$ rpki-client -vvvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/3231312e37332e3130322e302f32332d3234203d3e203331393732.roa File: 3231312e37332e3130322e302f32332d3234203d3e203331393732.roa (raw, json) Hash identifier: BZZsk08mUYcwTMTfXfB6TG4Y8hhjasOxijDev40W9UE= Subject key identifier: 34:1D:C3:D3:86:B7:DA:04:A7:7A:A9:A8:88:97:EF:1F:F4:D1:19:61 Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Certificate serial: 102EFCF68701AA9D18FB81CCE19BF75E98CC3C9D Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/3231312e37332e3130322e302f32332d3234203d3e203331393732.roa Signing time: Wed 09 Sep 2026 06:24:02 +0000 ROA not before: Wed 09 Sep 2026 06:19:02 +0000 ROA not after: Wed 08 Sep 2027 06:24:02 +0000 asID: 31972 IP address blocks: 211.73.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:2e:fc:f6:87:01:aa:9d:18:fb:81:cc:e1:9b:f7:5e:98:cc:3c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Validity Not Before: Sep 9 06:19:02 2026 GMT Not After : Sep 8 06:24:02 2027 GMT Subject: CN=341DC3D386B7DA04A77AA9A88897EF1FF4D11961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:b5:32:36:75:64:b7:3b:3b:33:35:7e:e3: af:ae:39:c1:d2:fa:73:4f:41:e6:51:b5:c7:0b:66: 0a:4c:f4:c2:93:0e:fe:4f:57:c7:15:b9:83:2d:cb: 99:61:20:09:cd:86:3c:ac:83:1c:85:45:da:4e:a5: 40:89:3c:d3:32:3d:b5:19:bc:24:bb:a2:1f:9e:90: ce:5e:77:a7:f6:6b:ae:d3:0d:cb:f7:bc:45:87:7c: d0:5f:4f:85:96:3e:ca:0b:28:7c:02:f1:fc:93:cf: 98:eb:67:de:71:a1:05:99:87:1b:a9:e2:17:9e:a9: 4d:16:34:cd:62:32:82:22:46:11:5c:11:09:6e:39: ea:1e:05:5a:61:1d:78:17:c8:21:1e:2f:93:fd:a2: 44:f0:d6:d6:73:cf:7f:24:b1:a5:23:1c:27:69:63: 23:39:95:9d:32:a2:73:d6:d6:bc:c3:05:a6:43:83: 4e:9f:c6:0a:27:f7:2b:14:a5:2b:05:c9:6e:bb:3c: 98:cc:07:a7:0d:14:37:59:6b:22:31:c9:f3:8d:2d: 9a:38:f4:32:f4:fa:97:41:d7:a8:83:31:ae:6f:f0: 8d:7f:06:69:9e:f0:5d:98:12:7c:62:4c:32:52:27: c1:e8:99:2b:d3:24:36:89:d2:5c:15:83:f8:bb:ff: c4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1D:C3:D3:86:B7:DA:04:A7:7A:A9:A8:88:97:EF:1F:F4:D1:19:61 X509v3 Authority Key Identifier: keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/3231312e37332e3130322e302f32332d3234203d3e203331393732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.73.102.0/23 Signature Algorithm: sha256WithRSAEncryption 87:5e:c1:ab:a6:37:d1:b1:9f:25:93:46:9e:e5:41:5f:15:39: a0:2c:41:39:1f:33:47:ce:f3:3b:6a:4a:d6:ea:cf:ab:c0:5e: 2d:c7:8b:11:a1:24:fc:7a:5f:97:22:e2:62:4a:f3:42:64:c7: 19:fc:13:a0:64:0a:ad:fa:88:cd:02:7f:fc:47:d4:32:ea:00: db:93:63:7d:04:b1:7e:5d:cb:78:7b:b0:d7:7e:18:fd:60:ad: c2:3b:96:4f:d0:8b:6c:a9:5f:3f:91:22:a4:d5:c0:28:3c:c8: ce:e6:4c:e3:4b:66:49:8d:e5:ae:51:4c:42:7d:19:33:b7:41: bb:16:f5:60:7c:48:09:12:65:b1:0f:ee:a7:31:28:49:09:86: 20:95:5b:dc:67:67:76:aa:62:b3:13:69:ec:7b:28:b2:39:4e: 07:54:37:bf:ce:1d:b5:4f:8b:22:91:a0:ff:38:c2:05:be:f1: cd:33:4e:e4:32:99:36:a2:e9:5e:75:92:96:29:f5:c3:b0:77: 9e:c2:e9:33:06:3f:74:e3:bb:2b:46:02:b8:67:42:a5:08:e6: eb:f3:34:7f:88:b5:2b:2d:4a:7f:dc:3e:8d:50:0c:98:cf:c4: 75:2e:36:73:b6:c9:85:f8:1d:86:df:66:37:b8:5e:df:40:7c: a1:35:c0:50 -----BEGIN CERTIFICATE----- MIIE3zCCA8egAwIBAgIUEC789ocBqp0Y+4HM4Zv3XpjMPJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJE QTVBRUI2ODAeFw0yNjA5MDkwNjE5MDJaFw0yNzA5MDgwNjI0MDJaMDMxMTAvBgNV BAMTKDM0MURDM0QzODZCN0RBMDRBNzdBQTlBODg4OTdFRjFGRjREMTE5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+rUyNnVktzs7MzV+46+uOcHS +nNPQeZRtccLZgpM9MKTDv5PV8cVuYMty5lhIAnNhjysgxyFRdpOpUCJPNMyPbUZ vCS7oh+ekM5ed6f2a67TDcv3vEWHfNBfT4WWPsoLKHwC8fyTz5jrZ95xoQWZhxup 4heeqU0WNM1iMoIiRhFcEQluOeoeBVphHXgXyCEeL5P9okTw1tZzz38ksaUjHCdp YyM5lZ0yonPW1rzDBaZDg06fxgon9ysUpSsFyW67PJjMB6cNFDdZayIxyfONLZo4 9DL0+pdB16iDMa5v8I1/Bmme8F2YEnxiTDJSJ8HomSvTJDaJ0lwVg/i7/8QZAgMB AAGjggHpMIIB5TAdBgNVHQ4EFgQUNB3D04a32gSneqmoiJfvH/TRGWEwHwYDVR0j BBgwFoAUMYh/Do0X7rTfxzRM5Ihfa9pa62gwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzAvMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS8zMTg4N0YwRThEMTdFRUI0REZDNzM0NENF NDg4NUY2QkRBNUFFQjY4LmNlcjB/BggrBgEFBQcBCwRzMHEwbwYIKwYBBQUHMAuG Y3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzAvMzIzMTMx MmUzNzMzMmUzMTMwMzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMzMxMzkzNzMy LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQB00lmMA0GCSqGSIb3DQEBCwUAA4IBAQCHXsGrpjfRsZ8lk0ae 5UFfFTmgLEE5HzNHzvM7akrW6s+rwF4tx4sRoST8el+XIuJiSvNCZMcZ/BOgZAqt +ojNAn/8R9Qy6gDbk2N9BLF+Xct4e7DXfhj9YK3CO5ZP0ItsqV8/kSKk1cAoPMjO 5kzjS2ZJjeWuUUxCfRkzt0G7FvVgfEgJEmWxD+6nMShJCYYglVvcZ2d2qmKzE2ns eyiyOU4HVDe/zh21T4sikaD/OMIFvvHNM07kMpk2ouledZKWKfXDsHeewukzBj90 47srRgK4Z0KlCObr8zR/iLUrLUp/3D6NUAyYz8R1LjZztsmF+B2G32Y3uF7fQHyh NcBQ -----END CERTIFICATE-----Generated at Mon Sep 21 23:02:50 2026 by rpki-client