$ rpki-client -vvf rpkica.twnic.tw/rpki/ITRINET/0/323030313a6564383a3a2f33322d3536203d3e203138343232.roa File: 323030313a6564383a3a2f33322d3536203d3e203138343232.roa (raw, json) Hash identifier: Xt2JiIyAeWDi9a4QRWUHvmXeXOlqKybS5a3x4Jwl6ss= Subject key identifier: 74:99:FD:6F:F1:D4:C2:3B:09:41:11:60:D2:BC:0F:88:87:60:1E:A6 Certificate issuer: /CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67 Certificate serial: 72030BEBF4CE3FF33614A494FDFF7BCBE272D31C Authority key identifier: 0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ITRINET/0/323030313a6564383a3a2f33322d3536203d3e203138343232.roa Signing time: Mon 11 May 2026 16:48:56 +0000 ROA not before: Mon 11 May 2026 16:43:56 +0000 ROA not after: Mon 10 May 2027 16:48:56 +0000 asID: 18422 IP address blocks: 2001:ed8::/32 maxlen: 56 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:03:0b:eb:f4:ce:3f:f3:36:14:a4:94:fd:ff:7b:cb:e2:72:d3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67 Validity Not Before: May 11 16:43:56 2026 GMT Not After : May 10 16:48:56 2027 GMT Subject: CN=7499FD6FF1D4C23B09411160D2BC0F8887601EA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:f2:14:a7:d1:e9:d9:35:35:43:56:9b:7f: 15:6d:fd:e4:fb:14:87:c9:e4:81:05:6a:7c:4a:42: e4:29:f0:d7:34:76:83:f6:08:10:f7:28:5f:04:8c: 80:37:1a:75:31:bb:80:ad:a4:72:ba:03:46:c3:cf: 4c:11:e9:76:83:85:ed:1a:90:fb:d6:ef:79:ed:a2: ca:0d:eb:bd:87:62:a2:c8:2d:8c:e0:70:1e:6c:30: d6:6b:a1:c1:a1:82:a4:37:f9:e5:05:52:ac:f7:25: 83:67:dc:96:13:51:b5:18:09:57:c7:43:b7:26:f3: 1d:c4:92:4a:57:28:25:9b:c2:1a:81:00:1c:62:eb: 30:56:c1:3f:06:e9:81:69:5e:bc:3f:5a:5a:c9:8d: 83:d3:c9:28:9d:94:1f:2c:c5:a4:9f:e6:ff:50:46: 09:78:07:54:e5:81:e6:71:26:2a:7e:5a:33:01:ae: 36:1e:2a:3b:62:0f:5e:83:ed:13:4d:84:c9:9b:54: d2:c8:84:9d:20:86:18:d8:a9:c2:65:f9:f9:87:40: 75:ba:82:d5:f7:e8:c2:61:fe:a3:be:05:a1:a5:e6: f1:c5:d1:ca:19:6f:15:68:64:10:30:a9:ca:94:bc: 82:0c:ef:6e:88:ea:c3:6d:70:04:92:67:ad:39:65: 3d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:99:FD:6F:F1:D4:C2:3B:09:41:11:60:D2:BC:0F:88:87:60:1E:A6 X509v3 Authority Key Identifier: keyid:0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/323030313a6564383a3a2f33322d3536203d3e203138343232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:ed8::/32 Signature Algorithm: sha256WithRSAEncryption a7:57:91:ff:9a:7e:2d:6d:23:d9:0d:1f:66:d1:78:56:97:8d: 1f:7e:eb:c8:a2:58:fb:2c:b5:bb:ba:d6:a3:65:b9:c0:8a:9d: 7c:4c:17:11:69:b5:85:38:4c:f1:66:7d:fd:91:23:2b:2f:fc: 2f:7e:34:ce:c0:35:a5:8f:67:15:19:0c:f7:e1:b4:fb:be:1d: 74:ab:f2:fd:08:86:4d:1f:23:2f:f3:7b:29:0b:ff:d9:53:5a: 2d:ee:da:df:40:16:c6:39:29:ea:db:4d:b7:f5:7d:9f:1a:fd: 0b:1f:53:97:c2:c5:ff:a6:09:0e:0d:57:1e:8d:47:48:24:fa: 47:f8:e4:3d:e4:88:ec:e8:c6:a9:01:6e:19:c3:23:e6:98:b3: 5f:26:b1:21:7f:66:18:9d:ac:dd:99:d4:9c:58:40:8e:df:35: 9b:5d:1c:37:17:34:09:31:13:0b:13:a1:47:68:4d:ae:82:0f: 13:94:c5:82:5f:e0:cd:b3:fa:f7:5b:b4:67:eb:1e:26:4d:f0: ff:20:f0:2a:0b:2e:ce:38:8a:fe:b6:7a:5b:20:dc:f1:ef:08: 2a:f7:95:7e:7d:21:80:d1:57:73:ea:8d:08:11:f3:12:11:ef: 45:2e:65:5d:af:34:84:b2:cd:95:d0:e7:f9:44:de:f4:2d:f6: 27:9d:5f:3b -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUcgML6/TOP/M2FKSU/f97y+Jy0xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFFRkJGQ0M1MjY2MjIyQzg0NTNGRTVCNDY4QzM2N0Mw OTVDOEY2NzAeFw0yNjA1MTExNjQzNTZaFw0yNzA1MTAxNjQ4NTZaMDMxMTAvBgNV BAMTKDc0OTlGRDZGRjFENEMyM0IwOTQxMTE2MEQyQkMwRjg4ODc2MDFFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5vIUp9Hp2TU1Q1abfxVt/eT7 FIfJ5IEFanxKQuQp8Nc0doP2CBD3KF8EjIA3GnUxu4CtpHK6A0bDz0wR6XaDhe0a kPvW73ntosoN672HYqLILYzgcB5sMNZrocGhgqQ3+eUFUqz3JYNn3JYTUbUYCVfH Q7cm8x3EkkpXKCWbwhqBABxi6zBWwT8G6YFpXrw/WlrJjYPTySidlB8sxaSf5v9Q Rgl4B1TlgeZxJip+WjMBrjYeKjtiD16D7RNNhMmbVNLIhJ0ghhjYqcJl+fmHQHW6 gtX36MJh/qO+BaGl5vHF0coZbxVoZBAwqcqUvIIM726I6sNtcASSZ605ZT0bAgMB AAGjggHiMIIB3jAdBgNVHQ4EFgQUdJn9b/HUwjsJQRFg0rwPiIdgHqYwHwYDVR0j BBgwFoAUCu+/zFJmIiyEU/5bRow2fAlcj2cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSVRSSU5F VC8wLzBBRUZCRkNDNTI2NjIyMkM4NDUzRkU1QjQ2OEMzNjdDMDk1QzhGNjcuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMEFFRkJGQ0M1MjY2MjIyQzg0NTNGRTVCNDY4 QzM2N0MwOTVDOEY2Ny5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1y c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0lUUklORVQvMC8zMjMwMzAzMTNh NjU2NDM4M2EzYTJmMzMzMjJkMzUzNjIwM2QzZTIwMzEzODM0MzIzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACABDtgwDQYJKoZIhvcNAQELBQADggEBAKdXkf+afi1tI9kNH2bReFaXjR9+ 68iiWPsstbu61qNlucCKnXxMFxFptYU4TPFmff2RIysv/C9+NM7ANaWPZxUZDPfh tPu+HXSr8v0Ihk0fIy/zeykL/9lTWi3u2t9AFsY5KerbTbf1fZ8a/QsfU5fCxf+m CQ4NVx6NR0gk+kf45D3kiOzoxqkBbhnDI+aYs18msSF/ZhidrN2Z1JxYQI7fNZtd HDcXNAkxEwsToUdoTa6CDxOUxYJf4M2z+vdbtGfrHiZN8P8g8CoLLs44iv62elsg 3PHvCCr3lX59IYDRV3PqjQgR8xIR70UuZV2vNISyzZXQ5/lE3vQt9iedXzs= -----END CERTIFICATE-----Generated at Wed May 13 04:17:05 2026 by rpki-client