$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/35382e39392e302e302f31382d3234203d3e2034373830.roa File: 35382e39392e302e302f31382d3234203d3e2034373830.roa (raw, json) Hash identifier: FaO0ocS+d1/6PUb8prDNt7a9l1UGZpiQkD24IdtJUeg= Subject key identifier: A0:3E:56:A9:EE:F6:46:2E:E7:B2:64:70:F9:68:B3:68:E9:16:41:F4 Certificate issuer: /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F Certificate serial: 1DEBE8AC75767A0D057D96832A423DA7A05DB7AD Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TINP/0/35382e39392e302e302f31382d3234203d3e2034373830.roa Signing time: Mon 11 May 2026 17:10:50 +0000 ROA not before: Mon 11 May 2026 17:05:50 +0000 ROA not after: Mon 10 May 2027 17:10:50 +0000 asID: 4780 IP address blocks: 58.99.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:eb:e8:ac:75:76:7a:0d:05:7d:96:83:2a:42:3d:a7:a0:5d:b7:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F Validity Not Before: May 11 17:05:50 2026 GMT Not After : May 10 17:10:50 2027 GMT Subject: CN=A03E56A9EEF6462EE7B26470F968B368E91641F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:bc:59:bd:fe:c9:7a:f3:34:f7:a7:e0:97: 13:9d:f7:b2:01:bb:e6:97:3e:09:06:23:59:04:c8: f9:8a:07:60:df:27:fe:e9:08:f0:10:c7:b4:4d:05: fe:2f:3c:be:01:6a:83:1a:1f:d1:dd:06:67:d0:32: cc:00:11:70:70:f7:14:e6:bb:d6:72:48:03:16:4b: 8c:18:19:99:30:cc:03:6f:8c:43:d7:5b:99:12:9e: 7a:f7:cd:c7:5c:9c:db:57:f6:2b:42:63:8a:fa:a6: e3:bb:43:c5:98:6b:2c:1a:60:e0:fc:42:b2:dd:e5: 52:c8:13:5f:83:86:3a:67:e1:e2:ee:f5:1d:80:df: 0f:3b:05:42:01:da:08:ad:54:7e:39:86:74:b3:51: f6:a0:07:d0:b6:33:51:73:8a:89:12:5d:61:ca:c0: 8a:24:b9:b9:55:10:3f:84:37:63:a1:9c:cc:5b:a6: e4:b6:72:e4:32:72:39:27:b0:6d:35:75:68:64:1b: 90:4c:65:52:d6:e7:95:f8:57:6a:63:ec:0e:1a:6b: 66:da:f2:e6:c8:de:3e:32:23:00:6f:c9:87:ae:3c: 49:e7:d6:0a:bd:b6:13:9e:b4:da:0b:04:b0:d9:84: 40:f3:99:42:9f:76:83:4c:25:b7:57:35:a3:4f:b1: d1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3E:56:A9:EE:F6:46:2E:E7:B2:64:70:F9:68:B3:68:E9:16:41:F4 X509v3 Authority Key Identifier: keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/35382e39392e302e302f31382d3234203d3e2034373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.99.0.0/18 Signature Algorithm: sha256WithRSAEncryption 8c:40:3f:75:a9:07:de:c0:35:d5:4c:be:06:e9:c7:19:5c:54: db:74:bf:b7:66:75:43:a2:cd:23:3a:cf:ab:6f:24:2c:76:ba: 98:6a:9d:64:76:c8:0f:af:13:b4:1c:37:b6:71:a2:48:be:ca: a8:41:92:a0:17:04:93:ef:3b:1d:a6:4f:d6:c6:9c:a6:9b:db: 2b:c9:47:47:82:54:e7:a5:a0:58:a9:0d:35:3a:5a:f4:fc:19: 19:dc:b4:57:b4:db:7f:0d:c6:9b:81:3a:b9:dd:fe:d8:b9:e4: 35:22:08:c7:6e:0f:cf:12:bd:d1:db:ed:95:55:4b:d5:72:0e: 2a:1c:57:60:db:ba:72:c4:9c:cb:c1:d5:f8:c0:36:ed:1e:92: d0:6f:ab:15:91:6e:a5:22:4c:30:b6:b5:73:f4:6f:33:59:d1: 39:3a:4a:bc:34:0b:1c:c5:4c:84:d9:3e:40:6f:70:94:c2:d3: 34:fc:5f:50:8e:b9:75:ae:bb:6b:13:1f:da:7d:4d:5d:2d:6e: fd:87:00:ca:21:b6:b1:1a:cd:47:c6:35:21:0c:3f:79:75:6c: 3b:a8:1d:cc:db:d3:3b:34:8b:b4:0d:ec:1d:9c:77:e6:e4:60: 1f:68:0c:45:3d:d2:18:89:e7:a0:92:4c:f7:70:f9:e1:d3:c8: df:57:57:13 -----BEGIN CERTIFICATE----- MIIEzTCCA7WgAwIBAgIUHevorHV2eg0FfZaDKkI9p6Bdt60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3M0Qy NDdBNTYwRjAeFw0yNjA1MTExNzA1NTBaFw0yNzA1MTAxNzEwNTBaMDMxMTAvBgNV BAMTKEEwM0U1NkE5RUVGNjQ2MkVFN0IyNjQ3MEY5NjhCMzY4RTkxNjQxRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJLxZvf7JevM096fglxOd97IB u+aXPgkGI1kEyPmKB2DfJ/7pCPAQx7RNBf4vPL4BaoMaH9HdBmfQMswAEXBw9xTm u9ZySAMWS4wYGZkwzANvjEPXW5kSnnr3zcdcnNtX9itCY4r6puO7Q8WYaywaYOD8 QrLd5VLIE1+Dhjpn4eLu9R2A3w87BUIB2gitVH45hnSzUfagB9C2M1FziokSXWHK wIokublVED+EN2OhnMxbpuS2cuQycjknsG01dWhkG5BMZVLW55X4V2pj7A4aa2ba 8ubI3j4yIwBvyYeuPEnn1gq9thOetNoLBLDZhEDzmUKfdoNMJbdXNaNPsdH/AgMB AAGjggHXMIIB0zAdBgNVHQ4EFgQUoD5Wqe72Ri7nsmRw+WizaOkWQfQwHwYDVR0j BBgwFoAUvML37QzVZ3yYh+DyS6jnPSR6Vg8wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElOUC8w L0JDQzJGN0VEMENENTY3N0M5ODg3RTBGMjRCQThFNzNEMjQ3QTU2MEYuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3 M0QyNDdBNTYwRi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzALhlZyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RJTlAvMC8zNTM4MmUzOTM5MmUzMDJl MzAyZjMxMzgyZDMyMzQyMDNkM2UyMDM0MzczODMwLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGOmMAMA0G CSqGSIb3DQEBCwUAA4IBAQCMQD91qQfewDXVTL4G6ccZXFTbdL+3ZnVDos0jOs+r byQsdrqYap1kdsgPrxO0HDe2caJIvsqoQZKgFwST7zsdpk/Wxpymm9sryUdHglTn paBYqQ01Olr0/BkZ3LRXtNt/DcabgTq53f7YueQ1IgjHbg/PEr3R2+2VVUvVcg4q HFdg27pyxJzLwdX4wDbtHpLQb6sVkW6lIkwwtrVz9G8zWdE5Okq8NAscxUyE2T5A b3CUwtM0/F9Qjrl1rrtrEx/afU1dLW79hwDKIbaxGs1HxjUhDD95dWw7qB3M29M7 NIu0DewdnHfm5GAfaAxFPdIYieegkkz3cPnh08jfV1cT -----END CERTIFICATE-----Generated at Tue May 12 22:56:15 2026 by rpki-client