$ rpki-client -vvf rpkica.twnic.tw/rpki/DCT/0/3130332e3235322e3139362e302f32322d3234203d3e20313331363031.roa File: 3130332e3235322e3139362e302f32322d3234203d3e20313331363031.roa (raw, json) Hash identifier: H53goHHbIQsVYLSl4R7a2BLrNh+WubAvsiCMNEEPsmk= Subject key identifier: 95:75:84:63:B5:F3:A2:4C:8A:17:1E:63:B2:E2:70:21:81:D1:03:AB Certificate issuer: /CN=39FBFF134ABD193CAEA4AAB003503031F998187D Certificate serial: 418C26B0B9CA4BE1FB77C032BA5B667ADF1DB25E Authority key identifier: 39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DCT/0/3130332e3235322e3139362e302f32322d3234203d3e20313331363031.roa Signing time: Mon 11 May 2026 16:42:37 +0000 ROA not before: Mon 11 May 2026 16:37:37 +0000 ROA not after: Mon 10 May 2027 16:42:37 +0000 asID: 131601 IP address blocks: 103.252.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:8c:26:b0:b9:ca:4b:e1:fb:77:c0:32:ba:5b:66:7a:df:1d:b2:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39FBFF134ABD193CAEA4AAB003503031F998187D Validity Not Before: May 11 16:37:37 2026 GMT Not After : May 10 16:42:37 2027 GMT Subject: CN=95758463B5F3A24C8A171E63B2E2702181D103AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:db:f0:e6:51:99:04:b6:97:85:e3:e3:b9:25: ce:79:7d:63:66:06:fd:1e:8a:da:dc:68:75:3e:ce: 7f:16:af:5d:db:4b:22:bb:5c:c1:6b:42:74:31:ae: 22:a4:90:7a:78:ed:79:bb:40:2d:2d:8b:17:54:7e: 1c:64:3f:bf:bb:71:86:d1:71:39:40:14:1a:5f:3c: 96:51:60:9f:0a:ec:23:cf:68:2f:ee:ba:6c:c1:4b: 81:f5:85:04:0e:38:1a:ad:46:19:af:2a:70:dc:e9: 55:4a:0e:ba:56:98:9a:20:24:7b:a7:09:b4:5a:33: 1f:12:c9:4f:3a:75:15:18:25:ca:07:87:52:fc:9c: ec:76:7c:e6:ed:c9:6f:de:cf:e9:ee:02:b5:3c:e9: e4:02:06:b8:4f:5a:bf:fa:23:e2:75:c8:c5:a5:08: bb:9d:1d:ac:1a:50:97:b5:6e:58:be:b7:a3:26:d6: 63:ed:c2:92:8e:d3:24:4a:e4:2f:bf:bc:a3:5f:d4: 1a:6f:2c:f3:18:c6:d2:0b:c6:42:76:a9:17:de:98: d0:e1:b7:6e:02:74:02:2a:d9:75:98:1c:54:e7:ce: 88:1e:c1:0c:4b:7c:83:17:74:64:11:3c:27:7e:32: 3e:cc:c5:47:fc:16:8c:a4:a7:ca:76:e3:bf:c3:74: 53:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:75:84:63:B5:F3:A2:4C:8A:17:1E:63:B2:E2:70:21:81:D1:03:AB X509v3 Authority Key Identifier: keyid:39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCT/0/3130332e3235322e3139362e302f32322d3234203d3e20313331363031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.252.196.0/22 Signature Algorithm: sha256WithRSAEncryption 23:a9:20:61:5d:a0:83:f4:9c:44:f9:47:f6:56:07:fb:6e:16: 93:d0:5c:53:bd:98:8b:9c:4a:a6:22:56:7d:3f:3e:97:e3:d5: 8e:a2:1a:a6:e9:52:67:8c:75:1c:fc:ad:b6:df:ac:ee:31:3a: 07:36:02:cc:9a:fd:08:f3:c6:88:a5:bd:00:f6:83:bd:cc:fc: 11:0a:b4:e5:5c:3f:d9:87:27:3e:f9:7f:7c:03:cd:09:3a:6b: 26:de:5e:93:b3:a5:b5:c2:9f:c7:4f:c7:d0:68:0f:15:69:14: a9:fd:08:88:98:24:3b:08:9d:c8:a1:98:40:f5:1e:3c:21:48: a2:11:8e:2e:a5:cc:fb:91:12:3c:11:71:c5:24:e8:d7:97:6f: 59:f8:21:fe:e4:89:83:9c:fb:46:59:d8:13:af:05:bd:45:26: 10:18:1b:c6:e4:2d:4a:bc:0c:f8:e0:2f:63:80:6d:a0:27:41: 02:b0:11:49:24:cb:8b:f7:84:70:20:c1:65:5a:5b:a8:48:1c: ce:43:e3:35:af:b9:10:da:00:74:43:9b:c2:95:42:eb:b6:9a: 08:4b:f1:1d:8e:d6:72:90:14:c3:eb:25:1e:d0:da:79:81:c4: 7f:b2:32:f7:08:33:e4:3b:23:74:e3:0b:c5:db:42:12:88:9c: 16:03:fe:a9 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUQYwmsLnKS+H7d8Ayultmet8dsl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlGQkZGMTM0QUJEMTkzQ0FFQTRBQUIwMDM1MDMwMzFG OTk4MTg3RDAeFw0yNjA1MTExNjM3MzdaFw0yNzA1MTAxNjQyMzdaMDMxMTAvBgNV BAMTKDk1NzU4NDYzQjVGM0EyNEM4QTE3MUU2M0IyRTI3MDIxODFEMTAzQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC72/DmUZkEtpeF4+O5Jc55fWNm Bv0eitrcaHU+zn8Wr13bSyK7XMFrQnQxriKkkHp47Xm7QC0tixdUfhxkP7+7cYbR cTlAFBpfPJZRYJ8K7CPPaC/uumzBS4H1hQQOOBqtRhmvKnDc6VVKDrpWmJogJHun CbRaMx8SyU86dRUYJcoHh1L8nOx2fObtyW/ez+nuArU86eQCBrhPWr/6I+J1yMWl CLudHawaUJe1bli+t6Mm1mPtwpKO0yRK5C+/vKNf1BpvLPMYxtILxkJ2qRfemNDh t24CdAIq2XWYHFTnzogewQxLfIMXdGQRPCd+Mj7MxUf8Foykp8p247/DdFOTAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUlXWEY7XzokyKFx5jsuJwIYHRA6swHwYDVR0j BBgwFoAUOfv/E0q9GTyupKqwA1AwMfmYGH0wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENULzAv MzlGQkZGMTM0QUJEMTkzQ0FFQTRBQUIwMDM1MDMwMzFGOTk4MTg3RC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS8zOUZCRkYxMzRBQkQxOTNDQUVBNEFBQjAwMzUwMzAz MUY5OTgxODdELmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENULzAvMzEzMDMzMmUzMjM1MzIyZTMx MzkzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMTM2MzAzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmf8xDANBgkqhkiG9w0BAQsFAAOCAQEAI6kgYV2gg/ScRPlH9lYH+24Wk9Bc U72Yi5xKpiJWfT8+l+PVjqIapulSZ4x1HPyttt+s7jE6BzYCzJr9CPPGiKW9APaD vcz8EQq05Vw/2YcnPvl/fAPNCTprJt5ek7OltcKfx0/H0GgPFWkUqf0IiJgkOwid yKGYQPUePCFIohGOLqXM+5ESPBFxxSTo15dvWfgh/uSJg5z7RlnYE68FvUUmEBgb xuQtSrwM+OAvY4BtoCdBArARSSTLi/eEcCDBZVpbqEgczkPjNa+5ENoAdEObwpVC 67aaCEvxHY7WcpAUw+slHtDaeYHEf7Iy9wgz5DsjdOMLxdtCEoicFgP+qQ== -----END CERTIFICATE-----Generated at Wed May 13 05:43:54 2026 by rpki-client