$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEYUN2/0/3136332e35322e34382e302f32332d3233203d3e20313532383835.roa File: 3136332e35322e34382e302f32332d3233203d3e20313532383835.roa (raw, json) Hash identifier: RFFL2ZLsiJmWfctXKj5BgiaImK/iN8aIJpUYCZ6vk1w= Subject key identifier: C2:D8:19:77:48:F5:6A:12:25:A6:78:26:2E:2C:AF:98:8B:F0:34:CB Certificate issuer: /CN=66D96CED70B44D758AE1282092DC175FEFC03195 Certificate serial: 687A71D642A6041252CCD8697C8BD4716CACC6D7 Authority key identifier: 66:D9:6C:ED:70:B4:4D:75:8A:E1:28:20:92:DC:17:5F:EF:C0:31:95 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LEYUN2/0/3136332e35322e34382e302f32332d3233203d3e20313532383835.roa Signing time: Mon 19 Oct 2026 10:04:02 +0000 ROA not before: Mon 19 Oct 2026 09:59:02 +0000 ROA not after: Mon 18 Oct 2027 10:04:02 +0000 asID: 152885 IP address blocks: 163.52.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.crl rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7a:71:d6:42:a6:04:12:52:cc:d8:69:7c:8b:d4:71:6c:ac:c6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66D96CED70B44D758AE1282092DC175FEFC03195 Validity Not Before: Oct 19 09:59:02 2026 GMT Not After : Oct 18 10:04:02 2027 GMT Subject: CN=C2D8197748F56A1225A678262E2CAF988BF034CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:96:30:64:7a:69:47:7f:06:b2:26:a7:0f:f1: a4:e8:15:fe:01:ed:70:52:60:84:74:b1:60:7f:7f: 68:5f:0c:91:3b:30:fc:4d:92:2c:ca:d1:18:b2:16: 8c:f4:8a:d9:5d:f8:f3:ba:03:a7:2f:b6:bf:65:93: 34:f0:ad:36:23:d1:6e:59:80:59:e1:08:e9:cf:63: 40:c7:95:33:ac:c9:4e:9e:c5:3f:1b:12:21:94:b8: 8d:ea:e7:06:f8:d6:41:dd:49:15:c7:55:53:a7:7c: 9f:60:28:11:97:e9:9b:01:b3:c8:5f:e0:3d:5f:a4: bf:b2:64:75:41:2b:67:2f:51:4a:db:e1:20:f9:41: f7:c0:37:02:fe:68:8c:e6:ac:03:62:e6:71:72:4e: f6:d9:f0:10:4c:e1:93:9c:e2:16:ec:11:84:d4:03: aa:9c:02:e0:26:8f:e7:0b:63:ec:07:d5:8f:bc:eb: 69:f8:8b:40:77:48:26:d3:a9:9c:2a:9a:14:cd:51: 24:fb:e7:c0:ca:34:24:c3:13:9c:61:60:f6:d5:84: 4f:6d:b5:75:d3:14:b5:f8:67:96:e2:2b:57:7e:3a: de:60:94:81:fa:80:85:49:42:46:24:61:b2:ca:eb: 66:f6:cf:67:2e:49:71:e1:ce:48:fa:34:0f:19:01: 44:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D8:19:77:48:F5:6A:12:25:A6:78:26:2E:2C:AF:98:8B:F0:34:CB X509v3 Authority Key Identifier: keyid:66:D9:6C:ED:70:B4:4D:75:8A:E1:28:20:92:DC:17:5F:EF:C0:31:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEYUN2/0/3136332e35322e34382e302f32332d3233203d3e20313532383835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.52.48.0/23 Signature Algorithm: sha256WithRSAEncryption 10:e8:7c:05:bd:2f:d5:9b:f2:6e:f7:e6:5d:9b:39:fe:c1:1e: 14:79:59:4d:c3:e5:c4:2b:09:51:76:c5:80:75:2e:1f:d5:b7: e0:2e:1c:97:20:7a:04:3b:0b:92:44:3f:d1:a4:33:f5:91:8d: ee:8b:b8:a8:32:30:77:1d:e7:ab:5e:9b:fd:fd:de:7e:5a:ca: 7c:be:3b:32:17:8c:64:f7:a9:37:62:fa:24:2a:4c:cb:a3:01: aa:e2:17:b4:00:5f:b3:b0:42:3a:90:34:40:54:13:88:a2:8d: f5:97:c5:2c:bb:2b:7d:af:26:44:bf:99:bf:10:a8:cd:83:7b: 44:5b:8e:e4:d4:83:16:07:c9:bc:bd:60:be:19:0f:12:e0:94: ac:90:4c:f1:96:60:5a:10:cf:5b:d4:a9:7f:19:6d:a7:b0:60: e7:72:b4:4c:09:16:f7:e5:c4:0b:3a:67:0e:a4:18:c6:96:b5: 71:e7:de:16:b1:fa:c8:73:8e:8c:04:95:5a:c4:4a:0c:16:a7: 8f:f7:41:d4:03:f8:53:12:df:ee:57:98:ae:28:85:be:66:85: 31:da:b3:d7:f5:8b:e4:f5:09:0f:1f:68:fa:e5:8f:14:cd:f6: 05:db:df:c7:11:d7:e1:89:d3:c9:af:88:09:b9:ce:96:9a:7b: a6:bb:ac:37 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUaHpx1kKmBBJSzNhpfIvUcWysxtcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEOTZDRUQ3MEI0NEQ3NThBRTEyODIwOTJEQzE3NUZF RkMwMzE5NTAeFw0yNjEwMTkwOTU5MDJaFw0yNzEwMTgxMDA0MDJaMDMxMTAvBgNV BAMTKEMyRDgxOTc3NDhGNTZBMTIyNUE2NzgyNjJFMkNBRjk4OEJGMDM0Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcljBkemlHfwayJqcP8aToFf4B 7XBSYIR0sWB/f2hfDJE7MPxNkizK0RiyFoz0itld+PO6A6cvtr9lkzTwrTYj0W5Z gFnhCOnPY0DHlTOsyU6exT8bEiGUuI3q5wb41kHdSRXHVVOnfJ9gKBGX6ZsBs8hf 4D1fpL+yZHVBK2cvUUrb4SD5QffANwL+aIzmrANi5nFyTvbZ8BBM4ZOc4hbsEYTU A6qcAuAmj+cLY+wH1Y+862n4i0B3SCbTqZwqmhTNUST758DKNCTDE5xhYPbVhE9t tXXTFLX4Z5biK1d+Ot5glIH6gIVJQkYkYbLK62b2z2cuSXHhzkj6NA8ZAUSJAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUwtgZd0j1ahIlpngmLiyvmIvwNMswHwYDVR0j BBgwFoAUZtls7XC0TXWK4SggktwXX+/AMZUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVZVU4y LzAvNjZEOTZDRUQ3MEI0NEQ3NThBRTEyODIwOTJEQzE3NUZFRkMwMzE5NS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS82NkQ5NkNFRDcwQjQ0RDc1OEFFMTI4MjA5MkRD MTc1RkVGQzAzMTk1LmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVZVU4yLzAvMzEzNjMzMmUzNTMy MmUzNDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzNTMyMzgzODM1LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBozQwMA0GCSqGSIb3DQEBCwUAA4IBAQAQ6HwFvS/Vm/Ju9+Zdmzn+wR4U eVlNw+XEKwlRdsWAdS4f1bfgLhyXIHoEOwuSRD/RpDP1kY3ui7ioMjB3HeerXpv9 /d5+Wsp8vjsyF4xk96k3YvokKkzLowGq4he0AF+zsEI6kDRAVBOIoo31l8Usuyt9 ryZEv5m/EKjNg3tEW47k1IMWB8m8vWC+GQ8S4JSskEzxlmBaEM9b1Kl/GW2nsGDn crRMCRb35cQLOmcOpBjGlrVx594WsfrIc46MBJVaxEoMFqeP90HUA/hTEt/uV5iu KIW+ZoUx2rPX9Yvk9QkPH2j65Y8UzfYF29/HEdfhidPJr4gJuc6Wmnumu6w3 -----END CERTIFICATE-----Generated at Sun Nov 15 20:35:05 2026 by rpki-client