$ rpki-client -vvf rpkica.twnic.tw/rpki/LIRUN/1/3135372e36362e3136362e302f32342d3234203d3e20313530373636.roa File: 3135372e36362e3136362e302f32342d3234203d3e20313530373636.roa (raw, json) Hash identifier: SV9WMKCo6lqqmo4TlONcJhx+nWmHLOoLn96eGrQjUkk= Subject key identifier: C7:E0:7E:32:0C:E8:7B:30:12:7E:A0:0F:97:07:80:6F:1F:09:35:38 Certificate issuer: /CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Certificate serial: 708BA10612393DBFAA020DE0617FA2A9B0B21D6C Authority key identifier: 4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LIRUN/1/3135372e36362e3136362e302f32342d3234203d3e20313530373636.roa Signing time: Mon 11 May 2026 17:39:41 +0000 ROA not before: Mon 11 May 2026 17:34:41 +0000 ROA not after: Mon 10 May 2027 17:39:41 +0000 asID: 150766 IP address blocks: 157.66.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8b:a1:06:12:39:3d:bf:aa:02:0d:e0:61:7f:a2:a9:b0:b2:1d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F029ED27C82844F72C10999E3E77841D888E8A5 Validity Not Before: May 11 17:34:41 2026 GMT Not After : May 10 17:39:41 2027 GMT Subject: CN=C7E07E320CE87B30127EA00F9707806F1F093538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6e:c4:60:09:8b:77:e8:eb:51:4b:f1:21:68: a8:a3:db:2f:ff:a6:46:9d:72:a1:f8:06:92:32:b1: b5:c4:8d:9f:8e:fe:43:d2:b6:f4:6e:77:df:f6:7e: 7f:7b:34:42:c9:88:eb:93:62:1a:b2:42:c5:0e:37: e4:c7:23:36:f7:79:ce:cc:89:b3:d1:f9:50:e0:a8: 26:43:a1:34:e6:06:fa:f6:82:f1:52:e6:ee:6a:54: 93:1d:e4:b9:b4:dc:2b:c6:c1:41:ed:c7:3a:0f:58: 43:30:fd:ee:23:4b:aa:88:dc:52:b4:8c:6c:ff:5b: e5:21:b2:81:36:c1:ad:50:02:ac:be:9a:8e:01:58: 9a:8a:88:1f:f7:3e:c4:bc:38:2e:61:10:ae:d5:fb: 3f:48:f4:36:b4:f2:3c:45:23:26:a7:77:dc:4e:5f: fd:e4:75:a3:63:f7:a8:e9:79:cd:66:66:4c:0b:9c: 0c:d5:f3:bd:01:c2:8a:ea:67:78:9f:ff:81:64:e1: 22:f8:ba:64:d0:46:f0:4e:f1:83:45:11:e5:46:38: 0e:9e:a4:fc:0e:0e:9b:df:2a:94:71:1a:10:d1:04: f8:b6:2d:f8:6f:37:80:86:ac:c3:17:d4:ca:9a:16: 09:59:d5:04:dd:02:04:60:9f:3f:41:5d:a9:29:d3: ba:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E0:7E:32:0C:E8:7B:30:12:7E:A0:0F:97:07:80:6F:1F:09:35:38 X509v3 Authority Key Identifier: keyid:4F:02:9E:D2:7C:82:84:4F:72:C1:09:99:E3:E7:78:41:D8:88:E8:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/4F029ED27C82844F72C10999E3E77841D888E8A5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4F029ED27C82844F72C10999E3E77841D888E8A5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/1/3135372e36362e3136362e302f32342d3234203d3e20313530373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.166.0/24 Signature Algorithm: sha256WithRSAEncryption a2:69:c8:d9:ba:78:2f:34:e1:e2:b2:ec:fe:65:f2:9c:b2:0a: a8:93:00:2b:aa:2f:85:2e:8e:07:97:ef:22:5b:2d:78:27:b6: 19:1c:a8:19:c1:61:81:b8:b8:4c:65:dc:4a:e0:dd:1b:a2:57: 0c:d5:0e:7f:f9:c6:17:f7:8e:04:d2:a4:52:65:fe:6c:c6:a5: cf:43:2f:82:2f:ac:a2:24:0b:3f:36:47:21:ec:32:99:66:d1: e1:99:08:b9:15:9a:88:be:26:91:29:0e:d0:91:71:04:0b:b6: 09:9d:7f:45:60:e2:01:c7:5b:e3:35:f1:4f:cc:6a:53:fc:c3: d5:3f:42:05:f1:40:1b:1e:df:f4:29:10:17:53:76:7c:99:28: 71:97:0f:08:cc:39:5d:95:69:48:41:83:c7:ec:c4:b7:2e:4c: 4b:dc:f9:6d:c8:68:05:b4:41:56:54:89:7f:8c:16:a5:0c:45: ef:50:55:ec:b6:e3:19:ce:c3:6f:8a:2c:f2:4c:b7:ac:60:79: 95:1f:81:4e:e3:85:d9:bf:05:d2:aa:cd:bd:16:ff:ec:ca:3c: 1f:c5:dd:09:cd:fe:60:f2:04:93:75:e4:21:6f:55:ed:a5:c4: f0:e0:2f:b6:5b:89:60:c5:72:5c:d0:80:ff:84:f9:59:d2:a3: e8:a4:02:58 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUcIuhBhI5Pb+qAg3gYX+iqbCyHWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjlFRDI3QzgyODQ0RjcyQzEwOTk5RTNFNzc4NDFE ODg4RThBNTAeFw0yNjA1MTExNzM0NDFaFw0yNzA1MTAxNzM5NDFaMDMxMTAvBgNV BAMTKEM3RTA3RTMyMENFODdCMzAxMjdFQTAwRjk3MDc4MDZGMUYwOTM1MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbsRgCYt36OtRS/EhaKij2y// pkadcqH4BpIysbXEjZ+O/kPStvRud9/2fn97NELJiOuTYhqyQsUON+THIzb3ec7M ibPR+VDgqCZDoTTmBvr2gvFS5u5qVJMd5Lm03CvGwUHtxzoPWEMw/e4jS6qI3FK0 jGz/W+UhsoE2wa1QAqy+mo4BWJqKiB/3PsS8OC5hEK7V+z9I9Da08jxFIyand9xO X/3kdaNj96jpec1mZkwLnAzV870BworqZ3if/4Fk4SL4umTQRvBO8YNFEeVGOA6e pPwODpvfKpRxGhDRBPi2LfhvN4CGrMMX1MqaFglZ1QTdAgRgnz9BXakp07rNAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUx+B+MgzoezASfqAPlweAbx8JNTgwHwYDVR0j BBgwFoAUTwKe0nyChE9ywQmZ4+d4QdiI6KUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElSVU4v MS80RjAyOUVEMjdDODI4NDRGNzJDMTA5OTlFM0U3Nzg0MUQ4ODhFOEE1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wLzRGMDI5RUQyN0M4Mjg0NEY3MkMxMDk5OUUzRTc3 ODQxRDg4OEU4QTUuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8xLzMxMzUzNzJlMzYzNjJl MzEzNjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMwMzczNjM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAnUKmMA0GCSqGSIb3DQEBCwUAA4IBAQCiacjZungvNOHisuz+ZfKcsgqo kwArqi+FLo4Hl+8iWy14J7YZHKgZwWGBuLhMZdxK4N0bolcM1Q5/+cYX944E0qRS Zf5sxqXPQy+CL6yiJAs/Nkch7DKZZtHhmQi5FZqIviaRKQ7QkXEEC7YJnX9FYOIB x1vjNfFPzGpT/MPVP0IF8UAbHt/0KRAXU3Z8mShxlw8IzDldlWlIQYPH7MS3LkxL 3PltyGgFtEFWVIl/jBalDEXvUFXstuMZzsNviizyTLesYHmVH4FO44XZvwXSqs29 Fv/syjwfxd0Jzf5g8gSTdeQhb1XtpcTw4C+2W4lgxXJc0ID/hPlZ0qPopAJY -----END CERTIFICATE-----Generated at Wed May 13 05:55:56 2026 by rpki-client