$ rpki-client -vvf rpkica.twnic.tw/rpki/NARL/0/323030313a343530303a3a2f33322d3634203d3e203138313833.roa File: 323030313a343530303a3a2f33322d3634203d3e203138313833.roa (raw, json) Hash identifier: PMzGY0PfcdsGzBMtdtqJG5vua06dScgAEtiVBZ8oJwQ= Subject key identifier: AA:D4:1D:40:02:87:16:BD:F2:30:B1:6C:72:C5:D4:81:B0:F3:ED:EA Certificate issuer: /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1 Certificate serial: 4C6EF8A0F81193AC109AEA8CB78192E3F5A23736 Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NARL/0/323030313a343530303a3a2f33322d3634203d3e203138313833.roa Signing time: Mon 11 May 2026 16:50:21 +0000 ROA not before: Mon 11 May 2026 16:45:21 +0000 ROA not after: Mon 10 May 2027 16:50:21 +0000 asID: 18183 IP address blocks: 2001:4500::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6e:f8:a0:f8:11:93:ac:10:9a:ea:8c:b7:81:92:e3:f5:a2:37:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1 Validity Not Before: May 11 16:45:21 2026 GMT Not After : May 10 16:50:21 2027 GMT Subject: CN=AAD41D40028716BDF230B16C72C5D481B0F3EDEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:04:ca:5f:5f:2a:ba:c1:b7:25:74:29:29:9e: 51:c5:b5:fc:93:50:7e:63:56:dd:01:3d:f2:76:c8: e1:46:98:e8:9c:93:f0:a3:54:6e:20:9d:09:8d:5c: 5b:ee:93:d0:52:bf:f4:62:b8:a0:f1:7f:97:2b:b1: 53:d6:ff:4d:51:45:91:ca:a2:f1:c8:6b:5f:45:c5: c0:d1:89:da:70:a0:2f:b5:ce:c6:38:ac:d0:33:4f: b9:64:36:12:ae:69:7f:df:c4:6f:a8:6b:72:28:5b: e6:62:11:7d:55:b9:21:6e:3d:09:2d:19:a2:43:7d: c1:4d:b3:8f:57:21:1a:8a:09:33:35:b0:a5:17:fc: 72:83:03:b5:c1:9f:c7:8d:83:da:0f:97:6d:4b:cc: 43:ff:d8:5d:8e:16:f7:4b:40:8a:01:37:34:d8:33: 65:01:32:0a:73:28:d0:43:f8:70:1b:c1:7d:e3:b3: 4b:e3:e2:79:f6:37:5c:c8:54:48:4d:8d:6a:b2:94: 63:b2:15:af:68:9a:13:c8:7c:d3:21:e3:9c:25:b8: c9:e7:04:b0:be:20:0c:ea:59:ca:8d:c2:ab:e7:18: 96:70:a3:e4:02:fc:13:44:35:14:9b:47:a5:46:a2: 97:9a:ec:51:6f:6f:4d:e9:30:ee:95:14:bb:ac:d4: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D4:1D:40:02:87:16:BD:F2:30:B1:6C:72:C5:D4:81:B0:F3:ED:EA X509v3 Authority Key Identifier: keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/323030313a343530303a3a2f33322d3634203d3e203138313833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:4500::/32 Signature Algorithm: sha256WithRSAEncryption 5c:84:46:05:70:00:f5:39:c1:17:aa:fa:0d:b7:be:6f:72:0b: 89:2e:9c:06:c3:a4:ef:c4:47:b7:28:90:cb:89:da:22:0a:55: d8:28:49:f6:a5:35:33:c3:c3:1d:ec:5a:65:f0:0b:21:79:e8: 72:b7:14:5c:75:d9:f0:90:ba:74:a7:58:5c:6b:d1:1e:19:b2: 4c:b2:33:8a:66:42:80:20:4a:76:e9:ad:dd:e3:a4:f8:b0:e0: df:f6:ce:62:28:de:18:b9:77:b5:a7:55:cd:3a:f0:47:50:a8: 9d:2e:04:7b:ed:47:d9:fd:6a:0b:c4:ec:09:e8:50:7a:d8:12: 07:93:18:73:d3:cd:24:66:70:30:cb:40:3c:61:aa:88:fe:da: bc:bd:1e:6d:db:44:63:a6:12:70:34:7e:c7:8e:31:c1:4a:b1: ec:8b:96:43:95:6b:f4:16:d9:ca:a5:cb:5b:84:c5:56:e4:b8: a5:f9:c3:dd:ba:13:e3:59:d4:65:e7:6a:7b:f9:f7:5e:33:f7: 5c:e0:45:f3:5c:05:4c:48:25:71:93:89:c5:92:cd:b7:63:a6: 41:e4:53:bf:1c:86:8d:71:99:d8:88:95:d3:4a:e3:8e:61:eb: e2:b2:ee:d2:8e:6a:5a:b3:f1:4f:9f:d1:62:d6:05:e8:a4:ff: a5:0b:27:83 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUTG74oPgRk6wQmuqMt4GS4/WiNzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNBRkFD QzhFQTZDMTAeFw0yNjA1MTExNjQ1MjFaFw0yNzA1MTAxNjUwMjFaMDMxMTAvBgNV BAMTKEFBRDQxRDQwMDI4NzE2QkRGMjMwQjE2QzcyQzVENDgxQjBGM0VERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClBMpfXyq6wbcldCkpnlHFtfyT UH5jVt0BPfJ2yOFGmOick/CjVG4gnQmNXFvuk9BSv/RiuKDxf5crsVPW/01RRZHK ovHIa19FxcDRidpwoC+1zsY4rNAzT7lkNhKuaX/fxG+oa3IoW+ZiEX1VuSFuPQkt GaJDfcFNs49XIRqKCTM1sKUX/HKDA7XBn8eNg9oPl21LzEP/2F2OFvdLQIoBNzTY M2UBMgpzKNBD+HAbwX3js0vj4nn2N1zIVEhNjWqylGOyFa9omhPIfNMh45wluMnn BLC+IAzqWcqNwqvnGJZwo+QC/BNENRSbR6VGopea7FFvb03pMO6VFLus1I/BAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUqtQdQAKHFr3yMLFscsXUgbDz7eowHwYDVR0j BBgwFoAUnYW7jZMAbTWG4o0NZhLK+syOpsEwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkFSTC8w LzlEODVCQjhEOTMwMDZEMzU4NkUyOEQwRDY2MTJDQUZBQ0M4RUE2QzEuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNB RkFDQzhFQTZDMS5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05BUkwvMC8zMjMwMzAzMTNhMzQzNTMw MzAzYTNhMmYzMzMyMmQzNjM0MjAzZDNlMjAzMTM4MzEzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA IAFFADANBgkqhkiG9w0BAQsFAAOCAQEAXIRGBXAA9TnBF6r6Dbe+b3ILiS6cBsOk 78RHtyiQy4naIgpV2ChJ9qU1M8PDHexaZfALIXnocrcUXHXZ8JC6dKdYXGvRHhmy TLIzimZCgCBKdumt3eOk+LDg3/bOYijeGLl3tadVzTrwR1ConS4Ee+1H2f1qC8Ts CehQetgSB5MYc9PNJGZwMMtAPGGqiP7avL0ebdtEY6YScDR+x44xwUqx7IuWQ5Vr 9BbZyqXLW4TFVuS4pfnD3boT41nUZedqe/n3XjP3XOBF81wFTEglcZOJxZLNt2Om QeRTvxyGjXGZ2IiV00rjjmHr4rLu0o5qWrPxT5/RYtYF6KT/pQsngw== -----END CERTIFICATE-----Generated at Wed May 13 03:59:05 2026 by rpki-client