$ rpki-client -vvf rpkica.twnic.tw/rpki/KKIS/1/3136312e3234382e3133322e302f32332d3234203d3e20313331363435.roa File: 3136312e3234382e3133322e302f32332d3234203d3e20313331363435.roa (raw, json) Hash identifier: zTyEt/E/NAPbMASFWkS4yWV2xmBH0gl0BW2wGqKTvmQ= Subject key identifier: A9:DA:01:C2:F2:E9:2B:16:77:29:18:49:A2:D6:47:9A:04:18:9C:CB Certificate issuer: /CN=0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B Certificate serial: 4896DF8E11FD9DB09153BF98674CE792E4EBA878 Authority key identifier: 0D:C9:06:EA:C8:AF:A1:6F:54:C8:F9:EF:9E:CC:B9:A2:B9:0B:5B:1B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/KKIS/1/3136312e3234382e3133322e302f32332d3234203d3e20313331363435.roa Signing time: Mon 11 May 2026 17:39:29 +0000 ROA not before: Mon 11 May 2026 17:34:29 +0000 ROA not after: Mon 10 May 2027 17:39:29 +0000 asID: 131645 IP address blocks: 161.248.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:96:df:8e:11:fd:9d:b0:91:53:bf:98:67:4c:e7:92:e4:eb:a8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B Validity Not Before: May 11 17:34:29 2026 GMT Not After : May 10 17:39:29 2027 GMT Subject: CN=A9DA01C2F2E92B1677291849A2D6479A04189CCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:bf:03:7a:62:30:f9:3a:fb:1d:29:af:f2: 29:cb:56:c7:28:23:75:ae:21:f2:0a:45:88:3b:1e: a4:23:c7:b6:a5:45:f0:9a:71:dc:ee:a7:17:a6:7a: 36:7d:c8:e7:5f:4c:fc:b5:3e:e9:ab:35:82:92:c6: 21:94:cb:f1:ef:b6:b1:39:ac:ec:52:64:fa:22:c7: b5:46:61:0c:89:c3:5d:55:9c:a3:8e:42:ad:5c:07: 6f:ef:c7:3d:74:03:4b:63:c9:37:23:55:a8:52:34: 84:9d:fa:e6:2d:d1:cb:d7:1b:78:e7:a4:60:ef:b5: 9a:4a:53:2a:2f:8c:b2:50:8b:40:2b:e7:74:fa:7e: 91:63:21:7c:5e:d1:bc:d8:d4:26:b2:e5:f4:0d:68: 70:79:a5:42:9e:eb:fc:c8:12:17:fa:dd:e9:1b:61: 3a:22:82:d1:52:c2:94:5c:f3:55:0d:6e:81:c4:d2: 8c:b3:5a:79:c0:a4:2f:96:8a:f8:c7:93:f1:ed:eb: b7:d1:74:fd:7d:da:34:1a:5a:22:c1:f0:87:c2:9c: 72:2d:0b:bd:23:a2:a3:f1:6e:df:80:5b:9d:55:41: 08:ca:05:2e:42:cf:ef:1e:a1:89:4b:e6:b1:82:47: 82:ce:c5:92:76:9a:57:d6:08:d8:ea:d4:d7:33:23: ed:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DA:01:C2:F2:E9:2B:16:77:29:18:49:A2:D6:47:9A:04:18:9C:CB X509v3 Authority Key Identifier: keyid:0D:C9:06:EA:C8:AF:A1:6F:54:C8:F9:EF:9E:CC:B9:A2:B9:0B:5B:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/KKIS/1/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/0DC906EAC8AFA16F54C8F9EF9ECCB9A2B90B5B1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKIS/1/3136312e3234382e3133322e302f32332d3234203d3e20313331363435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.248.132.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:fb:f7:27:a3:a7:54:28:15:c4:6b:42:9d:4a:be:d9:ea:f4: 6c:9f:d1:22:d0:f3:3b:b4:9f:b5:e6:bf:40:d3:66:93:33:78: cd:1f:ad:85:a3:1e:3b:51:8d:f4:1d:96:e2:a6:99:14:91:ff: e6:27:c0:79:3d:a4:07:44:70:4e:18:58:90:45:c0:33:65:58: da:d3:a1:ef:05:5a:8b:8e:63:15:78:7d:1d:66:ad:41:b7:e4: 2d:c7:bd:b7:dc:d3:5d:6d:13:f1:5d:f1:21:61:ca:20:88:7b: f3:de:cf:fa:f8:0c:37:78:d9:30:b6:e7:77:40:97:9f:cc:ca: 7b:4c:c5:a6:e8:8d:22:cb:b9:30:e1:41:7a:31:e5:b0:36:37: df:3b:7c:f6:5e:8a:e9:e5:1b:39:82:1c:0a:38:84:33:b9:8d: 15:7a:de:28:2d:e8:c8:d6:67:c5:58:01:2e:40:2e:20:77:1e: e3:1c:0e:d5:2a:e4:52:5a:49:3a:0d:50:eb:1e:87:e3:1e:fd: 40:85:ec:87:39:30:08:46:d0:7c:b3:6d:a6:0c:8b:01:53:fb: 79:27:38:46:c6:5f:87:49:9e:3d:b8:4d:75:e6:ef:5e:14:f3: b1:ae:51:1b:6e:d3:87:ca:8a:88:9a:48:62:3a:bc:be:ea:e7: 41:a0:d6:73 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUSJbfjhH9nbCRU7+YZ0znkuTrqHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERDOTA2RUFDOEFGQTE2RjU0QzhGOUVGOUVDQ0I5QTJC OTBCNUIxQjAeFw0yNjA1MTExNzM0MjlaFw0yNzA1MTAxNzM5MjlaMDMxMTAvBgNV BAMTKEE5REEwMUMyRjJFOTJCMTY3NzI5MTg0OUEyRDY0NzlBMDQxODlDQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAm78DemIw+Tr7HSmv8inLVsco I3WuIfIKRYg7HqQjx7alRfCacdzupxemejZ9yOdfTPy1PumrNYKSxiGUy/HvtrE5 rOxSZPoix7VGYQyJw11VnKOOQq1cB2/vxz10A0tjyTcjVahSNISd+uYt0cvXG3jn pGDvtZpKUyovjLJQi0Ar53T6fpFjIXxe0bzY1Cay5fQNaHB5pUKe6/zIEhf63ekb YToigtFSwpRc81UNboHE0oyzWnnApC+WivjHk/Ht67fRdP192jQaWiLB8IfCnHIt C70joqPxbt+AW51VQQjKBS5Cz+8eoYlL5rGCR4LOxZJ2mlfWCNjq1NczI+0NAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUqdoBwvLpKxZ3KRhJotZHmgQYnMswHwYDVR0j BBgwFoAUDckG6sivoW9UyPnvnsy5orkLWxswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvS0tJUy8x LzBEQzkwNkVBQzhBRkExNkY1NEM4RjlFRjlFQ0NCOUEyQjkwQjVCMUIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvMERDOTA2RUFDOEFGQTE2RjU0QzhGOUVGOUVDQ0I5 QTJCOTBCNUIxQi5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0tLSVMvMS8zMTM2MzEyZTMyMzQzODJl MzEzMzMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzMzMxMzYzNDM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBofiEMA0GCSqGSIb3DQEBCwUAA4IBAQA9+/cno6dUKBXEa0KdSr7Z6vRs n9Ei0PM7tJ+15r9A02aTM3jNH62Fox47UY30HZbippkUkf/mJ8B5PaQHRHBOGFiQ RcAzZVja06HvBVqLjmMVeH0dZq1Bt+Qtx7233NNdbRPxXfEhYcogiHvz3s/6+Aw3 eNkwtud3QJefzMp7TMWm6I0iy7kw4UF6MeWwNjffO3z2Xorp5Rs5ghwKOIQzuY0V et4oLejI1mfFWAEuQC4gdx7jHA7VKuRSWkk6DVDrHofjHv1AheyHOTAIRtB8s22m DIsBU/t5JzhGxl+HSZ49uE115u9eFPOxrlEbbtOHyoqImkhiOry+6udBoNZz -----END CERTIFICATE-----Generated at Wed May 13 04:16:09 2026 by rpki-client