$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/0/AS131150.roa File: AS131150.roa (raw, json) Hash identifier: Lmloz8LiIV8pjh8sGmz95zyicNGp9fS97nBLBQY/HWc= Subject key identifier: F3:E4:F0:9A:01:C2:11:4E:C5:61:61:74:9F:B4:67:2E:36:EB:A5:8D Certificate issuer: /CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD Certificate serial: 51257EE60B8ADAFE3560437331A7570300CA823F Authority key identifier: 6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/0/AS131150.roa Signing time: Mon 11 May 2026 21:01:45 +0000 ROA not before: Mon 11 May 2026 20:56:45 +0000 ROA not after: Mon 10 May 2027 21:01:45 +0000 asID: 131150 IP address blocks: 120.119.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:25:7e:e6:0b:8a:da:fe:35:60:43:73:31:a7:57:03:00:ca:82:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD Validity Not Before: May 11 20:56:45 2026 GMT Not After : May 10 21:01:45 2027 GMT Subject: CN=F3E4F09A01C2114EC56161749FB4672E36EBA58D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:b7:f5:b5:81:24:38:9f:c2:f1:e0:08:c1: 6e:0f:11:b9:fb:46:5b:79:70:3d:51:e9:d3:b0:9b: 59:cc:6d:43:e1:40:b8:39:a4:b1:c4:b4:c5:c0:26: 7f:9b:b4:ed:f9:30:e3:16:38:27:8a:df:b2:56:f3: ec:aa:a6:58:2b:0e:87:83:3a:41:85:34:be:c3:ca: cd:4a:4f:c0:b9:17:74:b5:b5:fb:61:86:8b:f6:86: 17:80:b5:3c:a6:51:75:1d:d2:a5:e2:88:ec:e3:55: be:b3:a5:b2:ae:41:44:45:a7:7a:8b:9a:72:8c:5d: 02:9b:f4:7a:d1:93:86:b7:5a:1f:a5:59:db:79:3e: 95:a0:81:bf:7d:d7:65:1e:de:fe:d7:c0:32:f2:dd: 1f:a0:2b:b4:19:0a:aa:76:01:22:34:de:20:cd:c4: e3:ba:65:05:6f:32:f3:69:66:aa:05:05:ac:7e:95: d8:b5:4c:97:25:b4:7f:82:2a:5b:71:19:fb:53:f0: 73:85:bf:69:f7:8f:ec:09:02:f7:ee:73:40:b7:e9: 60:62:4c:de:98:31:6e:60:3c:a2:b0:ed:ee:e8:57: e2:49:4e:64:b6:9e:95:69:9b:53:88:7c:bd:78:94: 27:1e:b2:57:58:57:3e:bd:f0:68:37:f7:f7:a8:5d: 4a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E4:F0:9A:01:C2:11:4E:C5:61:61:74:9F:B4:67:2E:36:EB:A5:8D X509v3 Authority Key Identifier: keyid:6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/0/AS131150.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.119.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7f:bf:29:e6:55:1a:b2:5f:23:e9:76:47:fb:f9:de:f2:25:1a: cf:1c:38:08:0d:05:45:ef:65:a9:89:90:06:80:1e:f5:ce:fe: 03:5c:4a:66:33:31:9b:4d:0b:22:2b:97:70:3a:cb:4b:90:be: 13:ff:aa:e4:2d:fa:2b:fc:a0:b7:4e:74:2c:19:3d:64:ed:62: 21:a0:3b:ea:99:00:fc:3d:54:01:ed:b4:6e:09:7b:88:69:15: 44:3b:75:1d:45:ec:b3:2d:11:ae:2c:78:84:b5:6a:ea:13:62: 1a:14:2e:d6:ee:d6:8a:fd:74:fc:1a:9f:66:a2:9c:0b:5c:ec: d8:94:06:9c:92:b2:c2:84:a9:ab:71:b1:6a:95:a9:97:1d:84: 9d:cb:f2:94:89:69:bd:51:d7:e1:29:42:3b:62:d5:56:c4:e6: 1c:c8:6c:32:0d:36:13:cf:f9:98:60:72:a2:38:52:39:f5:3f: 42:1b:08:91:35:1a:b4:49:20:bd:99:e8:58:47:ba:f0:08:5e: bb:07:b4:e0:66:3f:42:31:5f:21:39:ca:77:f7:92:a3:34:f3: b2:a0:80:a2:9a:80:13:6c:71:be:68:d9:ff:03:61:8f:05:6c: a6:2d:96:b4:a5:90:3b:06:a5:74:b1:b0:08:34:fe:bc:83:3f: c9:8b:87:5c -----BEGIN CERTIFICATE----- MIIEqDCCA5CgAwIBAgIUUSV+5guK2v41YENzMadXAwDKgj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU5QzMyMjY2ODJBRUZBOEQ2N0I4QUM2MDhDQ0NGQzhB MDk2MTBDRDAeFw0yNjA1MTEyMDU2NDVaFw0yNzA1MTAyMTAxNDVaMDMxMTAvBgNV BAMTKEYzRTRGMDlBMDFDMjExNEVDNTYxNjE3NDlGQjQ2NzJFMzZFQkE1OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsTrf1tYEkOJ/C8eAIwW4PEbn7 Rlt5cD1R6dOwm1nMbUPhQLg5pLHEtMXAJn+btO35MOMWOCeK37JW8+yqplgrDoeD OkGFNL7Dys1KT8C5F3S1tfthhov2hheAtTymUXUd0qXiiOzjVb6zpbKuQURFp3qL mnKMXQKb9HrRk4a3Wh+lWdt5PpWggb9912Ue3v7XwDLy3R+gK7QZCqp2ASI03iDN xOO6ZQVvMvNpZqoFBax+ldi1TJcltH+CKltxGftT8HOFv2n3j+wJAvfuc0C36WBi TN6YMW5gPKKw7e7oV+JJTmS2npVpm1OIfL14lCcesldYVz698Gg39/eoXUp7AgMB AAGjggGyMIIBrjAdBgNVHQ4EFgQU8+TwmgHCEU7FYWF0n7RnLjbrpY0wHwYDVR0j BBgwFoAUbpwyJmgq76jWe4rGCMzPyKCWEM0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MC82RTlDMzIyNjY4MkFFRkE4RDY3QjhBQzYwOENDQ0ZDOEEwOTYxMENELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzZFOUMzMjI2NjgyQUVGQThENjdCOEFDNjA4Q0ND RkM4QTA5NjEwQ0QuY2VyME0GCCsGAQUFBwELBEEwPzA9BggrBgEFBQcwC4YxcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8wL0FTMTMxMTUwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIA ATAFAwMAeHcwDQYJKoZIhvcNAQELBQADggEBAH+/KeZVGrJfI+l2R/v53vIlGs8c OAgNBUXvZamJkAaAHvXO/gNcSmYzMZtNCyIrl3A6y0uQvhP/quQt+iv8oLdOdCwZ PWTtYiGgO+qZAPw9VAHttG4Je4hpFUQ7dR1F7LMtEa4seIS1auoTYhoULtbu1or9 dPwan2ainAtc7NiUBpySssKEqatxsWqVqZcdhJ3L8pSJab1R1+EpQjti1VbE5hzI bDINNhPP+ZhgcqI4Ujn1P0IbCJE1GrRJIL2Z6FhHuvAIXrsHtOBmP0IxXyE5ynf3 kqM087KggKKagBNscb5o2f8DYY8FbKYtlrSlkDsGpXSxsAg0/ryDP8mLh1w= -----END CERTIFICATE-----Generated at Tue May 12 23:00:46 2026 by rpki-client