$ rpki-client -vvf rpkica.twnic.tw/rpki/KKCO/0/323430343a363363303a3a2f33322d3438203d3e20313331363435.roa File: 323430343a363363303a3a2f33322d3438203d3e20313331363435.roa (raw, json) Hash identifier: IKYmTXcs/sxSdeZ8soPiKcin23Vsg+QkfcjhBMnj+D8= Subject key identifier: CB:68:A3:51:18:DA:6A:D4:E5:5C:95:76:1B:5E:5A:46:D3:7A:28:23 Certificate issuer: /CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694 Certificate serial: 585916A0B1E11353D0A941174EB47EF37CA69DED Authority key identifier: 1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KKCO/0/323430343a363363303a3a2f33322d3438203d3e20313331363435.roa Signing time: Mon 11 May 2026 16:50:22 +0000 ROA not before: Mon 11 May 2026 16:45:22 +0000 ROA not after: Mon 10 May 2027 16:50:22 +0000 asID: 131645 IP address blocks: 2404:63c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:59:16:a0:b1:e1:13:53:d0:a9:41:17:4e:b4:7e:f3:7c:a6:9d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694 Validity Not Before: May 11 16:45:22 2026 GMT Not After : May 10 16:50:22 2027 GMT Subject: CN=CB68A35118DA6AD4E55C95761B5E5A46D37A2823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3b:23:49:d3:9f:d7:f9:67:3e:15:ba:65:f1: 13:39:ac:a3:b9:d8:7b:98:33:50:61:a3:a3:d7:ea: 01:49:7e:c0:f3:d8:a8:b3:7e:4c:a3:ea:4d:ca:cd: 47:ba:95:0a:5e:06:f9:82:46:77:5a:be:b6:01:5a: 56:68:d4:f0:f0:cc:08:e6:00:04:64:1d:f9:17:9f: 1d:6d:02:31:f9:4b:4b:44:25:c8:98:c5:f6:94:ee: 7f:66:48:da:89:4c:eb:da:f6:84:75:41:d0:ee:ce: 3a:cf:08:90:3e:40:f2:54:12:60:da:23:44:15:df: ff:9f:7c:77:fe:e7:97:c9:88:58:68:d8:9a:cc:55: a0:4f:4b:19:0a:ff:8c:ce:83:72:a4:78:ce:55:ee: 0c:e1:e7:32:4a:e3:94:5b:6a:88:84:ee:9f:69:f6: b0:26:46:23:01:e6:06:36:1a:90:12:d7:e9:9b:c3: c0:c8:f6:44:25:a1:a5:23:72:b6:1e:99:56:b1:b9: 59:18:ff:63:f4:61:6f:39:fa:f4:72:5f:79:4c:f1: 3a:63:47:84:69:12:c9:be:3b:0d:61:22:f1:53:0e: 1f:79:72:0b:a1:ee:dc:f2:21:16:ed:c9:24:ad:8a: 24:98:f7:fd:97:a3:fa:ef:18:ed:a2:a9:8b:09:b8: 34:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:68:A3:51:18:DA:6A:D4:E5:5C:95:76:1B:5E:5A:46:D3:7A:28:23 X509v3 Authority Key Identifier: keyid:1B:F4:19:77:3D:1E:15:EE:FD:6C:A2:BB:4E:50:DB:EF:74:AB:96:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1BF419773D1E15EEFD6CA2BB4E50DBEF74AB9694.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKCO/0/323430343a363363303a3a2f33322d3438203d3e20313331363435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:63c0::/32 Signature Algorithm: sha256WithRSAEncryption 62:e5:70:24:f8:ea:00:95:26:03:af:9b:20:af:0d:0d:dd:78: fe:a1:7a:9c:a5:9b:f9:8d:69:45:a6:61:b7:0f:cf:1c:9f:4f: 0d:74:8e:39:bb:dd:d9:33:e3:2c:89:e6:bd:58:d4:bf:ee:dc: 75:27:1c:7b:48:a3:4f:55:16:46:62:53:ae:bd:c7:78:d4:27: 90:06:28:89:79:07:d0:bc:63:93:81:34:6c:ed:37:14:a6:19: df:ce:b1:96:df:88:b6:5d:0e:4c:64:a6:58:fd:69:9c:9f:1b: 38:f1:11:7d:04:dc:fc:6a:77:3b:ec:de:96:9f:32:5a:da:d5: 19:d3:f3:86:66:6d:fe:b6:4e:2c:cd:8c:d9:d9:c7:52:67:49: cc:ba:81:8d:b3:76:7c:95:51:a5:5b:6f:4a:68:e6:f0:98:03: 08:10:4d:68:37:bb:2d:40:b1:4f:e5:b3:3b:5b:7e:89:df:af: e6:81:ed:03:4d:9c:e1:c7:de:7f:28:aa:25:3a:be:65:12:e5: b2:09:e2:8d:6a:f0:97:f0:d4:42:ec:57:91:d5:68:b2:14:45: 6e:8d:3e:ab:74:ad:fb:ef:cb:37:3a:ca:33:6c:12:73:98:37: 26:d8:36:c9:a4:d8:6c:66:35:1a:3e:d0:0f:63:78:42:2e:0c: c7:65:47:1e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIUWFkWoLHhE1PQqUEXTrR+83ymne0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNDE5NzczRDFFMTVFRUZENkNBMkJCNEU1MERCRUY3 NEFCOTY5NDAeFw0yNjA1MTExNjQ1MjJaFw0yNzA1MTAxNjUwMjJaMDMxMTAvBgNV BAMTKENCNjhBMzUxMThEQTZBRDRFNTVDOTU3NjFCNUU1QTQ2RDM3QTI4MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXOyNJ05/X+Wc+Fbpl8RM5rKO5 2HuYM1Bho6PX6gFJfsDz2Kizfkyj6k3KzUe6lQpeBvmCRndavrYBWlZo1PDwzAjm AARkHfkXnx1tAjH5S0tEJciYxfaU7n9mSNqJTOva9oR1QdDuzjrPCJA+QPJUEmDa I0QV3/+ffHf+55fJiFho2JrMVaBPSxkK/4zOg3KkeM5V7gzh5zJK45RbaoiE7p9p 9rAmRiMB5gY2GpAS1+mbw8DI9kQloaUjcrYemVaxuVkY/2P0YW85+vRyX3lM8Tpj R4RpEsm+Ow1hIvFTDh95cguh7tzyIRbtySStiiSY9/2Xo/rvGO2iqYsJuDRTAgMB AAGjggHgMIIB3DAdBgNVHQ4EFgQUy2ijURjaatTlXJV2G15aRtN6KCMwHwYDVR0j BBgwFoAUG/QZdz0eFe79bKK7TlDb73SrlpQwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tDTy8w LzFCRjQxOTc3M0QxRTE1RUVGRDZDQTJCQjRFNTBEQkVGNzRBQjk2OTQuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvMUJGNDE5NzczRDFFMTVFRUZENkNBMkJCNEU1MERC RUY3NEFCOTY5NC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tLQ08vMC8zMjM0MzAzNDNhMzYzMzYz MzAzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMTMzMzEzNjM0MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkBGPAMA0GCSqGSIb3DQEBCwUAA4IBAQBi5XAk+OoAlSYDr5sgrw0N3Xj+oXqc pZv5jWlFpmG3D88cn08NdI45u93ZM+Msiea9WNS/7tx1Jxx7SKNPVRZGYlOuvcd4 1CeQBiiJeQfQvGOTgTRs7TcUphnfzrGW34i2XQ5MZKZY/Wmcnxs48RF9BNz8anc7 7N6WnzJa2tUZ0/OGZm3+tk4szYzZ2cdSZ0nMuoGNs3Z8lVGlW29KaObwmAMIEE1o N7stQLFP5bM7W36J36/mge0DTZzhx95/KKolOr5lEuWyCeKNavCX8NRC7FeR1Wiy FEVujT6rdK3778s3OsozbBJzmDcm2DbJpNhsZjUaPtAPY3hCLgzHZUce -----END CERTIFICATE-----Generated at Wed May 13 08:39:12 2026 by rpki-client