$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31372d3234203d3e2034373830.roa File: 3231302e3230392e3132382e302f31372d3234203d3e2034373830.roa (raw, json) Hash identifier: h/cd215vywKi5Gf6Tpb7ge54KLq03J+mmgEfmc7QXDQ= Subject key identifier: A3:F4:1D:85:41:16:3E:34:29:16:80:4D:6D:0B:6F:40:7A:EC:59:34 Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671 Certificate serial: 08356C32B12384821BF05C4BA633120F46EED22B Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31372d3234203d3e2034373830.roa Signing time: Thu 21 May 2026 15:57:09 +0000 ROA not before: Thu 21 May 2026 15:52:09 +0000 ROA not after: Thu 20 May 2027 15:57:09 +0000 asID: 4780 IP address blocks: 210.209.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 21:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:35:6c:32:b1:23:84:82:1b:f0:5c:4b:a6:33:12:0f:46:ee:d2:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671 Validity Not Before: May 21 15:52:09 2026 GMT Not After : May 20 15:57:09 2027 GMT Subject: CN=A3F41D8541163E342916804D6D0B6F407AEC5934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:1c:24:ea:ec:39:64:25:dc:39:53:c4:48: 95:70:8b:07:14:1b:4e:bc:a3:3b:6f:f9:cd:b2:c4: ba:e3:00:d7:6c:71:6a:33:3b:49:08:fa:46:59:51: d4:f5:d5:1c:1c:a8:83:54:4c:e6:cc:2f:16:b8:c9: 3c:04:05:06:0f:a7:e3:3c:e1:a7:3b:ea:ae:eb:08: 46:bd:64:27:62:f1:a0:33:28:ab:a5:d3:df:76:de: 89:c5:0f:ce:15:33:81:8c:2b:7b:c9:cc:40:ac:22: 01:76:ae:06:13:79:47:84:25:d2:f3:5f:68:60:e7: c4:92:8c:b5:0a:81:ba:b3:66:ea:92:c2:c6:7a:93: 4c:26:ed:59:59:34:15:a8:5b:ce:48:c4:7f:ea:c6: e4:d5:d2:50:97:ff:fa:89:27:46:91:6a:a9:4f:54: 9f:d6:60:0a:ec:3e:04:c1:28:41:25:80:44:b5:46: 5a:50:98:12:6d:b2:dc:d9:fc:9b:e5:dd:75:b0:53: 16:7c:23:51:b4:43:23:0a:55:4f:4e:3b:05:ae:b2: a5:00:5b:7a:43:75:17:a1:cd:d7:1e:92:c0:3f:8e: 98:7a:96:4b:64:19:96:6d:f4:34:14:3c:76:6f:4f: bc:08:d4:43:51:90:30:cd:88:ec:a3:83:6f:c0:2e: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F4:1D:85:41:16:3E:34:29:16:80:4D:6D:0B:6F:40:7A:EC:59:34 X509v3 Authority Key Identifier: keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3231302e3230392e3132382e302f31372d3234203d3e2034373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.209.128.0/17 Signature Algorithm: sha256WithRSAEncryption 7c:d8:57:75:30:fb:80:aa:84:79:cf:4d:d3:fc:b4:50:11:6f: d8:56:02:9c:44:19:96:8c:62:e7:80:12:ab:db:99:ed:99:85: 02:e2:ee:2c:42:17:ab:39:eb:e9:5c:9b:b2:2c:21:a3:0b:d5: ee:13:58:0a:3f:1a:d7:82:da:cf:37:0a:9b:93:9c:39:70:c1: d8:57:4e:df:fa:4b:4c:ca:e1:8f:0f:72:0d:53:74:15:71:8a: c6:a3:cb:5d:b1:6a:43:78:8d:fb:82:4e:49:98:f2:64:ff:d9: 85:2e:df:84:de:d3:21:ab:2e:8a:9d:23:1e:dc:d8:ab:37:4c: 16:d6:e2:1e:fe:91:b4:88:62:50:73:f6:a8:ed:4e:48:78:88: 18:8c:f3:c2:8b:ae:08:2a:e4:84:c9:95:4d:26:0b:0e:e7:91: 0e:07:f5:67:bc:c1:42:bb:27:cf:84:48:16:de:be:56:85:c5: ad:f3:71:6e:28:83:11:f4:b2:c6:16:0c:ec:d7:50:e0:4d:2d: 7a:25:99:c0:4b:ce:b7:09:b8:7e:a1:05:60:5b:a5:93:2a:4b: 6b:fa:b2:23:b9:7a:24:a4:20:f5:78:ea:c4:09:c5:47:90:e0: 09:b7:7a:05:60:e9:59:24:fb:47:1a:a7:62:12:01:d8:bf:45: 10:8e:a1:75 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUCDVsMrEjhIIb8FxLpjMSD0bu0iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJDMERBMjg4 RTY0QTY3MTAeFw0yNjA1MjExNTUyMDlaFw0yNzA1MjAxNTU3MDlaMDMxMTAvBgNV BAMTKEEzRjQxRDg1NDExNjNFMzQyOTE2ODA0RDZEMEI2RjQwN0FFQzU5MzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSNhwk6uw5ZCXcOVPESJVwiwcU G068oztv+c2yxLrjANdscWozO0kI+kZZUdT11RwcqINUTObMLxa4yTwEBQYPp+M8 4ac76q7rCEa9ZCdi8aAzKKul09923onFD84VM4GMK3vJzECsIgF2rgYTeUeEJdLz X2hg58SSjLUKgbqzZuqSwsZ6k0wm7VlZNBWoW85IxH/qxuTV0lCX//qJJ0aRaqlP VJ/WYArsPgTBKEElgES1RlpQmBJtstzZ/Jvl3XWwUxZ8I1G0QyMKVU9OOwWusqUA W3pDdRehzdceksA/jph6lktkGZZt9DQUPHZvT7wI1ENRkDDNiOyjg2/ALqiZAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUo/QdhUEWPjQpFoBNbQtvQHrsWTQwHwYDVR0j BBgwFoAU7KO7Qlb8jKy/Q2Ipq8DaKI5kpnEwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVFVElN RS8wL0VDQTNCQjQyNTZGQzhDQUNCRjQzNjIyOUFCQzBEQTI4OEU2NEE2NzEuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJD MERBMjg4RTY0QTY3MS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1ZFRVRJTUUvMC8zMjMxMzAyZTMy MzAzOTJlMzEzMjM4MmUzMDJmMzEzNzJkMzIzNDIwM2QzZTIwMzQzNzM4MzAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAfS0YAwDQYJKoZIhvcNAQELBQADggEBAHzYV3Uw+4CqhHnPTdP8tFAR b9hWApxEGZaMYueAEqvbme2ZhQLi7ixCF6s56+lcm7IsIaML1e4TWAo/GteC2s83 CpuTnDlwwdhXTt/6S0zK4Y8Pcg1TdBVxisajy12xakN4jfuCTkmY8mT/2YUu34Te 0yGrLoqdIx7c2Ks3TBbW4h7+kbSIYlBz9qjtTkh4iBiM88KLrggq5ITJlU0mCw7n kQ4H9We8wUK7J8+ESBbevlaFxa3zcW4ogxH0ssYWDOzXUOBNLXolmcBLzrcJuH6h BWBbpZMqS2v6siO5eiSkIPV46sQJxUeQ4Am3egVg6Vkk+0cap2ISAdi/RRCOoXU= -----END CERTIFICATE-----Generated at Sat Jun 6 10:48:14 2026 by rpki-client