$ rpki-client -vvf rpkica.twnic.tw/rpki/NEBULAX/0/3130332e3135382e3138362e302f32342d3234203d3e203138303431.roa File: 3130332e3135382e3138362e302f32342d3234203d3e203138303431.roa (raw, json) Hash identifier: k/cF66xPcsmZ1x0DE1Ndr3+3JZ48QVlyjQhQ8TgIR4A= Subject key identifier: 5B:EE:5F:EF:20:0F:50:DD:C0:57:6F:2C:82:4E:6D:3C:28:00:D9:EE Certificate issuer: /CN=5677B1A39333120442A665B3D25D187209211BAE Certificate serial: 2C8EAB935B6F517DBB5FF9BD1E0B90A54EF169A7 Authority key identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/3130332e3135382e3138362e302f32342d3234203d3e203138303431.roa Signing time: Mon 11 May 2026 17:26:33 +0000 ROA not before: Mon 11 May 2026 17:21:33 +0000 ROA not after: Mon 10 May 2027 17:26:33 +0000 asID: 18041 IP address blocks: 103.158.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:8e:ab:93:5b:6f:51:7d:bb:5f:f9:bd:1e:0b:90:a5:4e:f1:69:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5677B1A39333120442A665B3D25D187209211BAE Validity Not Before: May 11 17:21:33 2026 GMT Not After : May 10 17:26:33 2027 GMT Subject: CN=5BEE5FEF200F50DDC0576F2C824E6D3C2800D9EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:a4:1b:86:82:01:36:70:d9:18:5c:61:99: f9:cd:44:10:03:1e:96:02:03:ce:27:06:f5:d5:cc: 5f:5b:61:7a:82:29:3c:ed:9e:65:b4:0a:76:1c:57: 2b:96:82:91:0d:00:f5:7c:42:a4:91:61:3b:2d:91: 12:e3:da:2a:a1:10:ec:d8:92:c5:a5:7d:7b:2b:4e: b9:3d:d6:e7:54:3a:c3:b6:11:1e:4b:e4:cb:dd:3d: 8e:6a:ca:73:1d:dc:28:31:3c:b9:46:81:18:7e:9b: b5:5e:7c:6f:7a:b8:2c:44:c9:45:95:fc:58:1a:5f: 6c:57:17:7e:21:70:d9:d1:00:bc:0f:b9:0a:d3:16: a6:df:f6:98:85:f4:e5:89:16:a3:e3:b7:d0:c1:20: ec:61:4b:f9:e4:24:57:ee:88:24:3a:8c:2d:24:1e: a9:79:95:90:7f:c7:37:f5:9b:2b:a5:fd:5c:c5:04: d9:07:9c:25:9c:3d:a9:7b:f6:a9:4c:26:58:36:cf: fe:d1:10:92:fc:33:15:00:14:f9:e8:74:cf:b3:a9: c5:93:64:6d:de:f5:70:a6:15:92:72:bc:8e:5b:25: af:c3:ee:8b:b5:f9:61:36:45:65:c2:67:24:98:5a: 68:a1:bf:eb:e3:e8:97:85:4a:52:95:5e:24:c2:40: 42:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EE:5F:EF:20:0F:50:DD:C0:57:6F:2C:82:4E:6D:3C:28:00:D9:EE X509v3 Authority Key Identifier: keyid:56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/3130332e3135382e3138362e302f32342d3234203d3e203138303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.186.0/24 Signature Algorithm: sha256WithRSAEncryption 09:20:c3:a3:1c:e7:5b:42:62:c7:3d:f3:9d:6c:01:05:e4:f9: e8:98:ad:23:14:2b:b7:4d:d4:3c:9b:c4:60:86:b7:a8:c4:ad: 1a:aa:e0:a9:2f:18:01:1b:99:83:b1:e7:5f:d6:48:fe:3d:13: 19:44:f4:f9:dd:89:28:22:15:79:da:3a:52:03:f0:ef:5d:f9: 81:c1:3c:fd:5f:76:30:a8:f7:11:c0:e4:18:5d:21:17:6b:d8: 6a:db:2a:12:c9:ed:21:7a:7a:be:a3:8b:ff:68:cb:d7:84:2e: 29:94:63:cf:90:ae:34:2b:c4:50:76:94:c9:97:4b:8e:ad:62: 15:8d:d1:e7:d6:13:25:07:0f:b6:17:43:de:6e:6e:30:86:94: b1:ab:db:e9:3a:68:e7:9c:40:ce:c6:a4:84:a9:6e:b5:a7:46: 23:fd:e3:d2:5b:fc:07:0b:d0:c4:88:bd:c5:8b:3b:1f:b9:5d: 14:79:0e:51:9c:c5:4c:2d:88:79:e9:4a:9b:5c:6d:81:97:66: 05:82:e3:90:2d:79:13:8a:0c:90:95:da:73:84:1f:45:44:e8: 2d:40:8d:ac:49:00:81:31:32:35:68:bb:ad:8e:cf:fd:3a:b6: 91:bc:58:4c:41:30:59:fb:0f:53:48:a0:6f:f8:32:4c:27:b4: e4:6b:10:21 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIULI6rk1tvUX27X/m9HguQpU7xaacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1RDE4NzIw OTIxMUJBRTAeFw0yNjA1MTExNzIxMzNaFw0yNzA1MTAxNzI2MzNaMDMxMTAvBgNV BAMTKDVCRUU1RkVGMjAwRjUwRERDMDU3NkYyQzgyNEU2RDNDMjgwMEQ5RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1waQbhoIBNnDZGFxhmfnNRBAD HpYCA84nBvXVzF9bYXqCKTztnmW0CnYcVyuWgpENAPV8QqSRYTstkRLj2iqhEOzY ksWlfXsrTrk91udUOsO2ER5L5MvdPY5qynMd3CgxPLlGgRh+m7VefG96uCxEyUWV /FgaX2xXF34hcNnRALwPuQrTFqbf9piF9OWJFqPjt9DBIOxhS/nkJFfuiCQ6jC0k Hql5lZB/xzf1myul/VzFBNkHnCWcPal79qlMJlg2z/7REJL8MxUAFPnodM+zqcWT ZG3e9XCmFZJyvI5bJa/D7ou1+WE2RWXCZySYWmihv+vj6JeFSlKVXiTCQEI3AgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUW+5f7yAPUN3AV28sgk5tPCgA2e4wHwYDVR0j BBgwFoAUVnexo5MzEgRCpmWz0l0YcgkhG64wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVCVUxB WC8wLzU2NzdCMUEzOTMzMzEyMDQ0MkE2NjVCM0QyNUQxODcyMDkyMTFCQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1 RDE4NzIwOTIxMUJBRS5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FQlVMQVgvMC8zMTMwMzMyZTMx MzUzODJlMzEzODM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMwMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGeeujANBgkqhkiG9w0BAQsFAAOCAQEACSDDoxznW0Jixz3znWwB BeT56JitIxQrt03UPJvEYIa3qMStGqrgqS8YARuZg7HnX9ZI/j0TGUT0+d2JKCIV edo6UgPw7135gcE8/V92MKj3EcDkGF0hF2vYatsqEsntIXp6vqOL/2jL14QuKZRj z5CuNCvEUHaUyZdLjq1iFY3R59YTJQcPthdD3m5uMIaUsavb6Tpo55xAzsakhKlu tadGI/3j0lv8BwvQxIi9xYs7H7ldFHkOUZzFTC2IeelKm1xtgZdmBYLjkC15E4oM kJXac4QfRUToLUCNrEkAgTEyNWi7rY7P/Tq2kbxYTEEwWfsPU0igb/gyTCe05GsQ IQ== -----END CERTIFICATE-----Generated at Wed May 13 06:55:43 2026 by rpki-client