$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f32322d3232203d3e20313331353936.roa File: 35392e3130322e3132382e302f32322d3232203d3e20313331353936.roa (raw, json) Hash identifier: O1Wvan+5LyWxyUUEXAp2pp2ZHbUDbtrwnIgoUj79Tfk= Subject key identifier: 59:B1:5B:A2:9F:A4:18:9A:71:40:D8:A5:66:8F:91:C4:B0:F5:0B:1E Certificate issuer: /CN=C0ACF76C345159D3241315F2997526806968CB40 Certificate serial: 2F0E7FC3035AD05440F916AF5841F95DC7915CAF Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f32322d3232203d3e20313331353936.roa Signing time: Mon 11 May 2026 17:28:47 +0000 ROA not before: Mon 11 May 2026 17:23:47 +0000 ROA not after: Mon 10 May 2027 17:28:47 +0000 asID: 131596 IP address blocks: 59.102.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0e:7f:c3:03:5a:d0:54:40:f9:16:af:58:41:f9:5d:c7:91:5c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40 Validity Not Before: May 11 17:23:47 2026 GMT Not After : May 10 17:28:47 2027 GMT Subject: CN=59B15BA29FA4189A7140D8A5668F91C4B0F50B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:65:47:17:cb:e3:97:3e:fe:c8:e0:8f:41:20: 96:09:4b:53:7d:20:66:37:eb:1c:b9:21:69:ae:64: 6c:54:f4:7e:ab:a3:77:89:66:b5:10:3e:12:86:c0: 40:78:2c:de:72:be:89:49:bc:21:5d:d1:de:7f:47: 9a:58:76:4f:5d:25:fc:00:8c:b5:d5:d0:7b:54:52: 43:e2:18:94:4a:b2:74:51:79:8a:2b:15:e2:b0:ef: e4:c7:fb:c6:f2:54:3d:c5:f2:52:69:ac:2f:44:eb: 57:4b:dd:8b:37:1c:b7:92:37:0c:3a:b8:20:c7:01: d6:74:70:2a:d4:52:63:07:f8:5b:06:fa:9f:50:fa: 02:7b:6d:86:9a:c0:29:fe:d1:ee:56:a8:f0:51:87: 37:d1:4d:8f:fc:b0:aa:01:0d:3e:16:15:73:88:c2: 90:1a:5e:06:70:ec:e4:9a:da:f8:3c:7a:ad:d0:3d: bb:b7:46:5d:1d:c8:09:a0:e3:55:4c:d0:49:de:76: 71:d9:68:7a:5f:b1:1e:ae:22:8f:8f:49:f2:6f:74: ce:5f:f7:14:1a:c4:97:2e:2b:b7:3b:08:36:f1:37: 04:00:a1:39:8b:e8:31:de:25:69:be:c2:89:29:1a: 6c:a8:09:bc:cc:60:82:d1:67:cb:d1:6f:64:ea:84: 8f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B1:5B:A2:9F:A4:18:9A:71:40:D8:A5:66:8F:91:C4:B0:F5:0B:1E X509v3 Authority Key Identifier: keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/35392e3130322e3132382e302f32322d3232203d3e20313331353936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 59.102.128.0/22 Signature Algorithm: sha256WithRSAEncryption 56:52:4c:e5:84:23:9d:4c:9e:5e:b4:3f:87:33:6c:42:e6:42: 0c:8a:58:54:0f:d6:ac:f4:13:7a:d9:4d:43:81:32:cd:08:e2: 8a:bd:6e:61:74:be:6e:5e:ab:b0:fa:c5:4e:70:14:64:90:36: b2:ea:0a:11:55:10:9e:78:d4:de:e1:20:ba:ba:99:c1:c0:ff: 07:0c:fc:9b:dc:57:dd:60:8a:4a:51:37:8d:1a:f9:cd:f2:70: 57:bc:39:d4:d5:d2:14:e3:b4:75:21:aa:8b:c8:68:17:34:0b: 65:e1:c0:58:41:5f:6d:5b:92:53:87:64:b3:c0:31:d0:1d:c1: a3:3b:7d:91:0b:22:d6:f8:ea:54:a8:19:b3:db:73:03:ee:15: 95:8a:07:de:4b:8d:be:43:8d:9d:f2:4f:09:4e:72:87:aa:18: 8f:81:0e:1f:cf:dd:2f:4c:9b:23:cf:17:cf:12:04:13:1a:67: 26:69:da:b6:ed:98:fa:28:99:02:6c:4b:44:be:3b:9e:68:94: 31:e3:1f:a7:10:b1:22:58:c7:10:20:be:65:0f:74:33:d7:5a: 9e:81:fa:0b:dd:67:31:cd:12:c3:39:49:5e:19:3e:1e:d9:ca: 6e:a7:c3:3f:55:d5:fc:42:5c:8f:70:a6:57:99:1a:85:fc:4b: 52:d1:83:58 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIULw5/wwNa0FRA+RavWEH5XceRXK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBBQ0Y3NkMzNDUxNTlEMzI0MTMxNUYyOTk3NTI2ODA2 OTY4Q0I0MDAeFw0yNjA1MTExNzIzNDdaFw0yNzA1MTAxNzI4NDdaMDMxMTAvBgNV BAMTKDU5QjE1QkEyOUZBNDE4OUE3MTQwRDhBNTY2OEY5MUM0QjBGNTBCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZZUcXy+OXPv7I4I9BIJYJS1N9 IGY36xy5IWmuZGxU9H6ro3eJZrUQPhKGwEB4LN5yvolJvCFd0d5/R5pYdk9dJfwA jLXV0HtUUkPiGJRKsnRReYorFeKw7+TH+8byVD3F8lJprC9E61dL3Ys3HLeSNww6 uCDHAdZ0cCrUUmMH+FsG+p9Q+gJ7bYaawCn+0e5WqPBRhzfRTY/8sKoBDT4WFXOI wpAaXgZw7OSa2vg8eq3QPbu3Rl0dyAmg41VM0EnednHZaHpfsR6uIo+PSfJvdM5f 9xQaxJcuK7c7CDbxNwQAoTmL6DHeJWm+wokpGmyoCbzMYILRZ8vRb2TqhI+LAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUWbFbop+kGJpxQNilZo+RxLD1Cx4wHwYDVR0j BBgwFoAUwKz3bDRRWdMkExXymXUmgGloy0AwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEJDT00v MC9DMEFDRjc2QzM0NTE1OUQzMjQxMzE1RjI5OTc1MjY4MDY5NjhDQjQwLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0MwQUNGNzZDMzQ1MTU5RDMyNDEzMTVGMjk5NzUy NjgwNjk2OENCNDAuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQkNPTS8wLzM1MzkyZTMxMzAzMjJl MzEzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzMzMxMzUzOTM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCO2aAMA0GCSqGSIb3DQEBCwUAA4IBAQBWUkzlhCOdTJ5etD+HM2xC5kIM ilhUD9as9BN62U1DgTLNCOKKvW5hdL5uXquw+sVOcBRkkDay6goRVRCeeNTe4SC6 upnBwP8HDPyb3FfdYIpKUTeNGvnN8nBXvDnU1dIU47R1IaqLyGgXNAtl4cBYQV9t W5JTh2SzwDHQHcGjO32RCyLW+OpUqBmz23MD7hWVigfeS42+Q42d8k8JTnKHqhiP gQ4fz90vTJsjzxfPEgQTGmcmadq27Zj6KJkCbEtEvjueaJQx4x+nELEiWMcQIL5l D3Qz11qegfoL3WcxzRLDOUleGT4e2cpup8M/VdX8QlyPcKZXmRqF/EtS0YNY -----END CERTIFICATE-----Generated at Wed May 13 04:36:28 2026 by rpki-client