$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234372e302f32342d3234203d3e203134383734.roa File: 3138372e37392e3234372e302f32342d3234203d3e203134383734.roa (raw, json) Hash identifier: xrdOBfPyCEULsjixsbr/Px/rQubD5zMfCzYg1CD5bIk= Subject key identifier: 7E:E5:ED:CF:59:E2:F8:44:84:FF:76:F7:8E:98:99:79:0B:9C:2B:AB Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 2CBBC8137C87FEC1B2F7F28C13AAB1490B69050B Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234372e302f32342d3234203d3e203134383734.roa Signing time: Thu 16 Jul 2026 12:43:48 +0000 ROA not before: Thu 16 Jul 2026 12:38:48 +0000 ROA not after: Thu 15 Jul 2027 12:43:48 +0000 asID: 14874 IP address blocks: 187.79.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:bb:c8:13:7c:87:fe:c1:b2:f7:f2:8c:13:aa:b1:49:0b:69:05:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Jul 16 12:38:48 2026 GMT Not After : Jul 15 12:43:48 2027 GMT Subject: CN=7EE5EDCF59E2F84484FF76F78E9899790B9C2BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dd:23:63:33:f9:02:11:dd:cb:97:6d:27:5b: 9a:34:b6:49:ba:e0:1e:06:1f:00:10:0d:c4:f5:26: 85:24:90:6d:2f:f2:b7:aa:e0:6d:97:01:bf:f6:d6: c9:63:77:f9:62:42:ce:33:05:65:0f:23:82:41:db: 94:8a:fb:e2:ab:44:9b:ff:51:26:19:e1:12:ac:2d: 30:08:a0:ff:67:52:d8:16:ab:7e:fd:5a:6d:27:ab: 31:55:0a:45:7e:4d:1f:2a:68:98:98:c2:e4:d4:3a: 8e:d1:7c:4e:76:48:18:d4:08:3b:e3:47:38:65:e4: ef:43:54:99:35:5b:d9:15:fe:a4:09:b6:20:a7:c4: 29:77:f0:3d:27:db:a2:6f:75:09:2b:06:89:ba:16: 9e:3e:7a:7e:a8:2b:2c:65:b0:22:3f:77:6e:c0:f9: c5:19:5e:1e:e8:7f:a2:60:39:7b:61:0c:35:00:1d: 61:30:c0:29:ad:69:cb:16:a7:d5:aa:90:b0:84:58: 18:88:05:45:76:42:ce:e4:de:0e:8c:2b:66:8c:f6: 6f:16:89:56:bf:c4:6b:09:5a:5e:33:9b:66:59:fb: 79:5b:98:fd:48:19:68:35:56:a2:73:75:e3:0b:a1: ef:03:2e:8f:9a:fb:48:4c:95:bb:57:52:86:e4:c1: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E5:ED:CF:59:E2:F8:44:84:FF:76:F7:8E:98:99:79:0B:9C:2B:AB X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234372e302f32342d3234203d3e203134383734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.79.247.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:e8:5e:a6:41:ec:2d:07:69:ea:ea:f8:ed:ac:f9:a2:2d:a2: 16:dd:f8:ae:fb:89:5e:f1:08:9f:91:40:dd:9a:ad:04:48:06: ae:dc:3d:19:f3:da:37:e2:fc:d9:9d:bc:2f:5d:80:2e:8a:66: 62:ad:1d:18:96:bf:c1:c1:56:7a:d1:9c:4e:e0:17:fc:41:d5: ca:48:87:38:31:dc:62:0a:eb:a2:2e:94:75:4c:60:de:25:10: 5d:a8:17:20:93:6e:f2:07:7a:eb:d0:31:fc:ed:4b:2f:45:6f: 23:90:df:04:5a:5b:b3:db:91:6a:f1:61:88:38:3c:96:d2:00: a6:ef:d9:61:72:90:f4:4f:fe:2d:43:d0:82:13:d0:65:70:5b: 04:d6:16:2b:f4:0d:75:d0:05:a2:17:d2:09:2a:15:02:8b:db: 8f:16:2b:65:0c:f9:27:33:ff:0f:01:12:bd:08:9d:a6:ae:59: 82:6f:8e:ab:90:27:3a:c3:9e:03:39:16:80:b6:54:00:a7:c9: 0a:f1:fe:05:b0:f3:cc:73:b7:64:56:de:c4:8e:7c:85:28:5b: 75:9c:9b:6b:d3:74:81:da:55:f0:53:a6:45:15:f5:63:bd:9d: 72:32:b8:73:25:b8:71:ca:b9:19:79:a4:bc:a6:1a:73:9d:4a: 5a:f1:07:d4 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIULLvIE3yH/sGy9/KME6qxSQtpBQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjA3MTYxMjM4NDhaFw0yNzA3MTUxMjQzNDhaMDMxMTAvBgNV BAMTKDdFRTVFRENGNTlFMkY4NDQ4NEZGNzZGNzhFOTg5OTc5MEI5QzJCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3SNjM/kCEd3Ll20nW5o0tkm6 4B4GHwAQDcT1JoUkkG0v8req4G2XAb/21sljd/liQs4zBWUPI4JB25SK++KrRJv/ USYZ4RKsLTAIoP9nUtgWq379Wm0nqzFVCkV+TR8qaJiYwuTUOo7RfE52SBjUCDvj Rzhl5O9DVJk1W9kV/qQJtiCnxCl38D0n26JvdQkrBom6Fp4+en6oKyxlsCI/d27A +cUZXh7of6JgOXthDDUAHWEwwCmtacsWp9WqkLCEWBiIBUV2Qs7k3g6MK2aM9m8W iVa/xGsJWl4zm2ZZ+3lbmP1IGWg1VqJzdeMLoe8DLo+a+0hMlbtXUobkwbhTAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUfuXtz1ni+ESE/3b3jpiZeQucK6swHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvMzEzODM3MmUzNzM5MmUzMjM0 MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzgzNzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA u0/3MA0GCSqGSIb3DQEBCwUAA4IBAQAr6F6mQewtB2nq6vjtrPmiLaIW3fiu+4le 8QifkUDdmq0ESAau3D0Z89o34vzZnbwvXYAuimZirR0Ylr/BwVZ60ZxO4Bf8QdXK SIc4MdxiCuuiLpR1TGDeJRBdqBcgk27yB3rr0DH87UsvRW8jkN8EWluz25Fq8WGI ODyW0gCm79lhcpD0T/4tQ9CCE9BlcFsE1hYr9A110AWiF9IJKhUCi9uPFitlDPkn M/8PARK9CJ2mrlmCb46rkCc6w54DORaAtlQAp8kK8f4FsPPMc7dkVt7EjnyFKFt1 nJtr03SB2lXwU6ZFFfVjvZ1yMrhzJbhxyrkZeaS8phpznUpa8QfU -----END CERTIFICATE-----Generated at Fri Jul 24 10:20:41 2026 by rpki-client