$ rpki-client -vvf rpkica.twnic.tw/rpki/ARCHE/0/323430313a376136303a3a2f33322d3332203d3e203138303431.roa File: 323430313a376136303a3a2f33322d3332203d3e203138303431.roa (raw, json) Hash identifier: qxUkmVDTlYC49rIGKj7zr8ivSmLfXGtp1JCdVnCFlN8= Subject key identifier: 63:96:47:D9:C8:A0:56:F5:09:7B:7E:64:F7:B3:47:38:4E:A6:BF:B3 Certificate issuer: /CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C Certificate serial: 3FB9E98B402C7BB588AC822214F5390C89ECB81E Authority key identifier: CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ARCHE/0/323430313a376136303a3a2f33322d3332203d3e203138303431.roa Signing time: Mon 11 May 2026 17:36:10 +0000 ROA not before: Mon 11 May 2026 17:31:10 +0000 ROA not after: Mon 10 May 2027 17:36:10 +0000 asID: 18041 IP address blocks: 2401:7a60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b9:e9:8b:40:2c:7b:b5:88:ac:82:22:14:f5:39:0c:89:ec:b8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAD362F3BFAFE5B9307917E23B93FE8D0393085C Validity Not Before: May 11 17:31:10 2026 GMT Not After : May 10 17:36:10 2027 GMT Subject: CN=639647D9C8A056F5097B7E64F7B347384EA6BFB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6e:f1:c1:e1:2f:69:fa:6e:2f:7e:3e:5b:aa: 4e:85:dd:67:5b:a7:fa:a1:7a:1a:50:bf:b1:90:60: b8:f0:1d:92:66:b9:2a:3d:bb:6c:de:6b:92:e9:fe: 2e:13:fc:44:12:ba:af:f7:08:2f:79:e2:9f:92:97: 64:fe:45:59:d2:db:7f:15:40:f4:96:06:08:52:b7: 16:16:83:56:a0:2d:04:6c:c2:5e:d5:5e:4c:e8:ef: 9a:57:bc:d6:6f:10:dd:af:b5:a1:31:96:52:c0:7c: 81:ba:d5:1b:6d:16:58:22:2a:ed:94:f6:a7:56:cb: 0b:2b:09:98:72:b7:c9:2e:79:61:67:70:5e:ca:ea: 8d:ea:52:e8:b2:4d:17:67:a5:7a:ea:8f:bb:3d:e9: 87:20:98:22:8c:6e:5a:ef:59:19:84:e1:4e:e2:54: 2d:29:7d:b4:0d:a4:ae:a0:1a:df:25:36:bc:1a:38: 56:47:5a:68:80:91:8e:ae:16:0e:d6:17:d7:bd:19: c7:de:b5:69:a4:21:cb:d2:9e:29:28:8d:20:1a:a6: 51:e1:81:16:7d:5a:93:4d:93:1e:6f:24:0c:c1:bd: ad:11:81:8e:e1:44:2a:71:31:2c:db:e1:24:5f:a3: 6e:5d:5a:f2:b9:8e:49:53:99:f3:14:f0:c8:cb:e5: 83:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:96:47:D9:C8:A0:56:F5:09:7B:7E:64:F7:B3:47:38:4E:A6:BF:B3 X509v3 Authority Key Identifier: keyid:CA:D3:62:F3:BF:AF:E5:B9:30:79:17:E2:3B:93:FE:8D:03:93:08:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CAD362F3BFAFE5B9307917E23B93FE8D0393085C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ARCHE/0/323430313a376136303a3a2f33322d3332203d3e203138303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:7a60::/32 Signature Algorithm: sha256WithRSAEncryption 11:99:e2:aa:f1:35:4a:85:8e:d9:a1:37:4b:02:b2:3a:9e:eb: 34:94:65:42:a8:46:2b:39:fc:11:b9:59:0a:a8:64:45:03:cc: d1:dc:b0:bb:ed:25:c5:15:e5:e9:d7:fe:1f:6d:49:2b:21:1d: ca:43:33:17:ab:4a:23:d4:86:62:46:09:cf:e6:d8:e1:09:47: 4f:33:31:ed:e0:c8:18:f1:8a:2b:c7:37:4e:ea:ed:e6:f9:b4: 4e:58:7a:ed:e6:db:e3:5e:09:6b:ce:bc:17:06:c3:c2:f0:c8: 1e:a8:ce:e3:0f:3e:97:60:2e:7c:61:db:9c:4a:2b:cc:39:5d: 60:14:5d:49:f3:b8:62:af:2a:53:fd:87:34:60:a9:18:6d:fe: ef:de:d4:f5:5a:1f:bd:bf:9a:07:cb:57:c2:3e:59:7b:b9:07: f6:93:da:98:d7:07:4a:c2:e9:4c:50:ca:55:42:dd:62:52:2f: 6e:36:82:49:76:76:46:0b:65:e0:69:d8:82:43:3d:9b:4f:b1: 11:4f:94:6e:d0:e7:03:91:fa:b3:91:de:44:18:66:12:f1:7b: e1:fa:f6:35:fe:bc:d2:eb:16:4b:d5:f7:d4:c7:4b:79:4d:c2: d8:1d:bc:a9:84:a0:6b:e8:0f:97:4a:58:fb:e0:bf:7e:78:a8: a4:2a:e1:b3 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIUP7npi0Ase7WIrIIiFPU5DInsuB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FEMzYyRjNCRkFGRTVCOTMwNzkxN0UyM0I5M0ZFOEQw MzkzMDg1QzAeFw0yNjA1MTExNzMxMTBaFw0yNzA1MTAxNzM2MTBaMDMxMTAvBgNV BAMTKDYzOTY0N0Q5QzhBMDU2RjUwOTdCN0U2NEY3QjM0NzM4NEVBNkJGQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWbvHB4S9p+m4vfj5bqk6F3Wdb p/qhehpQv7GQYLjwHZJmuSo9u2zea5Lp/i4T/EQSuq/3CC954p+Sl2T+RVnS238V QPSWBghStxYWg1agLQRswl7VXkzo75pXvNZvEN2vtaExllLAfIG61RttFlgiKu2U 9qdWywsrCZhyt8kueWFncF7K6o3qUuiyTRdnpXrqj7s96YcgmCKMblrvWRmE4U7i VC0pfbQNpK6gGt8lNrwaOFZHWmiAkY6uFg7WF9e9GcfetWmkIcvSnikojSAaplHh gRZ9WpNNkx5vJAzBva0RgY7hRCpxMSzb4SRfo25dWvK5jklTmfMU8MjL5YODAgMB AAGjggHgMIIB3DAdBgNVHQ4EFgQUY5ZH2cigVvUJe35k97NHOE6mv7MwHwYDVR0j BBgwFoAUytNi87+v5bkweRfiO5P+jQOTCFwwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVJDSEUv MC9DQUQzNjJGM0JGQUZFNUI5MzA3OTE3RTIzQjkzRkU4RDAzOTMwODVDLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0NBRDM2MkYzQkZBRkU1QjkzMDc5MTdFMjNCOTNG RThEMDM5MzA4NUMuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUkNIRS8wLzMyMzQzMDMxM2EzNzYx MzYzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzgzMDM0MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAXpgMA0GCSqGSIb3DQEBCwUAA4IBAQARmeKq8TVKhY7ZoTdLArI6nus0lGVC qEYrOfwRuVkKqGRFA8zR3LC77SXFFeXp1/4fbUkrIR3KQzMXq0oj1IZiRgnP5tjh CUdPMzHt4MgY8YorxzdO6u3m+bROWHrt5tvjXglrzrwXBsPC8MgeqM7jDz6XYC58 YducSivMOV1gFF1J87hirypT/Yc0YKkYbf7v3tT1Wh+9v5oHy1fCPll7uQf2k9qY 1wdKwulMUMpVQt1iUi9uNoJJdnZGC2XgadiCQz2bT7ERT5Ru0OcDkfqzkd5EGGYS 8Xvh+vY1/rzS6xZL1ffUx0t5TcLYHbyphKBr6A+XSlj74L9+eKikKuGz -----END CERTIFICATE-----Generated at Wed May 13 08:28:28 2026 by rpki-client