$ rpki-client -vvf rpkica.twnic.tw/rpki/CPSYS/0/323430303a623061303a3a2f33322d3332203d3e203633393038.roa File: 323430303a623061303a3a2f33322d3332203d3e203633393038.roa (raw, json) Hash identifier: zreCdGN4BpY2/KXE7Xi0nbMj8CRAQTw3exmLLk8qka8= Subject key identifier: 35:D0:8E:4E:93:01:55:6B:C5:CA:2C:14:08:31:7B:82:10:5F:7C:25 Certificate issuer: /CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Certificate serial: 6B72C6C98AA3F790C08C80D76B3F96C215D1B4F2 Authority key identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CPSYS/0/323430303a623061303a3a2f33322d3332203d3e203633393038.roa Signing time: Mon 11 May 2026 17:37:12 +0000 ROA not before: Mon 11 May 2026 17:32:12 +0000 ROA not after: Mon 10 May 2027 17:37:12 +0000 asID: 63908 IP address blocks: 2400:b0a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:72:c6:c9:8a:a3:f7:90:c0:8c:80:d7:6b:3f:96:c2:15:d1:b4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CB3ABB1B4A024A701223CD715911D996706E3AA Validity Not Before: May 11 17:32:12 2026 GMT Not After : May 10 17:37:12 2027 GMT Subject: CN=35D08E4E9301556BC5CA2C1408317B82105F7C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:42:ed:71:b4:ad:97:7a:e9:44:ca:a5:76: ce:65:bb:24:14:c5:f9:b2:64:6a:41:7b:34:69:7d: 21:9c:d3:b1:c9:ee:9b:42:cc:e1:da:2a:2d:64:46: 6e:6b:9b:34:6e:78:e9:09:dd:29:50:0b:9d:9e:91: fd:cc:c8:43:fe:b7:20:98:8e:8b:37:52:d7:ae:f1: 02:67:64:74:96:1a:ca:6e:19:48:ec:e8:92:24:f9: 54:6f:f9:72:0f:87:fb:7b:2a:86:bc:4f:5f:30:67: 8f:d3:55:6c:9e:16:69:cd:e5:1a:90:ed:62:58:1e: 6a:c2:56:43:49:3a:99:95:86:ff:97:d8:d6:77:0d: 3b:f3:23:05:e9:aa:67:15:91:71:23:25:ed:3e:b0: 95:25:39:a5:a9:57:ec:2a:43:20:04:ec:f3:4b:43: ce:94:d8:6c:cc:1f:73:42:29:e1:82:63:2d:31:b4: 0a:af:47:9b:72:20:07:e9:cb:08:69:bc:be:b2:61: 19:28:1f:83:52:ff:58:cb:ca:31:01:c4:31:fe:a5: 3e:4c:5a:1c:0d:c9:06:68:7a:b7:f2:1d:d1:d8:25: e0:12:ce:8a:00:66:6e:2f:00:0a:04:81:0d:3f:c7: 02:2d:8b:64:13:e1:13:6c:18:f5:83:33:46:f4:d5: 04:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D0:8E:4E:93:01:55:6B:C5:CA:2C:14:08:31:7B:82:10:5F:7C:25 X509v3 Authority Key Identifier: keyid:4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/323430303a623061303a3a2f33322d3332203d3e203633393038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:b0a0::/32 Signature Algorithm: sha256WithRSAEncryption 31:fe:82:a2:7f:10:38:f0:1b:6d:f3:c7:fb:57:7f:ef:f4:23: 4f:02:4a:94:87:19:79:5a:52:92:c9:20:83:bc:3b:96:35:cb: 6a:c0:4b:3c:63:6f:f7:b4:35:d2:ea:a1:48:dc:75:86:fd:ca: 54:93:d7:e2:f6:9c:be:e3:32:6c:0f:55:56:f3:f6:b9:4a:d1: c9:d9:a6:40:df:db:91:45:30:90:ca:63:c0:f0:37:2d:ad:0c: d7:db:f3:3b:8f:17:80:43:de:33:da:95:5b:f7:10:b1:c1:65: 6d:b3:67:2f:31:4e:c6:7d:78:0b:f8:63:03:3f:bc:28:37:75: 04:e5:06:ed:41:d6:23:c3:b7:74:3b:21:38:08:4f:5d:6a:28: 95:d6:3f:97:3c:78:41:7f:9b:61:98:c6:62:aa:b3:8b:a9:67: 28:83:05:9c:27:bc:8b:f5:e3:90:31:c0:3d:22:64:80:53:c3: eb:01:4a:5b:99:0a:e2:0e:86:c9:e2:73:85:22:25:3b:d7:30: 74:f6:35:df:2a:fc:71:40:b2:0d:ff:36:af:df:d5:52:37:14: c5:c6:53:24:3e:3e:18:ca:56:6f:f9:b5:a1:1e:4a:ee:ad:81: 9b:a9:e7:c6:ea:5b:7b:a9:4e:c7:be:f2:f0:fc:58:d2:6e:86: f6:46:cd:be -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIUa3LGyYqj95DAjIDXaz+WwhXRtPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENCM0FCQjFCNEEwMjRBNzAxMjIzQ0Q3MTU5MTFEOTk2 NzA2RTNBQTAeFw0yNjA1MTExNzMyMTJaFw0yNzA1MTAxNzM3MTJaMDMxMTAvBgNV BAMTKDM1RDA4RTRFOTMwMTU1NkJDNUNBMkMxNDA4MzE3QjgyMTA1RjdDMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1okLtcbStl3rpRMqlds5luyQU xfmyZGpBezRpfSGc07HJ7ptCzOHaKi1kRm5rmzRueOkJ3SlQC52ekf3MyEP+tyCY jos3Uteu8QJnZHSWGspuGUjs6JIk+VRv+XIPh/t7Koa8T18wZ4/TVWyeFmnN5RqQ 7WJYHmrCVkNJOpmVhv+X2NZ3DTvzIwXpqmcVkXEjJe0+sJUlOaWpV+wqQyAE7PNL Q86U2GzMH3NCKeGCYy0xtAqvR5tyIAfpywhpvL6yYRkoH4NS/1jLyjEBxDH+pT5M WhwNyQZoerfyHdHYJeASzooAZm4vAAoEgQ0/xwIti2QT4RNsGPWDM0b01QRZAgMB AAGjggHgMIIB3DAdBgNVHQ4EFgQUNdCOTpMBVWvFyiwUCDF7ghBffCUwHwYDVR0j BBgwFoAUTLOrsbSgJKcBIjzXFZEdmWcG46owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1BTWVMv MC80Q0IzQUJCMUI0QTAyNEE3MDEyMjNDRDcxNTkxMUQ5OTY3MDZFM0FBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzRDQjNBQkIxQjRBMDI0QTcwMTIyM0NENzE1OTEx RDk5NjcwNkUzQUEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DUFNZUy8wLzMyMzQzMDMwM2E2MjMw NjEzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM2MzMzOTMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkALCgMA0GCSqGSIb3DQEBCwUAA4IBAQAx/oKifxA48Btt88f7V3/v9CNPAkqU hxl5WlKSySCDvDuWNctqwEs8Y2/3tDXS6qFI3HWG/cpUk9fi9py+4zJsD1VW8/a5 StHJ2aZA39uRRTCQymPA8DctrQzX2/M7jxeAQ94z2pVb9xCxwWVts2cvMU7GfXgL +GMDP7woN3UE5QbtQdYjw7d0OyE4CE9daiiV1j+XPHhBf5thmMZiqrOLqWcogwWc J7yL9eOQMcA9ImSAU8PrAUpbmQriDobJ4nOFIiU71zB09jXfKvxxQLIN/zav39VS NxTFxlMkPj4YylZv+bWhHkrurYGbqefG6lt7qU7HvvLw/FjSbob2Rs2+ -----END CERTIFICATE-----Generated at Wed May 13 04:02:46 2026 by rpki-client