$ rpki-client -vvf rpkica.twnic.tw/rpki/KANRAYS/1/3135312e3135382e32362e302f32332d3234203d3e203138303434.roa File: 3135312e3135382e32362e302f32332d3234203d3e203138303434.roa (raw, json) Hash identifier: QIY0glYph3b8eEZZ9jaZ9XB3vhAySFJ+wbIUL9Lsf2o= Subject key identifier: 7B:1E:DC:5C:78:DB:18:55:5C:97:DD:40:22:98:EE:BE:76:58:B2:19 Certificate issuer: /CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF Certificate serial: 34983B5FE5C15BDFE56454EDEC01F5D684D46691 Authority key identifier: 06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KANRAYS/1/3135312e3135382e32362e302f32332d3234203d3e203138303434.roa Signing time: Mon 11 May 2026 17:57:51 +0000 ROA not before: Mon 11 May 2026 17:52:51 +0000 ROA not after: Mon 10 May 2027 17:57:51 +0000 asID: 18044 IP address blocks: 151.158.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:98:3b:5f:e5:c1:5b:df:e5:64:54:ed:ec:01:f5:d6:84:d4:66:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061E60E9FDA5A25EDC961572A4CBA8C539D780AF Validity Not Before: May 11 17:52:51 2026 GMT Not After : May 10 17:57:51 2027 GMT Subject: CN=7B1EDC5C78DB18555C97DD402298EEBE7658B219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c3:3e:52:2d:f8:64:8a:41:d9:82:4a:a3:f1: 47:2b:06:84:bd:64:eb:f6:25:ed:20:db:a5:a0:18: 2f:96:06:d6:4d:20:30:3f:b2:48:58:c9:94:9c:76: b3:a4:7c:ec:ff:97:6e:ba:69:1c:83:6d:be:28:6f: 3f:ef:be:cb:c0:c9:18:70:a5:c1:41:9f:49:09:9b: 9c:a9:c9:b4:27:ce:e8:7e:0e:b3:52:e0:2b:a6:70: 7a:b4:eb:70:38:15:94:31:e6:ab:93:50:29:97:e3: 2f:e6:e6:40:9a:49:5a:6f:29:17:c5:43:bb:6a:c7: be:93:88:98:b6:7a:0d:1e:57:ee:90:00:24:6a:f5: bc:64:12:6d:eb:73:4e:6f:7b:7b:62:38:ff:ed:a1: ac:ce:c6:1d:29:87:f3:d8:9a:93:b7:cf:21:22:e0: 8c:f9:1e:a7:90:6f:14:03:5d:1a:69:1b:19:2f:08: f6:b7:4a:b6:3c:18:29:8d:1d:83:48:58:e5:4b:f0: 31:73:cc:b1:df:b9:30:6b:90:27:bc:76:01:2b:26: 98:18:e6:44:f7:81:49:b2:2f:4e:1b:0f:8b:7a:01: 5c:29:17:91:1a:7b:a5:fe:6f:9b:72:b9:d9:58:6f: 64:53:ef:54:5d:47:2d:3a:8c:46:e3:40:7d:93:a8: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1E:DC:5C:78:DB:18:55:5C:97:DD:40:22:98:EE:BE:76:58:B2:19 X509v3 Authority Key Identifier: keyid:06:1E:60:E9:FD:A5:A2:5E:DC:96:15:72:A4:CB:A8:C5:39:D7:80:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/061E60E9FDA5A25EDC961572A4CBA8C539D780AF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/1/3135312e3135382e32362e302f32332d3234203d3e203138303434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.26.0/23 Signature Algorithm: sha256WithRSAEncryption 14:6a:a6:2c:fd:da:b2:a0:c2:70:e1:62:76:d6:c7:32:76:11: 54:42:92:7b:92:6c:16:7e:d8:01:88:2c:5a:ac:28:f1:c9:17: ef:e1:b8:ef:12:71:48:cc:af:7c:33:bc:67:d4:9b:69:d4:ec: b2:d0:fb:fc:be:fd:fc:a4:72:ec:49:b3:5a:c0:c2:52:ad:cd: e7:8b:4d:88:4f:fd:c7:90:24:e7:57:62:cd:2c:4e:07:10:31: ea:d0:ad:2d:66:f8:e0:ea:e3:e5:40:50:f6:9d:99:f8:4f:fe: 04:df:39:45:56:f5:37:50:4e:f5:c8:66:3e:42:43:88:03:84: ed:b1:ea:d5:c1:d9:00:2f:27:70:8f:0e:f8:3c:26:cc:ce:b3: 57:d2:40:20:4b:02:ec:a4:03:6c:fd:98:6a:49:3c:26:d7:be: 26:87:ca:92:aa:b8:c2:fc:c2:59:49:79:5c:a2:a1:b2:dc:d8: 5b:e9:0e:be:95:18:be:58:11:58:ca:83:e1:b5:cf:e4:62:b2: 77:1f:56:a7:62:1f:e2:6f:39:08:6e:78:e5:6d:5c:93:4b:ef: 65:2c:73:2e:fa:cf:63:ed:c2:e3:75:27:e1:4c:6a:4b:f6:96: 32:e5:96:5a:f7:0f:a0:72:f1:05:2b:6d:49:1a:6f:27:18:09: d5:c5:82:de -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUNJg7X+XBW9/lZFTt7AH11oTUZpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxRTYwRTlGREE1QTI1RURDOTYxNTcyQTRDQkE4QzUz OUQ3ODBBRjAeFw0yNjA1MTExNzUyNTFaFw0yNzA1MTAxNzU3NTFaMDMxMTAvBgNV BAMTKDdCMUVEQzVDNzhEQjE4NTU1Qzk3REQ0MDIyOThFRUJFNzY1OEIyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCawz5SLfhkikHZgkqj8UcrBoS9 ZOv2Je0g26WgGC+WBtZNIDA/skhYyZScdrOkfOz/l266aRyDbb4obz/vvsvAyRhw pcFBn0kJm5ypybQnzuh+DrNS4CumcHq063A4FZQx5quTUCmX4y/m5kCaSVpvKRfF Q7tqx76TiJi2eg0eV+6QACRq9bxkEm3rc05ve3tiOP/toazOxh0ph/PYmpO3zyEi 4Iz5HqeQbxQDXRppGxkvCPa3SrY8GCmNHYNIWOVL8DFzzLHfuTBrkCe8dgErJpgY 5kT3gUmyL04bD4t6AVwpF5Eae6X+b5tyudlYb2RT71RdRy06jEbjQH2TqM+xAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUex7cXHjbGFVcl91AIpjuvnZYshkwHwYDVR0j BBgwFoAUBh5g6f2lol7clhVypMuoxTnXgK8wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0FOUkFZ Uy8xLzA2MUU2MEU5RkRBNUEyNUVEQzk2MTU3MkE0Q0JBOEM1MzlENzgwQUYuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzMvMDYxRTYwRTlGREE1QTI1RURDOTYxNTcyQTRD QkE4QzUzOUQ3ODBBRi5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tBTlJBWVMvMS8zMTM1MzEyZTMx MzUzODJlMzIzNjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzgzMDM0MzQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGXnhowDQYJKoZIhvcNAQELBQADggEBABRqpiz92rKgwnDhYnbWxzJ2 EVRCknuSbBZ+2AGILFqsKPHJF+/huO8ScUjMr3wzvGfUm2nU7LLQ+/y+/fykcuxJ s1rAwlKtzeeLTYhP/ceQJOdXYs0sTgcQMerQrS1m+ODq4+VAUPadmfhP/gTfOUVW 9TdQTvXIZj5CQ4gDhO2x6tXB2QAvJ3CPDvg8JszOs1fSQCBLAuykA2z9mGpJPCbX viaHypKquML8wllJeVyiobLc2FvpDr6VGL5YEVjKg+G1z+RisncfVqdiH+JvOQhu eOVtXJNL72Uscy76z2PtwuN1J+FMakv2ljLlllr3D6By8QUrbUkabycYCdXFgt4= -----END CERTIFICATE-----Generated at Wed May 13 07:38:17 2026 by rpki-client