$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e3234382e302f32322d3234203d3e2039393139.roa File: 3139322e37322e3234382e302f32322d3234203d3e2039393139.roa (raw, json) Hash identifier: w2LmOI1eQP3xj9n4sBqRb67lBeJFTEuUVe+BjjWP/g8= Subject key identifier: 8A:85:C5:F7:7B:BE:3E:81:15:F6:A9:D5:AA:19:38:C9:3B:26:D9:6F Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B Certificate serial: 774D93B0A16185BD834EB6D6BB2CAB8C19E171AB Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e3234382e302f32322d3234203d3e2039393139.roa Signing time: Mon 11 May 2026 17:07:41 +0000 ROA not before: Mon 11 May 2026 17:02:41 +0000 ROA not after: Mon 10 May 2027 17:07:41 +0000 asID: 9919 IP address blocks: 192.72.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:4d:93:b0:a1:61:85:bd:83:4e:b6:d6:bb:2c:ab:8c:19:e1:71:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B Validity Not Before: May 11 17:02:41 2026 GMT Not After : May 10 17:07:41 2027 GMT Subject: CN=8A85C5F77BBE3E8115F6A9D5AA1938C93B26D96F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:db:e5:b2:3d:79:4d:ce:f9:c7:1f:26:b0: 5e:6b:f9:97:f5:8c:20:c3:8c:24:56:a6:7f:1c:93: a9:cd:66:c7:9a:8c:72:a1:34:0c:b9:dc:b4:43:b4: d8:d7:ea:33:51:3b:5e:17:6f:e3:e3:2f:db:97:21: 0a:b0:7c:27:52:35:88:2c:8a:d9:05:0a:f0:b9:db: 36:31:62:06:65:1e:32:79:84:e6:44:e3:50:45:d1: df:9a:ee:17:5d:cc:00:e4:1d:31:9e:b7:64:0d:12: f2:03:4b:73:fe:39:41:b9:35:9f:22:a2:f6:b9:31: 9f:04:81:a8:68:d7:c5:43:82:df:e2:c2:cd:97:7e: e8:ed:42:e1:ae:e9:5c:82:3a:81:f4:11:0b:0e:89: 1d:6a:5d:72:40:91:96:d6:6d:86:a5:1f:85:1f:76: b7:af:a2:9d:c8:a5:61:e2:92:7e:be:fb:f7:7b:c3: d1:c2:3e:47:0d:f8:81:d3:5b:4b:7e:7c:21:08:7d: 75:aa:f3:f9:2a:1e:ca:c9:f2:a8:96:34:ba:09:0f: 90:9c:e7:2e:21:c9:31:3c:f4:0e:df:41:c0:68:8d: 9c:c3:f5:8c:ab:7d:93:0f:c3:fd:dd:4b:6e:30:cb: 26:de:ce:a4:07:08:e6:c4:4f:bc:25:c1:47:05:81: b5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:85:C5:F7:7B:BE:3E:81:15:F6:A9:D5:AA:19:38:C9:3B:26:D9:6F X509v3 Authority Key Identifier: keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e3234382e302f32322d3234203d3e2039393139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.72.248.0/22 Signature Algorithm: sha256WithRSAEncryption 90:37:4f:a5:75:40:4b:08:2e:25:ef:05:0f:88:df:b8:fa:97: 98:dd:3c:a7:f3:35:df:31:19:75:9f:f9:2b:10:b0:cb:01:bd: d0:de:d2:de:b7:63:91:09:2d:5a:14:b7:85:06:bc:8b:3c:ac: 56:b7:fc:a8:f8:27:5b:f6:83:73:0f:1d:96:fc:c6:3c:67:36: 11:42:60:cd:9b:33:6a:3f:90:7c:4c:c6:61:b6:bf:a0:62:2b: 10:89:92:01:8e:23:bb:eb:8f:56:5b:e3:ac:6d:5e:8b:58:4d: 46:3c:2f:33:f3:1c:c9:b9:f6:f7:b2:f7:21:a4:55:85:50:eb: c8:a0:45:e0:87:ca:c2:ed:ae:bc:c1:d5:74:5c:29:ca:20:51: 88:07:16:f1:f1:93:e5:cb:56:c3:75:bc:45:6f:75:e0:3c:5c: 90:ee:7f:3e:9f:78:ff:d4:d6:56:ca:37:6b:2e:22:83:99:f6: 7a:9b:c0:be:2b:13:a3:99:e4:62:1d:d1:08:91:37:22:1b:bb: 8c:e0:db:ad:81:a6:7d:b1:0b:51:5c:24:b9:09:d5:a3:d5:f2: 92:19:9a:95:11:66:08:02:87:83:54:19:cf:be:f3:86:6c:8b: ac:ab:b3:ad:33:1f:7c:45:c8:4e:af:85:00:b2:6a:43:32:02: ee:15:da:4d -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUd02TsKFhhb2DTrbWuyyrjBnhcaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4ODU5 NjEyQzczQjAeFw0yNjA1MTExNzAyNDFaFw0yNzA1MTAxNzA3NDFaMDMxMTAvBgNV BAMTKDhBODVDNUY3N0JCRTNFODExNUY2QTlENUFBMTkzOEM5M0IyNkQ5NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BNvlsj15Tc75xx8msF5r+Zf1 jCDDjCRWpn8ck6nNZseajHKhNAy53LRDtNjX6jNRO14Xb+PjL9uXIQqwfCdSNYgs itkFCvC52zYxYgZlHjJ5hOZE41BF0d+a7hddzADkHTGet2QNEvIDS3P+OUG5NZ8i ova5MZ8Egaho18VDgt/iws2XfujtQuGu6VyCOoH0EQsOiR1qXXJAkZbWbYalH4Uf drevop3IpWHikn6++/d7w9HCPkcN+IHTW0t+fCEIfXWq8/kqHsrJ8qiWNLoJD5Cc 5y4hyTE89A7fQcBojZzD9YyrfZMPw/3dS24wyybezqQHCObET7wlwUcFgbUVAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUioXF93u+PoEV9qnVqhk4yTsm2W8wHwYDVR0j BBgwFoAU1cmQFtAe3eCk1Hw8lI7ohZYSxzswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8x L0Q1Qzk5MDE2RDAxRURERTBBNEQ0N0MzQzk0OEVFODg1OTYxMkM3M0IuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4 ODU5NjEyQzczQi5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMS8zMTM5MzIyZTM3MzIyZTMy MzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM5MzkzMTM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC wEj4MA0GCSqGSIb3DQEBCwUAA4IBAQCQN0+ldUBLCC4l7wUPiN+4+peY3Tyn8zXf MRl1n/krELDLAb3Q3tLet2ORCS1aFLeFBryLPKxWt/yo+Cdb9oNzDx2W/MY8ZzYR QmDNmzNqP5B8TMZhtr+gYisQiZIBjiO7649WW+OsbV6LWE1GPC8z8xzJufb3svch pFWFUOvIoEXgh8rC7a68wdV0XCnKIFGIBxbx8ZPly1bDdbxFb3XgPFyQ7n8+n3j/ 1NZWyjdrLiKDmfZ6m8C+KxOjmeRiHdEIkTciG7uM4NutgaZ9sQtRXCS5CdWj1fKS GZqVEWYIAoeDVBnPvvOGbIusq7OtMx98RchOr4UAsmpDMgLuFdpN -----END CERTIFICATE-----Generated at Wed May 13 08:28:52 2026 by rpki-client