$ rpki-client -vvf rpkica.twnic.tw/rpki/MERCYCAT/0/3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa File: 3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa (raw, json) Hash identifier: RmocfnFYGeRr/aQ5L4jWeV+BcjwmA5Wox7nbUvuA0XQ= Subject key identifier: 2A:23:5E:7D:1B:53:64:1C:C5:2C:FD:FA:46:FD:AE:C6:5A:1D:26:02 Certificate issuer: /CN=C4FE0149FC774090A5B6304E8968380A1F1B0426 Certificate serial: 57EC45006737A7E29B713EFE7BA4CBC9C707EE93 Authority key identifier: C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer Subject info access: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa Signing time: Mon 11 May 2026 17:31:18 +0000 ROA not before: Mon 11 May 2026 17:26:18 +0000 ROA not after: Mon 10 May 2027 17:31:18 +0000 asID: 18428 IP address blocks: 103.172.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ec:45:00:67:37:a7:e2:9b:71:3e:fe:7b:a4:cb:c9:c7:07:ee:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FE0149FC774090A5B6304E8968380A1F1B0426 Validity Not Before: May 11 17:26:18 2026 GMT Not After : May 10 17:31:18 2027 GMT Subject: CN=2A235E7D1B53641CC52CFDFA46FDAEC65A1D2602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cb:20:67:58:84:1d:40:a5:19:e9:82:e9:d9: a2:06:45:1f:0e:6b:69:f3:dc:f8:5c:14:19:d4:65: dd:23:64:be:a5:ca:1f:45:94:db:21:21:13:95:09: d5:b9:23:8b:d6:fc:e5:88:23:90:9e:20:c7:55:c0: ca:60:52:6e:79:e3:18:66:4b:97:b1:d9:24:68:38: 8c:2a:6b:ac:20:ef:fe:ed:d5:17:f2:2c:c5:b4:a8: 1e:1c:16:d3:d2:2f:88:78:cc:78:8c:43:50:d3:e5: 33:9c:2d:bc:e9:99:bf:7b:e0:06:5c:b3:b8:6e:a7: 28:9a:a7:45:2c:46:8b:46:0e:4b:c7:2e:81:4d:77: 00:ff:52:62:51:73:26:1c:7e:05:8e:28:b8:a5:69: 4e:31:3d:68:6c:77:fa:8e:b9:e5:df:11:39:39:3c: 41:65:f1:a2:94:cf:17:04:f2:05:2c:61:9d:08:6c: 6f:d6:24:c5:52:c3:a1:7c:f9:9b:dc:0b:67:f2:49: 6a:39:da:16:f0:ea:54:d3:e8:76:3e:86:12:ab:65: 2d:c0:5f:1f:37:84:84:7d:ff:2b:d0:d4:1c:e1:87: d7:7b:2c:e7:0e:67:ce:3c:a8:08:89:d0:6e:4a:e7: 02:46:de:e8:9c:d5:5f:16:52:99:9a:0c:02:d1:f8: ee:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:23:5E:7D:1B:53:64:1C:C5:2C:FD:FA:46:FD:AE:C6:5A:1D:26:02 X509v3 Authority Key Identifier: keyid:C4:FE:01:49:FC:77:40:90:A5:B6:30:4E:89:68:38:0A:1F:1B:04:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/C4FE0149FC774090A5B6304E8968380A1F1B0426.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C4FE0149FC774090A5B6304E8968380A1F1B0426.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MERCYCAT/0/3130332e3137322e3132362e302f32332d3234203d3e203138343238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.126.0/23 Signature Algorithm: sha256WithRSAEncryption 54:53:3d:32:0e:f5:62:5b:55:cc:87:d1:1a:d0:a9:b1:1a:f8: dc:49:27:0e:5a:f9:c0:62:90:8d:a8:60:b8:96:71:9a:c3:02: 55:09:95:fe:a6:59:a4:02:d6:d1:ae:78:74:28:b5:fa:38:ab: ee:76:04:d4:ab:e2:30:71:4c:93:40:4d:3e:ce:88:b2:08:74: 61:14:99:91:07:bf:15:aa:63:0e:75:d5:d2:e9:05:56:03:86: 34:61:c0:f6:a9:f4:87:82:cd:76:75:33:b7:37:65:7c:d7:68: a0:a9:2c:6b:21:9f:0e:70:35:d3:8f:d8:e4:ca:46:43:37:52: aa:2b:b9:bb:a0:e3:7a:df:9f:d5:f4:4e:69:7f:b4:5f:a4:76: 66:77:ce:af:4a:39:ea:6e:12:f0:e5:6f:07:24:fa:2c:fd:dc: 03:7b:5b:de:f1:30:bd:43:21:6b:43:d7:60:22:08:ac:8d:eb: 06:f1:d0:c2:27:a9:af:84:bf:8f:a2:38:92:d2:52:96:1a:ae: 89:64:d4:bb:3e:ae:0b:93:c8:3d:b8:f7:e7:cc:b0:90:c5:f4: 48:81:4b:1d:77:88:b5:02:0b:bb:a7:35:d1:54:cd:80:a1:8e: ea:64:ec:13:bd:36:0f:62:6c:e8:44:e3:0d:67:e1:be:6f:0f: f7:9e:93:2a -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUV+xFAGc3p+KbcT7+e6TLyccH7pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGRTAxNDlGQzc3NDA5MEE1QjYzMDRFODk2ODM4MEEx RjFCMDQyNjAeFw0yNjA1MTExNzI2MThaFw0yNzA1MTAxNzMxMThaMDMxMTAvBgNV BAMTKDJBMjM1RTdEMUI1MzY0MUNDNTJDRkRGQTQ2RkRBRUM2NUExRDI2MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPyyBnWIQdQKUZ6YLp2aIGRR8O a2nz3PhcFBnUZd0jZL6lyh9FlNshIROVCdW5I4vW/OWII5CeIMdVwMpgUm554xhm S5ex2SRoOIwqa6wg7/7t1RfyLMW0qB4cFtPSL4h4zHiMQ1DT5TOcLbzpmb974AZc s7hupyiap0UsRotGDkvHLoFNdwD/UmJRcyYcfgWOKLilaU4xPWhsd/qOueXfETk5 PEFl8aKUzxcE8gUsYZ0IbG/WJMVSw6F8+ZvcC2fySWo52hbw6lTT6HY+hhKrZS3A Xx83hIR9/yvQ1Bzhh9d7LOcOZ848qAiJ0G5K5wJG3uic1V8WUpmaDALR+O7LAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUKiNefRtTZBzFLP36Rv2uxlodJgIwHwYDVR0j BBgwFoAUxP4BSfx3QJCltjBOiWg4Ch8bBCYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUVSQ1lD QVQvMC9DNEZFMDE0OUZDNzc0MDkwQTVCNjMwNEU4OTY4MzgwQTFGMUIwNDI2LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0M0RkUwMTQ5RkM3NzQwOTBBNUI2MzA0RTg5 NjgzODBBMUYxQjA0MjYuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuG ZHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTUVSQ1lDQVQvMC8zMTMwMzMy ZTMxMzczMjJlMzEzMjM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzODM0MzIz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWesfjANBgkqhkiG9w0BAQsFAAOCAQEAVFM9Mg71YltVzIfR GtCpsRr43EknDlr5wGKQjahguJZxmsMCVQmV/qZZpALW0a54dCi1+jir7nYE1Kvi MHFMk0BNPs6Isgh0YRSZkQe/FapjDnXV0ukFVgOGNGHA9qn0h4LNdnUztzdlfNdo oKksayGfDnA104/Y5MpGQzdSqiu5u6Djet+f1fROaX+0X6R2ZnfOr0o56m4S8OVv ByT6LP3cA3tb3vEwvUMha0PXYCIIrI3rBvHQwiepr4S/j6I4ktJSlhquiWTUuz6u C5PIPbj358ywkMX0SIFLHXeItQILu6c10VTNgKGO6mTsE702D2Js6ETjDWfhvm8P 956TKg== -----END CERTIFICATE-----Generated at Wed May 13 04:20:08 2026 by rpki-client