$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3136382e302f32312d3231203d3e2031363539.roa File: 3139322e38332e3136382e302f32312d3231203d3e2031363539.roa (raw, json) Hash identifier: HPBsMOa5R49f8xag7FRS8+GA7c5ewRT/vv2r2hdNP7k= Subject key identifier: 96:E2:65:87:44:F2:22:CD:CD:AB:A8:32:BE:F3:DE:8C:B8:4E:DA:F6 Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 0CB3F5AC5AC5FA2EC538B459D1BFD40B5C809EF0 Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3136382e302f32312d3231203d3e2031363539.roa Signing time: Mon 11 May 2026 20:59:38 +0000 ROA not before: Mon 11 May 2026 20:54:38 +0000 ROA not after: Mon 10 May 2027 20:59:38 +0000 asID: 1659 IP address blocks: 192.83.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b3:f5:ac:5a:c5:fa:2e:c5:38:b4:59:d1:bf:d4:0b:5c:80:9e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: May 11 20:54:38 2026 GMT Not After : May 10 20:59:38 2027 GMT Subject: CN=96E2658744F222CDCDABA832BEF3DE8CB84EDAF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5f:4e:1b:85:62:03:02:db:be:52:b1:4c:64: b1:34:a3:d4:e4:a3:22:c2:36:03:02:01:5e:e2:ad: a1:4f:b1:07:16:ed:f6:65:52:30:56:e7:ff:92:e0: b3:89:a6:fb:1f:b9:08:66:7c:f5:75:bd:53:83:ef: 05:40:14:2d:a4:ea:a5:7e:1f:78:5b:cb:3b:00:35: 8c:2c:73:3c:5f:38:39:a8:93:f5:3e:c3:36:4b:87: 4d:82:11:a4:f0:87:ff:10:d0:c1:61:03:4f:f9:66: f4:86:67:72:85:b0:bf:b6:f5:a3:d7:a2:8f:71:32: 9c:9c:c9:1c:8c:f4:9c:5d:b8:1b:85:4a:6d:41:b9: 39:ee:39:c4:ac:e4:33:f9:71:3c:d1:63:97:b7:29: 95:e2:51:a0:29:33:58:c2:17:48:6e:a4:bf:99:f0: 1c:72:6a:a4:f9:4b:44:ab:12:dc:0d:f2:01:ba:fa: 74:a1:54:a2:44:3a:0c:3c:3c:0b:f9:91:bc:f2:e0: 59:9c:21:a8:f7:5e:80:53:63:1f:95:7b:71:a8:2f: 4b:e4:9a:98:1f:e7:87:5e:d6:30:3b:af:0b:e2:a8: f1:4a:1b:be:7e:10:19:aa:9a:29:5b:54:dd:6a:97: cd:d0:3b:3f:56:87:94:17:85:a0:dd:75:a5:e8:15: 44:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E2:65:87:44:F2:22:CD:CD:AB:A8:32:BE:F3:DE:8C:B8:4E:DA:F6 X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/3139322e38332e3136382e302f32312d3231203d3e2031363539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.83.168.0/21 Signature Algorithm: sha256WithRSAEncryption 35:a4:b5:d8:ba:c3:7f:4e:19:7e:0d:33:a8:1e:31:df:02:22: ad:37:47:d3:1a:5a:c5:20:7b:03:d6:8f:64:c7:41:0f:e2:18: 11:e5:37:69:9d:46:64:8c:dc:87:6c:30:e5:7d:3f:d3:50:37: 8e:c9:df:27:6f:40:60:87:f7:b1:c2:44:e0:30:ee:e0:35:6d: eb:c1:19:ad:9f:e9:41:4e:45:0f:ad:dc:58:98:8f:b4:8c:7d: dd:1e:e2:71:88:96:26:6b:f5:a6:41:a8:50:a4:83:21:a9:1d: 0e:f1:4b:d7:35:52:6e:39:29:c9:3d:72:01:c8:85:12:5a:54: 92:0f:a8:43:c9:bd:2d:2f:b8:ed:93:37:94:85:f7:28:08:0c: 8f:20:67:d1:d5:06:ad:71:4a:84:fd:92:52:55:9e:ca:9a:b4: 17:fb:88:5c:a3:73:48:58:f2:96:01:ce:41:9c:1e:44:99:e7: 5d:5a:17:4d:89:b2:64:2b:bd:8c:93:82:37:ca:24:f5:76:e8: fa:3f:e2:de:f5:58:b4:f4:3c:b6:c7:21:01:fd:17:28:1d:ed: 80:fd:ea:55:59:5d:09:56:2b:89:9c:06:31:ac:0d:ac:3e:43: 08:46:4d:c0:77:b4:53:75:cd:25:31:42:bc:7f:3a:f2:fe:ea: 73:95:25:a4 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUDLP1rFrF+i7FOLRZ0b/UC1yAnvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA1MTEyMDU0MzhaFw0yNzA1MTAyMDU5MzhaMDMxMTAvBgNV BAMTKDk2RTI2NTg3NDRGMjIyQ0RDREFCQTgzMkJFRjNERThDQjg0RURBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjX04bhWIDAtu+UrFMZLE0o9Tk oyLCNgMCAV7iraFPsQcW7fZlUjBW5/+S4LOJpvsfuQhmfPV1vVOD7wVAFC2k6qV+ H3hbyzsANYwsczxfODmok/U+wzZLh02CEaTwh/8Q0MFhA0/5ZvSGZ3KFsL+29aPX oo9xMpycyRyM9JxduBuFSm1BuTnuOcSs5DP5cTzRY5e3KZXiUaApM1jCF0hupL+Z 8BxyaqT5S0SrEtwN8gG6+nShVKJEOgw8PAv5kbzy4FmcIaj3XoBTYx+Ve3GoL0vk mpgf54de1jA7rwviqPFKG75+EBmqmilbVN1ql83QOz9Wh5QXhaDddaXoFUR9AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUluJlh0TyIs3Nq6gyvvPejLhO2vYwHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xLzMxMzkzMjJlMzgzMzJl MzEzNjM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzEzNjM1Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPAU6gwDQYJKoZIhvcNAQELBQADggEBADWktdi6w39OGX4NM6geMd8CIq03R9Ma WsUgewPWj2THQQ/iGBHlN2mdRmSM3IdsMOV9P9NQN47J3ydvQGCH97HCROAw7uA1 bevBGa2f6UFORQ+t3FiYj7SMfd0e4nGIliZr9aZBqFCkgyGpHQ7xS9c1Um45Kck9 cgHIhRJaVJIPqEPJvS0vuO2TN5SF9ygIDI8gZ9HVBq1xSoT9klJVnsqatBf7iFyj c0hY8pYBzkGcHkSZ511aF02JsmQrvYyTgjfKJPV26Po/4t71WLT0PLbHIQH9Fygd 7YD96lVZXQlWK4mcBjGsDaw+QwhGTcB3tFN1zSUxQrx/OvL+6nOVJaQ= -----END CERTIFICATE-----Generated at Wed May 13 05:50:59 2026 by rpki-client