$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/AS19551.roa File: AS19551.roa (raw, json) Hash identifier: NqDBh2SwFJNCXvyM4fdyGB5+g5TbMBdh1359FDzfzQc= Subject key identifier: D3:7C:07:17:38:A5:1E:EA:46:A0:1F:1F:FE:D4:A7:E8:8C:E4:BA:45 Certificate issuer: /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Certificate serial: 3E6064EF143D75D242CBE45C3DF89CCC9D57AC01 Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/0/AS19551.roa Signing time: Mon 11 May 2026 17:55:31 +0000 ROA not before: Mon 11 May 2026 17:50:31 +0000 ROA not after: Mon 10 May 2027 17:55:31 +0000 asID: 19551 IP address blocks: 218.32.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:60:64:ef:14:3d:75:d2:42:cb:e4:5c:3d:f8:9c:cc:9d:57:ac:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Validity Not Before: May 11 17:50:31 2026 GMT Not After : May 10 17:55:31 2027 GMT Subject: CN=D37C071738A51EEA46A01F1FFED4A7E88CE4BA45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:74:e2:ec:a1:18:25:8c:fa:0a:88:f9:5f: de:6f:9e:92:30:be:6a:7f:30:71:00:67:cd:0d:f8: 3b:17:45:95:5f:ce:f7:b6:b2:9b:46:03:60:dd:46: 33:e0:a4:60:db:7d:ff:c4:d2:0b:b4:87:40:9b:f3: b3:e0:85:1d:2d:87:b8:e9:de:08:df:23:69:38:3e: 01:6b:dd:13:fe:40:4c:49:f9:a8:77:04:e2:51:48: 74:3d:55:72:34:01:54:eb:a0:a5:e2:a8:8b:4f:57: f6:a9:c3:fd:7f:62:6e:b2:f0:bb:35:2c:66:0f:f7: a3:1b:a6:6d:82:95:80:d8:a9:78:b6:fa:5e:27:b8: 65:f9:be:02:f7:9d:4a:56:42:32:8a:c9:ac:91:3f: b3:bb:5d:72:2b:3f:c6:82:27:51:66:2c:b2:62:86: 8a:75:3a:11:e5:b5:fb:04:7c:d9:aa:2e:cd:94:61: 82:d7:5b:a8:64:3c:dc:92:24:81:48:f4:8c:87:b5: 9b:0f:ab:e4:a1:fa:74:c4:7c:2f:ce:97:bd:af:c8: c5:da:9b:c6:9b:da:2f:87:12:ad:0d:48:2a:f5:11: 4d:b0:28:b3:f9:10:08:81:1f:82:ac:47:77:e3:27: 46:6d:90:c4:be:55:50:cf:89:de:8c:9f:a8:8e:23: 68:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7C:07:17:38:A5:1E:EA:46:A0:1F:1F:FE:D4:A7:E8:8C:E4:BA:45 X509v3 Authority Key Identifier: keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/AS19551.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.32.57.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:ff:3e:0b:2a:3a:0e:0b:98:a6:f3:2e:fc:2d:18:89:ef:f0: 04:11:5c:a6:c1:01:24:3d:2e:96:41:bc:ef:c3:98:ec:d1:d5: 53:ad:db:f1:d7:60:b2:dc:6d:f6:fa:a0:3c:5b:60:04:fa:33: 8f:f3:29:be:04:2e:f0:de:aa:d4:c8:71:fe:a9:62:42:4c:29: 38:4f:b3:72:f5:11:a4:0c:c4:1b:6c:16:ca:9b:b2:b0:4f:38: 04:a0:89:b9:49:e4:7a:44:27:4e:36:b3:e4:36:e4:b9:ac:c8: a5:90:17:36:d3:05:7a:cf:76:3b:63:85:d8:d7:42:44:4e:10: b3:9e:34:95:df:7a:46:c5:74:8c:7a:54:38:6d:ee:49:9f:13: 5f:8a:e7:73:76:da:69:ed:ba:55:44:70:32:78:af:b5:c4:15: 9f:1a:51:26:c0:19:81:e2:8d:db:49:97:e4:86:f7:0f:bd:5e: d4:e8:ff:57:db:1e:13:a0:21:ed:7e:93:24:3b:09:07:24:db: e8:80:97:4f:f6:cd:02:76:6a:5a:63:7d:e4:d3:9d:3c:dc:cb: d7:09:02:23:a1:b0:56:44:44:d9:69:73:e9:91:3d:38:b7:f4: 57:62:7d:e7:30:22:f6:81:a8:78:2d:4b:a6:8e:87:ee:ee:b2: 49:f2:d9:80 -----BEGIN CERTIFICATE----- MIIEpjCCA46gAwIBAgIUPmBk7xQ9ddJCy+RcPficzJ1XrAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdCMkNC NDc0RTdGQjAeFw0yNjA1MTExNzUwMzFaFw0yNzA1MTAxNzU1MzFaMDMxMTAvBgNV BAMTKEQzN0MwNzE3MzhBNTFFRUE0NkEwMUYxRkZFRDRBN0U4OENFNEJBNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYnTi7KEYJYz6Coj5X95vnpIw vmp/MHEAZ80N+DsXRZVfzve2sptGA2DdRjPgpGDbff/E0gu0h0Cb87PghR0th7jp 3gjfI2k4PgFr3RP+QExJ+ah3BOJRSHQ9VXI0AVTroKXiqItPV/apw/1/Ym6y8Ls1 LGYP96Mbpm2ClYDYqXi2+l4nuGX5vgL3nUpWQjKKyayRP7O7XXIrP8aCJ1FmLLJi hop1OhHltfsEfNmqLs2UYYLXW6hkPNySJIFI9IyHtZsPq+Sh+nTEfC/Ol72vyMXa m8ab2i+HEq0NSCr1EU2wKLP5EAiBH4KsR3fjJ0ZtkMS+VVDPid6Mn6iOI2jHAgMB AAGjggGwMIIBrDAdBgNVHQ4EFgQU03wHFzilHupGoB8f/tSn6IzkukUwHwYDVR0j BBgwFoAUzPhfmhJOsxX6b1obOCN7LLR05/swDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8w L0NDRjg1RjlBMTI0RUIzMTVGQTZGNUExQjM4MjM3QjJDQjQ3NEU3RkIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdC MkNCNDc0RTdGQi5jZXIwSwYIKwYBBQUHAQsEPzA9MDsGCCsGAQUFBzALhi9yc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMC9BUzE5NTUxLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQA2iA5MA0GCSqGSIb3DQEBCwUAA4IBAQCO/z4LKjoOC5im8y78LRiJ7/AEEVym wQEkPS6WQbzvw5js0dVTrdvx12Cy3G32+qA8W2AE+jOP8ym+BC7w3qrUyHH+qWJC TCk4T7Ny9RGkDMQbbBbKm7KwTzgEoIm5SeR6RCdONrPkNuS5rMilkBc20wV6z3Y7 Y4XY10JEThCznjSV33pGxXSMelQ4be5JnxNfiudzdtpp7bpVRHAyeK+1xBWfGlEm wBmB4o3bSZfkhvcPvV7U6P9X2x4ToCHtfpMkOwkHJNvogJdP9s0CdmpaY33k0508 3MvXCQIjobBWRETZaXPpkT04t/RXYn3nMCL2gah4LUumjofu7rJJ8tmA -----END CERTIFICATE-----Generated at Tue May 12 22:53:30 2026 by rpki-client