$ rpki-client -vvf rpkica.twnic.tw/rpki/TIH/0/323430333a376634303a663030303a3a2f34382d3634203d3e20313331363339.roa File: 323430333a376634303a663030303a3a2f34382d3634203d3e20313331363339.roa (raw, json) Hash identifier: ZRXaYx+Nrn2iAFlJIwnl9HLp8Eud4rItrm9qIQL8K3o= Subject key identifier: 46:52:A9:7F:86:EE:43:1A:4B:FC:F5:17:D6:0D:01:5B:A9:82:5B:E2 Certificate issuer: /CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3 Certificate serial: 5598B5AAB9273915E11CD7A87275413498A69F3C Authority key identifier: 56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TIH/0/323430333a376634303a663030303a3a2f34382d3634203d3e20313331363339.roa Signing time: Mon 11 May 2026 17:06:02 +0000 ROA not before: Mon 11 May 2026 17:01:02 +0000 ROA not after: Mon 10 May 2027 17:06:02 +0000 asID: 131639 IP address blocks: 2403:7f40:f000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:98:b5:aa:b9:27:39:15:e1:1c:d7:a8:72:75:41:34:98:a6:9f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3 Validity Not Before: May 11 17:01:02 2026 GMT Not After : May 10 17:06:02 2027 GMT Subject: CN=4652A97F86EE431A4BFCF517D60D015BA9825BE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:f5:1a:04:f4:02:a5:fb:0f:dd:0a:c1:f1: af:fe:4e:1a:04:4a:ce:5c:61:56:73:00:63:c9:f3: 81:2b:b0:b4:57:65:e2:18:04:3f:dc:92:a5:02:12: d1:f5:95:96:ff:79:e6:a2:75:28:52:1d:59:cf:b1: 1a:be:78:59:8f:67:f6:40:76:b7:ce:fd:dd:21:3d: a6:a7:cb:81:1a:6e:fa:96:84:67:8c:c7:2b:49:cd: 7b:c1:c6:b6:c1:20:a2:49:65:5e:31:df:4a:d0:bf: 0d:f7:a4:a1:1f:8a:e3:e3:21:95:c0:cb:e4:2e:7f: 78:36:94:3e:59:a8:0e:b5:9a:5e:86:fc:0a:41:54: e4:63:33:96:6d:46:13:9e:c1:3d:a2:2a:3e:65:e7: 4e:09:e9:30:ce:af:75:f3:77:ef:8d:d9:f7:f6:03: 4a:30:0d:56:e1:c6:d9:c0:bf:5d:f2:18:1a:79:77: 06:18:9a:59:5e:e3:a3:18:83:5f:61:eb:66:54:f5: 58:17:0f:7c:fa:60:7f:70:6e:0c:77:02:80:96:49: 3f:5c:d8:45:f5:2e:65:cc:d6:1c:6d:dc:75:f0:e4: 48:39:70:72:8e:d7:41:59:52:ae:c9:14:3e:d4:f9: 80:f5:b1:26:2a:e1:3e:fc:70:42:3d:cd:92:1a:58: a2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:52:A9:7F:86:EE:43:1A:4B:FC:F5:17:D6:0D:01:5B:A9:82:5B:E2 X509v3 Authority Key Identifier: keyid:56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TIH/0/323430333a376634303a663030303a3a2f34382d3634203d3e20313331363339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:7f40:f000::/48 Signature Algorithm: sha256WithRSAEncryption 6d:fe:91:f8:07:16:9b:2b:09:3b:43:96:1a:21:ca:3e:a6:a1: e6:cd:95:3b:92:8c:b5:1f:78:71:9e:b4:ad:47:40:6f:d7:c8: 47:96:7e:22:9e:e9:76:e9:d9:d0:9e:0f:c9:97:3e:d8:50:fb: 9a:67:27:cb:a4:6b:19:92:11:fe:65:b3:ca:c1:85:d9:2b:17: 15:f4:08:1d:bd:26:23:69:45:2e:2d:df:a0:05:b6:98:46:56: 30:c6:4a:34:ee:10:25:49:63:2e:78:49:09:35:20:35:81:27: 73:8c:6c:3a:fc:3e:7f:12:d3:6a:ff:eb:66:e4:b3:d2:21:dd: 28:23:46:eb:a5:e5:22:89:a1:78:b1:ae:99:4e:86:30:cb:19: e8:3a:1b:dc:3c:eb:ba:00:de:72:27:a3:de:df:61:91:7a:98: d1:ae:08:20:ae:1f:5b:d5:4f:6d:55:e6:bb:d6:bf:4e:e1:97: 00:b0:ad:0b:7f:4c:96:bb:7e:e6:d8:4a:e0:d1:e1:99:3b:68: 21:d9:8d:28:f6:81:5d:cf:49:5d:29:88:fb:9d:da:0e:82:d4: 9e:06:a2:35:4e:15:01:9a:c6:ff:76:b7:4c:7a:c8:ce:0c:44: 2e:be:9d:fd:d5:fd:0c:7d:c6:75:3e:53:06:76:7b:0c:2f:db: b4:d8:4a:90 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUVZi1qrknORXhHNeocnVBNJimnzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlD Q0Y1MEVBMzAeFw0yNjA1MTExNzAxMDJaFw0yNzA1MTAxNzA2MDJaMDMxMTAvBgNV BAMTKDQ2NTJBOTdGODZFRTQzMUE0QkZDRjUxN0Q2MEQwMTVCQTk4MjVCRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPBPUaBPQCpfsP3QrB8a/+ThoE Ss5cYVZzAGPJ84ErsLRXZeIYBD/ckqUCEtH1lZb/eeaidShSHVnPsRq+eFmPZ/ZA drfO/d0hPaany4EabvqWhGeMxytJzXvBxrbBIKJJZV4x30rQvw33pKEfiuPjIZXA y+Quf3g2lD5ZqA61ml6G/ApBVORjM5ZtRhOewT2iKj5l504J6TDOr3Xzd++N2ff2 A0owDVbhxtnAv13yGBp5dwYYmlle46MYg19h62ZU9VgXD3z6YH9wbgx3AoCWST9c 2EX1LmXM1hxt3HXw5Eg5cHKO10FZUq7JFD7U+YD1sSYq4T78cEI9zZIaWKJFAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQURlKpf4buQxpL/PUX1g0BW6mCW+IwHwYDVR0j BBgwFoAUVtLiXkCf6VahSo9aXA7qacz1DqMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAv NTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlDQ0Y1MEVBMy5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS81NkQyRTI1RTQwOUZFOTU2QTE0QThGNUE1QzBFRUE2 OUNDRjUwRUEzLmNlcjCBgwYIKwYBBQUHAQsEdzB1MHMGCCsGAQUFBzALhmdyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RJSC8wLzMyMzQzMDMzM2EzNzY2MzQz MDNhNjYzMDMwMzAzYTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMTMzMzEzNjMzMzku cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAkA39A8AAwDQYJKoZIhvcNAQELBQADggEBAG3+kfgHFpsrCTtD lhohyj6moebNlTuSjLUfeHGetK1HQG/XyEeWfiKe6Xbp2dCeD8mXPthQ+5pnJ8uk axmSEf5ls8rBhdkrFxX0CB29JiNpRS4t36AFtphGVjDGSjTuECVJYy54SQk1IDWB J3OMbDr8Pn8S02r/62bks9Ih3SgjRuul5SKJoXixrplOhjDLGeg6G9w867oA3nIn o97fYZF6mNGuCCCuH1vVT21V5rvWv07hlwCwrQt/TJa7fubYSuDR4Zk7aCHZjSj2 gV3PSV0piPud2g6C1J4GojVOFQGaxv92t0x6yM4MRC6+nf3V/Qx9xnU+UwZ2ewwv 27TYSpA= -----END CERTIFICATE-----Generated at Wed May 13 17:44:54 2026 by rpki-client