$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/AS131586.roa File: AS131586.roa (raw, json) Hash identifier: LDiRnfHcJQoPn8iKqzaYdPXYHjyt2l+woQXcmbfjLaM= Subject key identifier: 56:75:D9:81:2F:31:B8:BB:2C:78:57:7D:B8:00:1C:9D:F3:22:A2:7E Certificate issuer: /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Certificate serial: 2D891FD3F17C13E0383F1D6EEE42A52373FD6C47 Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/0/AS131586.roa Signing time: Mon 11 May 2026 17:07:29 +0000 ROA not before: Mon 11 May 2026 17:02:29 +0000 ROA not after: Mon 10 May 2027 17:07:29 +0000 asID: 131586 IP address blocks: 106.106.0.0/16 maxlen: 24 106.106.0.0/17 maxlen: 24 175.183.136.0/24 maxlen: 24 175.183.137.0/24 maxlen: 24 2401:a040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:89:1f:d3:f1:7c:13:e0:38:3f:1d:6e:ee:42:a5:23:73:fd:6c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Validity Not Before: May 11 17:02:29 2026 GMT Not After : May 10 17:07:29 2027 GMT Subject: CN=5675D9812F31B8BB2C78577DB8001C9DF322A27E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:46:ef:07:24:4a:a5:c9:cc:e3:39:a7:c5:91: fa:a0:55:50:49:ba:78:96:27:2d:a2:27:95:8f:5e: 92:8e:58:7f:57:98:7b:4c:71:d5:7d:e9:58:d2:12: de:73:2c:2a:3f:ff:ba:3e:6d:55:99:2a:c7:bf:cc: 71:d7:39:11:d4:9b:fe:33:ea:60:d4:49:ad:e7:fe: 5d:4d:7c:bd:5e:c7:af:34:fd:95:5e:65:16:ad:1c: 83:b3:24:73:8c:48:4f:64:2a:8a:3e:8f:c7:f3:f8: 04:06:a9:de:87:ab:6c:17:4a:05:30:c5:07:27:88: ae:4a:07:2f:38:08:45:3c:7d:65:6b:fc:e1:10:31: 73:4a:68:b0:66:07:67:cd:6f:62:09:99:3c:02:d9: 75:59:91:52:a6:5e:3c:29:62:d2:d5:a0:47:ef:b7: 66:4e:36:cd:a8:4e:72:c4:92:94:7b:e4:46:ac:73: 46:20:ee:e9:cc:d0:45:52:ee:32:49:bb:fa:e5:2e: 19:5f:cc:01:ac:de:30:12:31:f4:70:43:7b:eb:f9: 22:fe:f4:3a:7b:11:de:f5:b0:ac:c1:27:2c:56:aa: ec:d1:5b:6e:af:23:2e:95:79:18:55:9b:41:6a:54: 83:29:99:ce:61:45:e4:06:4f:cd:b0:2b:55:c9:75: 86:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:75:D9:81:2F:31:B8:BB:2C:78:57:7D:B8:00:1C:9D:F3:22:A2:7E X509v3 Authority Key Identifier: keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/AS131586.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.106.0.0/16 175.183.136.0/23 IPv6: 2401:a040::/32 Signature Algorithm: sha256WithRSAEncryption 9a:b6:6e:1e:5c:e5:a9:f1:3b:25:d2:0a:5e:48:78:3e:c1:8c: 57:5a:e5:51:89:a4:f1:f2:df:58:74:6c:5f:16:13:51:2f:02: e8:9c:57:f3:45:59:67:1d:5b:94:71:62:6b:e6:28:ca:1f:04: 6a:b5:45:15:83:fa:fc:e8:97:58:88:68:2c:1e:20:10:a5:ef: 17:c7:7f:d0:b5:dc:03:eb:22:0b:04:7d:dd:ee:f4:4c:b9:ff: 5a:16:68:8e:75:b8:aa:11:f7:e4:8f:01:18:7c:4e:99:f0:2c: c4:f8:14:f9:4b:97:8f:8e:c0:b1:af:58:e0:ea:ed:b4:78:5c: 9d:2c:8a:07:73:4e:e1:31:dd:22:4f:8f:64:34:50:85:0f:bc: a1:fd:86:21:4a:15:c2:17:59:e7:1e:c3:dd:0e:70:ff:52:37: 32:e1:82:61:6e:a8:27:4d:e8:df:e2:f7:d8:1a:7b:24:e6:ed: a8:71:4a:dd:85:dc:4e:98:d9:e1:46:2d:f0:2f:48:95:fd:fe: 01:07:d0:6d:46:13:b8:80:41:92:8d:49:2b:ac:02:77:24:15: 43:d5:be:42:3a:2d:9a:6d:81:64:04:3f:6a:4e:e5:52:0c:bc: 94:27:9c:b8:98:07:72:17:35:ff:6c:d4:a6:7f:ce:0f:c4:2a: 8c:7d:d7:62 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgIULYkf0/F8E+A4Px1u7kKlI3P9bEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdCMkNC NDc0RTdGQjAeFw0yNjA1MTExNzAyMjlaFw0yNzA1MTAxNzA3MjlaMDMxMTAvBgNV BAMTKDU2NzVEOTgxMkYzMUI4QkIyQzc4NTc3REI4MDAxQzlERjMyMkEyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcRu8HJEqlyczjOafFkfqgVVBJ uniWJy2iJ5WPXpKOWH9XmHtMcdV96VjSEt5zLCo//7o+bVWZKse/zHHXORHUm/4z 6mDUSa3n/l1NfL1ex680/ZVeZRatHIOzJHOMSE9kKoo+j8fz+AQGqd6Hq2wXSgUw xQcniK5KBy84CEU8fWVr/OEQMXNKaLBmB2fNb2IJmTwC2XVZkVKmXjwpYtLVoEfv t2ZONs2oTnLEkpR75Easc0Yg7unM0EVS7jJJu/rlLhlfzAGs3jASMfRwQ3vr+SL+ 9Dp7Ed71sKzBJyxWquzRW26vIy6VeRhVm0FqVIMpmc5hReQGT82wK1XJdYZLAgMB AAGjggHFMIIBwTAdBgNVHQ4EFgQUVnXZgS8xuLsseFd9uAAcnfMion4wHwYDVR0j BBgwFoAUzPhfmhJOsxX6b1obOCN7LLR05/swDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8w L0NDRjg1RjlBMTI0RUIzMTVGQTZGNUExQjM4MjM3QjJDQjQ3NEU3RkIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdC MkNCNDc0RTdGQi5jZXIwTAYIKwYBBQUHAQsEQDA+MDwGCCsGAQUFBzALhjByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMC9BUzEzMTU4Ni5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwEQQCAAEw CwMDAGpqAwQBr7eIMA0EAgACMAcDBQAkAaBAMA0GCSqGSIb3DQEBCwUAA4IBAQCa tm4eXOWp8Tsl0gpeSHg+wYxXWuVRiaTx8t9YdGxfFhNRLwLonFfzRVlnHVuUcWJr 5ijKHwRqtUUVg/r86JdYiGgsHiAQpe8Xx3/QtdwD6yILBH3d7vRMuf9aFmiOdbiq EffkjwEYfE6Z8CzE+BT5S5ePjsCxr1jg6u20eFydLIoHc07hMd0iT49kNFCFD7yh /YYhShXCF1nnHsPdDnD/Ujcy4YJhbqgnTejf4vfYGnsk5u2ocUrdhdxOmNnhRi3w L0iV/f4BB9BtRhO4gEGSjUkrrAJ3JBVD1b5COi2abYFkBD9qTuVSDLyUJ5y4mAdy FzX/bNSmf84PxCqMfddi -----END CERTIFICATE-----Generated at Tue May 12 22:53:29 2026 by rpki-client