$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e33322e302f31392d3234203d3e2039393139.roa File: 3139322e37322e33322e302f31392d3234203d3e2039393139.roa (raw, json) Hash identifier: IdXpC8VBeG7nz0JfgL+likpQtKVBBBXtQNRSvEXG1d0= Subject key identifier: 84:8F:63:C0:A2:18:7A:FC:7E:4B:0D:B6:48:52:83:9B:88:E5:7C:90 Certificate issuer: /CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B Certificate serial: 22C8C78EC523E0A729AC0E155B2C6CABB3A06C0C Authority key identifier: D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e33322e302f31392d3234203d3e2039393139.roa Signing time: Mon 11 May 2026 17:19:24 +0000 ROA not before: Mon 11 May 2026 17:14:24 +0000 ROA not after: Mon 10 May 2027 17:19:24 +0000 asID: 9919 IP address blocks: 192.72.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c8:c7:8e:c5:23:e0:a7:29:ac:0e:15:5b:2c:6c:ab:b3:a0:6c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C99016D01EDDE0A4D47C3C948EE8859612C73B Validity Not Before: May 11 17:14:24 2026 GMT Not After : May 10 17:19:24 2027 GMT Subject: CN=848F63C0A2187AFC7E4B0DB64852839B88E57C90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:67:b2:6c:3e:33:84:a7:d9:03:a0:dc:2e:a8: 16:4b:b6:30:73:2a:fd:d5:21:f4:5e:89:6b:69:d6: 47:fd:49:d4:6d:c4:68:e5:b7:55:29:30:bd:09:b2: 4e:df:a9:29:98:9f:a6:7a:68:78:b0:d5:96:9e:cb: 9b:21:30:a6:86:7c:cd:fd:ac:73:91:82:d2:e1:d9: 19:63:a2:6a:19:89:b3:f6:19:61:fd:e3:f0:5b:b6: 4e:b8:b9:a2:df:3b:d8:7e:5b:c3:bd:fc:38:6f:63: 7c:3d:cc:ca:72:3d:8a:94:45:0f:4e:ce:4c:bd:f7: 8b:43:78:5e:c7:df:8e:12:9f:6f:43:fa:ec:99:a2: d7:b8:5a:21:d2:eb:5e:e6:03:a0:d8:54:cb:8c:0c: b6:89:ae:8e:08:de:ef:40:b0:38:36:9e:41:67:96: 0b:13:80:2c:8b:52:e5:82:e6:2c:2f:8f:c7:de:0c: e1:8c:fb:66:aa:de:10:da:bf:6f:de:18:c0:1c:d0: db:70:7a:a3:6b:63:48:d3:5a:8e:7a:cf:b8:b0:1a: de:1c:46:ff:75:cf:b1:61:df:53:ca:ca:e6:ed:93: b9:75:ee:d6:8a:76:93:9d:e1:9e:6a:0f:09:dd:b3: ba:17:5a:02:ef:1f:77:61:d0:cf:1f:c0:f6:e1:c7: cc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8F:63:C0:A2:18:7A:FC:7E:4B:0D:B6:48:52:83:9B:88:E5:7C:90 X509v3 Authority Key Identifier: keyid:D5:C9:90:16:D0:1E:DD:E0:A4:D4:7C:3C:94:8E:E8:85:96:12:C7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D5C99016D01EDDE0A4D47C3C948EE8859612C73B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/1/3139322e37322e33322e302f31392d3234203d3e2039393139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.72.32.0/19 Signature Algorithm: sha256WithRSAEncryption 20:f7:84:40:3f:5c:6e:11:a0:8b:af:dc:de:3f:42:7a:8c:a0: fb:76:35:1f:39:17:fc:4b:c2:a7:8f:e1:76:69:c0:14:90:6b: dd:29:81:a3:98:d7:2d:66:eb:c7:8e:4d:7f:37:a6:f7:da:10: 69:27:fa:15:48:d0:25:67:a0:24:2f:07:99:c3:cc:63:f4:b6: cd:10:0e:35:12:1a:fe:c9:aa:23:1c:63:b7:f9:28:2e:2b:4d: 18:17:0f:d7:86:07:9e:ac:a0:e5:ee:17:76:92:91:5b:a3:25: 86:a2:1b:3b:3d:2f:fb:ff:7e:b1:52:a7:db:4b:63:ec:d1:8a: 70:92:e0:2b:ff:a8:83:55:2d:df:2a:b2:61:7d:af:35:dc:79: 6a:71:47:0e:b9:0b:d7:f9:77:a9:a0:7c:65:e1:36:39:4a:d1: 4b:e2:f2:c3:ba:cb:1a:10:0a:10:5c:d7:64:be:43:b0:05:9b: 91:c6:76:ea:0e:9f:62:7a:ef:f8:00:f3:76:f5:b0:54:a1:d8: 73:c1:04:6c:ca:22:d6:f0:2a:d9:49:8b:b9:c7:85:d0:0c:9f: ca:87:aa:1a:23:da:0b:cf:78:23:25:73:68:10:81:57:05:e8: 1d:6e:a0:fc:6a:c8:16:e5:c4:3e:39:d0:13:52:e6:c1:bf:56: 08:ed:3f:cc -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUIsjHjsUj4KcprA4VWyxsq7OgbAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4ODU5 NjEyQzczQjAeFw0yNjA1MTExNzE0MjRaFw0yNzA1MTAxNzE5MjRaMDMxMTAvBgNV BAMTKDg0OEY2M0MwQTIxODdBRkM3RTRCMERCNjQ4NTI4MzlCODhFNTdDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZ7JsPjOEp9kDoNwuqBZLtjBz Kv3VIfReiWtp1kf9SdRtxGjlt1UpML0Jsk7fqSmYn6Z6aHiw1Zaey5shMKaGfM39 rHORgtLh2RljomoZibP2GWH94/Bbtk64uaLfO9h+W8O9/DhvY3w9zMpyPYqURQ9O zky994tDeF7H344Sn29D+uyZote4WiHS617mA6DYVMuMDLaJro4I3u9AsDg2nkFn lgsTgCyLUuWC5iwvj8feDOGM+2aq3hDav2/eGMAc0NtweqNrY0jTWo56z7iwGt4c Rv91z7Fh31PKyubtk7l17taKdpOd4Z5qDwnds7oXWgLvH3dh0M8fwPbhx8ylAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUhI9jwKIYevx+Sw22SFKDm4jlfJAwHwYDVR0j BBgwFoAU1cmQFtAe3eCk1Hw8lI7ohZYSxzswDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8x L0Q1Qzk5MDE2RDAxRURERTBBNEQ0N0MzQzk0OEVFODg1OTYxMkM3M0IuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzAvRDVDOTkwMTZEMDFFRERFMEE0RDQ3QzNDOTQ4RUU4 ODU5NjEyQzczQi5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMS8zMTM5MzIyZTM3MzIyZTMz MzIyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzOTM5MzEzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcBI IDANBgkqhkiG9w0BAQsFAAOCAQEAIPeEQD9cbhGgi6/c3j9Ceoyg+3Y1HzkX/EvC p4/hdmnAFJBr3SmBo5jXLWbrx45Nfzem99oQaSf6FUjQJWegJC8HmcPMY/S2zRAO NRIa/smqIxxjt/koLitNGBcP14YHnqyg5e4XdpKRW6MlhqIbOz0v+/9+sVKn20tj 7NGKcJLgK/+og1Ut3yqyYX2vNdx5anFHDrkL1/l3qaB8ZeE2OUrRS+Lyw7rLGhAK EFzXZL5DsAWbkcZ26g6fYnrv+ADzdvWwVKHYc8EEbMoi1vAq2UmLuceF0Ayfyoeq GiPaC894IyVzaBCBVwXoHW6g/GrIFuXEPjnQE1Lmwb9WCO0/zA== -----END CERTIFICATE-----Generated at Wed May 13 04:02:37 2026 by rpki-client