2EqHMdwMHin8WgSh9S93TKOoGWzTEKAa7bgxHHN1LXM+NcWzIG4qrX2GRgsRg2 L/I2oSAFVo2dZU38OvCZe95fupibp0NQoNjxKJBwV8kHt/6Dij7UpPhf1fOiBh9U RdVpK0s22zU= -----END CERTIFICATE-----Generated at Wed May 13 21:16:13 2026 by rpki-client