$ rpki-client -vvf rpkica.twnic.tw/rpki/GSN/0/3231302e36392e302e302f31362d3136203d3e2034373832.roa File: 3231302e36392e302e302f31362d3136203d3e2034373832.roa (raw, json) Hash identifier: rzzN/S5reVNYW1kngDJ9waaxaT8cnwfi4WPnhHzUC7w= Subject key identifier: 3F:B4:AB:2E:49:93:B3:C3:A1:7D:4F:20:88:23:1F:D5:F1:AB:D5:22 Certificate issuer: /CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Certificate serial: 2B7EE1801C7FAE8224FA4C85D3ABA9EE9F97D6CD Authority key identifier: C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GSN/0/3231302e36392e302e302f31362d3136203d3e2034373832.roa Signing time: Mon 11 May 2026 16:45:57 +0000 ROA not before: Mon 11 May 2026 16:40:57 +0000 ROA not after: Mon 10 May 2027 16:45:57 +0000 asID: 4782 IP address blocks: 210.69.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7e:e1:80:1c:7f:ae:82:24:fa:4c:85:d3:ab:a9:ee:9f:97:d6:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351 Validity Not Before: May 11 16:40:57 2026 GMT Not After : May 10 16:45:57 2027 GMT Subject: CN=3FB4AB2E4993B3C3A17D4F2088231FD5F1ABD522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:c5:d5:05:0a:fb:80:da:98:99:19:39:6b: f9:cb:88:94:b9:cf:82:e8:e4:16:70:a1:20:13:62: cb:52:79:d8:d0:ca:16:e9:9c:e3:b5:82:43:ae:2f: a9:b2:42:23:0f:53:3d:d3:73:33:f4:e2:44:af:f5: f1:0e:79:d4:ba:2c:04:18:7e:16:fe:30:ab:37:08: a7:75:e9:ea:e2:b6:36:c8:4c:91:69:45:8b:de:00: 2f:8d:60:de:08:c9:70:d7:73:9c:3a:6d:b4:eb:ba: 74:08:e0:b5:47:f2:38:35:8c:e6:d1:62:70:76:84: 7c:80:18:82:61:2d:68:d1:6d:92:bd:b8:a3:50:75: d3:c0:58:fd:84:6b:36:59:be:62:cd:51:e0:90:f0: 05:9e:d0:0e:a7:9f:ad:e2:5e:4d:af:e9:a3:05:71: 1d:90:c0:61:8b:7b:f5:97:cb:de:42:15:9c:36:d0: a0:da:14:c7:41:a6:21:50:2b:f1:c0:31:75:b0:eb: 7a:06:cc:46:82:66:5f:70:9a:08:38:6d:68:9d:5f: 7a:28:8b:b1:43:a8:5f:67:92:07:6b:02:ad:45:3f: e3:9e:91:3d:a0:ea:ab:2d:19:b9:d5:98:73:53:51: 25:96:49:0a:17:45:f3:1c:4b:c0:55:ab:98:98:1d: c9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B4:AB:2E:49:93:B3:C3:A1:7D:4F:20:88:23:1F:D5:F1:AB:D5:22 X509v3 Authority Key Identifier: keyid:C0:34:BD:9C:72:35:DC:2D:2C:C1:FD:7E:21:D4:3D:D0:6A:FD:C3:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GSN/0/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C034BD9C7235DC2D2CC1FD7E21D43DD06AFDC351.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSN/0/3231302e36392e302e302f31362d3136203d3e2034373832.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.69.0.0/16 Signature Algorithm: sha256WithRSAEncryption 88:45:86:e0:4c:c3:c0:92:bf:93:f6:8b:b6:64:19:d6:53:40: 5a:35:a3:24:17:98:c8:6f:fd:79:11:7c:91:c8:73:fa:b8:65: 8e:34:2e:bc:41:6b:e5:5f:40:79:66:0b:9f:49:59:6f:ba:78: 26:28:ad:5d:b0:68:fa:0b:ed:29:40:a0:67:7c:54:d2:b5:73: 29:6f:ba:50:d6:c6:81:d5:61:b2:c4:14:04:45:29:20:d4:19: a1:6e:df:65:e6:4c:e7:de:b3:6a:1d:5d:c5:42:c7:58:d4:69: 52:de:e4:bc:38:e4:29:b7:25:db:c1:4e:2a:9a:98:df:88:d5: b0:d2:a0:79:a6:99:c7:f8:43:e9:a4:0b:ca:99:37:eb:e7:5b: 5f:a2:19:b8:6b:43:a4:52:6f:e1:78:dc:03:ed:ca:b1:83:22: 02:29:f7:c3:6f:cc:11:36:44:f7:f8:53:6f:b2:49:d7:f5:84: 08:ad:09:aa:15:37:15:4e:de:ed:40:ef:50:33:e3:eb:a9:96: 44:9d:b0:c4:ff:e1:5f:77:b9:ac:8d:2b:b6:09:87:30:0c:0f: aa:ad:e5:f7:d5:5c:88:41:21:bf:88:83:97:f0:d6:76:ba:b3: 78:90:78:76:8e:ff:49:7f:3a:0e:cd:2c:8e:72:b0:2e:c5:77: b1:39:05:a1 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgIUK37hgBx/roIk+kyF06up7p+X1s0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2 QUZEQzM1MTAeFw0yNjA1MTExNjQwNTdaFw0yNzA1MTAxNjQ1NTdaMDMxMTAvBgNV BAMTKDNGQjRBQjJFNDk5M0IzQzNBMTdENEYyMDg4MjMxRkQ1RjFBQkQ1MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj+8XVBQr7gNqYmRk5a/nLiJS5 z4Lo5BZwoSATYstSedjQyhbpnOO1gkOuL6myQiMPUz3TczP04kSv9fEOedS6LAQY fhb+MKs3CKd16eritjbITJFpRYveAC+NYN4IyXDXc5w6bbTrunQI4LVH8jg1jObR YnB2hHyAGIJhLWjRbZK9uKNQddPAWP2EazZZvmLNUeCQ8AWe0A6nn63iXk2v6aMF cR2QwGGLe/WXy95CFZw20KDaFMdBpiFQK/HAMXWw63oGzEaCZl9wmgg4bWidX3oo i7FDqF9nkgdrAq1FP+OekT2g6qstGbnVmHNTUSWWSQoXRfMcS8BVq5iYHcmbAgMB AAGjggHWMIIB0jAdBgNVHQ4EFgQUP7SrLkmTs8OhfU8giCMf1fGr1SIwHwYDVR0j BBgwFoAUwDS9nHI13C0swf1+IdQ90Gr9w1EwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAv QzAzNEJEOUM3MjM1REMyRDJDQzFGRDdFMjFENDNERDA2QUZEQzM1MS5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS9DMDM0QkQ5QzcyMzVEQzJEMkNDMUZEN0UyMUQ0M0RE MDZBRkRDMzUxLmNlcjBzBggrBgEFBQcBCwRnMGUwYwYIKwYBBQUHMAuGV3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1NOLzAvMzIzMTMwMmUzNjM5MmUzMDJl MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzczODMyLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0kUwDQYJ KoZIhvcNAQELBQADggEBAIhFhuBMw8CSv5P2i7ZkGdZTQFo1oyQXmMhv/XkRfJHI c/q4ZY40LrxBa+VfQHlmC59JWW+6eCYorV2waPoL7SlAoGd8VNK1cylvulDWxoHV YbLEFARFKSDUGaFu32XmTOfes2odXcVCx1jUaVLe5Lw45Cm3JdvBTiqamN+I1bDS oHmmmcf4Q+mkC8qZN+vnW1+iGbhrQ6RSb+F43APtyrGDIgIp98NvzBE2RPf4U2+y Sdf1hAitCaoVNxVO3u1A71Az4+uplkSdsMT/4V93uayNK7YJhzAMD6qt5ffVXIhB Ib+Ig5fw1na6s3iQeHaO/0l/Og7NLI5ysC7Fd7E5BaE= -----END CERTIFICATE-----Generated at Wed May 13 00:31:51 2026 by rpki-client