$ rpki-client -vvf rpkica.twnic.tw/rpki/TW1033/1/3135312e3135382e3136382e302f32332d3332203d3e20313331363331.roa File: 3135312e3135382e3136382e302f32332d3332203d3e20313331363331.roa (raw, json) Hash identifier: Cd6OMIoEih6thkDQvlDIyWr358PSZmpUGiX23euG7pQ= Subject key identifier: 0E:7A:0C:3A:3B:5D:48:1A:87:57:1D:4E:18:1B:B8:2F:EA:CE:0C:6A Certificate issuer: /CN=138A054AE20232FE74DA41A7D1FB6684BFF8B631 Certificate serial: 665F6C2798EE5C921E9D2D3F007E23AA6CD6E321 Authority key identifier: 13:8A:05:4A:E2:02:32:FE:74:DA:41:A7:D1:FB:66:84:BF:F8:B6:31 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TW1033/1/3135312e3135382e3136382e302f32332d3332203d3e20313331363331.roa Signing time: Mon 11 May 2026 17:58:10 +0000 ROA not before: Mon 11 May 2026 17:53:10 +0000 ROA not after: Mon 10 May 2027 17:58:10 +0000 asID: 131631 IP address blocks: 151.158.168.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5f:6c:27:98:ee:5c:92:1e:9d:2d:3f:00:7e:23:aa:6c:d6:e3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=138A054AE20232FE74DA41A7D1FB6684BFF8B631 Validity Not Before: May 11 17:53:10 2026 GMT Not After : May 10 17:58:10 2027 GMT Subject: CN=0E7A0C3A3B5D481A87571D4E181BB82FEACE0C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:07:6a:dd:37:60:b5:98:48:78:0e:a0:35:53: 70:11:0b:f7:d9:c5:04:82:1c:39:0c:8c:dd:23:fd: 37:1e:83:9f:5a:68:65:ed:77:4b:18:a2:8e:34:0e: 15:9e:30:f3:50:20:a9:e0:51:b9:4d:ef:a9:88:65: ca:2e:18:30:06:7b:8a:05:76:87:06:43:6f:88:f2: 02:e8:db:b8:76:81:49:af:88:76:3c:0c:c5:bf:d8: 9d:09:25:1b:63:54:4b:fc:b4:51:6c:95:de:49:24: 32:5c:ea:ea:f4:39:1d:20:87:50:ed:ad:14:7b:9a: f4:42:eb:00:45:d4:72:f3:5f:6e:ab:01:50:9c:3c: a5:b6:2c:1d:7e:d2:22:13:7d:c0:1d:06:cc:83:ea: bd:cb:dc:10:ba:9a:b7:85:21:a0:76:4a:87:9e:64: e7:46:98:d0:4a:58:dc:b9:3c:c0:5d:fb:fc:34:4c: 3a:61:36:5a:e1:15:e5:96:7a:9f:f0:4c:33:fa:eb: ce:56:c2:06:07:15:d0:1c:55:e3:c6:0f:9a:e0:5b: 90:e8:31:47:f5:5c:01:5a:1e:13:59:a8:0a:e0:54: 04:7b:f7:b6:38:8a:f6:a9:52:15:ac:20:65:cf:c8: 94:a7:12:54:73:4a:bc:5d:d4:1f:9d:e8:9f:57:fb: 30:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7A:0C:3A:3B:5D:48:1A:87:57:1D:4E:18:1B:B8:2F:EA:CE:0C:6A X509v3 Authority Key Identifier: keyid:13:8A:05:4A:E2:02:32:FE:74:DA:41:A7:D1:FB:66:84:BF:F8:B6:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TW1033/1/138A054AE20232FE74DA41A7D1FB6684BFF8B631.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/138A054AE20232FE74DA41A7D1FB6684BFF8B631.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/1/3135312e3135382e3136382e302f32332d3332203d3e20313331363331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.168.0/23 Signature Algorithm: sha256WithRSAEncryption 30:63:7e:d1:0a:cd:49:29:bb:96:13:a5:83:0e:5b:27:9a:6d: 10:14:a2:93:27:fc:1f:0a:a3:fe:96:62:a1:d3:e8:c5:a8:cb: d2:71:74:5b:97:8d:49:3c:e6:dc:6c:b2:89:e3:ce:1a:ee:af: e6:76:77:73:88:d5:d0:da:f2:3c:15:13:2e:19:48:5a:62:18: f1:14:9e:51:66:c5:19:43:0a:c9:85:17:cd:0a:12:2f:3d:f2: ab:c0:f6:44:a7:f9:a7:c7:83:f7:6a:c7:d5:6c:e4:b9:18:8e: 7d:02:95:72:e0:ad:12:cc:8a:65:8b:34:46:22:fa:d4:ac:10: 1d:4a:3f:61:02:90:a1:fd:5a:4f:5d:e7:67:f7:04:66:4d:2e: a3:7e:bc:33:aa:f5:8a:3c:39:78:d4:b4:fd:a7:cb:2b:bc:14: 50:ca:2b:44:9f:60:da:64:1a:8a:e3:dd:db:0e:05:42:67:fa: 1b:c5:79:67:25:73:18:fa:73:60:6a:a0:66:31:06:b8:38:0b: b5:6a:b5:a3:98:68:c7:d8:fb:dc:48:98:31:56:fe:fb:51:d1: b1:c8:4c:67:85:9c:0d:a9:a6:55:e4:19:a3:c0:10:c4:90:a8: 29:83:05:e9:0a:ab:58:8f:0a:a3:95:b6:22:65:f7:8b:d7:fe: 27:6f:3e:a6 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUZl9sJ5juXJIenS0/AH4jqmzW4yEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM4QTA1NEFFMjAyMzJGRTc0REE0MUE3RDFGQjY2ODRC RkY4QjYzMTAeFw0yNjA1MTExNzUzMTBaFw0yNzA1MTAxNzU4MTBaMDMxMTAvBgNV BAMTKDBFN0EwQzNBM0I1RDQ4MUE4NzU3MUQ0RTE4MUJCODJGRUFDRTBDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnB2rdN2C1mEh4DqA1U3ARC/fZ xQSCHDkMjN0j/Tceg59aaGXtd0sYoo40DhWeMPNQIKngUblN76mIZcouGDAGe4oF docGQ2+I8gLo27h2gUmviHY8DMW/2J0JJRtjVEv8tFFsld5JJDJc6ur0OR0gh1Dt rRR7mvRC6wBF1HLzX26rAVCcPKW2LB1+0iITfcAdBsyD6r3L3BC6mreFIaB2Soee ZOdGmNBKWNy5PMBd+/w0TDphNlrhFeWWep/wTDP6685WwgYHFdAcVePGD5rgW5Do MUf1XAFaHhNZqArgVAR797Y4ivapUhWsIGXPyJSnElRzSrxd1B+d6J9X+zCFAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUDnoMOjtdSBqHVx1OGBu4L+rODGowHwYDVR0j BBgwFoAUE4oFSuICMv502kGn0ftmhL/4tjEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFcxMDMz LzEvMTM4QTA1NEFFMjAyMzJGRTc0REE0MUE3RDFGQjY2ODRCRkY4QjYzMS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMy8xMzhBMDU0QUUyMDIzMkZFNzREQTQxQTdEMUZC NjY4NEJGRjhCNjMxLmNlcjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUFBzALhmRy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXMTAzMy8xLzMxMzUzMTJlMzEz NTM4MmUzMTM2MzgyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMTMzMzEzNjMzMzEu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBAGXnqgwDQYJKoZIhvcNAQELBQADggEBADBjftEKzUkpu5YTpYMO WyeabRAUopMn/B8Ko/6WYqHT6MWoy9JxdFuXjUk85txssonjzhrur+Z2d3OI1dDa 8jwVEy4ZSFpiGPEUnlFmxRlDCsmFF80KEi898qvA9kSn+afHg/dqx9Vs5LkYjn0C lXLgrRLMimWLNEYi+tSsEB1KP2ECkKH9Wk9d52f3BGZNLqN+vDOq9Yo8OXjUtP2n yyu8FFDKK0SfYNpkGorj3dsOBUJn+hvFeWclcxj6c2BqoGYxBrg4C7VqtaOYaMfY +9xImDFW/vtR0bHITGeFnA2pplXkGaPAEMSQqCmDBekKq1iPCqOVtiJl94vX/idv PqY= -----END CERTIFICATE-----Generated at Wed May 13 12:51:25 2026 by rpki-client