$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f31372d3234203d3e20313331353936.roa File: 35392e3130322e3132382e302f31372d3234203d3e20313331353936.roa (raw, json) Hash identifier: EyCY5cFAY79o0zaz/RFl9AJajyPTmvGSarVRABHbZrY= Subject key identifier: AD:37:BF:BE:00:CE:83:80:1F:87:F3:5E:C9:12:7F:58:A2:75:95:67 Certificate issuer: /CN=C0ACF76C345159D3241315F2997526806968CB40 Certificate serial: 4BEF3F7F5C589943EE459694D8EDCDB8917F7B86 Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f31372d3234203d3e20313331353936.roa Signing time: Mon 11 May 2026 16:48:42 +0000 ROA not before: Mon 11 May 2026 16:43:42 +0000 ROA not after: Mon 10 May 2027 16:48:42 +0000 asID: 131596 IP address blocks: 59.102.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:ef:3f:7f:5c:58:99:43:ee:45:96:94:d8:ed:cd:b8:91:7f:7b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40 Validity Not Before: May 11 16:43:42 2026 GMT Not After : May 10 16:48:42 2027 GMT Subject: CN=AD37BFBE00CE83801F87F35EC9127F58A2759567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2f:e2:f9:6f:75:65:4f:b4:c7:8b:3a:df:82: 40:8b:3d:71:e0:e1:9d:63:6a:ed:58:fd:15:26:1f: 2f:a6:ba:0e:4c:c2:c3:39:0a:be:2b:b1:d3:3c:cc: c7:ec:4f:d5:0d:bb:c7:1c:85:44:fe:5f:ce:92:98: a6:f6:31:c2:46:2b:58:11:41:5f:c8:3a:68:07:05: a1:51:0d:73:30:e7:2d:8d:22:9d:d8:c9:98:00:ce: 59:fe:2c:46:30:b2:a1:8f:6f:38:7f:23:ca:64:8b: 6c:53:91:41:13:dd:95:68:b8:38:1e:d3:62:16:40: 26:3e:a3:d7:fd:b0:47:f9:ec:43:ec:9e:28:a7:f9: 30:a8:61:3a:22:ba:bc:16:78:ee:cb:1e:f8:7a:72: f2:25:6f:44:e6:94:fb:9a:18:a4:cd:84:d4:9b:0b: 9c:88:82:3b:bb:12:e9:9d:ed:54:a7:9b:5b:49:ab: a2:a2:6a:e9:b8:2b:19:a5:08:6f:3b:43:c9:3c:71: d5:7d:60:e3:4b:a4:84:ab:2d:93:4a:42:fc:f2:98: f0:df:2f:44:3b:fa:2b:d1:92:ac:23:9c:97:b2:18: 29:39:ef:a2:10:e5:27:5a:84:91:db:f4:aa:7c:8f: d8:87:c2:6b:64:56:36:68:b0:f9:8f:8b:29:c8:d6: a0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:37:BF:BE:00:CE:83:80:1F:87:F3:5E:C9:12:7F:58:A2:75:95:67 X509v3 Authority Key Identifier: keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f31372d3234203d3e20313331353936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.102.128.0/17 Signature Algorithm: sha256WithRSAEncryption 59:63:eb:bf:94:0c:67:0c:49:84:08:f3:e8:ef:16:75:a9:12: 2b:9a:cf:ef:1e:fa:78:a9:31:ca:98:a9:a1:05:af:ea:72:4f: c1:87:4a:73:04:91:0b:89:f5:23:5e:17:11:5d:38:2b:e9:53: 82:21:a0:d4:b7:8f:3d:9f:c8:38:a8:f2:78:46:9a:08:3d:5a: 3c:fd:c7:84:ec:73:ed:bc:e9:34:d8:2b:34:a8:99:49:1b:95: a7:df:47:bd:56:9f:5b:8c:27:98:9c:17:2b:d2:bc:aa:bb:31: b2:bc:26:8f:18:17:ee:77:fd:82:a1:7f:8d:bb:09:69:e8:e6: ac:79:99:52:fe:0d:48:de:bc:a8:67:5b:b6:75:ea:58:a8:65: 1b:f3:bf:3f:fd:4e:cd:50:05:4e:8a:14:13:28:81:46:d8:14: 69:f4:88:33:a4:07:1f:99:9b:dc:b5:75:7b:7e:b1:ab:79:af: 7f:ec:28:04:ac:99:a5:45:32:26:fc:a4:5a:5f:7d:24:71:ed: 54:3e:de:50:4a:34:39:57:e8:18:a3:4c:b1:d9:dc:a7:1f:3e: 12:59:0d:1a:bc:45:87:a6:26:e7:bb:16:3f:94:38:bf:73:81: 25:f6:ca:50:3d:da:46:76:22:be:59:db:f9:2b:9a:1c:27:7a: 48:87:51:13 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUS+8/f1xYmUPuRZaU2O3NuJF/e4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBBQ0Y3NkMzNDUxNTlEMzI0MTMxNUYyOTk3NTI2ODA2 OTY4Q0I0MDAeFw0yNjA1MTExNjQzNDJaFw0yNzA1MTAxNjQ4NDJaMDMxMTAvBgNV BAMTKEFEMzdCRkJFMDBDRTgzODAxRjg3RjM1RUM5MTI3RjU4QTI3NTk1NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7L+L5b3VlT7THizrfgkCLPXHg 4Z1jau1Y/RUmHy+mug5MwsM5Cr4rsdM8zMfsT9UNu8cchUT+X86SmKb2McJGK1gR QV/IOmgHBaFRDXMw5y2NIp3YyZgAzln+LEYwsqGPbzh/I8pki2xTkUET3ZVouDge 02IWQCY+o9f9sEf57EPsniin+TCoYToiurwWeO7LHvh6cvIlb0TmlPuaGKTNhNSb C5yIgju7Eumd7VSnm1tJq6Kiaum4KxmlCG87Q8k8cdV9YONLpISrLZNKQvzymPDf L0Q7+ivRkqwjnJeyGCk576IQ5SdahJHb9Kp8j9iHwmtkVjZosPmPiynI1qAtAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUrTe/vgDOg4Afh/NeyRJ/WKJ1lWcwHwYDVR0j BBgwFoAUwKz3bDRRWdMkExXymXUmgGloy0AwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEJDT00v MC9DMEFDRjc2QzM0NTE1OUQzMjQxMzE1RjI5OTc1MjY4MDY5NjhDQjQwLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0MwQUNGNzZDMzQ1MTU5RDMyNDEzMTVGMjk5NzUy NjgwNjk2OENCNDAuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQkNPTS8wLzM1MzkyZTMxMzAzMjJl MzEzMjM4MmUzMDJmMzEzNzJkMzIzNDIwM2QzZTIwMzEzMzMxMzUzOTM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQHO2aAMA0GCSqGSIb3DQEBCwUAA4IBAQBZY+u/lAxnDEmECPPo7xZ1qRIr ms/vHvp4qTHKmKmhBa/qck/Bh0pzBJELifUjXhcRXTgr6VOCIaDUt489n8g4qPJ4 RpoIPVo8/ceE7HPtvOk02Cs0qJlJG5Wn30e9Vp9bjCeYnBcr0ryquzGyvCaPGBfu d/2CoX+Nuwlp6OaseZlS/g1I3ryoZ1u2depYqGUb878//U7NUAVOihQTKIFG2BRp 9IgzpAcfmZvctXV7frGrea9/7CgErJmlRTIm/KRaX30kce1UPt5QSjQ5V+gYo0yx 2dynHz4SWQ0avEWHpibnuxY/lDi/c4El9spQPdpGdiK+Wdv5K5ocJ3pIh1ET -----END CERTIFICATE-----Generated at Wed May 13 05:07:41 2026 by rpki-client