$ rpki-client -vvf rpkica.twnic.tw/rpki/DBSBANKSG/0/3136352e39392e3137302e302f32342d3234203d3e203536323839.roa File: 3136352e39392e3137302e302f32342d3234203d3e203536323839.roa (raw, json) Hash identifier: b1hJ1UWBsgGqGfOSqptJzMGf24IDTaPm8yd1KL/ET2M= Subject key identifier: AC:56:C2:AD:6C:D0:BB:FF:F1:43:B8:B9:42:DC:6B:87:AC:77:1F:76 Certificate issuer: /CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Certificate serial: 58A31427DE41B65F31E24D0AEB527E225338236F Authority key identifier: 8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/3136352e39392e3137302e302f32342d3234203d3e203536323839.roa Signing time: Mon 11 May 2026 17:45:00 +0000 ROA not before: Mon 11 May 2026 17:40:00 +0000 ROA not after: Mon 10 May 2027 17:45:00 +0000 asID: 56289 IP address blocks: 165.99.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a3:14:27:de:41:b6:5f:31:e2:4d:0a:eb:52:7e:22:53:38:23:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A5BF47A3B6A668B6CB32369F52B9EA035390709 Validity Not Before: May 11 17:40:00 2026 GMT Not After : May 10 17:45:00 2027 GMT Subject: CN=AC56C2AD6CD0BBFFF143B8B942DC6B87AC771F76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ff:2d:97:af:37:59:df:47:65:1d:e3:33:cf: db:c8:98:a1:ce:45:12:89:7d:20:e4:e9:e3:af:78: f4:39:a4:a4:65:10:dc:cb:6a:63:04:68:ac:53:d2: 15:24:38:72:f7:20:1d:82:d9:66:bc:bb:14:aa:8f: 60:1a:af:2c:65:1f:00:6c:64:d5:6c:9c:c3:04:13: c2:b0:ab:c4:5e:8e:c7:ef:73:fc:ea:fc:34:bd:11: bc:c8:11:f2:0c:3b:87:38:fd:2c:0f:1a:51:4a:eb: d7:c2:ba:d1:66:9f:fa:67:b0:c8:17:c2:5e:f3:08: 7c:e2:1b:fe:9f:aa:80:80:46:4f:15:09:cd:e8:2f: 66:ed:ef:bc:9d:63:51:10:71:4f:1b:8b:ed:ee:e2: aa:d7:23:9c:86:54:91:2a:d3:60:e7:9b:56:cf:92: cd:81:25:f6:d3:c5:71:0f:6c:c5:2a:af:ff:cb:69: bb:43:24:7d:80:1e:c4:d2:8a:85:c4:14:e9:d1:63: 72:de:86:43:a4:0d:e0:12:1d:3a:b5:5d:33:b8:82: f1:ab:4c:c0:0d:b1:87:dd:3b:0b:ea:a4:a1:de:a4: 18:66:c8:cc:c0:e6:d6:7a:68:62:51:1a:8e:e9:6a: 74:6a:b5:2c:71:03:c1:7f:4b:fa:96:b9:74:f1:6a: 76:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:56:C2:AD:6C:D0:BB:FF:F1:43:B8:B9:42:DC:6B:87:AC:77:1F:76 X509v3 Authority Key Identifier: keyid:8A:5B:F4:7A:3B:6A:66:8B:6C:B3:23:69:F5:2B:9E:A0:35:39:07:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8A5BF47A3B6A668B6CB32369F52B9EA035390709.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKSG/0/3136352e39392e3137302e302f32342d3234203d3e203536323839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 165.99.170.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:80:c2:1d:03:27:0d:67:cb:a6:16:89:24:f6:4e:5e:da:7f: e5:f5:b2:fb:2d:86:82:79:5f:0f:3b:23:06:e8:22:71:87:0d: 09:cf:f5:31:26:0d:9e:79:33:33:fe:3a:22:1f:f2:88:cf:18: c6:ac:c2:29:43:5c:e1:bb:81:2b:c1:cd:a4:62:9e:03:1f:be: c0:ae:74:c3:9d:33:55:a5:bc:7f:d9:9f:b6:fa:50:e1:24:fd: 0c:4d:57:59:8e:1c:9c:18:fe:6c:dd:7e:29:b2:36:f1:50:26: ab:d4:01:63:9e:9e:a9:9d:6c:76:a2:40:4d:e0:55:dc:50:a4: 2a:2c:66:83:06:11:62:df:1a:4d:f3:82:67:a7:d7:22:88:cc: 61:87:ea:57:e6:65:a2:76:f0:1c:2f:d3:fa:26:72:f7:21:54: 9c:47:84:89:97:90:d4:0c:14:a1:35:ff:cf:2d:fd:8a:03:5b: a4:59:a5:08:14:d9:c9:f9:7b:8b:57:12:5c:0c:f7:a5:d7:e0: ea:0f:e6:b0:8e:8a:a7:b4:02:26:ae:0a:07:05:08:79:17:6d: a1:e9:92:10:22:3b:bb:0e:0f:25:1e:1f:fe:9c:0a:db:01:13: 96:58:97:57:a7:6a:14:15:59:97:c5:0f:5f:15:54:40:75:9e: a7:0c:a9:74 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUWKMUJ95Btl8x4k0K61J+IlM4I28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAz NTM5MDcwOTAeFw0yNjA1MTExNzQwMDBaFw0yNzA1MTAxNzQ1MDBaMDMxMTAvBgNV BAMTKEFDNTZDMkFENkNEMEJCRkZGMTQzQjhCOTQyREM2Qjg3QUM3NzFGNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS/y2XrzdZ30dlHeMzz9vImKHO RRKJfSDk6eOvePQ5pKRlENzLamMEaKxT0hUkOHL3IB2C2Wa8uxSqj2AaryxlHwBs ZNVsnMMEE8Kwq8Rejsfvc/zq/DS9EbzIEfIMO4c4/SwPGlFK69fCutFmn/pnsMgX wl7zCHziG/6fqoCARk8VCc3oL2bt77ydY1EQcU8bi+3u4qrXI5yGVJEq02Dnm1bP ks2BJfbTxXEPbMUqr//LabtDJH2AHsTSioXEFOnRY3LehkOkDeASHTq1XTO4gvGr TMANsYfdOwvqpKHepBhmyMzA5tZ6aGJRGo7panRqtSxxA8F/S/qWuXTxanbxAgMB AAGjggHpMIIB5TAdBgNVHQ4EFgQUrFbCrWzQu//xQ7i5Qtxrh6x3H3YwHwYDVR0j BBgwFoAUilv0ejtqZotssyNp9SueoDU5BwkwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFO S1NHLzAvOEE1QkY0N0EzQjZBNjY4QjZDQjMyMzY5RjUyQjlFQTAzNTM5MDcwOS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC84QTVCRjQ3QTNCNkE2NjhCNkNCMzIzNjlG NTJCOUVBMDM1MzkwNzA5LmNlcjB/BggrBgEFBQcBCwRzMHEwbwYIKwYBBQUHMAuG Y3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFOS1NHLzAvMzEzNjM1 MmUzOTM5MmUzMTM3MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM2MzIzODM5 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQApWOqMA0GCSqGSIb3DQEBCwUAA4IBAQA8gMIdAycNZ8umFokk 9k5e2n/l9bL7LYaCeV8POyMG6CJxhw0Jz/UxJg2eeTMz/joiH/KIzxjGrMIpQ1zh u4Erwc2kYp4DH77ArnTDnTNVpbx/2Z+2+lDhJP0MTVdZjhycGP5s3X4psjbxUCar 1AFjnp6pnWx2okBN4FXcUKQqLGaDBhFi3xpN84Jnp9ciiMxhh+pX5mWidvAcL9P6 JnL3IVScR4SJl5DUDBShNf/PLf2KA1ukWaUIFNnJ+XuLVxJcDPel1+DqD+awjoqn tAImrgoHBQh5F22h6ZIQIju7Dg8lHh/+nArbAROWWJdXp2oUFVmXxQ9fFVRAdZ6n DKl0 -----END CERTIFICATE-----Generated at Wed May 13 09:15:09 2026 by rpki-client