$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNIC/0/323030313a6463313a3a2f34382d3438203d3e203134363138.roa File: 323030313a6463313a3a2f34382d3438203d3e203134363138.roa (raw, json) Hash identifier: EMI6/roMf+dMJF1r7Wze5lsCPP71iUuBYgzSBOWLLgc= Subject key identifier: 58:9B:D6:76:DC:D5:31:3E:C9:C9:8E:64:C2:E1:B5:47:36:52:95:48 Certificate issuer: /CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99 Certificate serial: 0835561D1F579CD6F3E8F121EAB7188EC641DA27 Authority key identifier: 27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNIC/0/323030313a6463313a3a2f34382d3438203d3e203134363138.roa Signing time: Mon 11 May 2026 17:20:08 +0000 ROA not before: Mon 11 May 2026 17:15:08 +0000 ROA not after: Mon 10 May 2027 17:20:08 +0000 asID: 14618 IP address blocks: 2001:dc1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:35:56:1d:1f:57:9c:d6:f3:e8:f1:21:ea:b7:18:8e:c6:41:da:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=275746BB137CE730FB0CAA28AAE57D4EDE0A1E99 Validity Not Before: May 11 17:15:08 2026 GMT Not After : May 10 17:20:08 2027 GMT Subject: CN=589BD676DCD5313EC9C98E64C2E1B54736529548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:00:10:a2:bc:86:fd:20:80:77:8e:0e:3d:b8: ba:c5:9b:54:99:f7:fe:b8:69:fc:ad:49:b9:e6:8b: 52:64:8f:a3:c8:0b:35:c1:90:a2:f9:8d:98:73:56: 53:c0:08:d5:a9:53:89:31:d4:3b:6c:31:1b:2c:1a: 59:21:b5:c6:41:6c:ce:05:1c:2a:36:99:07:e9:56: df:f0:cf:91:ac:b5:05:43:ec:64:38:3c:45:34:0b: 54:0c:0f:0f:ae:b1:d6:35:be:22:78:fb:f9:fc:4f: d8:be:b1:ab:91:de:df:aa:1a:b1:69:b3:0a:f7:a7: 52:45:af:c1:4f:68:34:bc:df:d9:b0:6d:1f:c2:5a: 8f:30:3d:28:8e:19:93:0a:98:ad:6d:eb:02:b6:6a: 07:3c:25:97:06:5f:37:b1:14:31:65:21:4e:55:f0: 8e:89:8a:cd:7b:bd:38:3f:81:15:1e:b9:1c:67:61: c9:6b:e0:55:a8:f9:c6:d2:91:b4:41:20:f8:8c:52: 53:d2:09:2c:85:7b:11:cd:4e:67:ea:9e:10:e3:71: 27:0f:a0:9f:8f:76:ee:44:d8:59:6a:ee:c9:fb:47: e6:75:6d:3b:3f:5f:ac:bb:92:3d:f1:e2:ac:9d:18: c4:18:5f:3a:1d:36:fa:1e:6b:d8:49:d0:1f:9c:79: c5:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9B:D6:76:DC:D5:31:3E:C9:C9:8E:64:C2:E1:B5:47:36:52:95:48 X509v3 Authority Key Identifier: keyid:27:57:46:BB:13:7C:E7:30:FB:0C:AA:28:AA:E5:7D:4E:DE:0A:1E:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/275746BB137CE730FB0CAA28AAE57D4EDE0A1E99.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNIC/0/323030313a6463313a3a2f34382d3438203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:dc1::/48 Signature Algorithm: sha256WithRSAEncryption 65:df:7c:d8:d8:66:44:50:4c:05:5d:0e:2c:64:a9:52:99:6a: 5f:c1:4a:2e:52:a2:73:b3:85:06:38:7b:ee:87:14:d7:24:fc: ee:19:47:8c:f2:55:bb:e3:20:35:08:95:04:8d:27:bc:c7:7b: ee:04:81:f9:50:65:86:d2:12:13:c8:91:38:29:b2:af:e0:77: 0a:14:5f:63:c2:13:bd:ed:61:3b:f4:8f:8f:0c:02:d2:79:63: b0:83:ee:59:57:a9:8b:15:67:93:4f:eb:10:d2:c8:ba:8d:aa: 30:0a:2a:ef:a8:77:db:1b:ca:d5:bf:de:14:8a:e6:89:bb:c2: b1:d6:fa:02:52:26:bc:76:75:72:70:30:d3:9d:9c:01:15:49: 21:ef:cc:4d:49:9a:ed:ab:92:af:0c:63:1b:ff:e8:fe:29:96: e8:7b:42:3a:e2:fe:3a:91:63:8c:02:06:46:c1:1d:95:bd:42: b3:52:bc:ca:83:af:65:aa:31:d4:11:fc:82:0b:1b:df:7e:31: f4:8b:73:ec:23:91:ad:a8:ea:7d:ed:0d:79:09:11:bf:0e:2e: 87:9a:bd:63:8d:96:87:3b:a4:f9:f6:b0:fa:a6:08:c3:77:f9: 1c:3d:ea:9e:61:c4:56:ab:af:87:cd:4b:29:60:34:bc:40:3e: f2:3f:76:4d -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIUCDVWHR9XnNbz6PEh6rcYjsZB2icwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjc1NzQ2QkIxMzdDRTczMEZCMENBQTI4QUFFNTdENEVE RTBBMUU5OTAeFw0yNjA1MTExNzE1MDhaFw0yNzA1MTAxNzIwMDhaMDMxMTAvBgNV BAMTKDU4OUJENjc2RENENTMxM0VDOUM5OEU2NEMyRTFCNTQ3MzY1Mjk1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxABCivIb9IIB3jg49uLrFm1SZ 9/64afytSbnmi1Jkj6PICzXBkKL5jZhzVlPACNWpU4kx1DtsMRssGlkhtcZBbM4F HCo2mQfpVt/wz5GstQVD7GQ4PEU0C1QMDw+usdY1viJ4+/n8T9i+sauR3t+qGrFp swr3p1JFr8FPaDS839mwbR/CWo8wPSiOGZMKmK1t6wK2agc8JZcGXzexFDFlIU5V 8I6Jis17vTg/gRUeuRxnYclr4FWo+cbSkbRBIPiMUlPSCSyFexHNTmfqnhDjcScP oJ+Pdu5E2Flq7sn7R+Z1bTs/X6y7kj3x4qydGMQYXzodNvoea9hJ0B+cecVBAgMB AAGjggHgMIIB3DAdBgNVHQ4EFgQUWJvWdtzVMT7JyY5kwuG1RzZSlUgwHwYDVR0j BBgwFoAUJ1dGuxN85zD7DKooquV9Tt4KHpkwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUMv MC8yNzU3NDZCQjEzN0NFNzMwRkIwQ0FBMjhBQUU1N0Q0RURFMEExRTk5LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzI3NTc0NkJCMTM3Q0U3MzBGQjBDQUEyOEFBRTU3 RDRFREUwQTFFOTkuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQy8wLzMyMzAzMDMxM2E2NDYz MzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA IAENwQAAMA0GCSqGSIb3DQEBCwUAA4IBAQBl33zY2GZEUEwFXQ4sZKlSmWpfwUou UqJzs4UGOHvuhxTXJPzuGUeM8lW74yA1CJUEjSe8x3vuBIH5UGWG0hITyJE4KbKv 4HcKFF9jwhO97WE79I+PDALSeWOwg+5ZV6mLFWeTT+sQ0si6jaowCirvqHfbG8rV v94UiuaJu8Kx1voCUia8dnVycDDTnZwBFUkh78xNSZrtq5KvDGMb/+j+KZboe0I6 4v46kWOMAgZGwR2VvUKzUrzKg69lqjHUEfyCCxvffjH0i3PsI5GtqOp97Q15CRG/ Di6Hmr1jjZaHO6T59rD6pgjDd/kcPeqeYcRWq6+HzUspYDS8QD7yP3ZN -----END CERTIFICATE-----Generated at Wed May 13 06:01:20 2026 by rpki-client