$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNCTU/0/3231312e37362e3234302e302f32302d3234203d3e203138313835.roa File: 3231312e37362e3234302e302f32302d3234203d3e203138313835.roa (raw, json) Hash identifier: I1YE3+FdBKoKjsHXEupZh96Yo/8ldeKJYx6VAVq02Hc= Subject key identifier: BF:44:14:69:F5:22:91:13:87:87:54:CE:B5:A1:4C:12:6D:C8:AD:14 Certificate issuer: /CN=46AF3A717A403BC5489BF5532E8CB67721141841 Certificate serial: 1A73EA2760D43B0DB0FFB1688E79CE43C6DFDDF9 Authority key identifier: 46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNCTU/0/3231312e37362e3234302e302f32302d3234203d3e203138313835.roa Signing time: Mon 11 May 2026 17:06:30 +0000 ROA not before: Mon 11 May 2026 17:01:30 +0000 ROA not after: Mon 10 May 2027 17:06:30 +0000 asID: 18185 IP address blocks: 211.76.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.crl rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:73:ea:27:60:d4:3b:0d:b0:ff:b1:68:8e:79:ce:43:c6:df:dd:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46AF3A717A403BC5489BF5532E8CB67721141841 Validity Not Before: May 11 17:01:30 2026 GMT Not After : May 10 17:06:30 2027 GMT Subject: CN=BF441469F5229113878754CEB5A14C126DC8AD14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:9a:2e:92:95:82:d7:a4:1d:e6:e7:b6:95: 26:8a:3e:a3:9d:8a:f3:86:cb:66:4a:ce:05:e1:3d: f5:51:3c:8c:97:3c:a7:80:3e:d1:ad:4f:86:79:d2: 22:5d:5f:b8:a9:72:ec:a2:49:e1:f7:33:fa:b9:b1: f4:bf:72:4e:54:69:67:7e:46:a4:3f:5e:27:25:19: 30:bb:5c:d6:aa:9f:c1:7e:b9:ae:8d:8b:7b:cf:85: 3a:69:69:79:76:b2:16:18:8b:81:90:e9:8a:35:66: 99:d9:08:f2:61:ab:3e:18:d4:30:b1:36:e9:42:62: 29:22:10:da:ee:11:c9:28:f7:34:96:f6:da:10:e5: 21:9f:36:e3:af:73:7c:5d:9e:7f:57:0c:29:4c:56: 99:83:47:30:58:65:13:70:64:cc:c9:20:cc:65:b4: 82:80:d0:0f:94:4d:b8:bd:d0:f5:a3:e1:1c:77:b7: d4:69:e6:d6:82:a3:00:d5:d2:6c:76:c6:92:61:4c: 04:19:2f:31:37:cf:e7:52:ab:4f:da:de:59:bb:41: 60:03:eb:d7:48:c6:a4:f6:ac:b3:d5:52:f2:da:68: 5d:e1:1f:ae:57:a2:e3:67:ec:75:d4:ea:84:80:15: ff:d8:b2:39:b0:01:dd:36:91:0c:25:b9:8d:41:9a: 4c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:44:14:69:F5:22:91:13:87:87:54:CE:B5:A1:4C:12:6D:C8:AD:14 X509v3 Authority Key Identifier: keyid:46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/3231312e37362e3234302e302f32302d3234203d3e203138313835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.76.240.0/20 Signature Algorithm: sha256WithRSAEncryption 21:cf:85:4f:df:9d:ac:33:81:38:93:0b:29:b1:9e:69:d8:f4: 3a:1e:cc:ed:fc:52:d9:17:7c:83:c1:52:85:2a:db:e3:0c:be: 1e:9a:cd:2e:e0:eb:0a:52:64:49:07:63:51:60:e2:a5:db:65: 7f:62:96:82:0e:cc:f4:57:bf:b9:9f:37:e8:3c:e6:c1:88:c2: 60:62:6c:fc:16:98:f0:e7:f9:54:63:b1:98:73:7b:7f:92:df: e0:76:72:7f:77:73:54:48:ed:e6:33:05:a9:c2:18:90:c3:5a: 76:af:75:ca:f8:41:3b:20:c7:21:d3:f1:c6:36:02:c5:3d:4e: 0a:97:45:a2:58:4b:3a:c7:4c:9d:05:09:75:b5:6e:79:18:18: ba:f7:07:9e:f0:88:e7:01:98:0d:49:df:2a:4d:b2:dc:d5:0b: 9f:ed:cc:fd:e1:3a:7a:83:4c:92:eb:21:63:07:99:c2:e5:a4: 2f:a1:d7:80:a3:2e:36:6a:31:17:d7:1a:7b:dc:b9:09:d8:19: c0:8c:97:56:30:17:67:17:0a:00:c4:ae:62:9f:82:84:ca:5d: d7:e9:44:79:fa:b3:91:57:dd:e8:32:16:a8:76:b1:e3:36:aa: b4:b7:d6:63:5e:95:dd:bc:21:57:d8:6f:69:ae:4f:c3:0e:cb: 2a:b7:77:ad -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUGnPqJ2DUOw2w/7FojnnOQ8bf3fkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDZBRjNBNzE3QTQwM0JDNTQ4OUJGNTUzMkU4Q0I2Nzcy MTE0MTg0MTAeFw0yNjA1MTExNzAxMzBaFw0yNzA1MTAxNzA2MzBaMDMxMTAvBgNV BAMTKEJGNDQxNDY5RjUyMjkxMTM4Nzg3NTRDRUI1QTE0QzEyNkRDOEFEMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvJpoukpWC16Qd5ue2lSaKPqOd ivOGy2ZKzgXhPfVRPIyXPKeAPtGtT4Z50iJdX7ipcuyiSeH3M/q5sfS/ck5UaWd+ RqQ/XiclGTC7XNaqn8F+ua6Ni3vPhTppaXl2shYYi4GQ6Yo1ZpnZCPJhqz4Y1DCx NulCYikiENruEcko9zSW9toQ5SGfNuOvc3xdnn9XDClMVpmDRzBYZRNwZMzJIMxl tIKA0A+UTbi90PWj4Rx3t9Rp5taCowDV0mx2xpJhTAQZLzE3z+dSq0/a3lm7QWAD 69dIxqT2rLPVUvLaaF3hH65XouNn7HXU6oSAFf/YsjmwAd02kQwluY1BmkztAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUv0QUafUikROHh1TOtaFMEm3IrRQwHwYDVR0j BBgwFoAURq86cXpAO8VIm/VTLoy2dyEUGEEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOQ1RV LzAvNDZBRjNBNzE3QTQwM0JDNTQ4OUJGNTUzMkU4Q0I2NzcyMTE0MTg0MS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS80NkFGM0E3MTdBNDAzQkM1NDg5QkY1NTMyRThD QjY3NzIxMTQxODQxLmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOQ1RVLzAvMzIzMTMxMmUzNzM2 MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTM4MzEzODM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQE00zwMA0GCSqGSIb3DQEBCwUAA4IBAQAhz4VP352sM4E4kwspsZ5p2PQ6 Hszt/FLZF3yDwVKFKtvjDL4ems0u4OsKUmRJB2NRYOKl22V/YpaCDsz0V7+5nzfo PObBiMJgYmz8Fpjw5/lUY7GYc3t/kt/gdnJ/d3NUSO3mMwWpwhiQw1p2r3XK+EE7 IMch0/HGNgLFPU4Kl0WiWEs6x0ydBQl1tW55GBi69wee8IjnAZgNSd8qTbLc1Quf 7cz94Tp6g0yS6yFjB5nC5aQvodeAoy42ajEX1xp73LkJ2BnAjJdWMBdnFwoAxK5i n4KEyl3X6UR5+rORV93oMhaodrHjNqq0t9ZjXpXdvCFX2G9prk/DDssqt3et -----END CERTIFICATE-----Generated at Wed May 13 21:11:26 2026 by rpki-client