$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/34392e3231332e3132382e302f31372d3234203d3e203138303439.roa File: 34392e3231332e3132382e302f31372d3234203d3e203138303439.roa (raw, json) Hash identifier: O+fKDvr5iK/DFMkJaO0nbDsenRDyeSxPSsSdg8z509M= Subject key identifier: 63:6D:20:B7:3E:B4:94:D3:E2:E8:2C:FC:04:BC:6B:72:31:56:B4:3C Certificate issuer: /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F Certificate serial: 04E26758F8A51E6E83018F8458CC8C59B21A5332 Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TINP/0/34392e3231332e3132382e302f31372d3234203d3e203138303439.roa Signing time: Mon 11 May 2026 16:42:11 +0000 ROA not before: Mon 11 May 2026 16:37:11 +0000 ROA not after: Mon 10 May 2027 16:42:11 +0000 asID: 18049 IP address blocks: 49.213.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e2:67:58:f8:a5:1e:6e:83:01:8f:84:58:cc:8c:59:b2:1a:53:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F Validity Not Before: May 11 16:37:11 2026 GMT Not After : May 10 16:42:11 2027 GMT Subject: CN=636D20B73EB494D3E2E82CFC04BC6B723156B43C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:11:c1:aa:e5:2e:98:8f:cf:99:59:99:d8:90: 13:69:0f:b1:4f:e7:ca:bd:a8:8a:ff:96:89:ef:8b: 5a:15:15:38:51:3f:9b:99:b7:5f:f7:44:2c:9f:24: 65:b7:4c:17:55:41:9d:fd:3a:fc:c6:ca:f7:c1:bc: b0:37:e1:97:fc:19:a5:4d:15:05:dd:eb:42:94:2d: cf:fd:f9:61:4e:82:2f:07:b6:80:aa:e8:03:da:34: 15:2c:8a:8d:2a:18:1a:26:af:cb:89:ce:1e:08:fa: 18:3b:04:14:1b:4e:f1:85:e7:17:43:ed:7f:4f:28: 2b:04:d0:b1:52:55:87:0e:fd:7e:89:fe:b3:ab:69: 92:74:f3:57:39:a6:2d:ba:5b:34:4d:9a:72:15:03: 25:2c:73:19:ea:6a:10:bc:ca:2f:a8:78:f5:6b:a4: 8c:09:8e:d2:1c:30:9b:0f:43:3a:8a:e8:5d:1c:6b: e0:40:0d:0c:30:8d:0c:c5:54:34:49:df:1b:5c:4a: 89:78:a4:c3:85:67:c4:75:01:68:5c:6d:da:45:eb: f5:5a:51:78:3c:54:8d:87:1c:6d:41:b7:33:87:07: c6:99:3b:1b:6a:fc:4e:c1:ee:6a:71:57:19:72:a7: e8:0b:c5:08:63:41:3b:db:b4:8e:6c:a5:94:73:b9: 9a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6D:20:B7:3E:B4:94:D3:E2:E8:2C:FC:04:BC:6B:72:31:56:B4:3C X509v3 Authority Key Identifier: keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/34392e3231332e3132382e302f31372d3234203d3e203138303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.213.128.0/17 Signature Algorithm: sha256WithRSAEncryption 96:5f:56:6d:12:16:f5:69:0e:ad:dd:64:69:fd:48:67:fd:5a: 78:7c:95:a3:2e:7f:01:d7:2a:e2:1e:76:b4:36:8c:08:45:6b: 2b:0b:fe:60:f6:16:16:a8:7d:e6:40:83:57:ba:c4:45:8c:fe: 5b:3c:ae:07:57:26:0f:dc:7d:19:73:59:1a:62:e4:93:5f:92: a8:e2:f3:b1:99:3d:39:1d:1d:62:15:27:ea:3c:da:bf:91:cd: 2b:8d:57:56:f8:e9:15:92:71:2f:5b:a1:8b:fd:bc:09:90:ed: a7:20:e4:5d:2e:57:11:aa:7c:07:e3:75:75:54:ca:a3:d7:36: e8:42:a7:51:33:d2:08:da:c0:a2:d9:89:92:b9:f0:b5:dd:50: 6a:ed:fb:e2:f5:7c:d2:26:5c:53:9c:ec:57:df:94:bf:0e:c7: 37:57:81:ac:2d:7d:17:80:87:e9:bb:c8:8f:5a:fe:d4:4a:b9: ff:eb:df:51:43:af:b6:b8:4d:97:ba:96:9d:4b:79:fc:46:ce: 25:1d:67:84:fa:f2:0c:c0:95:44:9d:05:74:9a:dc:bc:0d:ac: 70:1d:e8:d7:7f:a5:1c:1c:96:06:1b:de:53:e5:cb:45:2c:dd: ab:ab:0c:7c:bc:e2:d7:db:58:12:1f:a7:e1:cf:dd:63:e0:dc: 6a:74:27:de -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUBOJnWPilHm6DAY+EWMyMWbIaUzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3M0Qy NDdBNTYwRjAeFw0yNjA1MTExNjM3MTFaFw0yNzA1MTAxNjQyMTFaMDMxMTAvBgNV BAMTKDYzNkQyMEI3M0VCNDk0RDNFMkU4MkNGQzA0QkM2QjcyMzE1NkI0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDEcGq5S6Yj8+ZWZnYkBNpD7FP 58q9qIr/lonvi1oVFThRP5uZt1/3RCyfJGW3TBdVQZ39OvzGyvfBvLA34Zf8GaVN FQXd60KULc/9+WFOgi8HtoCq6APaNBUsio0qGBomr8uJzh4I+hg7BBQbTvGF5xdD 7X9PKCsE0LFSVYcO/X6J/rOraZJ081c5pi26WzRNmnIVAyUscxnqahC8yi+oePVr pIwJjtIcMJsPQzqK6F0ca+BADQwwjQzFVDRJ3xtcSol4pMOFZ8R1AWhcbdpF6/Va UXg8VI2HHG1BtzOHB8aZOxtq/E7B7mpxVxlyp+gLxQhjQTvbtI5spZRzuZo5AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUY20gtz60lNPi6Cz8BLxrcjFWtDwwHwYDVR0j BBgwFoAUvML37QzVZ3yYh+DyS6jnPSR6Vg8wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElOUC8w L0JDQzJGN0VEMENENTY3N0M5ODg3RTBGMjRCQThFNzNEMjQ3QTU2MEYuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3 M0QyNDdBNTYwRi5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RJTlAvMC8zNDM5MmUzMjMxMzMyZTMx MzIzODJlMzAyZjMxMzcyZDMyMzQyMDNkM2UyMDMxMzgzMDM0Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAcx1YAwDQYJKoZIhvcNAQELBQADggEBAJZfVm0SFvVpDq3dZGn9SGf9Wnh8laMu fwHXKuIedrQ2jAhFaysL/mD2FhaofeZAg1e6xEWM/ls8rgdXJg/cfRlzWRpi5JNf kqji87GZPTkdHWIVJ+o82r+RzSuNV1b46RWScS9boYv9vAmQ7acg5F0uVxGqfAfj dXVUyqPXNuhCp1Ez0gjawKLZiZK58LXdUGrt++L1fNImXFOc7FfflL8OxzdXgawt fReAh+m7yI9a/tRKuf/r31FDr7a4TZe6lp1LefxGziUdZ4T68gzAlUSdBXSa3LwN rHAd6Nd/pRwclgYb3lPly0Us3aurDHy84tfbWBIfp+HP3WPg3Gp0J94= -----END CERTIFICATE-----Generated at Wed May 13 04:00:02 2026 by rpki-client