$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/0/3130332e32332e3130382e302f32332d3332203d3e20313532363131.roa File: 3130332e32332e3130382e302f32332d3332203d3e20313532363131.roa (raw, json) Hash identifier: T1ghJeZqoDyoS6h4+88UDs/OcvRqZ8RuQoLYvkNX8NQ= Subject key identifier: D8:5B:D1:F5:9B:93:09:09:10:C0:53:D8:E9:F2:7A:70:9F:40:2F:5A Certificate issuer: /CN=9F4621BE2CEB15DD74809D52692588598490FABF Certificate serial: 51FD62EC7ADCBA6388A578CE6ABAACB2C10D91A2 Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e32332e3130382e302f32332d3332203d3e20313532363131.roa Signing time: Wed 26 Aug 2026 08:04:00 +0000 ROA not before: Wed 26 Aug 2026 07:59:00 +0000 ROA not after: Wed 25 Aug 2027 08:04:00 +0000 asID: 152611 IP address blocks: 103.23.108.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 09:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:fd:62:ec:7a:dc:ba:63:88:a5:78:ce:6a:ba:ac:b2:c1:0d:91:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF Validity Not Before: Aug 26 07:59:00 2026 GMT Not After : Aug 25 08:04:00 2027 GMT Subject: CN=D85BD1F59B93090910C053D8E9F27A709F402F5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c2:c8:ae:53:ad:ec:e5:1f:3e:3c:05:d8:0d: a2:37:79:cc:c5:ab:00:ec:a5:17:d5:64:eb:c2:59: b1:d7:ab:c4:db:83:6f:41:29:e7:6e:f4:27:8f:a1: e1:12:29:75:e3:70:99:d2:da:ad:ba:b3:20:86:9c: 07:68:c2:3a:80:a8:91:a7:a0:84:af:0a:35:83:cb: 45:ff:5d:3b:2b:cf:c4:6d:ca:fa:6c:0e:5a:ba:ae: cd:e7:cd:8a:d5:4c:62:ed:53:4f:2a:d5:75:2a:25: f4:e1:db:5f:9a:b4:29:a2:a2:f3:17:a8:e5:85:f4: 24:c0:cb:00:a7:2f:c4:f1:ea:e0:52:31:5f:d2:a6: 9f:b3:46:ad:3e:31:f4:bb:bc:38:9b:da:e7:a0:49: 23:79:44:d6:5e:c4:8b:97:6a:a0:92:c7:23:d8:de: 42:4a:dd:01:00:bf:42:66:cc:14:63:a4:6e:69:93: d2:ae:22:80:bf:ca:04:1a:5c:ee:7b:ba:b5:6b:4c: ca:f9:75:8e:49:3b:ad:03:83:75:1a:81:cf:7f:78: f9:01:e5:2e:2d:4b:a9:ac:6b:a7:4d:02:be:fb:55: 2b:1a:01:29:b5:71:90:1e:e5:cb:31:65:27:8e:e5: 02:46:d3:73:73:53:9c:8d:32:1c:b8:b2:b3:cf:03: c3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5B:D1:F5:9B:93:09:09:10:C0:53:D8:E9:F2:7A:70:9F:40:2F:5A X509v3 Authority Key Identifier: keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/3130332e32332e3130382e302f32332d3332203d3e20313532363131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.23.108.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:5e:b6:26:92:16:42:24:7a:b5:43:d0:37:ad:3a:64:84:77: e1:6c:e7:0e:c1:d3:a6:a3:e0:55:32:05:e2:28:72:0f:8d:43: 31:85:1a:3c:50:16:f6:42:18:1b:a3:4c:c3:8e:b6:16:49:dc: 08:97:ed:bf:1a:1a:e2:d8:75:64:2c:e5:6a:35:f9:3e:9e:46: b6:b6:21:a5:53:76:86:dd:cc:ae:bc:b0:d4:30:e6:80:22:d8: 0f:8d:5f:8a:51:ba:31:23:61:99:34:da:05:3e:d5:29:df:f6: 2d:43:e5:34:ee:db:7c:49:a8:f4:52:45:a5:f1:bf:3c:9e:ee: d7:7a:d5:1e:1e:a2:cf:42:fb:c7:73:56:8c:38:d8:6c:f2:04: 6d:2c:37:41:f3:e0:f1:68:0e:2b:51:f7:99:4e:de:30:67:f0: 0d:c1:02:ab:35:6a:b0:35:14:9b:83:dd:9d:b3:52:28:49:3f: 09:2c:36:50:9b:82:ad:d9:7a:b3:cd:d7:0f:23:e1:d0:61:d7: 0f:9e:5a:48:e4:f4:4b:a2:5c:2a:95:98:7f:af:f5:42:15:c7: ca:d4:3c:f5:0d:2f:7f:91:cd:5f:a3:73:3c:af:4a:66:76:e6: 91:87:07:df:02:72:bc:0d:dd:68:dd:1b:e8:30:b7:5d:45:cf: 2f:1d:f9:19 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUUf1i7HrcumOIpXjOarqsssENkaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4 NDkwRkFCRjAeFw0yNjA4MjYwNzU5MDBaFw0yNzA4MjUwODA0MDBaMDMxMTAvBgNV BAMTKEQ4NUJEMUY1OUI5MzA5MDkxMEMwNTNEOEU5RjI3QTcwOUY0MDJGNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVwsiuU63s5R8+PAXYDaI3eczF qwDspRfVZOvCWbHXq8Tbg29BKedu9CePoeESKXXjcJnS2q26syCGnAdowjqAqJGn oISvCjWDy0X/XTsrz8RtyvpsDlq6rs3nzYrVTGLtU08q1XUqJfTh21+atCmiovMX qOWF9CTAywCnL8Tx6uBSMV/Spp+zRq0+MfS7vDib2uegSSN5RNZexIuXaqCSxyPY 3kJK3QEAv0JmzBRjpG5pk9KuIoC/ygQaXO57urVrTMr5dY5JO60Dg3Uagc9/ePkB 5S4tS6msa6dNAr77VSsaASm1cZAe5csxZSeO5QJG03NzU5yNMhy4srPPA8N1AgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQU2FvR9ZuTCQkQwFPY6fJ6cJ9AL1owHwYDVR0j BBgwFoAUn0YhvizrFd10gJ1SaSWIWYSQ+r8wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAv OUY0NjIxQkUyQ0VCMTVERDc0ODA5RDUyNjkyNTg4NTk4NDkwRkFCRi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS85RjQ2MjFCRTJDRUIxNURENzQ4MDlENTI2OTI1ODg1 OTg0OTBGQUJGLmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzAvMzEzMDMzMmUzMjMzMmUzMTMw MzgyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzMTM1MzIzNjMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnF2wwDQYJKoZIhvcNAQELBQADggEBAHpetiaSFkIkerVD0DetOmSEd+Fs5w7B 06aj4FUyBeIocg+NQzGFGjxQFvZCGBujTMOOthZJ3AiX7b8aGuLYdWQs5Wo1+T6e Rra2IaVTdobdzK68sNQw5oAi2A+NX4pRujEjYZk02gU+1Snf9i1D5TTu23xJqPRS RaXxvzye7td61R4eos9C+8dzVow42GzyBG0sN0Hz4PFoDitR95lO3jBn8A3BAqs1 arA1FJuD3Z2zUihJPwksNlCbgq3ZerPN1w8j4dBh1w+eWkjk9EuiXCqVmH+v9UIV x8rUPPUNL3+RzV+jczyvSmZ25pGHB98CcrwN3WjdG+gwt11Fzy8d+Rk= -----END CERTIFICATE-----Generated at Tue Sep 22 20:36:19 2026 by rpki-client