$ rpki-client -vvf rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e37322e302f32312d3234203d3e203137373039.roa File: 36312e35382e37322e302f32312d3234203d3e203137373039.roa (raw, json) Hash identifier: eHJkOvCv73jT83JyUOqpN2bkBBY0m+5i7QC0Xnu+nPI= Subject key identifier: 78:5D:45:58:43:CD:3B:21:CD:F6:5D:1B:DE:9A:7A:7E:65:ED:26:A7 Certificate issuer: /CN=C0ACF76C345159D3241315F2997526806968CB40 Certificate serial: 494AF1B335903D842FCC09EB35A71FA98CAADFCD Authority key identifier: C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e37322e302f32312d3234203d3e203137373039.roa Signing time: Mon 11 May 2026 17:37:10 +0000 ROA not before: Mon 11 May 2026 17:32:10 +0000 ROA not after: Mon 10 May 2027 17:37:10 +0000 asID: 17709 IP address blocks: 61.58.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4a:f1:b3:35:90:3d:84:2f:cc:09:eb:35:a7:1f:a9:8c:aa:df:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0ACF76C345159D3241315F2997526806968CB40 Validity Not Before: May 11 17:32:10 2026 GMT Not After : May 10 17:37:10 2027 GMT Subject: CN=785D455843CD3B21CDF65D1BDE9A7A7E65ED26A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c9:f8:e2:5e:91:f8:f0:77:53:fa:21:e5:15: 71:f2:dc:27:30:de:7c:e1:df:73:f0:67:e2:2b:49: 86:d0:31:6d:fb:f7:d1:2e:a7:fe:0c:21:89:a3:03: 39:a9:84:8c:22:33:2d:b5:29:1b:26:6d:f4:dc:3b: 5f:54:38:7d:4c:8e:a2:9d:0f:b4:b8:32:d5:f5:29: 28:d0:b2:5f:85:3e:f3:e2:97:40:60:d2:4c:fc:9d: 8b:97:43:61:84:d6:3c:16:f8:fb:89:c8:36:08:5c: 85:60:47:cd:3d:e9:3a:b6:a3:78:94:0b:8e:39:92: 71:c5:e0:56:49:a1:7b:e1:6b:cf:a0:7a:03:89:4a: 14:74:b2:51:37:1e:a9:ae:66:57:dd:16:f9:e3:b3: ff:d9:2f:83:0c:f9:12:6e:4b:e2:44:38:7a:fe:75: 0a:e2:f2:cd:e3:12:fe:90:c5:c6:e6:b1:c9:b5:61: 34:60:f4:74:3e:9e:a8:4c:5e:ff:05:48:52:7b:f9: 6d:5e:dd:8d:2c:ed:06:c4:3c:e3:8d:85:2a:87:d0: 78:92:62:86:d5:8d:ea:67:22:b5:0d:9e:79:38:69: a8:e2:9a:97:e7:6f:e6:7c:57:9f:c1:54:19:e3:8f: 21:a4:c5:c2:15:56:a7:d4:10:d2:15:58:bf:6c:b0: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5D:45:58:43:CD:3B:21:CD:F6:5D:1B:DE:9A:7A:7E:65:ED:26:A7 X509v3 Authority Key Identifier: keyid:C0:AC:F7:6C:34:51:59:D3:24:13:15:F2:99:75:26:80:69:68:CB:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/C0ACF76C345159D3241315F2997526806968CB40.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/C0ACF76C345159D3241315F2997526806968CB40.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TBCOM/0/36312e35382e37322e302f32312d3234203d3e203137373039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.58.72.0/21 Signature Algorithm: sha256WithRSAEncryption 53:76:47:6d:14:56:3e:5f:30:66:e1:90:93:4c:e2:fb:c5:ee: 7c:f9:fd:1b:48:71:94:56:3d:4f:c5:88:e7:47:81:3c:8f:d5: 77:42:a3:ac:26:82:a6:a7:4a:5b:a6:dd:a5:fb:30:87:3c:13: 49:fd:89:e8:85:dd:c6:f1:32:bd:96:3b:da:50:a6:1a:f6:c9: 21:8a:d0:96:5d:c5:f7:00:eb:7b:0c:44:de:12:a8:da:3f:5f: 71:2b:89:ac:c4:c3:76:f5:eb:fb:f7:66:a5:8a:53:45:da:13: 54:08:ed:1d:93:d3:83:4a:15:fe:11:6f:63:93:b7:e8:96:ab: d5:d8:d4:11:2f:72:1d:7a:52:cd:de:98:6b:79:e4:23:48:82: ca:48:f9:02:d8:9b:48:19:5c:6e:63:cf:dc:e8:79:a9:d5:a7: 9d:86:1e:71:7d:c2:34:6e:35:b1:a7:db:fc:e7:67:81:c6:25: 4c:0d:d8:ce:5e:4f:15:ac:92:cf:6d:1f:f3:31:54:32:d7:46: af:be:3e:b1:c1:77:02:9c:87:05:69:6b:d1:99:0d:32:73:9c: 44:43:ab:c7:b8:98:38:60:72:aa:a3:58:b1:42:13:1f:ad:5d: 44:1e:89:b5:19:d0:8a:84:e3:98:da:2a:61:40:d5:e0:f0:c4: ea:8f:f8:fd -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUSUrxszWQPYQvzAnrNacfqYyq380wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBBQ0Y3NkMzNDUxNTlEMzI0MTMxNUYyOTk3NTI2ODA2 OTY4Q0I0MDAeFw0yNjA1MTExNzMyMTBaFw0yNzA1MTAxNzM3MTBaMDMxMTAvBgNV BAMTKDc4NUQ0NTU4NDNDRDNCMjFDREY2NUQxQkRFOUE3QTdFNjVFRDI2QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfyfjiXpH48HdT+iHlFXHy3Ccw 3nzh33PwZ+IrSYbQMW3799Eup/4MIYmjAzmphIwiMy21KRsmbfTcO19UOH1MjqKd D7S4MtX1KSjQsl+FPvPil0Bg0kz8nYuXQ2GE1jwW+PuJyDYIXIVgR8096Tq2o3iU C445knHF4FZJoXvha8+gegOJShR0slE3HqmuZlfdFvnjs//ZL4MM+RJuS+JEOHr+ dQri8s3jEv6Qxcbmscm1YTRg9HQ+nqhMXv8FSFJ7+W1e3Y0s7QbEPOONhSqH0HiS YobVjepnIrUNnnk4aajimpfnb+Z8V5/BVBnjjyGkxcIVVqfUENIVWL9ssNznAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUeF1FWEPNOyHN9l0b3pp6fmXtJqcwHwYDVR0j BBgwFoAUwKz3bDRRWdMkExXymXUmgGloy0AwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEJDT00v MC9DMEFDRjc2QzM0NTE1OUQzMjQxMzE1RjI5OTc1MjY4MDY5NjhDQjQwLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xL0MwQUNGNzZDMzQ1MTU5RDMyNDEzMTVGMjk5NzUy NjgwNjk2OENCNDAuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQkNPTS8wLzM2MzEyZTM1MzgyZTM3 MzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMTM3MzczMDM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD PTpIMA0GCSqGSIb3DQEBCwUAA4IBAQBTdkdtFFY+XzBm4ZCTTOL7xe58+f0bSHGU Vj1PxYjnR4E8j9V3QqOsJoKmp0pbpt2l+zCHPBNJ/Ynohd3G8TK9ljvaUKYa9skh itCWXcX3AOt7DETeEqjaP19xK4msxMN29ev792alilNF2hNUCO0dk9ODShX+EW9j k7folqvV2NQRL3IdelLN3phreeQjSILKSPkC2JtIGVxuY8/c6Hmp1aedhh5xfcI0 bjWxp9v852eBxiVMDdjOXk8VrJLPbR/zMVQy10avvj6xwXcCnIcFaWvRmQ0yc5xE Q6vHuJg4YHKqo1ixQhMfrV1EHom1GdCKhOOY2iphQNXg8MTqj/j9 -----END CERTIFICATE-----Generated at Wed May 13 04:02:23 2026 by rpki-client