$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e3232382e302f32322d3234203d3e203138343139.roa File: 3135302e3132392e3232382e302f32322d3234203d3e203138343139.roa (raw, json) Hash identifier: L4OqGHOHvoiFD4en8FR1S9taD+sTsqdfhZvgnUI17GY= Subject key identifier: FD:95:2C:AB:43:76:C3:F0:E6:E7:BE:57:55:17:E5:04:B8:56:91:5E Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F Certificate serial: 133B3B1BC3FBAE3F5B7B72D063931C4BAD5262FC Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e3232382e302f32322d3234203d3e203138343139.roa Signing time: Tue 08 Sep 2026 07:44:09 +0000 ROA not before: Tue 08 Sep 2026 07:39:09 +0000 ROA not after: Tue 07 Sep 2027 07:44:09 +0000 asID: 18419 IP address blocks: 150.129.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 16:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:3b:3b:1b:c3:fb:ae:3f:5b:7b:72:d0:63:93:1c:4b:ad:52:62:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F Validity Not Before: Sep 8 07:39:09 2026 GMT Not After : Sep 7 07:44:09 2027 GMT Subject: CN=FD952CAB4376C3F0E6E7BE575517E504B856915E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3a:06:62:ea:6f:3b:53:ef:1f:a5:ed:47:c6: 4f:67:22:32:90:2d:4b:cc:01:5c:3c:c5:45:1a:d2: e9:a1:8e:60:5d:f3:3f:97:1a:2a:59:d8:c4:e2:08: 83:84:e6:eb:fc:e6:66:46:a1:fe:28:63:66:81:c8: 84:e9:6a:67:ce:a6:7c:07:01:17:fe:9a:28:0f:14: cc:34:87:d2:55:7d:53:51:66:7b:18:a8:90:b9:43: ff:bf:e0:a6:cf:05:1d:17:a6:ba:dd:e2:a1:1e:1f: 42:2c:7b:9b:fe:5c:d8:dd:dd:3e:ab:f4:11:c5:03: 66:2b:a2:3f:d4:15:1e:13:21:39:6b:77:20:79:b3: b0:74:81:94:be:98:cf:02:4e:36:0a:75:7c:c4:af: b6:ed:10:e3:68:25:1d:fc:d8:76:c5:ec:6d:8d:c2: f8:10:69:75:b6:18:3c:0a:37:a8:b9:33:bc:a5:95: f9:9f:0f:73:fa:46:d7:02:53:17:a9:50:80:18:13: f5:42:8f:81:db:73:8f:bf:62:33:bd:6c:87:c6:40: e9:32:28:f1:21:0d:f5:73:05:e9:15:11:b8:8f:23: 1b:94:ff:a2:7c:3d:28:46:2e:bb:02:f4:60:7a:f7: af:d7:79:0a:8d:51:85:8d:e3:fb:d2:d6:fc:b9:13: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:95:2C:AB:43:76:C3:F0:E6:E7:BE:57:55:17:E5:04:B8:56:91:5E X509v3 Authority Key Identifier: keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e3232382e302f32322d3234203d3e203138343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.129.228.0/22 Signature Algorithm: sha256WithRSAEncryption a1:fa:ff:1d:e6:06:23:c6:df:e7:ac:7f:cd:97:46:7b:f3:19: 23:a4:53:96:0f:16:b2:25:3f:a4:50:68:65:ac:30:c8:08:80: d3:5b:ed:36:a7:26:a7:34:84:26:64:9f:1b:ff:f7:c5:ff:6c: 8c:83:a0:07:7f:bf:2f:eb:12:6b:d6:50:4e:30:30:da:ac:ac: 65:f0:12:85:65:0c:0a:8a:0d:12:0e:eb:b7:34:fa:8c:bd:d3: 90:c0:2a:ce:22:af:30:91:e0:d1:ea:38:9a:7a:f3:c7:e6:bc: 82:7c:8a:89:56:ec:31:3a:ca:d1:9d:86:24:e0:95:ce:9c:81: 17:35:2a:52:60:31:ed:a9:0b:42:64:c7:cb:21:52:61:77:72: e6:49:e5:dc:59:7c:8f:80:22:fe:a1:76:ca:c1:dd:f2:42:d2: 3a:1a:f5:11:32:46:fe:d9:04:b9:ea:b2:84:12:ff:a8:77:d6: 1a:d3:8e:63:c5:3f:75:2e:b7:3e:39:36:2c:cc:e0:71:44:96: 62:8e:72:99:4a:61:a7:bc:be:29:c2:7a:42:66:e4:f2:65:6c: 9d:56:47:e8:9c:f0:11:02:cb:e4:bb:52:ce:2a:9f:96:fd:bd: e8:6e:4c:8c:4d:7b:37:b8:f9:05:77:36:7c:b9:6a:4d:a9:75: 9e:83:ea:a8 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEzs7G8P7rj9be3LQY5McS61SYvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx ODA3RjY2RjAeFw0yNjA5MDgwNzM5MDlaFw0yNzA5MDcwNzQ0MDlaMDMxMTAvBgNV BAMTKEZEOTUyQ0FCNDM3NkMzRjBFNkU3QkU1NzU1MTdFNTA0Qjg1NjkxNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEOgZi6m87U+8fpe1Hxk9nIjKQ LUvMAVw8xUUa0umhjmBd8z+XGipZ2MTiCIOE5uv85mZGof4oY2aByITpamfOpnwH ARf+migPFMw0h9JVfVNRZnsYqJC5Q/+/4KbPBR0Xprrd4qEeH0Ise5v+XNjd3T6r 9BHFA2Yroj/UFR4TITlrdyB5s7B0gZS+mM8CTjYKdXzEr7btEONoJR382HbF7G2N wvgQaXW2GDwKN6i5M7yllfmfD3P6RtcCUxepUIAYE/VCj4Hbc4+/YjO9bIfGQOky KPEhDfVzBekVEbiPIxuU/6J8PShGLrsC9GB696/XeQqNUYWN4/vS1vy5E46xAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQU/ZUsq0N2w/Dm575XVRflBLhWkV4wHwYDVR0j BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF OUM3MTgwN0Y2NkYuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMxMzUzMDJlMzEzMjM5 MmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM4MzQzMTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCloHkMA0GCSqGSIb3DQEBCwUAA4IBAQCh+v8d5gYjxt/nrH/Nl0Z78xkj pFOWDxayJT+kUGhlrDDICIDTW+02pyanNIQmZJ8b//fF/2yMg6AHf78v6xJr1lBO MDDarKxl8BKFZQwKig0SDuu3NPqMvdOQwCrOIq8wkeDR6jiaevPH5ryCfIqJVuwx OsrRnYYk4JXOnIEXNSpSYDHtqQtCZMfLIVJhd3LmSeXcWXyPgCL+oXbKwd3yQtI6 GvURMkb+2QS56rKEEv+od9Ya045jxT91Lrc+OTYszOBxRJZijnKZSmGnvL4pwnpC ZuTyZWydVkfonPARAsvku1LOKp+W/b3obkyMTXs3uPkFdzZ8uWpNqXWeg+qo -----END CERTIFICATE-----Generated at Fri Oct 2 12:36:16 2026 by rpki-client