$ rpki-client -vvf rpkica.twnic.tw/rpki/UNIGATE/0/3130332e3132342e3135302e302f32332d3234203d3e203633313939.roa File: 3130332e3132342e3135302e302f32332d3234203d3e203633313939.roa (raw, json) Hash identifier: b2ZalweDzcakKyrLFwHtXt+tJpyBR6TY8NnJJnA3Zrc= Subject key identifier: C8:33:BB:16:7B:1B:37:3F:F9:B7:F4:09:AA:84:B4:AD:94:F5:3B:6E Certificate issuer: /CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE Certificate serial: 1CE338717844E7397CF348686C4BC91B620B6EAB Authority key identifier: 34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3130332e3132342e3135302e302f32332d3234203d3e203633313939.roa Signing time: Mon 11 May 2026 17:39:55 +0000 ROA not before: Mon 11 May 2026 17:34:55 +0000 ROA not after: Mon 10 May 2027 17:39:55 +0000 asID: 63199 IP address blocks: 103.124.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e3:38:71:78:44:e7:39:7c:f3:48:68:6c:4b:c9:1b:62:0b:6e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3442A34301CC610CF272F765ABBAFC9ED1F4A9BE Validity Not Before: May 11 17:34:55 2026 GMT Not After : May 10 17:39:55 2027 GMT Subject: CN=C833BB167B1B373FF9B7F409AA84B4AD94F53B6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:26:52:e5:e2:48:3e:9d:2d:78:5a:cb:65: 80:24:7e:33:68:48:fc:15:70:6f:0f:f2:bc:77:9a: c7:24:3e:07:39:58:53:98:c1:db:ac:cf:2c:85:8d: eb:dc:19:10:de:67:50:84:65:53:7d:4e:40:f2:c7: 87:94:00:45:96:b5:9f:e0:c8:d0:7f:a6:a0:60:4f: 67:79:21:52:4c:18:fa:71:e3:e3:7e:a6:b4:7b:97: b6:72:ad:eb:55:96:d0:34:08:96:03:1a:0d:b0:d3: 40:57:2c:c2:a6:aa:05:1e:6e:0c:c2:dc:6d:a6:dc: 7b:d9:f6:d3:27:88:28:5a:0f:81:db:2f:8b:9b:14: 23:9c:59:cc:f0:e6:ad:16:a8:0c:04:57:ad:d8:b9: 1b:5b:18:d1:97:c1:48:14:a8:d3:16:b5:75:33:30: cf:9c:09:b6:61:5a:28:ba:18:61:88:e9:f0:a2:20: f1:00:2a:6e:de:ce:4b:8c:3b:1a:74:d5:dd:16:fd: d1:69:bd:73:8d:4e:74:79:2f:b7:38:fc:da:d3:99: 3e:96:0b:f5:de:b4:4e:55:eb:5b:5a:33:3a:50:24: ac:71:41:b1:54:99:2d:6e:af:f6:4f:31:56:ab:da: 75:4a:a5:3e:97:03:01:da:95:e0:dd:9a:59:e7:25: a1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:33:BB:16:7B:1B:37:3F:F9:B7:F4:09:AA:84:B4:AD:94:F5:3B:6E X509v3 Authority Key Identifier: keyid:34:42:A3:43:01:CC:61:0C:F2:72:F7:65:AB:BA:FC:9E:D1:F4:A9:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3442A34301CC610CF272F765ABBAFC9ED1F4A9BE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNIGATE/0/3130332e3132342e3135302e302f32332d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.124.150.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:0b:30:b9:0c:cc:d8:8a:c1:c5:10:4e:0e:13:82:e7:5a:26: 3d:71:88:37:7e:40:4d:c1:1e:0d:a3:f1:7c:14:d0:63:74:1f: 88:de:39:50:ca:66:0f:00:2a:b7:bb:aa:1b:1a:0c:35:e7:9f: b1:0f:4f:05:1c:62:92:0c:58:fc:dc:0c:0d:4f:93:c6:b2:01: 2f:06:fd:89:67:f4:98:53:8a:26:ab:76:13:7e:38:15:50:e9: 40:0d:32:f9:0c:38:9e:7a:93:d0:b6:f7:3f:5e:4a:e8:a7:d6: c5:4b:a2:15:4d:d7:14:e5:c7:a8:30:c4:4a:7c:34:f8:ec:09: 8c:32:3a:e2:5c:4a:0b:05:0d:7a:c8:2f:cd:ab:ac:1b:78:4e: 77:87:7b:a1:db:1c:a5:25:44:b5:0e:e8:ee:3a:3b:da:c4:34: 2f:01:50:5b:a3:6b:b3:6a:cb:cf:84:3b:c8:b6:22:b8:40:ee: b4:ac:16:82:fb:91:82:5a:07:d1:bb:1a:21:42:38:cf:a6:1d: 77:72:3f:b9:a8:01:1b:67:db:3b:e2:b7:15:d9:9c:ec:a7:be: 0e:e2:bf:e3:b2:ab:56:9a:29:47:6f:34:c1:3c:d1:6c:2e:c2: cc:58:67:39:f5:79:6a:fe:f3:96:f8:a6:a4:b3:c0:23:da:57: a7:9a:75:6d -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUHOM4cXhE5zl880hobEvJG2ILbqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQ0MkEzNDMwMUNDNjEwQ0YyNzJGNzY1QUJCQUZDOUVE MUY0QTlCRTAeFw0yNjA1MTExNzM0NTVaFw0yNzA1MTAxNzM5NTVaMDMxMTAvBgNV BAMTKEM4MzNCQjE2N0IxQjM3M0ZGOUI3RjQwOUFBODRCNEFEOTRGNTNCNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51yZS5eJIPp0teFrLZYAkfjNo SPwVcG8P8rx3msckPgc5WFOYwduszyyFjevcGRDeZ1CEZVN9TkDyx4eUAEWWtZ/g yNB/pqBgT2d5IVJMGPpx4+N+prR7l7ZyretVltA0CJYDGg2w00BXLMKmqgUebgzC 3G2m3HvZ9tMniChaD4HbL4ubFCOcWczw5q0WqAwEV63YuRtbGNGXwUgUqNMWtXUz MM+cCbZhWii6GGGI6fCiIPEAKm7ezkuMOxp01d0W/dFpvXONTnR5L7c4/NrTmT6W C/XetE5V61taMzpQJKxxQbFUmS1ur/ZPMVar2nVKpT6XAwHaleDdmlnnJaG1AgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUyDO7FnsbNz/5t/QJqoS0rZT1O24wHwYDVR0j BBgwFoAUNEKjQwHMYQzycvdlq7r8ntH0qb4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVU5JR0FU RS8wLzM0NDJBMzQzMDFDQzYxMENGMjcyRjc2NUFCQkFGQzlFRDFGNEE5QkUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMzQ0MkEzNDMwMUNDNjEwQ0YyNzJGNzY1QUJC QUZDOUVEMUY0QTlCRS5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1VOSUdBVEUvMC8zMTMwMzMyZTMx MzIzNDJlMzEzNTMwMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzYzMzMxMzkzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWd8ljANBgkqhkiG9w0BAQsFAAOCAQEAOgswuQzM2IrBxRBODhOC 51omPXGIN35ATcEeDaPxfBTQY3QfiN45UMpmDwAqt7uqGxoMNeefsQ9PBRxikgxY /NwMDU+TxrIBLwb9iWf0mFOKJqt2E344FVDpQA0y+Qw4nnqT0Lb3P15K6KfWxUui FU3XFOXHqDDESnw0+OwJjDI64lxKCwUNesgvzausG3hOd4d7odscpSVEtQ7o7jo7 2sQ0LwFQW6Nrs2rLz4Q7yLYiuEDutKwWgvuRgloH0bsaIUI4z6Ydd3I/uagBG2fb O+K3Fdmc7Ke+DuK/47KrVpopR280wTzRbC7CzFhnOfV5av7zlvimpLPAI9pXp5p1 bQ== -----END CERTIFICATE-----Generated at Wed May 13 21:17:23 2026 by rpki-client