$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3139372e302f32342d3234203d3e203138313737.roa File: 3139322e3139322e3139372e302f32342d3234203d3e203138313737.roa (raw, json) Hash identifier: D3XukUGd9iMILuq2vqxXw/gPvOh8LYDSiHfYcC4cgMo= Subject key identifier: 39:9C:DF:B8:8F:72:4C:86:70:B9:80:59:31:68:F9:D5:17:A0:42:BA Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 7ECB2B8717F233186C7C381EBD9058FF64FDEC60 Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3139372e302f32342d3234203d3e203138313737.roa Signing time: Mon 11 May 2026 21:03:31 +0000 ROA not before: Mon 11 May 2026 20:58:31 +0000 ROA not after: Mon 10 May 2027 21:03:31 +0000 asID: 18177 IP address blocks: 192.192.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:cb:2b:87:17:f2:33:18:6c:7c:38:1e:bd:90:58:ff:64:fd:ec:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: May 11 20:58:31 2026 GMT Not After : May 10 21:03:31 2027 GMT Subject: CN=399CDFB88F724C8670B980593168F9D517A042BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:28:54:fb:fb:dd:72:a1:a4:4f:d7:0e:08:86: c8:2d:63:fc:53:73:0a:22:00:86:f9:6f:dc:1c:64: ed:ed:a9:db:41:ac:22:b4:40:61:9c:60:62:b2:96: 2c:dc:58:f8:ad:d1:05:ae:77:30:a3:c6:a2:b7:e0: cd:af:c6:99:b9:4c:0b:fb:e7:2a:a7:98:7c:4e:f8: fd:3f:11:d2:a7:bf:30:f0:98:eb:01:4b:53:45:b7: 49:41:e0:c7:91:5d:37:44:36:64:2c:49:52:ab:80: 46:4e:44:b3:8b:3c:b3:27:52:63:44:e8:06:f8:e1: af:8b:91:1d:22:23:dc:8e:69:30:21:6b:a7:ed:d2: 96:fd:14:7a:f6:f2:87:d1:95:ad:fb:31:cb:73:7a: 93:78:b6:c7:ee:d4:51:52:06:4d:38:fe:1b:3d:dd: 35:f5:9d:af:1f:7f:49:c5:1d:75:7f:96:cb:5b:6a: 43:48:b9:ad:8a:6f:2d:a2:76:53:26:9c:86:60:75: 4c:c1:6e:8f:13:e3:04:3d:3f:0d:46:1f:90:14:7b: 2f:28:c8:1a:29:31:cf:24:cf:21:ed:5a:23:94:a2: 10:b2:ff:20:3e:2c:59:ce:00:f6:6b:df:cb:2a:e1: 1c:fd:12:35:0c:be:56:37:38:b5:1b:65:dd:94:01: 84:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9C:DF:B8:8F:72:4C:86:70:B9:80:59:31:68:F9:D5:17:A0:42:BA X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e3139372e302f32342d3234203d3e203138313737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.192.197.0/24 Signature Algorithm: sha256WithRSAEncryption 26:a4:f3:1a:a0:11:5e:ae:00:42:ca:e3:b4:8f:6c:d3:65:53: 53:fd:64:bd:db:a7:47:9a:57:5c:5b:1c:12:91:35:a0:9f:a4: 77:3a:a3:ee:df:7d:40:d2:02:47:dc:82:e3:67:8a:b1:19:41: 55:32:6e:5e:ef:3a:f3:5b:f9:87:14:30:45:3e:ae:f8:98:8a: 22:6b:fd:8c:0d:19:ea:7d:b4:64:2f:20:94:ba:1e:8e:12:e2: 6f:94:7d:a2:eb:85:ef:08:e4:ce:f5:09:3a:67:15:fd:80:af: ce:b9:f1:44:6d:52:f3:b9:0a:d4:67:27:d4:b3:f2:b0:7d:b5: c6:b3:58:5b:88:b4:17:c4:ad:8f:90:6e:48:c5:c6:f1:29:77: 83:a2:29:06:e5:1c:99:5d:52:ac:65:d1:67:2d:f9:53:d0:88: 97:17:e1:ee:50:5c:81:24:60:69:93:d5:59:4a:35:06:61:98: b1:75:20:af:80:72:a3:66:f6:71:30:c7:d8:c1:62:67:18:da: de:10:28:e7:e2:0e:b2:fb:e7:4d:39:d7:f8:32:be:68:70:df: e9:28:5c:b0:3c:9a:1b:3a:9e:85:ca:d6:18:d6:37:73:01:11: 53:2f:05:8c:0d:f4:b8:e2:9f:bc:2d:89:96:13:fb:2e:d7:91: 49:03:6d:52 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUfssrhxfyMxhsfDgevZBY/2T97GAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA1MTEyMDU4MzFaFw0yNzA1MTAyMTAzMzFaMDMxMTAvBgNV BAMTKDM5OUNERkI4OEY3MjRDODY3MEI5ODA1OTMxNjhGOUQ1MTdBMDQyQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyKFT7+91yoaRP1w4IhsgtY/xT cwoiAIb5b9wcZO3tqdtBrCK0QGGcYGKylizcWPit0QWudzCjxqK34M2vxpm5TAv7 5yqnmHxO+P0/EdKnvzDwmOsBS1NFt0lB4MeRXTdENmQsSVKrgEZORLOLPLMnUmNE 6Ab44a+LkR0iI9yOaTAha6ft0pb9FHr28ofRla37MctzepN4tsfu1FFSBk04/hs9 3TX1na8ff0nFHXV/lstbakNIua2Kby2idlMmnIZgdUzBbo8T4wQ9Pw1GH5AUey8o yBopMc8kzyHtWiOUohCy/yA+LFnOAPZr38sq4Rz9EjUMvlY3OLUbZd2UAYS5AgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUOZzfuI9yTIZwuYBZMWj51RegQrowHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzkzMjJlMzEzOTMy MmUzMTM5MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM4MzEzNzM3LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAwMDFMA0GCSqGSIb3DQEBCwUAA4IBAQAmpPMaoBFergBCyuO0j2zTZVNT /WS926dHmldcWxwSkTWgn6R3OqPu331A0gJH3ILjZ4qxGUFVMm5e7zrzW/mHFDBF Pq74mIoia/2MDRnqfbRkLyCUuh6OEuJvlH2i64XvCOTO9Qk6ZxX9gK/OufFEbVLz uQrUZyfUs/KwfbXGs1hbiLQXxK2PkG5IxcbxKXeDoikG5RyZXVKsZdFnLflT0IiX F+HuUFyBJGBpk9VZSjUGYZixdSCvgHKjZvZxMMfYwWJnGNreECjn4g6y++dNOdf4 Mr5ocN/pKFywPJobOp6FytYY1jdzARFTLwWMDfS44p+8LYmWE/su15FJA21S -----END CERTIFICATE-----Generated at Wed May 13 10:23:06 2026 by rpki-client