$ rpki-client -vvf rpkica.twnic.tw/rpki/KKIS/0/323430313a653761303a3a2f33322d3438203d3e20313331363435.roa File: 323430313a653761303a3a2f33322d3438203d3e20313331363435.roa (raw, json) Hash identifier: 2UpQjqbEx+nTs1KYPfhTco5SLp3cVljmGO+6p9IUpPM= Subject key identifier: 1C:BF:91:EA:9E:1C:03:4C:3E:2C:80:D6:18:B1:FD:A4:62:77:84:D3 Certificate issuer: /CN=C9344D91C44393B40199B4B00937C6B93307F779 Certificate serial: 4C84C7A86A1B1C43998529B436D709AEC1473F4E Authority key identifier: C9:34:4D:91:C4:43:93:B4:01:99:B4:B0:09:37:C6:B9:33:07:F7:79 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C9344D91C44393B40199B4B00937C6B93307F779.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KKIS/0/323430313a653761303a3a2f33322d3438203d3e20313331363435.roa Signing time: Mon 11 May 2026 17:39:30 +0000 ROA not before: Mon 11 May 2026 17:34:30 +0000 ROA not after: Mon 10 May 2027 17:39:30 +0000 asID: 131645 IP address blocks: 2401:e7a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KKIS/0/C9344D91C44393B40199B4B00937C6B93307F779.crl rsync://rpkica.twnic.tw/rpki/KKIS/0/C9344D91C44393B40199B4B00937C6B93307F779.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C9344D91C44393B40199B4B00937C6B93307F779.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:84:c7:a8:6a:1b:1c:43:99:85:29:b4:36:d7:09:ae:c1:47:3f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9344D91C44393B40199B4B00937C6B93307F779 Validity Not Before: May 11 17:34:30 2026 GMT Not After : May 10 17:39:30 2027 GMT Subject: CN=1CBF91EA9E1C034C3E2C80D618B1FDA4627784D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1b:c7:9b:73:cc:eb:33:f3:ff:a2:6b:d6:3b: 9b:cb:fb:1c:e5:34:c1:62:42:fa:f3:1d:a3:6a:54: 96:7b:11:64:a1:e5:b8:81:a2:69:6c:f8:ab:6b:34: d4:35:7e:a9:81:4f:63:1e:23:a5:48:28:6f:b0:40: c2:4a:eb:96:2b:42:f1:67:04:e2:bf:77:2f:8a:23: 40:1d:73:ae:8b:36:4e:72:f9:80:26:6a:65:28:dc: cc:08:19:6a:14:09:7e:4a:21:12:52:a3:8a:92:4b: 60:c8:b0:52:b0:15:61:71:e9:ed:d2:fb:00:fd:c4: 77:76:b1:b9:cf:7f:c7:6e:30:8d:09:ec:91:93:3b: 56:ed:46:d7:94:1c:bc:a9:72:71:bd:9a:85:0f:9c: 76:b4:a6:36:0b:2a:e6:20:b5:ca:29:6a:59:e8:22: b7:87:5a:8c:db:1a:3c:7a:a8:d9:4e:78:8f:d4:9d: 2b:82:49:c2:33:d8:cc:c1:62:82:49:d8:fd:42:2b: ef:46:2d:5b:a9:0a:81:a5:25:c7:46:8b:cc:7a:73: c2:e3:19:38:b0:de:4e:09:56:2a:f9:24:fd:92:11: 40:d6:de:68:11:0f:45:66:fb:9c:a5:82:06:5e:35: 1f:d0:d5:bb:40:29:a9:55:fa:74:63:c9:15:f8:04: 2e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:BF:91:EA:9E:1C:03:4C:3E:2C:80:D6:18:B1:FD:A4:62:77:84:D3 X509v3 Authority Key Identifier: keyid:C9:34:4D:91:C4:43:93:B4:01:99:B4:B0:09:37:C6:B9:33:07:F7:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KKIS/0/C9344D91C44393B40199B4B00937C6B93307F779.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C9344D91C44393B40199B4B00937C6B93307F779.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKIS/0/323430313a653761303a3a2f33322d3438203d3e20313331363435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:e7a0::/32 Signature Algorithm: sha256WithRSAEncryption 77:a2:4d:bc:01:75:fc:78:09:11:1a:b3:be:be:11:63:9f:52: 32:ed:06:42:9d:57:61:f7:7b:e0:66:13:8b:a7:80:86:9b:ff: 51:e3:8d:d8:65:a7:46:6c:e8:30:92:86:32:98:c5:59:12:13: 3f:ed:da:42:16:c1:25:5c:41:ad:9a:0b:e2:e0:f6:9b:85:6f: dd:be:1c:e1:bb:69:66:7c:72:d7:16:90:69:25:34:e4:93:c9: a3:17:72:57:23:1c:88:34:13:f8:27:76:df:8e:25:42:24:c4: b7:ca:f5:49:41:13:2c:6d:29:ad:11:16:1d:0b:3d:fa:fe:d3: c1:16:c6:4e:07:db:c0:27:67:e5:11:fc:67:71:19:b1:93:cf: 30:cc:dd:f6:d1:0e:97:2f:d3:72:1e:09:d5:78:3a:7f:aa:f9: 34:b8:67:a9:d2:c4:bb:59:b3:25:da:54:26:e9:93:ec:58:4f: 06:69:1f:63:cd:ce:0d:a7:73:f2:fe:ca:03:f8:c2:2e:a4:a2: 0a:b0:c4:02:05:e2:c1:5c:83:10:bb:0a:6d:fd:6e:3c:d6:97: ab:9c:54:76:14:3f:a9:51:61:23:62:ea:3e:dc:4f:bc:96:1d: 1e:4c:ae:6b:fd:36:94:5a:e5:94:8d:8a:b1:84:f4:61:ed:3a: 14:5b:ec:d6 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIUTITHqGobHEOZhSm0NtcJrsFHP04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkzNDREOTFDNDQzOTNCNDAxOTlCNEIwMDkzN0M2Qjkz MzA3Rjc3OTAeFw0yNjA1MTExNzM0MzBaFw0yNzA1MTAxNzM5MzBaMDMxMTAvBgNV BAMTKDFDQkY5MUVBOUUxQzAzNEMzRTJDODBENjE4QjFGREE0NjI3Nzg0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrG8ebc8zrM/P/omvWO5vL+xzl NMFiQvrzHaNqVJZ7EWSh5biBomls+KtrNNQ1fqmBT2MeI6VIKG+wQMJK65YrQvFn BOK/dy+KI0Adc66LNk5y+YAmamUo3MwIGWoUCX5KIRJSo4qSS2DIsFKwFWFx6e3S +wD9xHd2sbnPf8duMI0J7JGTO1btRteUHLypcnG9moUPnHa0pjYLKuYgtcopalno IreHWozbGjx6qNlOeI/UnSuCScIz2MzBYoJJ2P1CK+9GLVupCoGlJcdGi8x6c8Lj GTiw3k4JVir5JP2SEUDW3mgRD0Vm+5ylggZeNR/Q1btAKalV+nRjyRX4BC7NAgMB AAGjggHgMIIB3DAdBgNVHQ4EFgQUHL+R6p4cA0w+LIDWGLH9pGJ3hNMwHwYDVR0j BBgwFoAUyTRNkcRDk7QBmbSwCTfGuTMH93kwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tJUy8w L0M5MzQ0RDkxQzQ0MzkzQjQwMTk5QjRCMDA5MzdDNkI5MzMwN0Y3NzkuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQzkzNDREOTFDNDQzOTNCNDAxOTlCNEIwMDkzN0M2 QjkzMzA3Rjc3OS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tLSVMvMC8zMjM0MzAzMTNhNjUzNzYx MzAzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMTMzMzEzNjM0MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAeegMA0GCSqGSIb3DQEBCwUAA4IBAQB3ok28AXX8eAkRGrO+vhFjn1Iy7QZC nVdh93vgZhOLp4CGm/9R443YZadGbOgwkoYymMVZEhM/7dpCFsElXEGtmgvi4Pab hW/dvhzhu2lmfHLXFpBpJTTkk8mjF3JXIxyINBP4J3bfjiVCJMS3yvVJQRMsbSmt ERYdCz36/tPBFsZOB9vAJ2flEfxncRmxk88wzN320Q6XL9NyHgnVeDp/qvk0uGep 0sS7WbMl2lQm6ZPsWE8GaR9jzc4Np3Py/soD+MIupKIKsMQCBeLBXIMQuwpt/W48 1pernFR2FD+pUWEjYuo+3E+8lh0eTK5r/TaUWuWUjYqxhPRh7ToUW+zW -----END CERTIFICATE-----Generated at Wed May 13 06:27:25 2026 by rpki-client