$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e34382e302f32312d3231203d3e203137373136.roa File: 3139322e3139322e34382e302f32312d3231203d3e203137373136.roa (raw, json) Hash identifier: QhKCVGn3miMvkHQRLgiCuOShttVfLAH/Q2tM0rZNamg= Subject key identifier: 0C:21:4F:60:63:AD:17:DE:A5:6F:FA:C4:1F:06:C9:12:94:9A:EC:41 Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 1F65F996D86AA44C7DC2DA95A96878F13F9C2B37 Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e34382e302f32312d3231203d3e203137373136.roa Signing time: Mon 11 May 2026 21:04:43 +0000 ROA not before: Mon 11 May 2026 20:59:43 +0000 ROA not after: Mon 10 May 2027 21:04:43 +0000 asID: 17716 IP address blocks: 192.192.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:65:f9:96:d8:6a:a4:4c:7d:c2:da:95:a9:68:78:f1:3f:9c:2b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: May 11 20:59:43 2026 GMT Not After : May 10 21:04:43 2027 GMT Subject: CN=0C214F6063AD17DEA56FFAC41F06C912949AEC41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:af:fe:4c:77:6b:06:ed:db:28:8e:7a:09:bb: 7e:42:1a:4c:ab:e8:e4:4e:17:ec:b8:69:f1:29:97: 23:5c:4a:89:e3:89:e1:14:bf:c2:eb:8c:42:9d:77: 8b:b7:57:32:78:bb:fb:4c:28:7d:a0:fb:bd:f0:a8: 55:2e:ca:85:2b:c6:0e:92:c7:ec:e8:f6:59:7e:41: 3b:55:75:1f:fb:e3:7b:d1:de:78:02:0b:c9:fc:a6: c7:37:0f:76:a4:f7:4a:c7:5b:4b:af:52:91:64:c5: bf:2a:b0:27:a6:cb:49:2d:1b:90:57:f0:1f:f4:bd: e7:54:09:ff:db:78:0e:ec:33:e5:6a:26:74:57:19: 89:24:f3:ee:72:aa:f8:1c:ea:f4:00:d3:58:d6:68: 2e:1e:6d:59:32:1d:eb:2a:81:74:ff:4c:7c:bd:d3: 93:06:ba:fc:4d:b1:80:a6:4a:84:bd:1d:59:a7:b6: 18:9b:5a:d3:67:4c:8a:01:4b:dc:ff:0e:15:37:fd: 79:e0:7b:e7:73:9c:5a:2a:12:c2:26:d6:13:1d:68: 2c:1f:01:e5:54:fd:0e:8f:cf:b7:8f:bb:83:99:e9: e0:53:b0:8b:08:31:9d:9b:48:e0:9f:6f:c9:e8:4b: 1e:70:95:7b:46:74:c7:eb:9d:a7:d0:a2:01:5e:61: 72:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:21:4F:60:63:AD:17:DE:A5:6F:FA:C4:1F:06:C9:12:94:9A:EC:41 X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e3139322e34382e302f32312d3231203d3e203137373136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.192.48.0/21 Signature Algorithm: sha256WithRSAEncryption 34:61:fd:be:74:5f:5e:0c:ed:68:60:05:be:c3:2c:1d:9b:ab: f0:76:b0:6a:00:ad:a7:d0:86:cb:09:e9:f8:dd:32:92:ba:11: 85:1e:5d:58:5a:a0:d2:2e:7a:c9:72:09:17:73:15:94:3b:f3: 0a:9c:c1:2d:78:f7:5f:e5:fd:b1:7b:fb:f4:f6:18:82:94:29: 71:e2:e7:58:0d:17:45:36:c1:b1:cc:df:74:ab:88:b1:1a:b8: b0:0a:45:0a:70:cb:21:93:ec:5b:83:8d:15:7f:ae:52:14:ef: 54:43:eb:a4:9d:12:77:d5:5b:35:01:20:70:7b:ca:a6:3e:6d: 04:f5:04:0a:a2:00:2f:e9:18:29:92:91:5a:47:7e:f4:3e:f4: 93:71:05:f3:7c:31:90:ea:e8:b0:ab:0d:80:ab:de:f2:01:8d: b7:3b:b3:b4:04:53:cd:5e:40:9b:8a:20:dd:e9:8b:32:f9:f9: 7f:d5:9f:c2:5e:4a:c6:7f:89:1e:2d:cb:cd:f4:81:05:1c:ad: 85:01:19:8e:ae:8f:eb:74:eb:14:f1:98:31:fb:93:c0:7c:eb: c6:89:5f:67:1e:cf:78:cf:78:fd:c9:09:ab:00:3d:bb:c6:1b: b2:8f:ca:3b:5c:a0:32:68:7c:5d:93:4b:c8:75:8f:e6:12:63: f0:12:b6:ea -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUH2X5lthqpEx9wtqVqWh48T+cKzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA1MTEyMDU5NDNaFw0yNzA1MTAyMTA0NDNaMDMxMTAvBgNV BAMTKDBDMjE0RjYwNjNBRDE3REVBNTZGRkFDNDFGMDZDOTEyOTQ5QUVDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkr/5Md2sG7dsojnoJu35CGkyr 6OROF+y4afEplyNcSonjieEUv8LrjEKdd4u3VzJ4u/tMKH2g+73wqFUuyoUrxg6S x+zo9ll+QTtVdR/743vR3ngCC8n8psc3D3ak90rHW0uvUpFkxb8qsCemy0ktG5BX 8B/0vedUCf/beA7sM+VqJnRXGYkk8+5yqvgc6vQA01jWaC4ebVkyHesqgXT/THy9 05MGuvxNsYCmSoS9HVmnthibWtNnTIoBS9z/DhU3/Xnge+dznFoqEsIm1hMdaCwf AeVU/Q6Pz7ePu4OZ6eBTsIsIMZ2bSOCfb8noSx5wlXtGdMfrnafQogFeYXJ9AgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUDCFPYGOtF96lb/rEHwbJEpSa7EEwHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzkzMjJlMzEzOTMy MmUzNDM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzEzNzM3MzEzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8DAMDANBgkqhkiG9w0BAQsFAAOCAQEANGH9vnRfXgztaGAFvsMsHZur8Haw agCtp9CGywnp+N0ykroRhR5dWFqg0i56yXIJF3MVlDvzCpzBLXj3X+X9sXv79PYY gpQpceLnWA0XRTbBsczfdKuIsRq4sApFCnDLIZPsW4ONFX+uUhTvVEPrpJ0Sd9Vb NQEgcHvKpj5tBPUECqIAL+kYKZKRWkd+9D70k3EF83wxkOrosKsNgKve8gGNtzuz tARTzV5Am4og3emLMvn5f9Wfwl5Kxn+JHi3LzfSBBRythQEZjq6P63TrFPGYMfuT wHzrxolfZx7PeM94/ckJqwA9u8Ybso/KO1ygMmh8XZNLyHWP5hJj8BK26g== -----END CERTIFICATE-----Generated at Wed May 13 07:14:15 2026 by rpki-client