$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/AS131611.roa File: AS131611.roa (raw, json) Hash identifier: ko9FhlszY3420faGuuU4/JGNBNv5/jbJ5CsCPl0TfYY= Subject key identifier: DD:9D:86:21:F4:E9:A9:21:DF:17:32:3A:4C:E2:3E:0F:2A:C9:88:EF Certificate issuer: /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Certificate serial: 2B3B30781EEFDB7FC0372910338C22873E17575B Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/0/AS131611.roa Signing time: Mon 11 May 2026 17:38:10 +0000 ROA not before: Mon 11 May 2026 17:33:10 +0000 ROA not after: Mon 10 May 2027 17:38:10 +0000 asID: 131611 IP address blocks: 106.105.32.0/19 maxlen: 24 113.196.192.0/19 maxlen: 24 218.32.96.0/19 maxlen: 24 218.32.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3b:30:78:1e:ef:db:7f:c0:37:29:10:33:8c:22:87:3e:17:57:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Validity Not Before: May 11 17:33:10 2026 GMT Not After : May 10 17:38:10 2027 GMT Subject: CN=DD9D8621F4E9A921DF17323A4CE23E0F2AC988EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:60:d0:2b:87:63:a0:b4:ca:df:39:8f:f6: 6a:15:1d:8a:8e:d6:b8:ff:92:66:d3:0d:00:38:6d: 68:d3:5e:0d:dc:30:d1:fd:6d:04:1d:d7:80:41:5c: 4f:e3:3d:b7:dd:b6:3e:01:85:e8:bb:0f:9d:c0:c9: a2:42:bf:01:00:fa:63:4d:f0:57:9a:cf:0e:e8:94: 48:95:2a:e4:44:a4:50:91:66:5c:77:7e:32:df:d6: fb:c2:e6:c2:5a:a4:b4:9f:32:a1:80:19:42:bf:6d: e8:ed:36:ad:02:d5:f7:49:58:5e:1e:16:69:b4:79: b6:65:9d:08:74:c2:d0:5d:c0:eb:68:11:03:c9:a7: 1e:56:3d:be:03:79:50:e9:3f:11:54:be:65:a5:e7: 11:f9:25:83:e5:3b:64:0c:5a:47:bc:62:ec:12:3e: f6:c9:7f:ac:29:50:02:53:f2:2d:d0:2f:a2:26:9a: ae:41:af:4f:b1:1f:bc:5b:96:d7:e5:ec:ee:df:f9: 19:b0:0b:39:6e:b4:0c:25:d1:8d:30:a3:13:e6:d8: b5:d2:6e:c6:5f:02:fb:17:0d:74:62:ee:42:72:a7: 16:21:99:df:3d:47:e4:b5:d4:84:5a:e4:d4:4d:5e: 92:2c:2b:ca:1b:68:99:a4:a2:60:ed:ae:b1:1e:a7: 47:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9D:86:21:F4:E9:A9:21:DF:17:32:3A:4C:E2:3E:0F:2A:C9:88:EF X509v3 Authority Key Identifier: keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/AS131611.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.105.32.0/19 113.196.192.0/19 218.32.96.0/19 218.32.144.0/20 Signature Algorithm: sha256WithRSAEncryption 29:85:0a:f5:d0:0c:45:f6:5e:73:2b:bc:c6:15:2b:04:95:37: f4:42:d9:77:35:8f:da:4f:e6:92:ad:4d:4f:50:6d:69:e6:c8: 64:0b:f7:8e:bb:92:a4:e4:bc:c4:26:15:23:5c:d7:92:fb:e2: 71:d9:b6:b7:9c:2c:45:b0:ed:13:c2:9e:fb:d0:24:7d:dc:9f: 6a:58:d6:cd:29:af:75:62:0c:a3:54:e0:ab:f9:d5:37:7e:c6: 32:17:12:b3:fa:0c:8d:53:91:3c:31:8e:7b:0f:5c:e7:94:fd: 7a:2b:b7:77:0a:e7:44:0d:fc:06:f8:a5:d3:19:b3:d5:17:34: 43:f0:0e:4a:52:c9:8e:72:5d:5a:45:61:83:2a:bb:eb:49:e8: 15:a2:fc:39:22:32:40:f1:7b:da:3e:bc:e3:a1:c2:86:f7:1c: c5:f9:4e:13:e1:d3:f2:f0:14:57:24:4e:02:11:77:4f:d0:32: 96:74:8f:68:8b:5c:a1:6b:0d:e0:fe:a8:80:3a:01:94:0a:11: bf:02:fd:f8:ad:3e:10:65:a1:95:9f:46:c8:07:21:38:eb:7f: 55:f0:6c:91:97:79:3d:d7:da:cf:ba:08:1a:b2:ba:c7:5e:b6: 26:dc:cf:f5:33:d8:97:8b:99:96:2f:3f:3a:24:22:83:93:dd: 6d:6b:5d:c6 -----BEGIN CERTIFICATE----- MIIEuTCCA6GgAwIBAgIUKzsweB7v23/ANykQM4wihz4XV1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdCMkNC NDc0RTdGQjAeFw0yNjA1MTExNzMzMTBaFw0yNzA1MTAxNzM4MTBaMDMxMTAvBgNV BAMTKEREOUQ4NjIxRjRFOUE5MjFERjE3MzIzQTRDRTIzRTBGMkFDOTg4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvkmDQK4djoLTK3zmP9moVHYqO 1rj/kmbTDQA4bWjTXg3cMNH9bQQd14BBXE/jPbfdtj4Bhei7D53AyaJCvwEA+mNN 8Feazw7olEiVKuREpFCRZlx3fjLf1vvC5sJapLSfMqGAGUK/bejtNq0C1fdJWF4e Fmm0ebZlnQh0wtBdwOtoEQPJpx5WPb4DeVDpPxFUvmWl5xH5JYPlO2QMWke8YuwS PvbJf6wpUAJT8i3QL6Immq5Br0+xH7xbltfl7O7f+RmwCzlutAwl0Y0woxPm2LXS bsZfAvsXDXRi7kJypxYhmd89R+S11IRa5NRNXpIsK8obaJmkomDtrrEep0fpAgMB AAGjggHDMIIBvzAdBgNVHQ4EFgQU3Z2GIfTpqSHfFzI6TOI+DyrJiO8wHwYDVR0j BBgwFoAUzPhfmhJOsxX6b1obOCN7LLR05/swDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8w L0NDRjg1RjlBMTI0RUIzMTVGQTZGNUExQjM4MjM3QjJDQjQ3NEU3RkIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdC MkNCNDc0RTdGQi5jZXIwTAYIKwYBBQUHAQsEQDA+MDwGCCsGAQUFBzALhjByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMC9BUzEzMTYxMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEw GAMEBWppIAMEBXHEwAMEBdogYAMEBNogkDANBgkqhkiG9w0BAQsFAAOCAQEAKYUK 9dAMRfZecyu8xhUrBJU39ELZdzWP2k/mkq1NT1BtaebIZAv3jruSpOS8xCYVI1zX kvvicdm2t5wsRbDtE8Ke+9AkfdyfaljWzSmvdWIMo1Tgq/nVN37GMhcSs/oMjVOR PDGOew9c55T9eiu3dwrnRA38Bvil0xmz1Rc0Q/AOSlLJjnJdWkVhgyq760noFaL8 OSIyQPF72j6846HChvccxflOE+HT8vAUVyROAhF3T9AylnSPaItcoWsN4P6ogDoB lAoRvwL9+K0+EGWhlZ9GyAchOOt/VfBskZd5Pdfaz7oIGrK6x162JtzP9TPYl4uZ li8/OiQig5PdbWtdxg== -----END CERTIFICATE-----Generated at Tue May 12 22:53:28 2026 by rpki-client