$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAY/0/3130332e3235352e3230362e302f32332d3332203d3e20313331313439.roa File: 3130332e3235352e3230362e302f32332d3332203d3e20313331313439.roa (raw, json) Hash identifier: Q23OYg/snKDMZT/GrhFuy0UWILnudHwqtr4/Nhp9Yqo= Subject key identifier: F8:90:08:2B:A2:F4:47:C6:63:50:69:C9:CD:65:97:F3:5F:8F:48:94 Certificate issuer: /CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3 Certificate serial: 5A065516B49B375043E935F6C39FC64734FE70A2 Authority key identifier: 19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ERAY/0/3130332e3235352e3230362e302f32332d3332203d3e20313331313439.roa Signing time: Mon 11 May 2026 17:32:11 +0000 ROA not before: Mon 11 May 2026 17:27:11 +0000 ROA not after: Mon 10 May 2027 17:32:11 +0000 asID: 131149 IP address blocks: 103.255.206.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:06:55:16:b4:9b:37:50:43:e9:35:f6:c3:9f:c6:47:34:fe:70:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19C24D64A5637F1F6837D06BA77F1000FF9E54D3 Validity Not Before: May 11 17:27:11 2026 GMT Not After : May 10 17:32:11 2027 GMT Subject: CN=F890082BA2F447C6635069C9CD6597F35F8F4894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:06:3f:42:53:d0:2d:fc:ba:49:90:d1:91:68: fe:a3:63:41:fa:0b:6d:20:fd:91:fd:ab:81:eb:ee: 7c:b4:36:45:94:ec:cc:92:ea:d7:a8:01:d4:04:5a: bd:6d:1e:4d:0f:00:ce:12:6e:d2:17:c2:12:97:18: 71:26:72:3a:f6:dc:91:0b:2b:36:85:7c:92:5e:7f: 0b:10:4e:01:4b:eb:8e:3a:47:29:4a:ed:90:98:1c: 0e:2d:f0:e3:d6:ba:58:67:6d:40:54:bc:48:f7:a3: 91:de:f7:f2:6c:b5:cc:3b:e7:1e:4b:69:b0:51:69: ba:b2:46:51:f4:46:d3:76:14:d4:c4:40:da:64:29: 1a:38:f9:ae:b3:96:6b:b1:fd:9c:69:a8:07:d3:99: 4f:d5:23:49:c0:57:4b:ab:b9:8c:93:61:73:d2:1d: 05:88:dd:72:04:c0:02:23:62:7d:21:e7:77:b6:bc: da:21:51:e8:df:dc:9a:3f:c3:98:d2:b3:69:ff:b1: 3a:f7:04:18:c4:bd:9b:3d:e7:da:7d:c8:cf:cb:3c: 7c:f9:84:89:1a:e9:5f:de:1c:6d:dd:26:f7:87:1a: f7:13:91:a5:79:b0:73:30:2b:d9:2f:bf:4d:3b:55: 82:75:2e:7c:8c:65:98:17:b9:fc:24:4d:4a:37:19: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:90:08:2B:A2:F4:47:C6:63:50:69:C9:CD:65:97:F3:5F:8F:48:94 X509v3 Authority Key Identifier: keyid:19:C2:4D:64:A5:63:7F:1F:68:37:D0:6B:A7:7F:10:00:FF:9E:54:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19C24D64A5637F1F6837D06BA77F1000FF9E54D3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAY/0/3130332e3235352e3230362e302f32332d3332203d3e20313331313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.206.0/23 Signature Algorithm: sha256WithRSAEncryption 40:82:99:5f:79:8a:13:86:23:ff:d4:bf:12:74:07:d0:62:e4: 3b:e4:e8:68:f8:10:3f:b0:de:1c:11:3e:33:cb:75:3d:14:28: 00:f8:c9:a6:cc:14:f3:8f:e7:9f:f1:04:62:47:51:31:31:28: 64:20:03:92:26:ba:dc:3c:bb:59:d2:6c:69:51:36:40:6c:2b: f8:4e:5c:a1:9c:47:f6:42:99:93:5d:6b:0d:a5:e4:c6:ff:81: fc:e6:71:c0:a0:b5:7f:54:cd:bd:f2:17:45:0d:7d:51:9c:97: 47:05:60:ac:04:91:f6:fb:c1:a4:42:3e:60:56:72:ba:7f:73: fc:c3:d9:ce:74:81:12:46:86:d0:c5:12:0b:66:5b:52:2c:fc: 2d:08:73:be:c2:5a:ad:b9:3b:9c:c3:bb:77:e5:8e:89:f3:b0: 60:1e:38:d4:6f:c5:0b:a3:3e:7a:64:ca:be:94:70:29:22:ed: eb:8a:17:86:92:8f:84:6a:fe:51:eb:c4:6b:fe:14:f4:6a:97: b2:75:01:d3:4d:03:06:2f:06:77:41:3f:14:d5:1f:dd:57:de: e1:a5:fa:7e:b8:8b:18:80:87:cb:1d:1d:6a:36:c0:8c:cf:c6: 97:d5:c6:69:f2:b7:c4:6f:38:09:f7:ab:72:b5:61:59:3e:02: 30:35:c0:31 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWgZVFrSbN1BD6TX2w5/GRzT+cKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlDMjRENjRBNTYzN0YxRjY4MzdEMDZCQTc3RjEwMDBG RjlFNTREMzAeFw0yNjA1MTExNzI3MTFaFw0yNzA1MTAxNzMyMTFaMDMxMTAvBgNV BAMTKEY4OTAwODJCQTJGNDQ3QzY2MzUwNjlDOUNENjU5N0YzNUY4RjQ4OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2Bj9CU9At/LpJkNGRaP6jY0H6 C20g/ZH9q4Hr7ny0NkWU7MyS6teoAdQEWr1tHk0PAM4SbtIXwhKXGHEmcjr23JEL KzaFfJJefwsQTgFL6446RylK7ZCYHA4t8OPWulhnbUBUvEj3o5He9/Jstcw75x5L abBRabqyRlH0RtN2FNTEQNpkKRo4+a6zlmux/ZxpqAfTmU/VI0nAV0uruYyTYXPS HQWI3XIEwAIjYn0h53e2vNohUejf3Jo/w5jSs2n/sTr3BBjEvZs959p9yM/LPHz5 hIka6V/eHG3dJveHGvcTkaV5sHMwK9kvv007VYJ1LnyMZZgXufwkTUo3GbeFAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQU+JAIK6L0R8ZjUGnJzWWX81+PSJQwHwYDVR0j BBgwFoAUGcJNZKVjfx9oN9Brp38QAP+eVNMwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRVJBWS8w LzE5QzI0RDY0QTU2MzdGMUY2ODM3RDA2QkE3N0YxMDAwRkY5RTU0RDMuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMTlDMjRENjRBNTYzN0YxRjY4MzdEMDZCQTc3RjEw MDBGRjlFNTREMy5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0VSQVkvMC8zMTMwMzMyZTMyMzUzNTJl MzIzMDM2MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzEzMzMxMzEzNDM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBZ//OMA0GCSqGSIb3DQEBCwUAA4IBAQBAgplfeYoThiP/1L8SdAfQYuQ7 5Oho+BA/sN4cET4zy3U9FCgA+MmmzBTzj+ef8QRiR1ExMShkIAOSJrrcPLtZ0mxp UTZAbCv4TlyhnEf2QpmTXWsNpeTG/4H85nHAoLV/VM298hdFDX1RnJdHBWCsBJH2 +8GkQj5gVnK6f3P8w9nOdIESRobQxRILZltSLPwtCHO+wlqtuTucw7t35Y6J87Bg HjjUb8ULoz56ZMq+lHApIu3riheGko+Eav5R68Rr/hT0apeydQHTTQMGLwZ3QT8U 1R/dV97hpfp+uIsYgIfLHR1qNsCMz8aX1cZp8rfEbzgJ96tytWFZPgIwNcAx -----END CERTIFICATE-----Generated at Wed May 13 11:47:14 2026 by rpki-client