$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3131342e302e302f31362d3136203d3e203138303437.roa File: 3134302e3131342e302e302f31362d3136203d3e203138303437.roa (raw, json) Hash identifier: sr/z/qT9KsWBiPLzjtFgiWqwinCi4pu2fPbN8bDcrZY= Subject key identifier: D8:40:5C:F4:D2:9E:BA:F0:1B:3B:FC:52:01:60:06:76:30:5E:50:3D Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 4D85FBA385ABD0E60F59C5FBF4AE5E00F632F839 Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3131342e302e302f31362d3136203d3e203138303437.roa Signing time: Mon 11 May 2026 21:00:29 +0000 ROA not before: Mon 11 May 2026 20:55:29 +0000 ROA not after: Mon 10 May 2027 21:00:29 +0000 asID: 18047 IP address blocks: 140.114.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:85:fb:a3:85:ab:d0:e6:0f:59:c5:fb:f4:ae:5e:00:f6:32:f8:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: May 11 20:55:29 2026 GMT Not After : May 10 21:00:29 2027 GMT Subject: CN=D8405CF4D29EBAF01B3BFC5201600676305E503D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b3:c2:0c:1f:60:63:23:77:78:41:61:44:79: 56:49:92:35:0f:d4:a9:d6:ff:39:56:ad:fe:38:09: b0:8f:61:68:9a:79:61:ae:99:64:64:f5:4d:85:e7: 0f:c9:1a:78:89:59:a2:7c:63:fd:1b:47:2c:06:23: 9b:cf:90:7f:8c:67:03:94:88:ff:2e:b1:02:29:a8: b0:cb:9b:09:93:f8:c3:08:81:89:c8:b0:0e:4e:e1: 34:9d:e2:38:13:bc:16:75:8e:6c:10:ff:54:43:ef: 20:24:c8:e9:af:d6:3a:03:92:2b:1e:c2:68:83:a1: 01:0d:83:3b:ea:ec:0c:36:75:f2:de:c5:a5:eb:be: 61:08:af:89:ef:cf:de:ab:bb:da:d7:d9:da:15:c5: be:44:53:c6:87:92:85:cb:c6:d3:b1:09:81:20:fa: c5:b8:c6:e6:a0:8d:50:cb:30:01:f3:cd:cb:15:10: e8:b8:fb:89:c8:6f:6a:d3:90:24:73:6f:13:c0:01: f7:74:42:0c:54:b2:df:f5:46:32:03:70:64:05:d9: 60:73:11:3b:aa:3a:79:15:a0:f3:be:4c:3a:04:f7: 6f:a9:a7:3f:32:2e:13:c7:ec:b5:90:d5:8d:73:26: 36:c1:45:c7:6d:ee:d8:53:92:83:8b:4a:dd:b9:d8: 1a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:40:5C:F4:D2:9E:BA:F0:1B:3B:FC:52:01:60:06:76:30:5E:50:3D X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3131342e302e302f31362d3136203d3e203138303437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.114.0.0/16 Signature Algorithm: sha256WithRSAEncryption 79:ff:c4:ef:4e:79:e4:3d:50:9c:59:84:c2:b9:12:1f:d6:93: 05:e8:9e:8d:15:6f:d1:8b:d2:c1:72:41:5d:56:75:27:e7:c6: 69:de:59:7f:bb:25:35:d5:53:9f:37:48:65:a7:86:f4:a9:20: 0e:e1:34:cb:29:eb:f6:fc:c3:e5:25:0e:bb:9d:cb:1c:d9:59: 9c:9b:05:7e:f1:66:b9:fc:40:cd:21:42:03:dd:d4:39:e2:e8: df:a5:0e:22:88:1f:4d:b2:97:44:ee:dc:e2:bf:10:da:0b:fb: fb:a5:2a:c0:f8:ca:c8:e0:48:76:ae:b7:36:ec:4b:a2:9c:69: c2:dd:d4:96:28:51:05:7e:3c:56:16:ea:8c:99:ac:09:f8:be: e2:51:2c:13:00:3d:7b:d1:40:c9:5b:51:60:41:b8:65:f3:ce: 3e:1b:f6:9c:02:23:5a:2c:e5:e2:3a:46:d4:23:ee:51:c9:e3: e5:43:a4:05:04:a6:18:cc:b7:05:4c:73:51:b6:60:4f:83:ab: 4d:a4:03:0d:f2:ef:8d:8a:07:9e:38:1c:74:bf:83:e3:a1:2d: cf:9c:ad:f5:e0:59:e4:5c:71:6b:9a:be:f6:05:90:20:4a:54: 79:66:91:aa:2e:81:1f:c2:af:45:ee:07:5e:f9:fe:bb:37:c4: 0a:04:a4:0a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUTYX7o4Wr0OYPWcX79K5eAPYy+DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA1MTEyMDU1MjlaFw0yNzA1MTAyMTAwMjlaMDMxMTAvBgNV BAMTKEQ4NDA1Q0Y0RDI5RUJBRjAxQjNCRkM1MjAxNjAwNjc2MzA1RTUwM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcs8IMH2BjI3d4QWFEeVZJkjUP 1KnW/zlWrf44CbCPYWiaeWGumWRk9U2F5w/JGniJWaJ8Y/0bRywGI5vPkH+MZwOU iP8usQIpqLDLmwmT+MMIgYnIsA5O4TSd4jgTvBZ1jmwQ/1RD7yAkyOmv1joDkise wmiDoQENgzvq7Aw2dfLexaXrvmEIr4nvz96ru9rX2doVxb5EU8aHkoXLxtOxCYEg +sW4xuagjVDLMAHzzcsVEOi4+4nIb2rTkCRzbxPAAfd0QgxUst/1RjIDcGQF2WBz ETuqOnkVoPO+TDoE92+ppz8yLhPH7LWQ1Y1zJjbBRcdt7thTkoOLSt252BoDAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQU2EBc9NKeuvAbO/xSAWAGdjBeUD0wHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzQzMDJlMzEzMTM0 MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNkM2UyMDMxMzgzMDM0Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwCMcjANBgkqhkiG9w0BAQsFAAOCAQEAef/E70555D1QnFmEwrkSH9aTBeiejRVv 0YvSwXJBXVZ1J+fGad5Zf7slNdVTnzdIZaeG9KkgDuE0yynr9vzD5SUOu53LHNlZ nJsFfvFmufxAzSFCA93UOeLo36UOIogfTbKXRO7c4r8Q2gv7+6UqwPjKyOBIdq63 NuxLopxpwt3UlihRBX48VhbqjJmsCfi+4lEsEwA9e9FAyVtRYEG4ZfPOPhv2nAIj Wizl4jpG1CPuUcnj5UOkBQSmGMy3BUxzUbZgT4OrTaQDDfLvjYoHnjgcdL+D46Et z5yt9eBZ5Fxxa5q+9gWQIEpUeWaRqi6BH8KvRe4HXvn+uzfECgSkCg== -----END CERTIFICATE-----Generated at Wed May 13 00:44:39 2026 by rpki-client