$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNTT/0/3132322e3235352e38302e302f32302d3234203d3e2032393134.roa File: 3132322e3235352e38302e302f32302d3234203d3e2032393134.roa (raw, json) Hash identifier: fMdNagEZlOANeSxcOpb3w/TF/IYf3DkNkif0u6p7BJo= Subject key identifier: 62:77:18:F4:6F:D8:3E:FA:DC:8C:D0:6D:D6:F9:7C:C9:DE:B0:8D:2E Certificate issuer: /CN=866155EC56EF0A61BC489259EA6B444F2596FF9E Certificate serial: 07F793A0FA83A29A0EC23C1ADF331A1497141D83 Authority key identifier: 86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNTT/0/3132322e3235352e38302e302f32302d3234203d3e2032393134.roa Signing time: Mon 11 May 2026 17:08:07 +0000 ROA not before: Mon 11 May 2026 17:03:07 +0000 ROA not after: Mon 10 May 2027 17:08:07 +0000 asID: 2914 IP address blocks: 122.255.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f7:93:a0:fa:83:a2:9a:0e:c2:3c:1a:df:33:1a:14:97:14:1d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866155EC56EF0A61BC489259EA6B444F2596FF9E Validity Not Before: May 11 17:03:07 2026 GMT Not After : May 10 17:08:07 2027 GMT Subject: CN=627718F46FD83EFADC8CD06DD6F97CC9DEB08D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:91:ed:e2:e3:f9:e7:07:6d:fa:b9:96:a7:6e: 8a:26:8c:a2:fb:f9:56:70:dc:9a:4e:8e:51:e1:87: 98:00:1d:56:f9:86:86:73:3b:59:2f:e1:e0:fd:47: bc:86:49:70:37:3b:c6:64:06:44:90:59:ea:fa:a5: 7a:5b:3e:cf:c4:6b:56:18:5b:dd:10:aa:07:bd:f6: 2d:67:e5:33:26:ec:61:b3:73:7e:7c:e0:1d:9d:e0: aa:bc:26:d5:8b:2b:66:82:6c:18:9b:80:de:15:53: 6b:4d:fb:90:1e:df:35:6a:e8:e8:18:61:ef:7a:39: bc:69:ee:f0:f9:0d:ed:7f:82:fb:73:2e:ff:b7:e4: 63:37:ef:ca:04:c7:17:e6:76:38:33:e0:3a:17:98: 29:56:8d:99:b5:81:b8:8d:0f:91:cb:57:80:45:29: 39:73:08:e2:9c:f5:04:15:b8:4a:38:82:25:ce:89: 92:33:e5:17:0e:34:9c:e0:65:92:25:d2:74:b9:2b: 85:83:07:ef:c9:34:72:df:dd:02:19:17:15:88:fc: b6:01:46:2c:73:2b:a4:02:4f:af:73:a0:bf:0a:c5: 5d:90:56:98:b6:53:97:97:e0:f9:cb:85:ad:c0:6b: 08:87:4a:5c:57:b4:4b:b8:27:38:aa:14:4c:68:9d: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:77:18:F4:6F:D8:3E:FA:DC:8C:D0:6D:D6:F9:7C:C9:DE:B0:8D:2E X509v3 Authority Key Identifier: keyid:86:61:55:EC:56:EF:0A:61:BC:48:92:59:EA:6B:44:4F:25:96:FF:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/866155EC56EF0A61BC489259EA6B444F2596FF9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/866155EC56EF0A61BC489259EA6B444F2596FF9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNTT/0/3132322e3235352e38302e302f32302d3234203d3e2032393134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 122.255.80.0/20 Signature Algorithm: sha256WithRSAEncryption a6:dd:5d:64:fd:3f:9c:7c:23:7a:de:b8:3a:a6:d1:79:97:b8: c9:f9:9e:19:d0:68:0c:e6:a5:94:96:61:84:77:4a:e8:c5:29: aa:1c:84:ee:e6:9d:81:3e:f9:11:19:79:5d:7a:34:d4:8e:08: 11:a2:d6:74:12:22:b2:45:cb:9c:74:c8:71:17:9a:8b:94:f4: 6f:51:3f:98:c0:72:99:96:89:d3:ff:cb:1d:32:cd:73:ca:64: dd:3b:bb:a7:63:6c:57:0b:9c:53:9b:48:12:bf:95:88:50:0b: 9d:cd:50:50:c3:02:8a:69:0f:4a:06:ea:40:a9:5a:88:fe:b2: cd:ec:17:59:a5:49:65:11:82:af:b8:ed:1a:16:85:31:d8:42: eb:3d:a0:53:75:28:c7:18:c7:2c:a0:88:bb:bf:9e:28:a9:5f: 34:0b:36:e7:df:74:a2:e3:e4:04:dc:7c:f4:53:9b:a8:43:23: fa:3c:a3:2e:8b:4e:75:d4:db:a5:58:5d:a4:f4:6d:d6:cf:23: 60:c6:04:75:26:d0:d4:92:85:8c:6e:75:32:9e:5a:98:43:41: 93:89:9f:ec:f3:75:e0:ad:ed:5a:fb:11:4b:ae:ef:a3:bf:38: c2:c7:04:14:de:48:15:6b:ca:4d:ea:99:49:b9:e2:86:25:4b: 63:83:8d:35 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUB/eToPqDopoOwjwa3zMaFJcUHYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2MTU1RUM1NkVGMEE2MUJDNDg5MjU5RUE2QjQ0NEYy NTk2RkY5RTAeFw0yNjA1MTExNzAzMDdaFw0yNzA1MTAxNzA4MDdaMDMxMTAvBgNV BAMTKDYyNzcxOEY0NkZEODNFRkFEQzhDRDA2REQ2Rjk3Q0M5REVCMDhEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyke3i4/nnB236uZanboomjKL7 +VZw3JpOjlHhh5gAHVb5hoZzO1kv4eD9R7yGSXA3O8ZkBkSQWer6pXpbPs/Ea1YY W90Qqge99i1n5TMm7GGzc3584B2d4Kq8JtWLK2aCbBibgN4VU2tN+5Ae3zVq6OgY Ye96Obxp7vD5De1/gvtzLv+35GM378oExxfmdjgz4DoXmClWjZm1gbiND5HLV4BF KTlzCOKc9QQVuEo4giXOiZIz5RcONJzgZZIl0nS5K4WDB+/JNHLf3QIZFxWI/LYB RixzK6QCT69zoL8KxV2QVpi2U5eX4PnLha3AawiHSlxXtEu4JziqFExonSUJAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUYncY9G/YPvrcjNBt1vl8yd6wjS4wHwYDVR0j BBgwFoAUhmFV7FbvCmG8SJJZ6mtETyWW/54wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOVFQv MC84NjYxNTVFQzU2RUYwQTYxQkM0ODkyNTlFQTZCNDQ0RjI1OTZGRjlFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzg2NjE1NUVDNTZFRjBBNjFCQzQ4OTI1OUVBNkI0 NDRGMjU5NkZGOUUuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05UVC8wLzMxMzIzMjJlMzIzNTM1 MmUzODMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzOTMxMzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAR6/1AwDQYJKoZIhvcNAQELBQADggEBAKbdXWT9P5x8I3reuDqm0XmXuMn5nhnQ aAzmpZSWYYR3SujFKaochO7mnYE++REZeV16NNSOCBGi1nQSIrJFy5x0yHEXmouU 9G9RP5jAcpmWidP/yx0yzXPKZN07u6djbFcLnFObSBK/lYhQC53NUFDDAoppD0oG 6kCpWoj+ss3sF1mlSWURgq+47RoWhTHYQus9oFN1KMcYxyygiLu/niipXzQLNuff dKLj5ATcfPRTm6hDI/o8oy6LTnXU26VYXaT0bdbPI2DGBHUm0NSShYxudTKeWphD QZOJn+zzdeCt7Vr7EUuu76O/OMLHBBTeSBVryk3qmUm54oYlS2ODjTU= -----END CERTIFICATE-----Generated at Wed May 13 04:00:14 2026 by rpki-client