$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e3235322e302f32342d3234203d3e2039393139.roa File: 3139322e37322e3235322e302f32342d3234203d3e2039393139.roa (raw, json) Hash identifier: VBtmPKe5I226J9zWpVQAjkGTwQ8c6xfoJIAIP/bSZoI= Subject key identifier: C9:27:60:CF:7C:6D:B1:AC:49:91:69:32:0C:E0:50:C3:89:D3:84:08 Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B Certificate serial: 49252A40B7566968635679F454922B4E7A709846 Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e3235322e302f32342d3234203d3e2039393139.roa Signing time: Mon 11 May 2026 17:19:22 +0000 ROA not before: Mon 11 May 2026 17:14:22 +0000 ROA not after: Mon 10 May 2027 17:19:22 +0000 asID: 9919 IP address blocks: 192.72.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:25:2a:40:b7:56:69:68:63:56:79:f4:54:92:2b:4e:7a:70:98:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B Validity Not Before: May 11 17:14:22 2026 GMT Not After : May 10 17:19:22 2027 GMT Subject: CN=C92760CF7C6DB1AC499169320CE050C389D38408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:69:d3:eb:55:2f:44:ad:bb:9b:4d:18:3d:03: 8a:cf:c3:b0:de:de:f9:da:a6:30:34:1b:5a:1b:3f: 6e:29:0f:3f:61:64:bb:83:e2:34:9e:74:ea:c2:1a: 27:00:2e:2a:31:e5:0a:90:fb:6f:6c:98:48:2e:5c: 41:d8:3b:17:e2:33:a4:db:e0:e5:2e:3e:3e:23:75: ea:1a:fb:b9:39:82:41:4b:78:8a:fb:25:d3:3e:16: 64:1b:27:09:0e:33:68:fe:59:5f:4f:d8:c8:b6:ff: 81:52:e7:79:2a:49:06:c6:f1:6e:9b:24:5a:ad:5c: a9:fd:6b:38:dd:20:1c:b3:3f:4c:ca:db:80:aa:c0: ae:bf:d4:1c:7a:29:ad:06:a8:94:d9:91:43:c5:a1: 6c:e3:c4:f2:f6:cf:f2:15:11:60:03:0a:34:19:57: d7:43:81:fa:4d:41:0f:9d:4e:29:9f:a0:2a:1c:5f: 03:7b:6c:ee:90:7e:b9:1d:0d:3e:99:17:da:52:ef: 21:31:f2:12:1b:58:00:ef:9d:6b:ad:ed:29:f1:ac: 90:96:09:f4:61:15:55:e6:a4:50:3e:16:24:ab:af: 99:03:b6:83:27:b7:15:0e:19:61:3e:9a:e6:ad:f4: 48:3f:5d:ca:1b:d8:49:ca:4c:49:ea:59:d3:ff:e0: 27:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:27:60:CF:7C:6D:B1:AC:49:91:69:32:0C:E0:50:C3:89:D3:84:08 X509v3 Authority Key Identifier: keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e3235322e302f32342d3234203d3e2039393139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.72.252.0/24 Signature Algorithm: sha256WithRSAEncryption 38:7a:20:e9:cd:3a:b1:27:75:15:6a:76:fe:f7:a6:34:a9:fb: 1e:67:1f:db:76:18:6e:15:22:cd:0b:78:d1:e7:09:ab:a8:88: fb:02:73:9b:56:00:2d:dd:e3:99:30:fa:f0:ed:0d:7d:1b:4a: 44:f9:46:55:12:85:8c:a2:c6:82:fd:8d:ca:82:96:fa:a7:ed: 6f:eb:b6:e4:4e:dd:f5:57:c5:21:e7:ff:af:8f:89:8f:77:09: f3:57:b5:0d:cb:df:cd:ad:54:2a:15:42:5e:5c:9f:fa:38:ae: be:eb:38:c1:bc:cb:a3:90:7a:f6:c5:bf:ac:31:e5:ea:42:70: 0c:f7:03:1f:bd:16:f5:62:64:94:fe:87:e7:16:f4:5b:94:cc: 40:ea:ec:16:ef:e3:82:0d:94:dd:9f:11:9f:c9:a3:14:0b:fb: 8e:0b:1d:be:22:ab:0d:77:e4:f1:0c:7e:1a:4f:a3:14:84:6c: ad:81:7a:cc:c2:9b:65:40:f2:09:7e:0c:aa:88:1b:9e:e3:53: 1c:80:12:b6:48:a0:61:02:9b:c0:f2:22:65:8c:69:31:85:eb: 94:eb:ec:5b:52:aa:5e:4e:19:1e:ab:8e:67:49:8f:ef:23:d5: c9:42:e8:8c:18:28:dd:0f:11:25:19:9c:28:ab:da:8c:1e:ed: 05:39:26:ec -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUSSUqQLdWaWhjVnn0VJIrTnpwmEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4ODU5 NjEyQzczQjAeFw0yNjA1MTExNzE0MjJaFw0yNzA1MTAxNzE5MjJaMDMxMTAvBgNV BAMTKEM5Mjc2MENGN0M2REIxQUM0OTkxNjkzMjBDRTA1MEMzODlEMzg0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeadPrVS9ErbubTRg9A4rPw7De 3vnapjA0G1obP24pDz9hZLuD4jSedOrCGicALiox5QqQ+29smEguXEHYOxfiM6Tb 4OUuPj4jdeoa+7k5gkFLeIr7JdM+FmQbJwkOM2j+WV9P2Mi2/4FS53kqSQbG8W6b JFqtXKn9azjdIByzP0zK24CqwK6/1Bx6Ka0GqJTZkUPFoWzjxPL2z/IVEWADCjQZ V9dDgfpNQQ+dTimfoCocXwN7bO6QfrkdDT6ZF9pS7yEx8hIbWADvnWut7SnxrJCW CfRhFVXmpFA+FiSrr5kDtoMntxUOGWE+muat9Eg/Xcob2EnKTEnqWdP/4CdvAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUySdgz3xtsaxJkWkyDOBQw4nThAgwHwYDVR0j BBgwFoAU1cmQFtAe3eCk1Hw8lI7ohZYSxzswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8x L0Q1Qzk5MDE2RDAxRURERTBBNEQ0N0MzQzk0OEVFODg1OTYxMkM3M0IuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4 ODU5NjEyQzczQi5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMS8zMTM5MzIyZTM3MzIyZTMy MzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzkzMTM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA wEj8MA0GCSqGSIb3DQEBCwUAA4IBAQA4eiDpzTqxJ3UVanb+96Y0qfseZx/bdhhu FSLNC3jR5wmrqIj7AnObVgAt3eOZMPrw7Q19G0pE+UZVEoWMosaC/Y3Kgpb6p+1v 67bkTt31V8Uh5/+vj4mPdwnzV7UNy9/NrVQqFUJeXJ/6OK6+6zjBvMujkHr2xb+s MeXqQnAM9wMfvRb1YmSU/ofnFvRblMxA6uwW7+OCDZTdnxGfyaMUC/uOCx2+IqsN d+TxDH4aT6MUhGytgXrMwptlQPIJfgyqiBue41McgBK2SKBhApvA8iJljGkxheuU 6+xbUqpeThkeq45nSY/vI9XJQuiMGCjdDxElGZwoq9qMHu0FOSbs -----END CERTIFICATE-----Generated at Wed May 13 05:50:13 2026 by rpki-client