$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/36312e36372e31362e302f32302d3234203d3e203138303439.roa File: 36312e36372e31362e302f32302d3234203d3e203138303439.roa (raw, json) Hash identifier: J+yPEl8By54tH+Jm4/avT7CSPEp9DA459UsBHRBFLME= Subject key identifier: A6:61:7A:01:A8:52:BB:34:1E:B0:5D:4E:2F:8F:77:3D:E0:86:D6:5D Certificate issuer: /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F Certificate serial: 30A5144BBB2F1924EA82FE38F14231B4476C9BEE Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TINP/0/36312e36372e31362e302f32302d3234203d3e203138303439.roa Signing time: Mon 11 May 2026 16:42:38 +0000 ROA not before: Mon 11 May 2026 16:37:38 +0000 ROA not after: Mon 10 May 2027 16:42:38 +0000 asID: 18049 IP address blocks: 61.67.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a5:14:4b:bb:2f:19:24:ea:82:fe:38:f1:42:31:b4:47:6c:9b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F Validity Not Before: May 11 16:37:38 2026 GMT Not After : May 10 16:42:38 2027 GMT Subject: CN=A6617A01A852BB341EB05D4E2F8F773DE086D65D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c5:dd:76:97:21:35:b1:21:aa:9a:e6:a9:77: f5:1e:7f:77:ca:f9:42:3b:d1:52:83:49:ae:4a:c4: 9d:f6:a2:24:8f:15:07:ee:8d:8e:c5:98:3e:fd:6c: 06:b0:85:db:ea:46:56:ea:ab:49:49:93:94:30:40: 5e:81:7e:4d:22:2f:83:fa:ec:04:40:4b:a1:82:8f: e0:8a:55:fd:39:28:53:e5:ac:eb:aa:e3:34:60:db: 73:f4:23:98:9a:59:69:3a:ba:8f:65:d2:7b:a9:92: 2c:f1:76:fa:90:b7:e8:dd:09:58:15:74:f7:53:7f: 95:59:e6:ad:d7:43:44:84:6e:2d:eb:44:a5:4e:16: 32:e0:66:02:b9:81:da:0b:ac:ab:16:e2:a3:4c:dc: 2f:12:f2:b5:2b:d4:32:41:b8:5f:f4:c8:be:ad:13: 19:1f:f6:7c:45:b6:b6:bd:3c:92:b2:f3:e2:89:18: 3c:0f:b5:8c:15:15:c5:22:6a:74:28:2a:0e:83:4b: 8d:e8:ed:ea:e8:2f:f5:2e:a5:65:2c:c7:2d:9f:2d: 37:52:7b:bc:cf:cc:6b:68:e6:af:ac:21:f3:cf:7c: 09:ee:d3:7c:3f:e1:a7:6e:39:21:bd:0b:08:c5:2d: ab:60:10:61:53:65:f5:5b:6d:5f:87:d0:d0:90:c9: c1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:61:7A:01:A8:52:BB:34:1E:B0:5D:4E:2F:8F:77:3D:E0:86:D6:5D X509v3 Authority Key Identifier: keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/36312e36372e31362e302f32302d3234203d3e203138303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.67.16.0/20 Signature Algorithm: sha256WithRSAEncryption 45:df:2f:5e:42:c2:0e:bc:be:55:2e:f5:d2:48:d1:42:de:16: 84:46:b1:30:bd:37:ac:05:5e:8d:3c:53:3b:cb:59:47:55:e4: 08:c6:e9:b5:4a:3e:46:66:d7:38:d8:35:15:41:c1:a5:75:14: 43:3a:c7:52:21:18:32:0e:b4:4a:40:cb:72:0f:59:93:1b:21: 4d:ff:b4:f1:67:73:90:4b:c0:88:af:ba:4d:fc:e4:d5:43:61: 21:13:49:5c:42:8a:0b:a2:7e:f0:80:e6:32:95:68:1b:b3:f1: 0a:0c:d4:a9:5b:e4:de:61:e4:c9:4d:f1:a7:1d:71:f1:1b:5e: f0:a5:3c:a1:4f:78:a5:5a:7b:9d:83:f9:91:d8:95:9e:b4:bd: c4:9e:18:61:98:08:db:ff:f5:16:cf:7e:a6:1e:bb:30:23:32: 2d:60:c0:07:f8:d1:ab:b9:c6:29:28:53:b4:97:7a:9e:83:e6: 97:b3:3d:cb:5b:40:1d:1c:de:d0:97:47:fa:ae:76:c4:7e:36: 68:86:0d:18:04:2f:65:d1:b8:1a:f0:50:e0:85:e0:24:d5:ab: d7:86:43:72:87:bb:26:53:68:b8:e4:b7:3a:eb:f7:0a:2d:ed: a2:fe:84:16:86:4c:dc:fa:c4:f6:6f:2f:87:de:49:04:d2:d3: c9:f3:c0:80 -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUMKUUS7svGSTqgv448UIxtEdsm+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3M0Qy NDdBNTYwRjAeFw0yNjA1MTExNjM3MzhaFw0yNzA1MTAxNjQyMzhaMDMxMTAvBgNV BAMTKEE2NjE3QTAxQTg1MkJCMzQxRUIwNUQ0RTJGOEY3NzNERTA4NkQ2NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXxd12lyE1sSGqmuapd/Uef3fK +UI70VKDSa5KxJ32oiSPFQfujY7FmD79bAawhdvqRlbqq0lJk5QwQF6Bfk0iL4P6 7ARAS6GCj+CKVf05KFPlrOuq4zRg23P0I5iaWWk6uo9l0nupkizxdvqQt+jdCVgV dPdTf5VZ5q3XQ0SEbi3rRKVOFjLgZgK5gdoLrKsW4qNM3C8S8rUr1DJBuF/0yL6t Exkf9nxFtra9PJKy8+KJGDwPtYwVFcUianQoKg6DS43o7eroL/UupWUsxy2fLTdS e7zPzGto5q+sIfPPfAnu03w/4aduOSG9CwjFLatgEGFTZfVbbV+H0NCQycETAgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUpmF6AahSuzQesF1OL493PeCG1l0wHwYDVR0j BBgwFoAUvML37QzVZ3yYh+DyS6jnPSR6Vg8wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElOUC8w L0JDQzJGN0VEMENENTY3N0M5ODg3RTBGMjRCQThFNzNEMjQ3QTU2MEYuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3 M0QyNDdBNTYwRi5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RJTlAvMC8zNjMxMmUzNjM3MmUzMTM2 MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzODMwMzQzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBD1D EDANBgkqhkiG9w0BAQsFAAOCAQEARd8vXkLCDry+VS710kjRQt4WhEaxML03rAVe jTxTO8tZR1XkCMbptUo+RmbXONg1FUHBpXUUQzrHUiEYMg60SkDLcg9ZkxshTf+0 8WdzkEvAiK+6Tfzk1UNhIRNJXEKKC6J+8IDmMpVoG7PxCgzUqVvk3mHkyU3xpx1x 8Rte8KU8oU94pVp7nYP5kdiVnrS9xJ4YYZgI2//1Fs9+ph67MCMyLWDAB/jRq7nG KShTtJd6noPml7M9y1tAHRze0JdH+q52xH42aIYNGAQvZdG4GvBQ4IXgJNWr14ZD coe7JlNouOS3Ouv3Ci3tov6EFoZM3PrE9m8vh95JBNLTyfPAgA== -----END CERTIFICATE-----Generated at Tue May 12 22:49:45 2026 by rpki-client