$ rpki-client -vvf rpkica.twnic.tw/rpki/VOCOM/0/323430303a343436303a3a2f33322d3332203d3e203633383937.roa File: 323430303a343436303a3a2f33322d3332203d3e203633383937.roa (raw, json) Hash identifier: E17SRJCOW39t5BmRtT7oN3GTu5stDbJU5j3SmVWuYIY= Subject key identifier: 1B:BD:1D:B9:99:EA:B6:CF:7A:0C:5E:49:AF:B3:8E:0F:41:12:90:F0 Certificate issuer: /CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697 Certificate serial: 6E3A9DA6AB431AD85AC489B8984B828F6D5213AE Authority key identifier: 55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer Subject info access: rsync://rpkica.twnic.tw/rpki/VOCOM/0/323430303a343436303a3a2f33322d3332203d3e203633383937.roa Signing time: Mon 11 May 2026 17:31:30 +0000 ROA not before: Mon 11 May 2026 17:26:30 +0000 ROA not after: Mon 10 May 2027 17:31:30 +0000 asID: 63897 IP address blocks: 2400:4460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:3a:9d:a6:ab:43:1a:d8:5a:c4:89:b8:98:4b:82:8f:6d:52:13:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55042E416ADDC03A5164A7BFFDFF2C3BF285E697 Validity Not Before: May 11 17:26:30 2026 GMT Not After : May 10 17:31:30 2027 GMT Subject: CN=1BBD1DB999EAB6CF7A0C5E49AFB38E0F411290F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:d2:54:80:38:25:dd:6f:7f:73:9b:8c:34: 4a:07:ea:96:87:c4:13:cf:29:95:a2:31:e7:01:8d: 1b:54:a3:d5:c1:d3:cc:3b:64:d4:f3:e1:76:13:d0: 3f:55:20:29:fb:2b:a1:af:f4:f2:e3:ad:81:25:73: 33:04:cf:97:6c:91:bb:9a:8e:77:6a:79:5b:e6:d8: 5c:fa:cb:6a:a6:c2:b4:bd:f5:60:21:e2:83:46:f8: 5c:55:8d:5b:64:74:29:31:57:39:a5:e4:c8:65:08: f5:07:96:c3:71:17:64:1e:1f:05:5a:6b:e4:e0:88: b4:21:53:40:7e:aa:78:79:d3:bb:5b:78:15:4d:62: 91:06:19:ad:91:06:da:58:b7:8d:e4:42:55:50:90: 17:f1:9b:0b:4b:5c:ca:cc:e3:90:af:3a:52:c6:30: 6f:8d:dc:fd:4a:05:1a:63:b1:fc:be:40:f3:61:15: ad:c5:29:51:03:21:c5:3c:cc:57:e3:3d:6e:8f:8a: 7c:d6:5e:cf:6d:ac:5b:94:c2:66:c0:63:45:44:f3: 8f:96:03:97:98:49:04:97:c6:70:33:cd:fc:b2:56: 50:5a:8b:f6:10:34:bc:b9:f9:72:39:35:39:2b:d7: e7:bf:64:04:99:c4:97:18:2d:b0:de:2b:7f:6a:5f: a1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BD:1D:B9:99:EA:B6:CF:7A:0C:5E:49:AF:B3:8E:0F:41:12:90:F0 X509v3 Authority Key Identifier: keyid:55:04:2E:41:6A:DD:C0:3A:51:64:A7:BF:FD:FF:2C:3B:F2:85:E6:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/55042E416ADDC03A5164A7BFFDFF2C3BF285E697.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VOCOM/0/323430303a343436303a3a2f33322d3332203d3e203633383937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:4460::/32 Signature Algorithm: sha256WithRSAEncryption 0b:04:47:6a:b3:1a:d0:97:0c:47:f9:5c:db:b6:79:9a:4f:92: db:5a:26:a5:be:82:b9:43:c6:5a:8f:1f:82:ac:d8:42:40:bc: 0f:6f:05:d9:14:52:45:04:3f:5e:c1:27:c7:35:0d:bb:b7:20: a3:62:4b:f0:55:2c:c5:c6:de:9d:67:c2:d5:1c:ab:46:56:e4: 51:a7:24:3d:b3:02:4f:89:c5:55:06:22:b2:d5:b1:2c:c2:29: 87:fc:2c:bc:7e:58:3b:32:f5:b0:13:67:94:3b:5b:ca:63:88: 4d:9e:43:bf:1e:1d:ba:34:3c:3a:78:d3:3e:12:a6:6e:4d:dc: 8c:4a:e7:f2:1d:d0:50:05:43:16:91:16:d3:d6:ae:95:49:b4: 6c:1c:0e:c2:fc:1c:23:61:24:49:d2:c9:94:f0:92:57:2f:32: 7a:46:8e:79:da:9c:91:38:78:1d:6b:fa:51:72:73:31:cf:b6: b2:88:6c:9f:5a:12:c5:73:85:08:38:38:1b:97:32:96:e6:1e: 6f:fd:93:c9:9f:ef:35:a7:78:96:fc:71:b2:99:b5:ff:1e:36: d1:82:d6:5f:5c:33:19:41:df:a6:5e:a4:69:63:a2:b6:55:3f: 64:fd:69:7f:c9:f8:4f:6f:5e:b4:32:6a:a5:3d:17:f8:c0:11: d6:fa:c0:92 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIUbjqdpqtDGthaxIm4mEuCj21SE64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTUwNDJFNDE2QUREQzAzQTUxNjRBN0JGRkRGRjJDM0JG Mjg1RTY5NzAeFw0yNjA1MTExNzI2MzBaFw0yNzA1MTAxNzMxMzBaMDMxMTAvBgNV BAMTKDFCQkQxREI5OTlFQUI2Q0Y3QTBDNUU0OUFGQjM4RTBGNDExMjkwRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qtJUgDgl3W9/c5uMNEoH6paH xBPPKZWiMecBjRtUo9XB08w7ZNTz4XYT0D9VICn7K6Gv9PLjrYElczMEz5dskbua jndqeVvm2Fz6y2qmwrS99WAh4oNG+FxVjVtkdCkxVzml5MhlCPUHlsNxF2QeHwVa a+TgiLQhU0B+qnh507tbeBVNYpEGGa2RBtpYt43kQlVQkBfxmwtLXMrM45CvOlLG MG+N3P1KBRpjsfy+QPNhFa3FKVEDIcU8zFfjPW6PinzWXs9trFuUwmbAY0VE84+W A5eYSQSXxnAzzfyyVlBai/YQNLy5+XI5NTkr1+e/ZASZxJcYLbDeK39qX6FdAgMB AAGjggHgMIIB3DAdBgNVHQ4EFgQUG70duZnqts96DF5Jr7OOD0ESkPAwHwYDVR0j BBgwFoAUVQQuQWrdwDpRZKe//f8sO/KF5pcwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVk9DT00v MC81NTA0MkU0MTZBRERDMDNBNTE2NEE3QkZGREZGMkMzQkYyODVFNjk3LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzU1MDQyRTQxNkFEREMwM0E1MTY0QTdCRkZERkYy QzNCRjI4NUU2OTcuY2VyMHkGCCsGAQUFBwELBG0wazBpBggrBgEFBQcwC4ZdcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9WT0NPTS8wLzMyMzQzMDMwM2EzNDM0 MzYzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM2MzMzODM5Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAERgMA0GCSqGSIb3DQEBCwUAA4IBAQALBEdqsxrQlwxH+VzbtnmaT5LbWial voK5Q8Zajx+CrNhCQLwPbwXZFFJFBD9ewSfHNQ27tyCjYkvwVSzFxt6dZ8LVHKtG VuRRpyQ9swJPicVVBiKy1bEswimH/Cy8flg7MvWwE2eUO1vKY4hNnkO/Hh26NDw6 eNM+EqZuTdyMSufyHdBQBUMWkRbT1q6VSbRsHA7C/BwjYSRJ0smU8JJXLzJ6Ro55 2pyROHgda/pRcnMxz7ayiGyfWhLFc4UIODgblzKW5h5v/ZPJn+81p3iW/HGymbX/ HjbRgtZfXDMZQd+mXqRpY6K2VT9k/Wl/yfhPb160MmqlPRf4wBHW+sCS -----END CERTIFICATE-----Generated at Wed May 13 07:57:25 2026 by rpki-client