$ rpki-client -vvf rpkica.twnic.tw/rpki/ZUSO/0/323430323a333065303a3a2f33322d3438203d3e203633393030.roa File: 323430323a333065303a3a2f33322d3438203d3e203633393030.roa (raw, json) Hash identifier: M9ozTABbn9o/3o5HXGeGad6/WVPq5wFJDo/GvXVI9WA= Subject key identifier: 17:2A:77:57:BF:45:F8:3E:0F:6F:96:F5:7F:7D:19:83:70:7F:B2:87 Certificate issuer: /CN=0273304A820906A512D2F0D86CA293A77222962C Certificate serial: 2C020D5A694D8BB1D7D0056D105C47ED0E0188F9 Authority key identifier: 02:73:30:4A:82:09:06:A5:12:D2:F0:D8:6C:A2:93:A7:72:22:96:2C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0273304A820906A512D2F0D86CA293A77222962C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ZUSO/0/323430323a333065303a3a2f33322d3438203d3e203633393030.roa Signing time: Mon 11 May 2026 17:55:42 +0000 ROA not before: Mon 11 May 2026 17:50:42 +0000 ROA not after: Mon 10 May 2027 17:55:42 +0000 asID: 63900 IP address blocks: 2402:30e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.crl rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0273304A820906A512D2F0D86CA293A77222962C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:02:0d:5a:69:4d:8b:b1:d7:d0:05:6d:10:5c:47:ed:0e:01:88:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0273304A820906A512D2F0D86CA293A77222962C Validity Not Before: May 11 17:50:42 2026 GMT Not After : May 10 17:55:42 2027 GMT Subject: CN=172A7757BF45F83E0F6F96F57F7D1983707FB287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:93:b2:24:d5:85:63:ef:e5:ee:98:8c:e7: 5e:78:f8:70:15:05:a6:c0:81:da:af:cd:88:c0:ca: e9:cf:ed:e9:b5:c8:a7:4d:8c:df:44:3f:b7:68:27: 9e:51:40:4b:54:c9:f5:fb:21:71:f1:43:53:12:94: e5:4e:bf:86:5d:43:a5:15:09:ee:a3:11:d0:ea:be: ec:e7:af:5c:d3:31:46:41:0f:d9:3c:62:85:a3:c5: 4f:6b:b9:c0:e2:14:3e:d2:8e:d5:b0:81:a8:1c:3d: da:d4:33:2b:3a:6d:32:4a:a3:85:96:0b:31:fe:31: 31:b8:71:d6:b3:3b:c1:16:ff:6d:86:93:3c:f7:4d: 08:b9:a6:17:1f:31:b8:78:1d:8a:6d:06:28:f3:f6: 05:2d:ba:fb:9f:6a:c8:97:d1:f4:5a:1a:34:36:85: d8:ea:d1:cd:41:b2:3a:02:f0:da:90:b1:e7:06:14: cb:aa:b0:0d:c5:05:c1:3d:81:ac:ee:9d:b9:b9:70: 14:da:03:0f:cf:fb:03:6a:7d:f0:8e:ed:2a:56:92: 1a:82:9d:55:77:e8:8b:c8:d7:e3:2e:35:11:f2:a0: af:22:70:f2:f5:e3:4b:4e:18:f7:77:9c:17:63:ca: b5:12:40:7e:e0:05:49:54:89:e8:e7:8e:0a:fa:8c: dd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2A:77:57:BF:45:F8:3E:0F:6F:96:F5:7F:7D:19:83:70:7F:B2:87 X509v3 Authority Key Identifier: keyid:02:73:30:4A:82:09:06:A5:12:D2:F0:D8:6C:A2:93:A7:72:22:96:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ZUSO/0/0273304A820906A512D2F0D86CA293A77222962C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0273304A820906A512D2F0D86CA293A77222962C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZUSO/0/323430323a333065303a3a2f33322d3438203d3e203633393030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:30e0::/32 Signature Algorithm: sha256WithRSAEncryption 97:ac:82:e2:7c:1f:a0:25:11:1b:5b:ea:8c:cf:20:6d:64:c3: bd:26:96:80:28:c3:cc:61:29:2d:77:0b:e6:03:0f:f5:c6:10: 0c:2e:3c:26:fb:fc:c2:89:10:26:37:03:ee:cf:79:5a:1a:15: 2f:41:b9:03:bf:d4:bb:8d:c7:d2:25:9b:06:9c:ac:f4:5e:15: 62:eb:d8:61:e8:39:e7:95:ed:ab:df:ec:47:04:36:a0:1e:d9: 21:23:db:68:b5:56:a2:c8:67:55:5b:56:58:78:b8:5d:9e:79: 69:41:44:3b:b3:c0:d0:59:21:84:8d:fa:29:15:38:9e:9d:c2: de:e3:c3:45:51:db:1a:be:45:11:5c:d2:1e:4b:48:7c:3b:b3: 58:3e:af:4a:9b:ba:e0:c1:e4:c0:a4:0a:5c:05:8d:63:4b:3a: 49:60:fe:5f:5a:2f:63:1e:ef:4c:3d:b3:76:03:aa:b7:df:1b: 1f:f5:1e:4a:04:c4:52:da:ff:89:88:54:68:09:02:60:3c:1e: da:03:b5:0c:86:c7:77:53:0f:89:92:c3:4a:a9:fc:b7:60:c2: f4:45:2a:dd:47:47:84:dc:64:56:01:59:27:03:1c:67:53:77: c6:cc:b7:95:e9:37:cc:2b:bc:65:82:b3:de:14:c9:94:c2:aa: 59:b1:1b:b5 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIULAINWmlNi7HX0AVtEFxH7Q4BiPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3MzMwNEE4MjA5MDZBNTEyRDJGMEQ4NkNBMjkzQTc3 MjIyOTYyQzAeFw0yNjA1MTExNzUwNDJaFw0yNzA1MTAxNzU1NDJaMDMxMTAvBgNV BAMTKDE3MkE3NzU3QkY0NUY4M0UwRjZGOTZGNTdGN0QxOTgzNzA3RkIyODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIuJOyJNWFY+/l7piM5154+HAV BabAgdqvzYjAyunP7em1yKdNjN9EP7doJ55RQEtUyfX7IXHxQ1MSlOVOv4ZdQ6UV Ce6jEdDqvuznr1zTMUZBD9k8YoWjxU9rucDiFD7SjtWwgagcPdrUMys6bTJKo4WW CzH+MTG4cdazO8EW/22Gkzz3TQi5phcfMbh4HYptBijz9gUtuvufasiX0fRaGjQ2 hdjq0c1BsjoC8NqQsecGFMuqsA3FBcE9gazunbm5cBTaAw/P+wNqffCO7SpWkhqC nVV36IvI1+MuNRHyoK8icPL140tOGPd3nBdjyrUSQH7gBUlUiejnjgr6jN0rAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUFyp3V79F+D4Pb5b1f30Zg3B/socwHwYDVR0j BBgwFoAUAnMwSoIJBqUS0vDYbKKTp3IiliwwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWlVTTy8w LzAyNzMzMDRBODIwOTA2QTUxMkQyRjBEODZDQTI5M0E3NzIyMjk2MkMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMDI3MzMwNEE4MjA5MDZBNTEyRDJGMEQ4NkNBMjkz QTc3MjIyOTYyQy5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1pVU08vMC8zMjM0MzAzMjNhMzMzMDY1 MzAzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzNjMzMzkzMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA JAIw4DANBgkqhkiG9w0BAQsFAAOCAQEAl6yC4nwfoCURG1vqjM8gbWTDvSaWgCjD zGEpLXcL5gMP9cYQDC48Jvv8wokQJjcD7s95WhoVL0G5A7/Uu43H0iWbBpys9F4V YuvYYeg555Xtq9/sRwQ2oB7ZISPbaLVWoshnVVtWWHi4XZ55aUFEO7PA0FkhhI36 KRU4np3C3uPDRVHbGr5FEVzSHktIfDuzWD6vSpu64MHkwKQKXAWNY0s6SWD+X1ov Yx7vTD2zdgOqt98bH/UeSgTEUtr/iYhUaAkCYDwe2gO1DIbHd1MPiZLDSqn8t2DC 9EUq3UdHhNxkVgFZJwMcZ1N3xsy3lek3zCu8ZYKz3hTJlMKqWbEbtQ== -----END CERTIFICATE-----Generated at Wed May 13 21:52:24 2026 by rpki-client