$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/1/3136382e39352e302e302f31362d3234203d3e2033343632.roa File: 3136382e39352e302e302f31362d3234203d3e2033343632.roa (raw, json) Hash identifier: cny9oftOlaQBIAKAW7fI9Ii4iukGeOomSH0pO2tpe4g= Subject key identifier: 93:48:4C:BF:56:B9:00:6F:62:E1:7C:D4:AB:1E:A6:E0:2F:62:C1:96 Certificate issuer: /CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D Certificate serial: 2952C6AB1E5D6332ADBEF8DE5BB8ADF7B8774170 Authority key identifier: 8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/1/3136382e39352e302e302f31362d3234203d3e2033343632.roa Signing time: Mon 11 May 2026 16:27:52 +0000 ROA not before: Mon 11 May 2026 16:22:52 +0000 ROA not after: Mon 10 May 2027 16:27:52 +0000 asID: 3462 IP address blocks: 168.95.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:52:c6:ab:1e:5d:63:32:ad:be:f8:de:5b:b8:ad:f7:b8:77:41:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D Validity Not Before: May 11 16:22:52 2026 GMT Not After : May 10 16:27:52 2027 GMT Subject: CN=93484CBF56B9006F62E17CD4AB1EA6E02F62C196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:a9:96:55:cf:a3:98:e8:ca:7a:6e:78:25: b2:01:6b:df:c2:0d:cd:db:d5:30:50:49:20:58:5a: 3e:4d:d9:8a:d8:7d:98:52:a6:33:f3:91:18:66:3c: eb:95:c0:4b:e3:0e:69:7b:54:91:34:5b:5e:86:bc: 08:ee:09:2b:ac:14:f7:5d:da:cf:66:ef:ef:d5:bd: 6e:72:02:ef:20:00:7d:ea:4c:a5:28:82:d7:6f:99: 49:88:27:4e:9e:ff:e1:61:4b:37:bd:d4:29:16:56: 5f:44:54:9d:66:a2:ec:97:4d:9c:9b:5d:fe:86:84: 95:cc:03:71:35:13:2b:8c:70:e3:75:58:a1:d1:b7: 6d:8d:11:2b:ae:39:41:80:54:1c:b0:67:dd:5e:05: b4:60:24:49:c5:10:dd:10:65:aa:19:cb:32:9b:ba: 55:b8:e1:67:66:a9:f4:a4:48:86:41:c3:17:9f:0b: 49:99:55:fe:a1:36:72:02:77:f5:13:a2:e1:23:bb: 3e:e5:ff:57:f5:c7:4c:e3:e9:69:66:1d:5e:7a:9a: 6b:6a:cf:40:af:a1:76:71:4e:a4:85:d4:8b:da:29: 37:fc:d2:f4:13:0d:8b:48:74:6a:6f:81:ec:bc:93: a4:d6:46:27:ad:ed:7a:c2:34:72:e1:17:60:fd:84: da:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:48:4C:BF:56:B9:00:6F:62:E1:7C:D4:AB:1E:A6:E0:2F:62:C1:96 X509v3 Authority Key Identifier: keyid:8E:05:65:D2:52:6D:4F:41:D0:7E:73:B0:B5:CA:69:AF:65:FF:6B:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HINET/1/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8E0565D2526D4F41D07E73B0B5CA69AF65FF6B7D.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/1/3136382e39352e302e302f31362d3234203d3e2033343632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.95.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8a:d5:db:5c:b2:85:b0:41:e6:b8:c4:73:0e:39:71:77:9f:49: ea:a5:58:f5:56:fe:87:0b:fd:41:83:5d:03:9e:57:c1:30:fd: f7:2f:58:7b:33:a6:a8:85:5d:d6:3b:b0:9e:88:e1:30:6f:07: f2:c0:93:d2:cc:3d:bd:93:f0:07:b1:69:a7:0e:51:8b:6d:6e: 10:21:2b:db:0a:e3:8a:69:5f:42:18:02:4b:a7:dd:44:98:99: 24:07:17:40:8e:e1:0a:c1:f1:fc:c0:89:e8:54:e2:89:20:3e: 79:b3:42:40:80:e1:21:53:b7:5c:08:e1:e2:63:57:1d:85:ef: 63:36:96:e4:cd:da:ef:1a:2e:3c:dd:91:55:a3:7c:2d:af:1b: f0:45:2b:10:eb:48:b1:06:99:89:7e:79:09:3f:90:74:e5:01: 3c:94:58:d8:70:35:51:ca:b6:7f:88:61:c1:dd:f0:d4:f9:bb: ca:e3:f0:9c:b0:61:3f:06:41:18:52:a0:99:a5:d7:2f:57:95: 67:89:06:6a:9a:e1:b9:f2:25:9c:32:37:fc:35:74:e1:8d:a2: 50:92:f8:70:4d:34:bc:40:3f:12:16:a2:96:0d:d6:b4:3e:32: 67:d3:72:bb:40:7a:c2:9d:58:67:b7:eb:fd:73:7e:38:f7:32: 58:9a:ae:ce -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgIUKVLGqx5dYzKtvvjeW7it97h3QXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwNTY1RDI1MjZENEY0MUQwN0U3M0IwQjVDQTY5QUY2 NUZGNkI3RDAeFw0yNjA1MTExNjIyNTJaFw0yNzA1MTAxNjI3NTJaMDMxMTAvBgNV BAMTKDkzNDg0Q0JGNTZCOTAwNkY2MkUxN0NENEFCMUVBNkUwMkY2MkMxOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuCqmWVc+jmOjKem54JbIBa9/C Dc3b1TBQSSBYWj5N2YrYfZhSpjPzkRhmPOuVwEvjDml7VJE0W16GvAjuCSusFPdd 2s9m7+/VvW5yAu8gAH3qTKUogtdvmUmIJ06e/+FhSze91CkWVl9EVJ1mouyXTZyb Xf6GhJXMA3E1EyuMcON1WKHRt22NESuuOUGAVBywZ91eBbRgJEnFEN0QZaoZyzKb ulW44WdmqfSkSIZBwxefC0mZVf6hNnICd/UTouEjuz7l/1f1x0zj6WlmHV56mmtq z0CvoXZxTqSF1IvaKTf80vQTDYtIdGpvgey8k6TWRiet7XrCNHLhF2D9hNoTAgMB AAGjggHaMIIB1jAdBgNVHQ4EFgQUk0hMv1a5AG9i4XzUqx6m4C9iwZYwHwYDVR0j BBgwFoAUjgVl0lJtT0HQfnOwtcppr2X/a30wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv MS84RTA1NjVEMjUyNkQ0RjQxRDA3RTczQjBCNUNBNjlBRjY1RkY2QjdELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzhFMDU2NUQyNTI2RDRGNDFEMDdFNzNCMEI1Q0E2 OUFGNjVGRjZCN0QuY2VyMHUGCCsGAQUFBwELBGkwZzBlBggrBgEFBQcwC4ZZcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8xLzMxMzYzODJlMzkzNTJl MzAyZTMwMmYzMTM2MmQzMjM0MjAzZDNlMjAzMzM0MzYzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAKhf MA0GCSqGSIb3DQEBCwUAA4IBAQCK1dtcsoWwQea4xHMOOXF3n0nqpVj1Vv6HC/1B g10DnlfBMP33L1h7M6aohV3WO7CeiOEwbwfywJPSzD29k/AHsWmnDlGLbW4QISvb CuOKaV9CGAJLp91EmJkkBxdAjuEKwfH8wInoVOKJID55s0JAgOEhU7dcCOHiY1cd he9jNpbkzdrvGi483ZFVo3wtrxvwRSsQ60ixBpmJfnkJP5B05QE8lFjYcDVRyrZ/ iGHB3fDU+bvK4/CcsGE/BkEYUqCZpdcvV5VniQZqmuG58iWcMjf8NXThjaJQkvhw TTS8QD8SFqKWDda0PjJn03K7QHrCnVhnt+v9c3449zJYmq7O -----END CERTIFICATE-----Generated at Wed May 13 00:21:44 2026 by rpki-client