$ rpki-client -vvf rpkica.twnic.tw/rpki/TIH/0/3130332e3132392e3134352e302f32342d3234203d3e203338323534.roa File: 3130332e3132392e3134352e302f32342d3234203d3e203338323534.roa (raw, json) Hash identifier: xP411/3P+QncE7UBCG9FjIpMvagWAoQKRii7/7dwrps= Subject key identifier: 54:05:F1:F6:F0:60:01:27:F1:E4:07:38:30:E9:2E:EF:93:D5:2C:43 Certificate issuer: /CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3 Certificate serial: 0472210221DFC115E3BA8E936B34090F3638B44F Authority key identifier: 56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TIH/0/3130332e3132392e3134352e302f32342d3234203d3e203338323534.roa Signing time: Mon 11 May 2026 17:37:29 +0000 ROA not before: Mon 11 May 2026 17:32:29 +0000 ROA not after: Mon 10 May 2027 17:37:29 +0000 asID: 38254 IP address blocks: 103.129.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:72:21:02:21:df:c1:15:e3:ba:8e:93:6b:34:09:0f:36:38:b4:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3 Validity Not Before: May 11 17:32:29 2026 GMT Not After : May 10 17:37:29 2027 GMT Subject: CN=5405F1F6F0600127F1E4073830E92EEF93D52C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5a:6f:51:ef:8e:4f:be:52:32:1b:e3:51:bb: 61:f4:4b:74:5c:36:8e:5d:dd:d6:bb:6e:ab:c7:02: 21:df:53:70:fe:f0:e3:14:a2:41:63:ee:32:41:a0: 97:3a:17:64:4d:28:42:30:0c:3f:cd:af:6b:fe:06: 84:74:ad:e8:be:2d:02:82:d6:7e:fd:9b:63:b2:f0: 9a:0b:a5:a8:40:58:67:f9:2d:de:35:22:a7:04:8f: ad:ec:3d:a3:6a:87:11:08:2f:38:d9:89:ef:bc:88: fa:12:3f:3d:40:92:50:04:c5:b8:36:83:dd:9d:3e: e2:55:d1:ac:17:5a:6f:52:8a:3d:b6:bb:1d:ea:8a: e9:eb:94:c5:d4:4b:cc:37:e9:fb:67:3d:71:e6:7c: 6c:12:44:53:0e:b8:80:41:7f:83:0a:d6:46:16:b9: d0:02:76:fd:34:eb:a8:56:0c:56:40:52:22:59:7a: e5:44:ca:98:11:81:df:1e:cb:4a:8b:1d:db:82:78: de:28:3e:ad:50:4f:72:ed:26:f7:91:75:31:49:78: 34:f3:77:87:ca:9e:12:61:9d:6d:cb:17:c0:73:bf: d1:fd:cd:c2:da:f1:b1:73:b4:65:90:c8:bf:36:f9: cb:3c:b1:a1:5d:54:98:9b:9c:2a:1b:5f:58:9d:83: 97:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:05:F1:F6:F0:60:01:27:F1:E4:07:38:30:E9:2E:EF:93:D5:2C:43 X509v3 Authority Key Identifier: keyid:56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TIH/0/3130332e3132392e3134352e302f32342d3234203d3e203338323534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.145.0/24 Signature Algorithm: sha256WithRSAEncryption 81:df:c4:62:16:e2:83:b5:85:24:36:27:bd:0d:0d:7c:2e:f1: f2:7b:2c:c9:9a:34:6e:72:c1:8d:d1:36:06:7f:42:a3:c2:ec: db:95:72:23:79:6d:ca:ce:e8:50:a8:89:4c:9d:61:f5:5e:7a: ae:fb:e0:44:78:9c:df:a4:cf:45:ad:5c:1d:92:0d:fe:31:ec: a6:c8:3a:9a:f4:2b:df:66:18:bb:0f:b4:19:7c:67:0b:ff:f2: 54:20:65:7e:18:d6:15:0b:f8:3a:01:5a:dd:f6:de:9d:e1:90: a6:03:fe:13:45:51:dd:2c:f1:47:85:67:a0:37:3b:ac:cd:e8: 51:7a:c6:dd:64:f9:51:ee:fa:8b:73:14:ac:48:01:68:5f:52: 5d:a0:34:9f:90:1b:5c:8e:e4:06:0c:89:29:b5:9d:1c:3e:be: da:ec:2d:46:b2:02:42:7b:40:b8:52:34:43:9f:c1:35:a6:80: f9:4e:13:94:66:4e:55:97:d6:62:2d:9c:cd:29:c7:cd:08:bb: be:a8:a5:01:b8:9c:4a:16:f4:ca:49:b2:83:6b:3a:9e:75:8b: fb:1b:bf:90:fb:65:82:e9:16:12:5c:4f:f7:df:c8:d1:e7:0c: e1:c4:9f:8e:1f:79:4e:96:bf:a4:d1:4b:9b:74:b4:b9:6a:91: 9e:5b:c6:d6 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUBHIhAiHfwRXjuo6TazQJDzY4tE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlD Q0Y1MEVBMzAeFw0yNjA1MTExNzMyMjlaFw0yNzA1MTAxNzM3MjlaMDMxMTAvBgNV BAMTKDU0MDVGMUY2RjA2MDAxMjdGMUU0MDczODMwRTkyRUVGOTNENTJDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIWm9R745PvlIyG+NRu2H0S3Rc No5d3da7bqvHAiHfU3D+8OMUokFj7jJBoJc6F2RNKEIwDD/Nr2v+BoR0rei+LQKC 1n79m2Oy8JoLpahAWGf5Ld41IqcEj63sPaNqhxEILzjZie+8iPoSPz1AklAExbg2 g92dPuJV0awXWm9Sij22ux3qiunrlMXUS8w36ftnPXHmfGwSRFMOuIBBf4MK1kYW udACdv0066hWDFZAUiJZeuVEypgRgd8ey0qLHduCeN4oPq1QT3LtJveRdTFJeDTz d4fKnhJhnW3LF8Bzv9H9zcLa8bFztGWQyL82+cs8saFdVJibnCobX1idg5e1AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUVAXx9vBgASfx5Ac4MOku75PVLEMwHwYDVR0j BBgwFoAUVtLiXkCf6VahSo9aXA7qacz1DqMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAv NTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlDQ0Y1MEVBMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS81NkQyRTI1RTQwOUZFOTU2QTE0QThGNUE1QzBFRUE2 OUNDRjUwRUEzLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAvMzEzMDMzMmUzMTMyMzkyZTMx MzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgzMjM1MzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABngZEwDQYJKoZIhvcNAQELBQADggEBAIHfxGIW4oO1hSQ2J70NDXwu8fJ7LMma NG5ywY3RNgZ/QqPC7NuVciN5bcrO6FCoiUydYfVeeq774ER4nN+kz0WtXB2SDf4x 7KbIOpr0K99mGLsPtBl8Zwv/8lQgZX4Y1hUL+DoBWt323p3hkKYD/hNFUd0s8UeF Z6A3O6zN6FF6xt1k+VHu+otzFKxIAWhfUl2gNJ+QG1yO5AYMiSm1nRw+vtrsLUay AkJ7QLhSNEOfwTWmgPlOE5RmTlWX1mItnM0px80Iu76opQG4nEoW9MpJsoNrOp51 i/sbv5D7ZYLpFhJcT/ffyNHnDOHEn44feU6Wv6TRS5t0tLlqkZ5bxtY= -----END CERTIFICATE-----Generated at Wed May 13 04:26:51 2026 by rpki-client