$ rpki-client -vvf rpkica.twnic.tw/rpki/CCETECH/1/3136302e32352e3130352e302f32342d3234203d3e20323038323233.roa File: 3136302e32352e3130352e302f32342d3234203d3e20323038323233.roa (raw, json) Hash identifier: YdBvwjNi4bXGDm/SLY5b1QLMeyyL4E2okhg4V5ia0DI= Subject key identifier: 8F:27:F0:F8:29:91:E2:5C:7A:2F:A0:1E:5D:4E:31:25:90:21:28:E8 Certificate issuer: /CN=3BFFB675B95FCD73A993F3228774251092970E7B Certificate serial: 3D7AA54454B091342F75A5512A14BB63C28D880B Authority key identifier: 3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3136302e32352e3130352e302f32342d3234203d3e20323038323233.roa Signing time: Mon 11 May 2026 17:37:16 +0000 ROA not before: Mon 11 May 2026 17:32:16 +0000 ROA not after: Mon 10 May 2027 17:37:16 +0000 asID: 208223 IP address blocks: 160.25.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:7a:a5:44:54:b0:91:34:2f:75:a5:51:2a:14:bb:63:c2:8d:88:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BFFB675B95FCD73A993F3228774251092970E7B Validity Not Before: May 11 17:32:16 2026 GMT Not After : May 10 17:37:16 2027 GMT Subject: CN=8F27F0F82991E25C7A2FA01E5D4E3125902128E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:79:aa:06:d6:32:9b:e9:a7:4d:0a:c5:6a: 42:eb:bb:6b:51:e6:5f:f7:9f:33:b2:d0:28:64:58: 11:43:91:c3:39:56:8b:aa:d1:ac:2a:19:cc:2a:76: 32:5d:38:df:b9:1b:25:b9:06:fb:ae:b8:e1:5f:d3: ff:ae:40:96:54:d6:4f:87:d1:21:8b:6f:f6:cc:6a: 21:ca:cc:76:db:b7:5a:62:2b:d8:ff:88:f3:10:35: 8b:21:86:0b:f4:1b:c3:75:01:5f:16:55:b0:cf:dd: b7:95:79:66:12:c5:74:af:9d:eb:28:3e:ce:66:d8: df:54:58:7a:8d:5a:6f:45:34:41:2a:9d:eb:bc:e1: db:ea:eb:2d:87:5b:05:66:c0:f6:76:70:d4:6c:0d: 19:3c:5c:35:b6:67:10:69:41:9c:5f:76:20:d4:0d: 79:a0:1b:2b:5f:25:d2:7f:81:2e:bc:c5:c0:a5:94: 7c:70:b7:70:a6:52:f7:79:b9:29:a4:44:8c:4d:17: de:2e:46:5f:05:48:64:ea:f3:43:dd:14:7a:d1:27: e7:35:e3:ca:6a:a0:ce:99:ac:ed:79:42:12:fe:e6: 3f:0c:79:21:2a:6c:20:77:e8:62:e7:c0:59:86:2b: ff:66:7f:d7:59:c6:10:49:36:a4:ce:6b:54:1a:ab: 70:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:27:F0:F8:29:91:E2:5C:7A:2F:A0:1E:5D:4E:31:25:90:21:28:E8 X509v3 Authority Key Identifier: keyid:3B:FF:B6:75:B9:5F:CD:73:A9:93:F3:22:87:74:25:10:92:97:0E:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3BFFB675B95FCD73A993F3228774251092970E7B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/3BFFB675B95FCD73A993F3228774251092970E7B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCETECH/1/3136302e32352e3130352e302f32342d3234203d3e20323038323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.25.105.0/24 Signature Algorithm: sha256WithRSAEncryption ae:41:e5:ff:51:80:73:0b:32:83:f7:21:c4:e5:b6:45:35:5d: 89:5b:9a:78:4c:49:4e:8e:de:1d:af:d9:71:6d:63:47:3e:6e: 61:00:db:0e:16:a6:ad:6b:59:d4:35:e7:83:64:fb:3e:da:1b: 59:57:49:41:47:f0:53:f5:2e:97:e0:f4:03:9f:3e:6d:9f:b1: 73:30:61:5d:c6:72:b7:0d:b5:f7:37:df:db:0b:d6:97:77:87: 20:04:37:c9:88:42:19:9d:d2:49:fb:f0:dd:71:d5:cf:8f:2a: c8:12:1b:f9:87:1a:21:ee:0f:b3:65:73:5d:06:c1:73:d7:9a: f3:89:16:72:fb:ee:52:49:ae:65:ec:85:79:d1:22:54:b3:52: 72:a1:8b:05:c2:57:9e:07:ba:2d:52:93:f3:27:59:c1:48:fd: 56:49:d4:f3:ca:bb:55:40:a0:64:fb:f5:31:19:e3:22:83:d2: 50:9a:af:65:e5:7f:4d:2d:fc:a7:71:99:16:18:0c:fb:b8:1c: 04:92:e2:02:32:b7:6a:dc:f4:02:e1:59:29:59:81:c3:6b:01: 25:b2:eb:9b:f5:9a:17:53:ad:9b:b1:b5:a3:a5:36:28:c7:93: 06:99:63:31:7b:1e:b5:9c:3d:d5:80:8d:81:20:84:63:bb:3b: 2c:81:22:50 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUPXqlRFSwkTQvdaVRKhS7Y8KNiAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0JGRkI2NzVCOTVGQ0Q3M0E5OTNGMzIyODc3NDI1MTA5 Mjk3MEU3QjAeFw0yNjA1MTExNzMyMTZaFw0yNzA1MTAxNzM3MTZaMDMxMTAvBgNV BAMTKDhGMjdGMEY4Mjk5MUUyNUM3QTJGQTAxRTVENEUzMTI1OTAyMTI4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDjnmqBtYym+mnTQrFakLru2tR 5l/3nzOy0ChkWBFDkcM5Vouq0awqGcwqdjJdON+5GyW5BvuuuOFf0/+uQJZU1k+H 0SGLb/bMaiHKzHbbt1piK9j/iPMQNYshhgv0G8N1AV8WVbDP3beVeWYSxXSvneso Ps5m2N9UWHqNWm9FNEEqneu84dvq6y2HWwVmwPZ2cNRsDRk8XDW2ZxBpQZxfdiDU DXmgGytfJdJ/gS68xcCllHxwt3CmUvd5uSmkRIxNF94uRl8FSGTq80PdFHrRJ+c1 48pqoM6ZrO15QhL+5j8MeSEqbCB36GLnwFmGK/9mf9dZxhBJNqTOa1Qaq3ClAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUjyfw+CmR4lx6L6AeXU4xJZAhKOgwHwYDVR0j BBgwFoAUO/+2dblfzXOpk/Mih3QlEJKXDnswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NFVEVD SC8xLzNCRkZCNjc1Qjk1RkNENzNBOTkzRjMyMjg3NzQyNTEwOTI5NzBFN0IuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzAvM0JGRkI2NzVCOTVGQ0Q3M0E5OTNGMzIyODc3 NDI1MTA5Mjk3MEU3Qi5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDRVRFQ0gvMS8zMTM2MzAyZTMy MzUyZTMxMzAzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzODMyMzIzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKAZaTANBgkqhkiG9w0BAQsFAAOCAQEArkHl/1GAcwsyg/chxOW2 RTVdiVuaeExJTo7eHa/ZcW1jRz5uYQDbDhamrWtZ1DXng2T7PtobWVdJQUfwU/Uu l+D0A58+bZ+xczBhXcZytw219zff2wvWl3eHIAQ3yYhCGZ3SSfvw3XHVz48qyBIb +YcaIe4Ps2VzXQbBc9ea84kWcvvuUkmuZeyFedEiVLNScqGLBcJXnge6LVKT8ydZ wUj9VknU88q7VUCgZPv1MRnjIoPSUJqvZeV/TS38p3GZFhgM+7gcBJLiAjK3atz0 AuFZKVmBw2sBJbLrm/WaF1Otm7G1o6U2KMeTBpljMXsetZw91YCNgSCEY7s7LIEi UA== -----END CERTIFICATE-----Generated at Wed May 13 14:09:29 2026 by rpki-client