$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3134302e3133332e33322e302f31392d3139203d3e203137373133.roa File: 3134302e3133332e33322e302f31392d3139203d3e203137373133.roa (raw, json) Hash identifier: QVwzw1TM0vPo2qZ6sEnXKPC1YLsd7ArMsf+f68Vxlp4= Subject key identifier: 2C:C0:BD:B4:B4:25:F5:A8:C8:46:9E:1A:4E:27:20:1A:4A:80:94:F2 Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 679450C63066839F4856929E2F941D705501CC90 Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133332e33322e302f31392d3139203d3e203137373133.roa Signing time: Mon 11 May 2026 21:01:54 +0000 ROA not before: Mon 11 May 2026 20:56:54 +0000 ROA not after: Mon 10 May 2027 21:01:54 +0000 asID: 17713 IP address blocks: 140.133.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:94:50:c6:30:66:83:9f:48:56:92:9e:2f:94:1d:70:55:01:cc:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: May 11 20:56:54 2026 GMT Not After : May 10 21:01:54 2027 GMT Subject: CN=2CC0BDB4B425F5A8C8469E1A4E27201A4A8094F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:00:7c:9b:f4:0a:27:51:01:d1:15:5f:6f:37: 62:9f:d4:c3:04:fb:b1:33:e1:0d:2f:87:ca:e7:8d: c2:f6:2b:68:3f:7f:3a:ff:10:fd:b3:38:2a:3e:b6: c3:b1:5f:95:3a:68:77:e4:65:d8:fa:c2:f9:b9:11: e0:3b:6b:f1:07:f8:c1:4f:0b:b5:3f:f6:5d:c9:af: c5:a3:59:fe:f4:32:70:94:14:bd:de:5f:70:ce:05: 6b:f1:f6:dd:76:a5:9c:7e:c2:9c:a5:1e:fd:29:ce: 67:0e:06:63:d9:d8:41:82:24:95:5d:ab:6c:7c:cc: ce:43:2e:00:0e:4a:9d:91:d9:2a:81:38:31:89:43: 35:0c:d0:7c:4b:7f:a5:ea:30:4a:fb:84:9c:13:9a: e2:13:cd:85:8b:3e:3e:0c:ee:47:90:25:e2:75:79: 34:b2:7e:a4:2d:4a:6d:ae:f7:6b:79:09:fb:78:4d: a2:01:2e:71:1f:24:18:0b:29:d6:90:8b:99:5b:90: e1:08:f5:77:e3:4b:54:f3:71:bd:6c:8a:22:88:7a: 4f:63:b3:7f:c5:77:50:a5:57:71:28:9c:96:4d:b6: 5f:06:4f:91:26:0e:37:09:0e:27:0e:27:06:e4:cd: d1:c8:a8:b7:b2:fe:cf:7b:c7:83:56:0a:f5:02:33: 8f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C0:BD:B4:B4:25:F5:A8:C8:46:9E:1A:4E:27:20:1A:4A:80:94:F2 X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3134302e3133332e33322e302f31392d3139203d3e203137373133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.133.32.0/19 Signature Algorithm: sha256WithRSAEncryption 86:ba:a7:94:77:f7:f3:f5:58:4d:bb:38:a9:89:16:4d:0c:46: d4:47:3f:2d:85:47:f2:4a:4d:ae:7d:4c:65:b7:76:52:26:89: cd:b7:4b:61:b7:80:08:28:48:f9:92:64:53:5d:c5:fd:e5:bd: 89:dc:ba:18:5f:60:98:2a:06:5a:77:5f:14:7e:c0:bc:cc:88: 9b:f7:e3:53:8b:49:23:dd:4f:db:bc:be:3b:7b:da:8d:9e:4f: 67:a2:1b:bf:dc:a9:48:41:90:bf:cb:4e:49:8d:81:e3:b2:31: b1:64:9e:6a:78:dc:84:de:5e:39:1b:cf:69:09:e3:6d:51:41: f7:0d:33:2e:de:c9:c8:4c:97:76:5e:16:fe:d5:1d:78:8f:72: 4b:51:f7:4c:2b:a1:ef:d3:22:51:d2:4c:f3:c5:2d:b6:c4:9c: 08:06:81:ff:68:91:d9:c5:17:c9:0b:7a:c5:58:74:61:3d:30: c7:7b:48:e0:50:fa:31:62:95:eb:b5:cb:9a:e9:0b:b3:69:11: fa:fa:45:f2:dd:de:30:d2:b9:ab:0e:a5:40:8a:19:4b:bb:31: 92:f1:bb:2e:b8:80:85:8f:a3:ac:75:ca:32:9e:c3:17:cb:c4: 67:6f:4a:40:ff:2e:6d:cd:96:22:1d:78:ee:1a:dd:0e:e9:93: 89:4f:08:11 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUZ5RQxjBmg59IVpKeL5QdcFUBzJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA1MTEyMDU2NTRaFw0yNzA1MTAyMTAxNTRaMDMxMTAvBgNV BAMTKDJDQzBCREI0QjQyNUY1QThDODQ2OUUxQTRFMjcyMDFBNEE4MDk0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsAHyb9AonUQHRFV9vN2Kf1MME +7Ez4Q0vh8rnjcL2K2g/fzr/EP2zOCo+tsOxX5U6aHfkZdj6wvm5EeA7a/EH+MFP C7U/9l3Jr8WjWf70MnCUFL3eX3DOBWvx9t12pZx+wpylHv0pzmcOBmPZ2EGCJJVd q2x8zM5DLgAOSp2R2SqBODGJQzUM0HxLf6XqMEr7hJwTmuITzYWLPj4M7keQJeJ1 eTSyfqQtSm2u92t5Cft4TaIBLnEfJBgLKdaQi5lbkOEI9XfjS1Tzcb1siiKIek9j s3/Fd1ClV3EonJZNtl8GT5EmDjcJDicOJwbkzdHIqLey/s97x4NWCvUCM4/3AgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQULMC9tLQl9ajIRp4aTicgGkqAlPIwHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzQzMDJlMzEzMzMz MmUzMzMyMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzNzM3MzEzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBYyFIDANBgkqhkiG9w0BAQsFAAOCAQEAhrqnlHf38/VYTbs4qYkWTQxG1Ec/ LYVH8kpNrn1MZbd2UiaJzbdLYbeACChI+ZJkU13F/eW9idy6GF9gmCoGWndfFH7A vMyIm/fjU4tJI91P27y+O3vajZ5PZ6Ibv9ypSEGQv8tOSY2B47IxsWSeanjchN5e ORvPaQnjbVFB9w0zLt7JyEyXdl4W/tUdeI9yS1H3TCuh79MiUdJM88UttsScCAaB /2iR2cUXyQt6xVh0YT0wx3tI4FD6MWKV67XLmukLs2kR+vpF8t3eMNK5qw6lQIoZ S7sxkvG7LriAhY+jrHXKMp7DF8vEZ29KQP8ubc2WIh147hrdDumTiU8IEQ== -----END CERTIFICATE-----Generated at Wed May 13 12:08:22 2026 by rpki-client