$ rpki-client -vvf rpkica.twnic.tw/rpki/TWDS/0/323430353a613634303a3a2f33322d3438203d3e203138303431.roa File: 323430353a613634303a3a2f33322d3438203d3e203138303431.roa (raw, json) Hash identifier: Me8ETjKs1rBTDIHMtzcFjvks6+2DOyVK7V5OGraUmDY= Subject key identifier: 96:3C:5A:A3:70:BF:0F:85:A5:44:75:7E:02:9A:4A:06:62:EA:7F:39 Certificate issuer: /CN=432734F40920205CA6443A3B99308DD718E70D42 Certificate serial: 09B37C3AF8FE70CC1D5442FD0C2355958FBCE592 Authority key identifier: 43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWDS/0/323430353a613634303a3a2f33322d3438203d3e203138303431.roa Signing time: Mon 11 May 2026 17:26:34 +0000 ROA not before: Mon 11 May 2026 17:21:34 +0000 ROA not after: Mon 10 May 2027 17:26:34 +0000 asID: 18041 IP address blocks: 2405:a640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b3:7c:3a:f8:fe:70:cc:1d:54:42:fd:0c:23:55:95:8f:bc:e5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=432734F40920205CA6443A3B99308DD718E70D42 Validity Not Before: May 11 17:21:34 2026 GMT Not After : May 10 17:26:34 2027 GMT Subject: CN=963C5AA370BF0F85A544757E029A4A0662EA7F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:18:3b:84:44:1a:3f:57:7d:c8:0b:a7:3b: b9:b4:a7:c0:62:cb:8b:2a:cc:14:a8:de:0b:ae:e9: 03:65:5e:60:f9:6f:c4:ee:a9:90:f2:be:b9:2b:d0: e0:9f:fe:ff:a8:96:22:54:09:77:86:25:d8:d0:34: ba:1d:fe:f4:0c:03:ac:cd:ae:a3:25:b8:ad:88:6e: 82:e2:48:29:43:14:d6:8c:d8:11:46:36:7b:b1:f5: 5b:d6:cf:e5:f1:62:72:80:c4:54:31:d6:c6:d0:54: d2:c9:35:c0:66:d1:b9:4b:0b:7f:45:98:06:41:41: a8:e4:85:61:ca:34:8d:d3:26:7a:1b:f6:fb:b5:50: db:fc:dc:00:74:fd:e7:7e:c9:50:d8:c0:8f:04:39: ac:14:bd:9c:52:69:02:08:60:5d:67:e6:41:bc:1c: e9:6f:4c:2b:dc:54:41:64:5c:23:05:ae:b8:70:b9: 87:32:5f:a0:6a:3e:3f:4c:2d:d0:0e:60:67:e8:5a: b3:20:64:58:51:0b:64:63:7e:bc:49:cf:56:50:e7: 98:64:dc:17:ad:99:f2:c4:36:7d:1b:0e:fb:cd:d8: 4f:4c:99:37:af:1e:bd:36:12:40:b9:ac:5f:63:72: 98:83:2f:a6:1b:4d:38:77:ef:8d:80:70:13:72:81: e5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3C:5A:A3:70:BF:0F:85:A5:44:75:7E:02:9A:4A:06:62:EA:7F:39 X509v3 Authority Key Identifier: keyid:43:27:34:F4:09:20:20:5C:A6:44:3A:3B:99:30:8D:D7:18:E7:0D:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/432734F40920205CA6443A3B99308DD718E70D42.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/432734F40920205CA6443A3B99308DD718E70D42.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWDS/0/323430353a613634303a3a2f33322d3438203d3e203138303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:a640::/32 Signature Algorithm: sha256WithRSAEncryption 8d:d0:15:c9:c4:d5:95:27:ab:f3:a6:4e:31:d4:f3:af:28:90: 72:19:54:ae:8e:d9:12:60:1e:e1:93:20:73:99:97:cd:0a:42: 9c:fc:23:ed:4e:a3:12:a5:ea:75:23:42:c7:3b:07:29:b7:9b: b2:4f:16:09:69:64:a9:85:bb:f6:80:3b:64:f3:c9:70:ea:82: 91:2e:82:8e:0f:7d:dc:86:08:d2:01:ad:b9:23:06:41:8d:96: 92:7a:bc:40:df:5f:24:10:87:ce:6e:fd:fb:88:9b:14:2d:d5: 33:de:04:84:4e:57:91:f3:7a:e0:c6:53:3d:ea:b3:74:87:cd: 5d:50:b9:1c:70:47:07:7b:41:59:23:1e:42:7d:1b:be:f3:d4: 7d:88:91:f9:dc:25:5b:52:3e:14:88:ea:69:b3:bf:25:2f:0f: c4:50:85:82:b4:1f:11:ab:eb:e3:3a:fd:38:1e:03:8f:f1:9e: 7b:c1:5b:cd:45:88:c5:9d:c8:19:b1:60:f8:1f:3f:10:79:4e: ec:35:99:5e:c6:3d:94:d9:6d:42:dc:b4:df:1d:8f:6e:4f:a1: 05:cc:53:aa:12:8e:b4:1a:3e:63:1d:98:e4:58:29:6e:70:54: a5:47:cf:14:3b:7c:e7:e9:5d:2d:98:ee:c7:89:88:d5:73:ed: 59:5b:9b:d8 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUCbN8Ovj+cMwdVEL9DCNVlY+85ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMyNzM0RjQwOTIwMjA1Q0E2NDQzQTNCOTkzMDhERDcx OEU3MEQ0MjAeFw0yNjA1MTExNzIxMzRaFw0yNzA1MTAxNzI2MzRaMDMxMTAvBgNV BAMTKDk2M0M1QUEzNzBCRjBGODVBNTQ0NzU3RTAyOUE0QTA2NjJFQTdGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEKhg7hEQaP1d9yAunO7m0p8Bi y4sqzBSo3guu6QNlXmD5b8TuqZDyvrkr0OCf/v+oliJUCXeGJdjQNLod/vQMA6zN rqMluK2IboLiSClDFNaM2BFGNnux9VvWz+XxYnKAxFQx1sbQVNLJNcBm0blLC39F mAZBQajkhWHKNI3TJnob9vu1UNv83AB0/ed+yVDYwI8EOawUvZxSaQIIYF1n5kG8 HOlvTCvcVEFkXCMFrrhwuYcyX6BqPj9MLdAOYGfoWrMgZFhRC2RjfrxJz1ZQ55hk 3BetmfLENn0bDvvN2E9MmTevHr02EkC5rF9jcpiDL6YbTTh3742AcBNygeXrAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUljxao3C/D4WlRHV+AppKBmLqfzkwHwYDVR0j BBgwFoAUQyc09AkgIFymRDo7mTCN1xjnDUIwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdEUy8w LzQzMjczNEY0MDkyMDIwNUNBNjQ0M0EzQjk5MzA4REQ3MThFNzBENDIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvNDMyNzM0RjQwOTIwMjA1Q0E2NDQzQTNCOTkzMDhE RDcxOEU3MEQ0Mi5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXRFMvMC8zMjM0MzAzNTNhNjEzNjM0 MzAzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMTM4MzAzNDMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA JAWmQDANBgkqhkiG9w0BAQsFAAOCAQEAjdAVycTVlSer86ZOMdTzryiQchlUro7Z EmAe4ZMgc5mXzQpCnPwj7U6jEqXqdSNCxzsHKbebsk8WCWlkqYW79oA7ZPPJcOqC kS6Cjg993IYI0gGtuSMGQY2Wknq8QN9fJBCHzm79+4ibFC3VM94EhE5XkfN64MZT PeqzdIfNXVC5HHBHB3tBWSMeQn0bvvPUfYiR+dwlW1I+FIjqabO/JS8PxFCFgrQf Eavr4zr9OB4Dj/Gee8FbzUWIxZ3IGbFg+B8/EHlO7DWZXsY9lNltQty03x2Pbk+h BcxTqhKOtBo+Yx2Y5FgpbnBUpUfPFDt85+ldLZjux4mI1XPtWVub2A== -----END CERTIFICATE-----Generated at Wed May 13 05:14:26 2026 by rpki-client