$ rpki-client -vvf rpkica.twnic.tw/rpki/JCA/0/3130332e3235342e3231322e302f32332d3332203d3e20313331363432.roa File: 3130332e3235342e3231322e302f32332d3332203d3e20313331363432.roa (raw, json) Hash identifier: qzl9dOSKwgCXVZTZxr3Z7XqLacSrZMcN+zOVWKu4R9w= Subject key identifier: 8C:E8:28:79:1C:B0:B9:3D:2F:F8:1F:72:CD:1F:5A:48:16:AD:87:89 Certificate issuer: /CN=76A7E37BE9876B8AC3A31B9ED3937996842EBB78 Certificate serial: 75EC0B62603E39F104203C3A1F797D796AF41BE4 Authority key identifier: 76:A7:E3:7B:E9:87:6B:8A:C3:A3:1B:9E:D3:93:79:96:84:2E:BB:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.cer Subject info access: rsync://rpkica.twnic.tw/rpki/JCA/0/3130332e3235342e3231322e302f32332d3332203d3e20313331363432.roa Signing time: Mon 11 May 2026 17:37:54 +0000 ROA not before: Mon 11 May 2026 17:32:54 +0000 ROA not after: Mon 10 May 2027 17:37:54 +0000 asID: 131642 IP address blocks: 103.254.212.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.crl rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ec:0b:62:60:3e:39:f1:04:20:3c:3a:1f:79:7d:79:6a:f4:1b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76A7E37BE9876B8AC3A31B9ED3937996842EBB78 Validity Not Before: May 11 17:32:54 2026 GMT Not After : May 10 17:37:54 2027 GMT Subject: CN=8CE828791CB0B93D2FF81F72CD1F5A4816AD8789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6b:c0:e1:68:37:da:00:57:4f:89:0e:39:59: e9:fa:d2:10:0e:51:29:de:72:93:c0:da:d0:38:70: 56:c7:53:9f:ac:46:e0:9c:7e:8b:12:95:c6:2d:b4: 4e:f8:b1:82:ee:3b:91:8c:7d:1c:e9:58:c1:a3:45: 36:58:f0:40:da:83:e3:93:1c:3c:40:95:f1:52:d2: 5d:21:13:d2:3e:62:e3:cc:7c:df:6b:6d:bd:e6:db: b8:d4:1e:43:cc:55:67:69:a5:b4:72:dc:d8:f0:0e: 26:20:02:28:e5:3a:29:9c:5b:e6:cd:c1:32:fb:d3: 04:ed:20:c9:21:60:db:f1:30:aa:79:04:ef:a6:b8: d6:6f:2b:ce:47:31:53:1c:d3:a6:11:45:3e:7d:6f: 02:80:f6:46:d7:5a:33:10:70:68:37:f2:08:42:fd: 6e:35:73:1f:e9:98:7a:35:10:1f:2d:9f:de:5f:d5: 73:c9:45:a7:ea:1b:a5:05:9b:a9:d2:c6:58:ac:6a: 8b:64:99:2c:0a:2c:bb:73:61:ef:26:45:86:6f:2b: cf:49:2f:4a:76:f9:39:be:5a:60:ea:24:19:ca:a6: 8e:aa:1a:83:2d:f7:e4:38:02:94:1b:2c:fb:f7:5c: 40:fb:f8:85:5c:c5:ef:8c:51:ad:79:bf:2d:8e:31: a3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E8:28:79:1C:B0:B9:3D:2F:F8:1F:72:CD:1F:5A:48:16:AD:87:89 X509v3 Authority Key Identifier: keyid:76:A7:E3:7B:E9:87:6B:8A:C3:A3:1B:9E:D3:93:79:96:84:2E:BB:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JCA/0/3130332e3235342e3231322e302f32332d3332203d3e20313331363432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.254.212.0/23 Signature Algorithm: sha256WithRSAEncryption 79:cd:91:ac:c5:26:03:36:46:b1:97:04:3d:96:dc:8b:51:cd: b8:ed:49:c7:7b:a6:b0:4a:5f:b2:5e:18:78:21:d9:30:43:1c: af:97:58:1f:fd:a4:45:ff:0b:5c:de:ea:be:ab:63:9c:d6:78: 28:25:76:19:7b:02:e7:f0:aa:4b:a6:9d:a4:d0:10:ff:b7:f8: 45:b6:9a:9f:3f:d0:62:d8:fa:15:85:18:00:31:63:55:0d:5a: fa:ef:1c:6c:48:e0:b9:8c:69:af:13:aa:58:1f:99:ab:fc:7a: 84:e6:28:c4:f1:72:df:10:dc:90:54:b2:67:5a:14:b9:2d:06: d2:7c:49:e3:e7:a2:d8:21:de:1a:e7:4d:fd:ae:63:23:06:e5: 5d:fe:d9:2b:d7:af:77:55:28:e7:a3:b4:2d:fb:17:45:d9:1e: 2b:c6:2c:d7:81:ae:a6:9b:64:2e:5a:d9:ea:fe:18:b4:4b:2f: a8:2c:e9:cb:e5:07:63:0b:08:fd:6c:55:17:bd:77:ad:d8:0e: 41:1b:6c:08:ad:43:d3:db:1d:a6:13:0b:1e:0c:d8:02:74:41: 72:07:87:16:94:79:f1:b3:c1:2b:90:5b:d0:5c:cb:87:b3:d6: d2:67:9c:89:6a:78:16:d4:f3:a1:bf:1f:bb:09:86:73:69:76: d5:25:5e:cc -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUdewLYmA+OfEEIDw6H3l9eWr0G+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzZBN0UzN0JFOTg3NkI4QUMzQTMxQjlFRDM5Mzc5OTY4 NDJFQkI3ODAeFw0yNjA1MTExNzMyNTRaFw0yNzA1MTAxNzM3NTRaMDMxMTAvBgNV BAMTKDhDRTgyODc5MUNCMEI5M0QyRkY4MUY3MkNEMUY1QTQ4MTZBRDg3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCua8DhaDfaAFdPiQ45Wen60hAO USnecpPA2tA4cFbHU5+sRuCcfosSlcYttE74sYLuO5GMfRzpWMGjRTZY8EDag+OT HDxAlfFS0l0hE9I+YuPMfN9rbb3m27jUHkPMVWdppbRy3NjwDiYgAijlOimcW+bN wTL70wTtIMkhYNvxMKp5BO+muNZvK85HMVMc06YRRT59bwKA9kbXWjMQcGg38ghC /W41cx/pmHo1EB8tn95f1XPJRafqG6UFm6nSxlisaotkmSwKLLtzYe8mRYZvK89J L0p2+Tm+WmDqJBnKpo6qGoMt9+Q4ApQbLPv3XED7+IVcxe+MUa15vy2OMaPnAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUjOgoeRywuT0v+B9yzR9aSBath4kwHwYDVR0j BBgwFoAUdqfje+mHa4rDoxue05N5loQuu3gwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkNBLzAv NzZBN0UzN0JFOTg3NkI4QUMzQTMxQjlFRDM5Mzc5OTY4NDJFQkI3OC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83NkE3RTM3QkU5ODc2QjhBQzNBMzFCOUVEMzkzNzk5 Njg0MkVCQjc4LmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuGYXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSkNBLzAvMzEzMDMzMmUzMjM1MzQyZTMy MzEzMjJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMxMzMzMTM2MzQzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWf+1DANBgkqhkiG9w0BAQsFAAOCAQEAec2RrMUmAzZGsZcEPZbci1HNuO1J x3umsEpfsl4YeCHZMEMcr5dYH/2kRf8LXN7qvqtjnNZ4KCV2GXsC5/CqS6adpNAQ /7f4Rbaanz/QYtj6FYUYADFjVQ1a+u8cbEjguYxprxOqWB+Zq/x6hOYoxPFy3xDc kFSyZ1oUuS0G0nxJ4+ei2CHeGudN/a5jIwblXf7ZK9evd1Uo56O0LfsXRdkeK8Ys 14GupptkLlrZ6v4YtEsvqCzpy+UHYwsI/WxVF713rdgOQRtsCK1D09sdphMLHgzY AnRBcgeHFpR58bPBK5Bb0FzLh7PW0meciWp4FtTzob8fuwmGc2l21SVezA== -----END CERTIFICATE-----Generated at Wed May 13 10:07:18 2026 by rpki-client