$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATEL/0/323430303a363161303a613035343a3a2f34382d3438203d3e203338303437.roa File: 323430303a363161303a613035343a3a2f34382d3438203d3e203338303437.roa (raw, json) Hash identifier: CqFIMI+phEk/TJh0hQHIrRWiqwd9Tib9RbiLAwUoHcI= Subject key identifier: 24:59:12:97:8F:A6:70:DA:96:AD:6D:0F:FC:09:62:05:F2:FB:C2:45 Certificate issuer: /CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45 Certificate serial: 3D6AE1FBBEA4B9525283F158ACC0B6DF27981275 Authority key identifier: F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/323430303a363161303a613035343a3a2f34382d3438203d3e203338303437.roa Signing time: Mon 11 May 2026 17:18:11 +0000 ROA not before: Mon 11 May 2026 17:13:11 +0000 ROA not after: Mon 10 May 2027 17:18:11 +0000 asID: 38047 IP address blocks: 2400:61a0:a054::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6a:e1:fb:be:a4:b9:52:52:83:f1:58:ac:c0:b6:df:27:98:12:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45 Validity Not Before: May 11 17:13:11 2026 GMT Not After : May 10 17:18:11 2027 GMT Subject: CN=245912978FA670DA96AD6D0FFC096205F2FBC245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:06:6f:ce:89:4d:0a:46:ee:f1:3c:54:2b:d5: 26:66:e7:68:14:aa:d3:60:8d:5c:a9:db:5e:52:e1: fa:f6:da:32:42:b0:63:c3:cc:f1:5e:92:bc:05:3c: ae:67:ea:e6:e7:93:50:7e:93:ac:59:c8:b4:71:a0: 2b:45:34:9d:61:62:9e:bc:e5:5b:73:dd:2f:ca:1e: c3:68:fd:23:30:30:62:7f:33:97:ac:56:06:8b:9f: 96:05:58:98:e0:8d:c9:7c:b6:d0:ab:03:cd:a0:29: 48:e5:13:2e:71:77:83:72:cf:ad:5f:14:dc:21:a3: ef:47:59:94:ec:c3:24:7a:6f:e7:62:43:e0:b0:5e: 55:3b:6c:54:c0:93:62:95:f6:2d:4a:48:46:3a:19: 76:80:65:61:6c:43:18:9e:b6:c3:81:2a:6d:bb:df: 7e:f8:69:82:ce:4a:fa:f4:3d:24:99:da:52:3c:37: 93:30:4b:6d:d5:5c:4b:fd:46:ba:d7:53:34:f3:4c: 83:fa:ec:81:de:29:82:ea:79:a3:c9:53:01:98:a5: 36:91:36:8c:e9:c6:ea:db:e7:97:f9:85:2d:ae:be: 25:42:d0:51:96:45:14:18:14:f3:42:81:6a:e4:ca: 5d:f8:d6:85:65:bf:73:cc:ab:33:a5:7c:31:8f:52: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:59:12:97:8F:A6:70:DA:96:AD:6D:0F:FC:09:62:05:F2:FB:C2:45 X509v3 Authority Key Identifier: keyid:F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/323430303a363161303a613035343a3a2f34382d3438203d3e203338303437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:61a0:a054::/48 Signature Algorithm: sha256WithRSAEncryption 37:1f:f9:cc:6e:26:85:a1:86:6b:ad:f6:ae:9b:c6:3d:b2:a0: 51:05:6f:13:7d:5b:82:53:6b:56:9a:29:84:83:ae:00:9f:8e: 8e:d9:4f:14:b8:a0:e8:c2:66:9c:48:c4:98:02:49:03:a3:c6: 84:e6:c5:aa:e1:41:a8:94:13:60:60:16:f9:66:93:89:f9:ca: 2d:ad:4c:5c:67:b7:fd:0f:c5:97:23:d8:b0:3c:59:97:16:c8: b5:bf:3a:b0:55:c0:2c:91:d3:a6:1b:89:ac:35:55:ee:db:24: a8:4e:12:7c:96:7a:cc:e9:f7:cb:f5:1b:b6:1e:f4:a5:77:14: eb:dd:1e:a7:a8:96:27:16:82:86:2c:1f:92:03:9c:9d:48:ed: c8:4a:03:14:b1:31:72:4b:38:02:5e:67:34:84:b9:18:68:db: 38:ae:e3:9e:f4:4c:cb:45:00:8a:1a:b7:92:eb:52:0c:60:df: b1:0d:77:f8:3e:b5:35:e7:2d:a5:1e:28:e6:9e:36:69:a6:d2: e9:f0:cf:87:c1:13:97:37:bc:ad:26:07:b9:49:e9:aa:40:95: 74:9f:f5:a6:3a:70:95:f9:d7:a9:b2:ba:a3:07:bd:91:f5:0a: 8e:09:ae:55:c2:ad:1e:ea:3b:50:91:51:ed:48:c7:a3:54:41: 1b:13:e5:18 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUPWrh+76kuVJSg/FYrMC23yeYEnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBNTU0Q0Y2RDk4QTRBRUU3QkIzOTk5MzJCNDYzQjcy RjNGNEI0NTAeFw0yNjA1MTExNzEzMTFaFw0yNzA1MTAxNzE4MTFaMDMxMTAvBgNV BAMTKDI0NTkxMjk3OEZBNjcwREE5NkFENkQwRkZDMDk2MjA1RjJGQkMyNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgBm/OiU0KRu7xPFQr1SZm52gU qtNgjVyp215S4fr22jJCsGPDzPFekrwFPK5n6ubnk1B+k6xZyLRxoCtFNJ1hYp68 5Vtz3S/KHsNo/SMwMGJ/M5esVgaLn5YFWJjgjcl8ttCrA82gKUjlEy5xd4Nyz61f FNwho+9HWZTswyR6b+diQ+CwXlU7bFTAk2KV9i1KSEY6GXaAZWFsQxietsOBKm27 3374aYLOSvr0PSSZ2lI8N5MwS23VXEv9RrrXUzTzTIP67IHeKYLqeaPJUwGYpTaR Nozpxurb55f5hS2uviVC0FGWRRQYFPNCgWrkyl341oVlv3PMqzOlfDGPUszLAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUJFkSl4+mcNqWrW0P/AliBfL7wkUwHwYDVR0j BBgwFoAU8qVUz22YpK7nuzmZMrRjty8/S0UwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFU RUwvMC9GMkE1NTRDRjZEOThBNEFFRTdCQjM5OTkzMkI0NjNCNzJGM0Y0QjQ1LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0YyQTU1NENGNkQ5OEE0QUVFN0JCMzk5OTMy QjQ2M0I3MkYzRjRCNDUuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuG anJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFURUwvMC8zMjM0MzAz MDNhMzYzMTYxMzAzYTYxMzAzNTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMz ODMwMzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQAYaCgVDANBgkqhkiG9w0BAQsFAAOCAQEANx/5 zG4mhaGGa632rpvGPbKgUQVvE31bglNrVpophIOuAJ+OjtlPFLig6MJmnEjEmAJJ A6PGhObFquFBqJQTYGAW+WaTifnKLa1MXGe3/Q/FlyPYsDxZlxbItb86sFXALJHT phuJrDVV7tskqE4SfJZ6zOn3y/Ubth70pXcU690ep6iWJxaChiwfkgOcnUjtyEoD FLExcks4Al5nNIS5GGjbOK7jnvRMy0UAihq3kutSDGDfsQ13+D61NectpR4o5p42 aabS6fDPh8ETlze8rSYHuUnpqkCVdJ/1pjpwlfnXqbK6owe9kfUKjgmuVcKtHuo7 UJFR7UjHo1RBGxPlGA== -----END CERTIFICATE-----Generated at Wed May 13 10:10:32 2026 by rpki-client