$ rpki-client -vvf rpkica.twnic.tw/rpki/CSPTEK/0/3130332e3135392e3137362e302f32332d3234203d3e203338383339.roa File: 3130332e3135392e3137362e302f32332d3234203d3e203338383339.roa (raw, json) Hash identifier: fgIPz4pRjg9MozWHN5C9tmdzsbKi6XEfF4wUaKsvsnA= Subject key identifier: 4A:4B:2F:38:EF:37:01:24:5E:16:19:65:C0:5B:68:17:92:FA:3E:43 Certificate issuer: /CN=8F1212A19454D2A49786359CAC45368F821417D6 Certificate serial: 7F578FA270EFA9B80E1221BBA4B4AD01E5F07FA1 Authority key identifier: 8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/3130332e3135392e3137362e302f32332d3234203d3e203338383339.roa Signing time: Mon 11 May 2026 17:08:13 +0000 ROA not before: Mon 11 May 2026 17:03:13 +0000 ROA not after: Mon 10 May 2027 17:08:13 +0000 asID: 38839 IP address blocks: 103.159.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:57:8f:a2:70:ef:a9:b8:0e:12:21:bb:a4:b4:ad:01:e5:f0:7f:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F1212A19454D2A49786359CAC45368F821417D6 Validity Not Before: May 11 17:03:13 2026 GMT Not After : May 10 17:08:13 2027 GMT Subject: CN=4A4B2F38EF3701245E161965C05B681792FA3E43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0b:cf:61:29:03:bb:e5:4f:09:38:c4:ea:85: db:1c:49:91:04:8b:12:f2:04:d7:5e:9e:2b:08:98: 77:0c:2f:72:19:55:62:d1:56:9c:ad:2d:13:94:cf: 1a:a7:63:b9:47:b0:11:06:c5:46:30:b6:56:f2:df: a1:32:b2:86:aa:45:08:5b:03:4f:89:75:e4:89:9d: e6:f7:8b:7b:49:4a:9b:66:3b:fe:c9:53:03:db:e5: 66:db:50:04:26:cc:1e:b9:32:d9:51:34:da:9b:11: a6:6c:a5:0e:ce:a8:fd:16:7c:62:45:eb:fb:f6:79: 8a:02:28:c3:36:a5:d0:4f:a5:8c:04:06:a8:1b:4f: 73:14:e5:b8:c7:9c:50:d3:01:67:14:e0:21:82:8b: 3b:ef:99:d0:da:7b:a7:3f:69:d1:c3:f8:31:6d:b0: 47:fc:a9:9e:be:6e:d1:d0:5e:79:17:84:94:cb:6a: 9a:55:33:3d:9c:3a:98:6c:66:d0:f2:d3:00:37:6f: 1b:f7:47:20:88:4c:ac:2e:ab:94:c2:32:07:56:fc: c7:9b:dc:5a:ee:9e:8f:8e:54:cb:27:3b:42:4a:fc: d1:6d:e8:b7:52:02:36:9d:e3:f2:c1:e7:5f:3d:6e: 3d:17:10:4a:8d:93:a7:d1:54:72:40:14:04:4f:95: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4B:2F:38:EF:37:01:24:5E:16:19:65:C0:5B:68:17:92:FA:3E:43 X509v3 Authority Key Identifier: keyid:8F:12:12:A1:94:54:D2:A4:97:86:35:9C:AC:45:36:8F:82:14:17:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/8F1212A19454D2A49786359CAC45368F821417D6.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F1212A19454D2A49786359CAC45368F821417D6.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CSPTEK/0/3130332e3135392e3137362e302f32332d3234203d3e203338383339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.176.0/23 Signature Algorithm: sha256WithRSAEncryption 88:5f:04:62:27:bd:32:5c:00:75:5a:33:8c:23:db:97:f1:19: 93:2a:ea:aa:b8:5d:0e:9c:04:0c:7c:30:03:67:aa:97:ea:ae: e2:c5:de:3d:7d:aa:5b:4b:27:d1:ed:4f:f3:75:d2:bf:17:16: 62:6f:68:17:07:74:d5:3f:5a:53:e6:2a:14:85:d1:e8:16:eb: b3:16:81:f6:62:4b:3b:1c:45:7a:d9:59:ee:e8:77:f3:23:e4: c2:56:16:a3:a0:68:de:09:44:f3:f6:ca:a4:8b:21:59:fc:90: 8b:57:76:45:e1:aa:be:45:d4:dd:63:9c:1d:7c:92:99:5c:09: 87:26:f8:8c:d3:44:20:59:41:89:f6:ce:8b:47:ec:e0:32:4c: 18:b6:8e:f4:6b:21:4f:6e:e5:6e:11:1b:5e:dc:af:90:96:3e: 0f:8b:f9:f5:65:0e:5c:bb:fd:22:52:c6:03:e5:fe:d4:55:54: 30:40:f3:68:1d:93:71:ba:72:52:07:88:7c:cb:83:df:a5:78: 35:93:81:9d:de:98:fa:a5:8c:7b:8b:74:f3:1b:bb:f0:33:a9: 86:8f:d1:c8:50:a4:cf:0e:20:f5:cb:99:95:2e:7e:b1:8f:ec: bb:a3:59:42:aa:7f:f6:6e:9b:1c:37:d9:66:70:bb:e9:8e:04: e1:b2:01:94 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUf1ePonDvqbgOEiG7pLStAeXwf6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4 MjE0MTdENjAeFw0yNjA1MTExNzAzMTNaFw0yNzA1MTAxNzA4MTNaMDMxMTAvBgNV BAMTKDRBNEIyRjM4RUYzNzAxMjQ1RTE2MTk2NUMwNUI2ODE3OTJGQTNFNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbC89hKQO75U8JOMTqhdscSZEE ixLyBNdenisImHcML3IZVWLRVpytLROUzxqnY7lHsBEGxUYwtlby36EysoaqRQhb A0+JdeSJneb3i3tJSptmO/7JUwPb5WbbUAQmzB65MtlRNNqbEaZspQ7OqP0WfGJF 6/v2eYoCKMM2pdBPpYwEBqgbT3MU5bjHnFDTAWcU4CGCizvvmdDae6c/adHD+DFt sEf8qZ6+btHQXnkXhJTLappVMz2cOphsZtDy0wA3bxv3RyCITKwuq5TCMgdW/Meb 3Fruno+OVMsnO0JK/NFt6LdSAjad4/LB5189bj0XEEqNk6fRVHJAFARPlau7AgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUSksvOO83ASReFhllwFtoF5L6PkMwHwYDVR0j BBgwFoAUjxISoZRU0qSXhjWcrEU2j4IUF9YwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVL LzAvOEYxMjEyQTE5NDU0RDJBNDk3ODYzNTlDQUM0NTM2OEY4MjE0MTdENi5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS84RjEyMTJBMTk0NTREMkE0OTc4NjM1OUNBQzQ1 MzY4RjgyMTQxN0Q2LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ1NQVEVLLzAvMzEzMDMzMmUzMTM1 MzkyZTMxMzczNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMzMzgzODMzMzkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAFnn7AwDQYJKoZIhvcNAQELBQADggEBAIhfBGInvTJcAHVaM4wj25fx GZMq6qq4XQ6cBAx8MANnqpfqruLF3j19qltLJ9HtT/N10r8XFmJvaBcHdNU/WlPm KhSF0egW67MWgfZiSzscRXrZWe7od/Mj5MJWFqOgaN4JRPP2yqSLIVn8kItXdkXh qr5F1N1jnB18kplcCYcm+IzTRCBZQYn2zotH7OAyTBi2jvRrIU9u5W4RG17cr5CW Pg+L+fVlDly7/SJSxgPl/tRVVDBA82gdk3G6clIHiHzLg9+leDWTgZ3emPqljHuL dPMbu/AzqYaP0chQpM8OIPXLmZUufrGP7LujWUKqf/Zumxw32WZwu+mOBOGyAZQ= -----END CERTIFICATE-----Generated at Wed May 13 04:17:13 2026 by rpki-client