$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e2034373830.roa File: 323430323a323538303a3a2f33322d3332203d3e2034373830.roa (raw, json) Hash identifier: nxAXU+J3+lv7KKuFPTwdVfXIg9/Ct9RdTZh/ggk/XFw= Subject key identifier: 61:D7:BA:05:C1:E0:31:12:3C:6A:B6:D1:40:58:FE:5F:50:47:B8:F5 Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F Certificate serial: 0D63ED8EF7014AB6C342404D7DAF0FF1C9D908B0 Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e2034373830.roa Signing time: Tue 08 Sep 2026 07:44:05 +0000 ROA not before: Tue 08 Sep 2026 07:39:05 +0000 ROA not after: Tue 07 Sep 2027 07:44:05 +0000 asID: 4780 IP address blocks: 2402:2580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:63:ed:8e:f7:01:4a:b6:c3:42:40:4d:7d:af:0f:f1:c9:d9:08:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F Validity Not Before: Sep 8 07:39:05 2026 GMT Not After : Sep 7 07:44:05 2027 GMT Subject: CN=61D7BA05C1E031123C6AB6D14058FE5F5047B8F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:be:53:87:70:14:8d:e3:75:c9:4f:df:4e:9c: 70:8f:1d:a6:34:b1:7e:49:48:ba:b6:c4:25:5a:e4: 01:73:82:d0:ab:3c:6c:b8:f0:ba:00:3a:59:1c:96: 8f:21:a7:89:7f:c5:a1:5f:b8:d8:4d:f3:76:b4:45: 80:7c:0f:d9:d4:e8:95:80:69:3c:9e:3e:35:cc:3a: 13:7c:2b:9d:d3:8f:62:42:9e:2a:4d:dc:80:22:33: 0e:b6:8c:40:09:fd:20:49:b8:7f:34:34:e3:00:ae: e9:f1:67:fe:51:67:71:1c:6e:b0:58:1c:d3:68:6c: f7:68:8d:5b:f7:52:0e:02:9f:57:d1:0c:56:fa:8f: ee:17:4a:de:23:19:4e:fc:3c:80:bf:75:4d:81:fd: b2:d0:57:47:85:7b:20:c2:5c:d8:80:14:a2:55:63: 02:48:7e:d2:6f:31:ea:9e:ab:9b:ba:db:1e:b7:cf: ec:cb:27:b0:80:8c:e6:c2:dd:87:1f:c1:cc:6d:e7: b4:22:ea:cd:bc:59:2a:7c:10:7d:ec:e7:6c:74:fa: 98:fb:a9:39:35:86:07:2d:8e:da:b3:e9:f4:6e:76: bd:5e:6a:e9:25:45:4b:e5:33:2e:8f:12:5b:24:19: fe:7b:97:36:38:24:6e:37:23:72:b6:48:0c:94:1c: c3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D7:BA:05:C1:E0:31:12:3C:6A:B6:D1:40:58:FE:5F:50:47:B8:F5 X509v3 Authority Key Identifier: keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/323430323a323538303a3a2f33322d3332203d3e2034373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:2580::/32 Signature Algorithm: sha256WithRSAEncryption 19:f2:80:0d:67:9c:82:3c:2b:35:a7:bc:00:31:2f:7c:13:20: 92:7e:aa:dc:1a:72:ea:b2:ba:1b:52:aa:c8:e4:ef:91:c5:b1: d0:82:68:ab:b4:8f:3d:1f:4d:19:a2:6a:e7:3c:5c:28:e0:55: e5:fc:fd:58:0a:51:95:c4:b2:c3:7b:38:1e:93:7b:a3:33:6e: 9b:e1:6b:70:7e:35:2e:6d:e3:2f:3d:fa:8c:62:a5:4a:1a:37: 5a:47:e4:0b:41:b7:fc:24:1d:ab:f7:c6:09:0a:8a:77:ec:cc: bd:06:1d:aa:ab:b5:89:ef:97:88:2c:8d:03:5e:92:eb:a4:a5: 35:5c:94:22:a4:c4:8d:2f:c1:fe:8a:46:b3:d8:0a:3f:61:c4: af:5b:50:b0:19:90:28:50:93:66:eb:29:ef:b2:dc:15:cb:19: b6:71:91:75:34:c0:73:84:78:7e:9d:2e:c2:57:68:58:64:28: 14:46:8e:dd:04:fb:a6:8d:7f:91:e6:56:ca:ff:85:73:da:84: 69:53:49:3f:3c:84:ba:6a:86:d7:64:92:77:ac:a0:8b:0e:26: 9d:66:aa:85:2f:a4:56:d0:18:b4:8c:df:dc:af:76:64:a6:90: 9d:b1:d6:d5:29:f9:86:be:7a:bb:a1:ab:33:84:1a:48:59:c1: 83:05:7c:38 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUDWPtjvcBSrbDQkBNfa8P8cnZCLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx ODA3RjY2RjAeFw0yNjA5MDgwNzM5MDVaFw0yNzA5MDcwNzQ0MDVaMDMxMTAvBgNV BAMTKDYxRDdCQTA1QzFFMDMxMTIzQzZBQjZEMTQwNThGRTVGNTA0N0I4RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6vlOHcBSN43XJT99OnHCPHaY0 sX5JSLq2xCVa5AFzgtCrPGy48LoAOlkclo8hp4l/xaFfuNhN83a0RYB8D9nU6JWA aTyePjXMOhN8K53Tj2JCnipN3IAiMw62jEAJ/SBJuH80NOMArunxZ/5RZ3EcbrBY HNNobPdojVv3Ug4Cn1fRDFb6j+4XSt4jGU78PIC/dU2B/bLQV0eFeyDCXNiAFKJV YwJIftJvMeqeq5u62x63z+zLJ7CAjObC3Ycfwcxt57Qi6s28WSp8EH3s52x0+pj7 qTk1hgctjtqz6fRudr1eauklRUvlMy6PElskGf57lzY4JG43I3K2SAyUHMNTAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUYde6BcHgMRI8arbRQFj+X1BHuPUwHwYDVR0j BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF OUM3MTgwN0Y2NkYuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMyMzQzMDMyM2EzMjM1 MzgzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM0MzczODMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA JAIlgDANBgkqhkiG9w0BAQsFAAOCAQEAGfKADWecgjwrNae8ADEvfBMgkn6q3Bpy 6rK6G1KqyOTvkcWx0IJoq7SPPR9NGaJq5zxcKOBV5fz9WApRlcSyw3s4HpN7ozNu m+FrcH41Lm3jLz36jGKlSho3WkfkC0G3/CQdq/fGCQqKd+zMvQYdqqu1ie+XiCyN A16S66SlNVyUIqTEjS/B/opGs9gKP2HEr1tQsBmQKFCTZusp77LcFcsZtnGRdTTA c4R4fp0uwldoWGQoFEaO3QT7po1/keZWyv+Fc9qEaVNJPzyEumqG12SSd6ygiw4m nWaqhS+kVtAYtIzf3K92ZKaQnbHW1Sn5hr56u6GrM4QaSFnBgwV8OA== -----END CERTIFICATE-----Generated at Thu Sep 24 09:17:50 2026 by rpki-client