$ rpki-client -vvf rpkica.twnic.tw/rpki/TWDS/0/323430353a613634303a313137333a3a2f34382d3438203d3e20323039353537.roa File: 323430353a613634303a313137333a3a2f34382d3438203d3e20323039353537.roa (raw, json) Hash identifier: QNMFjQL+XZqARqPpMvaXZNEvipiDpxefIbtDxQ7JW9Y= Subject key identifier: 48:AE:62:F4:4A:A5:4D:61:0A:D8:94:5A:A2:FF:1C:53:3F:FA:2A:02 Certificate issuer: /CN=432734F40920205CA6443A3B99308DD718E70D42 Certificate serial: 64E601835C1CF38EB5A61F99B53AA5B4D38CAE54 Authority key identifier: 43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWDS/0/323430353a613634303a313137333a3a2f34382d3438203d3e20323039353537.roa Signing time: Mon 11 May 2026 17:09:23 +0000 ROA not before: Mon 11 May 2026 17:04:23 +0000 ROA not after: Mon 10 May 2027 17:09:23 +0000 asID: 209557 IP address blocks: 2405:a640:1173::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e6:01:83:5c:1c:f3:8e:b5:a6:1f:99:b5:3a:a5:b4:d3:8c:ae:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432734F40920205CA6443A3B99308DD718E70D42 Validity Not Before: May 11 17:04:23 2026 GMT Not After : May 10 17:09:23 2027 GMT Subject: CN=48AE62F44AA54D610AD8945AA2FF1C533FFA2A02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:8b:47:97:f7:e1:a3:a3:8e:f8:c4:8a:b0: 8f:9e:73:bd:fa:8f:35:64:26:ad:d7:5b:cb:3f:53: f4:a4:4e:97:c4:a5:f0:5a:24:ec:de:43:71:b7:de: 55:36:13:88:d4:f6:47:ff:1b:81:85:3c:88:90:3c: 0b:2e:50:0f:75:41:7e:0d:d9:4b:70:2e:2c:37:3c: f8:df:5f:bd:7d:48:19:6d:12:a8:87:8a:f4:15:03: e0:38:fc:4d:cf:a2:98:00:dd:8b:ba:35:de:22:a4: 1c:db:b8:2f:6d:a3:9f:e2:35:aa:51:6f:44:2e:ff: 80:ec:fe:4c:2d:df:a1:6e:0b:8e:b0:e2:db:77:48: a6:87:8e:be:f2:85:50:07:cf:40:10:0f:5c:7d:d3: 65:c1:40:9c:4d:3d:89:dd:16:cf:0e:39:97:f8:ab: 79:34:fc:4a:2c:d3:31:9a:50:c3:af:33:df:e6:c8: 68:97:61:15:75:23:60:b3:28:88:48:0b:bb:47:d0: 6c:26:5a:b1:07:bb:98:d6:6c:ff:44:e7:79:32:fc: 8b:99:f2:af:72:e1:08:27:2f:99:09:38:97:04:fb: 2a:38:99:9e:46:c1:ad:18:0e:78:44:2c:84:e0:01: 47:66:5f:fe:21:e9:77:e3:d5:b2:36:64:06:df:7a: 36:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AE:62:F4:4A:A5:4D:61:0A:D8:94:5A:A2:FF:1C:53:3F:FA:2A:02 X509v3 Authority Key Identifier: keyid:43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/323430353a613634303a313137333a3a2f34382d3438203d3e20323039353537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a640:1173::/48 Signature Algorithm: sha256WithRSAEncryption 07:f8:c3:89:db:0a:c4:82:6d:6e:7a:69:50:e2:ca:de:d2:c1: 19:77:c5:b6:aa:fe:68:a1:10:a0:97:e4:7e:b1:cf:97:d7:da: 94:0f:d8:f0:8b:ec:41:89:4d:7a:7b:fd:48:6b:71:a9:fd:e0: 70:a8:f4:ca:41:09:e7:e8:74:0e:8a:64:a6:f7:ce:91:98:00: 58:64:65:26:c7:5f:5a:b4:e9:04:15:8f:2d:b7:de:d3:88:f8: 7c:5c:9f:34:53:9c:e3:85:7a:76:e3:9c:f9:38:3b:f3:7a:eb: 0b:9f:15:f7:6b:4a:f4:d1:ed:e4:01:cf:b4:ea:03:8e:b0:d0: 8a:64:9f:21:36:38:72:ef:d6:3d:d9:0b:be:ac:97:2d:5a:0c: 8d:b2:e8:d3:13:3a:96:0a:5a:87:26:fe:4b:b1:86:d6:88:da: d5:72:fa:25:48:a2:06:e9:f3:cf:d0:8c:26:f9:38:ee:c1:15: df:25:47:35:82:20:eb:76:08:f4:95:e3:a4:0c:94:63:1b:e7: a0:37:0c:51:bd:29:57:2a:e1:62:d0:d3:3c:2e:85:07:f0:16: 60:6c:2c:4e:12:87:5b:c4:f9:0c:45:cd:c3:79:81:a3:47:ff: 7d:37:d0:e2:5e:c8:22:3a:45:d6:ff:d1:bf:03:57:59:08:50: 2e:2c:23:ec -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUZOYBg1wc8461ph+ZtTqltNOMrlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyNzM0RjQwOTIwMjA1Q0E2NDQzQTNCOTkzMDhERDcx OEU3MEQ0MjAeFw0yNjA1MTExNzA0MjNaFw0yNzA1MTAxNzA5MjNaMDMxMTAvBgNV BAMTKDQ4QUU2MkY0NEFBNTRENjEwQUQ4OTQ1QUEyRkYxQzUzM0ZGQTJBMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01otHl/fho6OO+MSKsI+ec736 jzVkJq3XW8s/U/SkTpfEpfBaJOzeQ3G33lU2E4jU9kf/G4GFPIiQPAsuUA91QX4N 2UtwLiw3PPjfX719SBltEqiHivQVA+A4/E3PopgA3Yu6Nd4ipBzbuC9to5/iNapR b0Qu/4Ds/kwt36FuC46w4tt3SKaHjr7yhVAHz0AQD1x902XBQJxNPYndFs8OOZf4 q3k0/Eos0zGaUMOvM9/myGiXYRV1I2CzKIhIC7tH0GwmWrEHu5jWbP9E53ky/IuZ 8q9y4QgnL5kJOJcE+yo4mZ5Gwa0YDnhELITgAUdmX/4h6Xfj1bI2ZAbfejYXAgMB AAGjggHtMIIB6TAdBgNVHQ4EFgQUSK5i9EqlTWEK2JRaov8cUz/6KgIwHwYDVR0j BBgwFoAUQyc09AkgIFymRDo7mTCN1xjnDUIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdEUy8w LzQzMjczNEY0MDkyMDIwNUNBNjQ0M0EzQjk5MzA4REQ3MThFNzBENDIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNDMyNzM0RjQwOTIwMjA1Q0E2NDQzQTNCOTkzMDhE RDcxOEU3MEQ0Mi5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV0RTLzAvMzIzNDMwMzUzYTYxMzYz NDMwM2EzMTMxMzczMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzAzOTM1MzUz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQFpkARczANBgkqhkiG9w0BAQsFAAOCAQEAB/jDidsKxIJt bnppUOLK3tLBGXfFtqr+aKEQoJfkfrHPl9falA/Y8IvsQYlNenv9SGtxqf3gcKj0 ykEJ5+h0DopkpvfOkZgAWGRlJsdfWrTpBBWPLbfe04j4fFyfNFOc44V6duOc+Tg7 83rrC58V92tK9NHt5AHPtOoDjrDQimSfITY4cu/WPdkLvqyXLVoMjbLo0xM6lgpa hyb+S7GG1oja1XL6JUiiBunzz9CMJvk47sEV3yVHNYIg63YI9JXjpAyUYxvnoDcM Ub0pVyrhYtDTPC6FB/AWYGwsThKHW8T5DEXNw3mBo0f/fTfQ4l7IIjpF1v/RvwNX WQhQLiwj7A== -----END CERTIFICATE-----Generated at Wed May 13 11:49:56 2026 by rpki-client