$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/AS38851.roa File: AS38851.roa (raw, json) Hash identifier: kbwsddvnXmcim3cT6O4xcv/Tch3fR0ae1nrqo1CdGqU= Subject key identifier: FB:B6:53:8A:1C:79:99:DB:C0:64:10:D9:28:68:73:27:72:EE:32:63 Certificate issuer: /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Certificate serial: 069AFD227577AAF6741C62EDA1EE848FFC6F66A0 Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/0/AS38851.roa Signing time: Mon 11 May 2026 16:33:38 +0000 ROA not before: Mon 11 May 2026 16:28:38 +0000 ROA not after: Mon 10 May 2027 16:33:38 +0000 asID: 38851 IP address blocks: 60.245.120.0/21 maxlen: 24 113.196.144.0/21 maxlen: 24 122.146.108.0/23 maxlen: 24 122.147.160.0/22 maxlen: 24 122.147.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:9a:fd:22:75:77:aa:f6:74:1c:62:ed:a1:ee:84:8f:fc:6f:66:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Validity Not Before: May 11 16:28:38 2026 GMT Not After : May 10 16:33:38 2027 GMT Subject: CN=FBB6538A1C7999DBC06410D92868732772EE3263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:ed:6d:a8:a1:48:6e:1d:a3:d8:1e:83:fd: 57:c5:59:2a:f4:3d:87:de:58:12:a8:1a:a7:72:41: b6:9a:85:07:0e:33:c5:42:87:e4:f0:36:c7:50:10: 47:66:14:53:3f:b1:19:1c:7a:4b:15:85:18:e9:b6: 72:0e:4a:9a:e3:11:bf:c6:52:62:76:a7:5c:ad:d7: 3d:41:45:4f:8e:bc:88:55:bd:9f:a2:80:05:5f:19: 47:15:ae:eb:72:ee:bd:b6:f2:77:b5:ec:8a:2f:4e: 22:bc:6d:99:13:f9:ae:19:f2:d5:4c:c0:21:b6:27: b3:7c:0b:13:a4:0b:69:44:a9:38:65:f1:51:76:7a: ab:fb:78:2e:47:8e:92:c0:0f:e3:fd:72:f1:72:eb: 9c:35:f7:40:cb:07:21:10:6c:d6:fd:0c:da:4c:31: 4d:7a:ed:e5:73:ab:25:83:43:be:54:61:fe:86:b8: 58:69:98:14:9e:86:a4:e7:15:ec:d8:24:38:f9:99: b9:0d:20:bc:11:56:22:80:96:6d:b1:d2:d5:13:7a: a2:56:80:22:a3:96:77:7a:2e:ae:67:b8:eb:06:90: e4:9d:ed:d5:1e:af:61:53:44:a1:10:51:ce:0e:98: b4:5c:90:e7:df:82:08:15:c6:44:20:b6:bb:05:9c: c6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B6:53:8A:1C:79:99:DB:C0:64:10:D9:28:68:73:27:72:EE:32:63 X509v3 Authority Key Identifier: keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/AS38851.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 60.245.120.0/21 113.196.144.0/21 122.146.108.0/23 122.147.160.0-122.147.165.255 Signature Algorithm: sha256WithRSAEncryption 29:ce:d9:58:9d:82:a3:10:2e:31:51:e8:02:cd:91:6e:fe:20: 47:c9:62:f0:f2:a4:7c:49:af:f1:80:a9:58:d9:1f:26:1e:28: bc:08:6c:c2:df:b5:3c:9e:ad:6c:9e:d0:8a:aa:d8:6e:67:b2: 9f:e9:38:6b:1f:f2:73:e2:73:47:3b:c0:80:09:cc:26:eb:02: eb:73:c0:cb:18:0d:4e:1d:a4:ba:d4:e7:a3:d9:1d:4c:df:a7: 00:71:46:1d:2c:10:86:21:52:bf:a4:19:be:05:a6:b2:12:11: 2c:38:51:36:62:9e:c3:39:b9:4b:cd:14:c5:b7:45:db:d6:3a: c8:48:53:d4:04:28:a1:7d:66:94:e6:22:6b:ad:d9:aa:56:c6: a3:67:a8:da:2e:85:10:03:9e:f4:8f:92:4c:cc:34:75:84:2e: 1b:6b:70:20:57:e3:68:61:a4:66:9e:7a:14:a3:e5:ed:ea:fe: 55:13:46:2b:0a:f3:bb:8c:c4:c9:b5:6e:35:40:1f:98:20:b5: d6:cf:fa:d8:1d:47:f2:02:eb:48:5e:db:46:60:0c:cc:4d:10: dc:e2:03:b9:43:8e:a0:2a:54:70:54:0e:1a:23:7d:95:00:65: 55:c4:ce:58:04:ad:31:34:99:a5:ca:e9:35:29:2f:70:48:32: 3b:e0:fa:92 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIUBpr9InV3qvZ0HGLtoe6Ej/xvZqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdCMkNC NDc0RTdGQjAeFw0yNjA1MTExNjI4MzhaFw0yNzA1MTAxNjMzMzhaMDMxMTAvBgNV BAMTKEZCQjY1MzhBMUM3OTk5REJDMDY0MTBEOTI4Njg3MzI3NzJFRTMyNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuWu1tqKFIbh2j2B6D/VfFWSr0 PYfeWBKoGqdyQbaahQcOM8VCh+TwNsdQEEdmFFM/sRkceksVhRjptnIOSprjEb/G UmJ2p1yt1z1BRU+OvIhVvZ+igAVfGUcVruty7r228ne17IovTiK8bZkT+a4Z8tVM wCG2J7N8CxOkC2lEqThl8VF2eqv7eC5HjpLAD+P9cvFy65w190DLByEQbNb9DNpM MU167eVzqyWDQ75UYf6GuFhpmBSehqTnFezYJDj5mbkNILwRViKAlm2x0tUTeqJW gCKjlnd6Lq5nuOsGkOSd7dUer2FTRKEQUc4OmLRckOffgggVxkQgtrsFnMb5AgMB AAGjggHKMIIBxjAdBgNVHQ4EFgQU+7ZTihx5mdvAZBDZKGhzJ3LuMmMwHwYDVR0j BBgwFoAUzPhfmhJOsxX6b1obOCN7LLR05/swDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8w L0NDRjg1RjlBMTI0RUIzMTVGQTZGNUExQjM4MjM3QjJDQjQ3NEU3RkIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdC MkNCNDc0RTdGQi5jZXIwSwYIKwYBBQUHAQsEPzA9MDsGCCsGAQUFBzALhi9yc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMC9BUzM4ODUxLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAg AwQDPPV4AwQDccSQAwQBepJsMAwDBAV6k6ADBAF6k6QwDQYJKoZIhvcNAQELBQAD ggEBACnO2VidgqMQLjFR6ALNkW7+IEfJYvDypHxJr/GAqVjZHyYeKLwIbMLftTye rWye0Iqq2G5nsp/pOGsf8nPic0c7wIAJzCbrAutzwMsYDU4dpLrU56PZHUzfpwBx Rh0sEIYhUr+kGb4FprISESw4UTZinsM5uUvNFMW3RdvWOshIU9QEKKF9ZpTmImut 2apWxqNnqNouhRADnvSPkkzMNHWELhtrcCBX42hhpGaeehSj5e3q/lUTRisK87uM xMm1bjVAH5ggtdbP+tgdR/IC60he20ZgDMxNENziA7lDjqAqVHBUDhojfZUAZVXE zlgErTE0maXK6TUpL3BIMjvg+pI= -----END CERTIFICATE-----Generated at Tue May 12 22:53:29 2026 by rpki-client