$ rpki-client -vvf rpkica.twnic.tw/rpki/DODOLTD/1/3136302e3235302e39382e302f32332d3234203d3e203137343133.roa File: 3136302e3235302e39382e302f32332d3234203d3e203137343133.roa (raw, json) Hash identifier: aVg+n0PB8wvsVwpafjv075/Ks0O6aBd5O2JNt6Uq2zQ= Subject key identifier: C5:38:EE:79:62:23:E9:D0:4D:4A:C2:34:31:EF:C2:E8:39:0B:2C:C3 Certificate issuer: /CN=7BB644796AC04188F3D4CB38CAA5853F53A9149B Certificate serial: 6B038BFF72AB0A5D28C4081D26DE21530D516129 Authority key identifier: 7B:B6:44:79:6A:C0:41:88:F3:D4:CB:38:CA:A5:85:3F:53:A9:14:9B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DODOLTD/1/3136302e3235302e39382e302f32332d3234203d3e203137343133.roa Signing time: Mon 11 May 2026 17:39:19 +0000 ROA not before: Mon 11 May 2026 17:34:19 +0000 ROA not after: Mon 10 May 2027 17:39:19 +0000 asID: 17413 IP address blocks: 160.250.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:25:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:03:8b:ff:72:ab:0a:5d:28:c4:08:1d:26:de:21:53:0d:51:61:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7BB644796AC04188F3D4CB38CAA5853F53A9149B Validity Not Before: May 11 17:34:19 2026 GMT Not After : May 10 17:39:19 2027 GMT Subject: CN=C538EE796223E9D04D4AC23431EFC2E8390B2CC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f1:bb:35:d7:ab:70:25:85:97:d3:13:38:29: 48:8b:1f:48:98:22:de:c6:48:e1:92:81:56:6d:c0: e4:a1:aa:38:ca:cb:69:f4:c6:2e:48:51:35:fd:3d: f6:39:e6:76:48:e3:99:85:a3:d9:4c:c4:08:36:a1: 55:9a:b4:9b:98:35:48:36:e8:1e:47:8c:22:96:23: 6c:54:41:bd:c5:3e:73:d1:27:bc:e7:a1:3f:13:3a: c4:47:6f:c8:69:73:36:84:f2:34:cd:4a:a0:69:02: 30:df:97:b3:b1:1d:77:fa:5d:86:52:11:f8:cd:f6: 20:cb:15:68:39:28:65:64:11:1a:72:6a:5f:6c:76: 57:c2:d9:0b:56:21:be:8b:e4:d3:4f:1a:9a:9b:62: 62:f1:8d:02:8a:b5:50:e8:85:84:9d:dc:67:0b:6e: 76:5b:2a:33:a1:94:0f:a1:e7:e2:47:23:ab:42:5b: 71:d4:7f:57:18:9d:3e:0e:3e:03:69:cc:ab:6a:73: 65:77:04:3e:95:ca:0c:21:bf:98:88:e5:ee:82:6f: 62:4a:c3:eb:b8:d4:ce:f9:99:e5:3c:45:cf:ba:90: e2:1a:b3:b4:e0:44:71:1c:f4:47:cf:e9:dd:4c:17: 54:e7:bc:30:2f:52:83:9c:50:36:06:c7:05:cc:c0: 98:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:38:EE:79:62:23:E9:D0:4D:4A:C2:34:31:EF:C2:E8:39:0B:2C:C3 X509v3 Authority Key Identifier: keyid:7B:B6:44:79:6A:C0:41:88:F3:D4:CB:38:CA:A5:85:3F:53:A9:14:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/1/7BB644796AC04188F3D4CB38CAA5853F53A9149B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/7BB644796AC04188F3D4CB38CAA5853F53A9149B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/1/3136302e3235302e39382e302f32332d3234203d3e203137343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.250.98.0/23 Signature Algorithm: sha256WithRSAEncryption 06:5c:99:6c:f4:1f:83:8a:e0:88:cd:4f:a2:42:dd:33:b0:1b: f6:e8:59:55:2a:55:40:e2:4b:d9:20:92:5d:ac:9d:3e:55:13: 14:af:5b:77:6d:7a:45:c3:ee:68:29:3f:c9:1a:6f:38:0a:b8: 9c:38:14:f7:8b:36:19:fa:5f:f7:70:f3:71:c4:31:c7:8c:5f: 63:06:05:c5:a9:a2:13:77:3c:7f:c5:ec:5f:91:ca:70:41:bd: 4c:90:89:2b:b4:7c:ca:30:d2:84:a9:4c:72:f5:27:04:5e:81: 45:33:02:76:93:63:87:bf:41:ce:c7:6a:30:d8:20:ea:21:84: fb:cc:bf:61:e7:59:8d:9e:1a:1c:c9:8f:06:35:b4:ec:76:67: b9:01:7c:d6:65:ed:3a:da:17:55:b3:ff:cf:a3:d4:42:8d:e1: f2:27:49:f0:c1:2d:4f:fd:74:d1:80:c0:99:6b:68:6b:04:6d: 1f:e1:b7:7f:33:77:96:57:4e:f7:d4:51:4e:0b:7f:c9:09:43: ca:3f:23:bc:ea:a2:b0:7b:f7:c6:18:e5:d5:19:01:cc:00:3f: bb:be:5e:1d:f4:31:0a:ce:7d:02:5d:85:0d:66:a4:29:52:39: 6f:bd:68:1f:37:39:8d:3c:bb:11:66:92:3f:74:ec:ad:88:bf: 5e:9c:b0:8c -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUawOL/3KrCl0oxAgdJt4hUw1RYSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0JCNjQ0Nzk2QUMwNDE4OEYzRDRDQjM4Q0FBNTg1M0Y1 M0E5MTQ5QjAeFw0yNjA1MTExNzM0MTlaFw0yNzA1MTAxNzM5MTlaMDMxMTAvBgNV BAMTKEM1MzhFRTc5NjIyM0U5RDA0RDRBQzIzNDMxRUZDMkU4MzkwQjJDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS8bs116twJYWX0xM4KUiLH0iY It7GSOGSgVZtwOShqjjKy2n0xi5IUTX9PfY55nZI45mFo9lMxAg2oVWatJuYNUg2 6B5HjCKWI2xUQb3FPnPRJ7znoT8TOsRHb8hpczaE8jTNSqBpAjDfl7OxHXf6XYZS EfjN9iDLFWg5KGVkERpyal9sdlfC2QtWIb6L5NNPGpqbYmLxjQKKtVDohYSd3GcL bnZbKjOhlA+h5+JHI6tCW3HUf1cYnT4OPgNpzKtqc2V3BD6Vygwhv5iI5e6Cb2JK w+u41M75meU8Rc+6kOIas7TgRHEc9EfP6d1MF1TnvDAvUoOcUDYGxwXMwJj9AgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUxTjueWIj6dBNSsI0Me/C6DkLLMMwHwYDVR0j BBgwFoAUe7ZEeWrAQYjz1Ms4yqWFP1OpFJswDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9ET0xU RC8xLzdCQjY0NDc5NkFDMDQxODhGM0Q0Q0IzOENBQTU4NTNGNTNBOTE0OUIuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzAvN0JCNjQ0Nzk2QUMwNDE4OEYzRDRDQjM4Q0FB NTg1M0Y1M0E5MTQ5Qi5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RPRE9MVEQvMS8zMTM2MzAyZTMy MzUzMDJlMzkzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzczNDMxMzMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGg+mIwDQYJKoZIhvcNAQELBQADggEBAAZcmWz0H4OK4IjNT6JC3TOw G/boWVUqVUDiS9kgkl2snT5VExSvW3dtekXD7mgpP8kabzgKuJw4FPeLNhn6X/dw 83HEMceMX2MGBcWpohN3PH/F7F+RynBBvUyQiSu0fMow0oSpTHL1JwRegUUzAnaT Y4e/Qc7HajDYIOohhPvMv2HnWY2eGhzJjwY1tOx2Z7kBfNZl7TraF1Wz/8+j1EKN 4fInSfDBLU/9dNGAwJlraGsEbR/ht38zd5ZXTvfUUU4Lf8kJQ8o/I7zqorB798YY 5dUZAcwAP7u+Xh30MQrOfQJdhQ1mpClSOW+9aB83OY08uxFmkj907K2Iv16csIw= -----END CERTIFICATE-----Generated at Wed May 13 04:53:45 2026 by rpki-client