$ rpki-client -vvf rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3234382e302f32312d3234203d3e203338303432.roa File: 3138372e37392e3234382e302f32312d3234203d3e203338303432.roa (raw, json) Hash identifier: /1olUNUta2jWsipkUXWKP+uzfj0Zi5YxacKqhx693kk= Subject key identifier: 6A:B3:1A:F3:76:AC:10:00:8F:E4:FA:73:25:95:97:48:6F:01:BB:58 Certificate issuer: /CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50 Certificate serial: 32985C5DCE1370E6D1F7760F1B71637F05A90739 Authority key identifier: DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3234382e302f32312d3234203d3e203338303432.roa Signing time: Tue 12 May 2026 09:51:22 +0000 ROA not before: Tue 12 May 2026 09:46:22 +0000 ROA not after: Tue 11 May 2027 09:51:22 +0000 asID: 38042 IP address blocks: 187.79.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:98:5c:5d:ce:13:70:e6:d1:f7:76:0f:1b:71:63:7f:05:a9:07:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFAD87735B96E38C5B16450D06F1E3F05D1C0B50 Validity Not Before: May 12 09:46:22 2026 GMT Not After : May 11 09:51:22 2027 GMT Subject: CN=6AB31AF376AC10008FE4FA73259597486F01BB58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:bb:d9:00:d3:86:f3:42:82:e1:ea:50:e8: 3c:7e:59:79:92:5c:40:9b:b0:70:2e:63:cb:9d:54: bf:c6:ed:4c:0f:39:ae:71:70:c4:48:8c:bf:63:7b: a6:ff:af:64:e7:5f:7b:3f:00:5e:1f:c5:88:5b:6d: a9:5a:97:7f:23:ef:90:bd:81:e1:86:35:fe:61:04: a0:fa:e9:20:5e:b8:bd:30:7c:49:93:1d:3b:a7:d9: b7:20:a2:e3:65:e7:c8:d5:1e:98:f8:68:ed:b1:8e: b4:bd:03:e7:62:01:b1:03:61:0e:33:bf:bb:d3:93: 95:59:d2:ae:b8:95:d7:77:10:44:81:86:88:9a:14: ac:87:96:12:60:73:f2:32:2b:d2:ce:23:a3:7f:10: 59:ad:84:4d:5e:28:fb:1d:4a:b9:3e:06:2e:b7:fe: 27:5f:04:26:55:34:b0:3f:8e:84:db:bc:1a:f6:b6: 25:d5:e6:44:2b:a0:91:7d:4f:f7:dd:8b:b9:f9:f1: 9d:5c:ca:94:12:d0:af:1a:e4:af:32:07:c0:a3:39: 51:82:35:40:82:95:5d:08:38:b3:1c:02:77:53:27: 22:60:fa:8f:39:35:e1:c2:d0:aa:90:c9:3a:d8:b9: 2d:e6:86:28:37:2f:4d:c9:24:7e:d7:d4:d7:47:ee: 9f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B3:1A:F3:76:AC:10:00:8F:E4:FA:73:25:95:97:48:6F:01:BB:58 X509v3 Authority Key Identifier: keyid:DF:AD:87:73:5B:96:E3:8C:5B:16:45:0D:06:F1:E3:F0:5D:1C:0B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/1/3138372e37392e3234382e302f32312d3234203d3e203338303432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.79.248.0/21 Signature Algorithm: sha256WithRSAEncryption 64:1e:6c:7c:f0:16:30:4e:90:88:83:01:e5:14:ed:b3:8d:eb: 38:da:03:7f:4b:b9:6e:41:66:62:f1:6d:71:a6:7b:41:81:fb: b4:70:47:2d:3b:5a:38:80:d1:d8:d5:87:82:bb:df:ff:5b:5b: 37:72:ed:79:2d:17:02:f9:c8:bb:38:7e:3f:e2:45:ea:ba:51: 32:1a:bc:46:e9:67:40:2f:7a:20:e6:ff:15:7d:12:15:76:21: 34:a6:66:fb:1a:51:05:18:2c:75:15:01:a4:72:58:37:43:6a: 84:52:b9:05:c5:23:d6:d8:37:b4:e0:e4:a8:eb:5c:92:eb:81: 3a:fd:6c:bd:e0:44:58:f1:fe:ff:70:ac:52:f2:e9:f1:a5:36: 42:27:3e:46:19:e5:6a:36:77:69:f9:99:c3:d0:59:0b:6a:9e: 74:61:89:aa:0c:e6:a7:01:42:90:13:af:99:eb:97:bd:2c:11: 92:48:52:bb:f9:34:57:2f:2c:0e:30:2c:98:dc:be:3f:61:05: f4:57:f5:25:dc:e9:b5:14:89:35:4d:08:09:28:77:e5:49:c1: 97:18:9c:f0:fd:ba:de:20:ad:b7:b3:fd:7b:d9:e4:89:1e:01: ff:c8:60:f6:d9:66:7c:cc:67:2b:de:29:72:31:89:59:ca:5a: 53:9e:30:cd -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUMphcXc4TcObR93YPG3FjfwWpBzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBRDg3NzM1Qjk2RTM4QzVCMTY0NTBEMDZGMUUzRjA1 RDFDMEI1MDAeFw0yNjA1MTIwOTQ2MjJaFw0yNzA1MTEwOTUxMjJaMDMxMTAvBgNV BAMTKDZBQjMxQUYzNzZBQzEwMDA4RkU0RkE3MzI1OTU5NzQ4NkYwMUJCNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4J7vZANOG80KC4epQ6Dx+WXmS XECbsHAuY8udVL/G7UwPOa5xcMRIjL9je6b/r2TnX3s/AF4fxYhbbalal38j75C9 geGGNf5hBKD66SBeuL0wfEmTHTun2bcgouNl58jVHpj4aO2xjrS9A+diAbEDYQ4z v7vTk5VZ0q64ldd3EESBhoiaFKyHlhJgc/IyK9LOI6N/EFmthE1eKPsdSrk+Bi63 /idfBCZVNLA/joTbvBr2tiXV5kQroJF9T/fdi7n58Z1cypQS0K8a5K8yB8CjOVGC NUCClV0IOLMcAndTJyJg+o85NeHC0KqQyTrYuS3mhig3L03JJH7X1NdH7p/hAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUarMa83asEACP5PpzJZWXSG8Bu1gwHwYDVR0j BBgwFoAU362Hc1uW44xbFkUNBvHj8F0cC1AwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U Vy8xL0RGQUQ4NzczNUI5NkUzOEM1QjE2NDUwRDA2RjFFM0YwNUQxQzBCNTAuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzIvREZBRDg3NzM1Qjk2RTM4QzVCMTY0NTBEMDZG MUUzRjA1RDFDMEI1MC5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wtVFcvMS8zMTM4MzcyZTM3 MzkyZTMyMzQzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMzMzgzMDM0MzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAO7T/gwDQYJKoZIhvcNAQELBQADggEBAGQebHzwFjBOkIiDAeUU7bON 6zjaA39LuW5BZmLxbXGme0GB+7RwRy07WjiA0djVh4K73/9bWzdy7XktFwL5yLs4 fj/iReq6UTIavEbpZ0AveiDm/xV9EhV2ITSmZvsaUQUYLHUVAaRyWDdDaoRSuQXF I9bYN7Tg5KjrXJLrgTr9bL3gRFjx/v9wrFLy6fGlNkInPkYZ5Wo2d2n5mcPQWQtq nnRhiaoM5qcBQpATr5nrl70sEZJIUrv5NFcvLA4wLJjcvj9hBfRX9SXc6bUUiTVN CAkod+VJwZcYnPD9ut4grbez/XvZ5IkeAf/IYPbZZnzMZyveKXIxiVnKWlOeMM0= -----END CERTIFICATE-----Generated at Wed May 13 05:55:59 2026 by rpki-client