$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234312e302f32342d3332203d3e203633393037.roa File: 3138372e37392e3234312e302f32342d3332203d3e203633393037.roa (raw, json) Hash identifier: OBpRfi4+lv5ccoc6iNCMiesrl6Hu6/OIxdIRidZn29s= Subject key identifier: 73:8D:83:6A:B5:72:3E:69:74:3E:20:7D:D4:D2:50:64:6B:5C:C4:B6 Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 60B5CD925F5C2668F280ACE6EA63826F0A4368C4 Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234312e302f32342d3332203d3e203633393037.roa Signing time: Mon 14 Sep 2026 16:24:00 +0000 ROA not before: Mon 14 Sep 2026 16:19:00 +0000 ROA not after: Mon 13 Sep 2027 16:24:00 +0000 asID: 63907 IP address blocks: 187.79.241.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 13:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b5:cd:92:5f:5c:26:68:f2:80:ac:e6:ea:63:82:6f:0a:43:68:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Sep 14 16:19:00 2026 GMT Not After : Sep 13 16:24:00 2027 GMT Subject: CN=738D836AB5723E69743E207DD4D250646B5CC4B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b4:1d:be:04:c2:cf:47:c1:fe:1d:ed:79:4b: 30:e4:42:ee:c8:6b:5e:2e:b0:c4:43:fb:99:ee:94: cb:75:79:ce:7c:f8:99:60:d0:b3:3a:71:85:d4:d6: b3:75:c8:a8:c4:7e:7c:a3:1a:23:2e:7e:43:6d:65: ea:09:b9:68:dc:b1:4d:f2:15:1d:80:6b:af:b5:26: 64:5b:c0:60:34:12:d3:b5:f7:d8:70:cb:00:39:77: f8:62:b7:2f:a4:28:97:a7:56:50:52:f4:d4:bf:5a: 0b:b8:d1:28:41:a0:f3:33:33:0b:c2:47:a7:03:68: 15:f2:22:eb:c8:e4:bd:16:d3:e3:04:81:d7:c6:9d: 5c:87:73:3f:08:87:09:33:3f:e9:0a:3a:4d:a7:ed: 22:4a:c2:a7:c3:2c:56:52:17:96:47:e6:c9:a7:27: cc:fb:8c:51:db:ba:3b:86:0e:d6:1f:fc:be:95:e8: fe:94:bc:d5:af:bb:e1:4c:19:1c:59:65:69:2a:5e: 01:2b:a1:70:86:02:56:2e:3f:55:01:69:a8:29:9b: d1:dd:2e:5f:02:37:c1:39:15:5d:58:ef:47:b7:3b: 82:6d:a6:46:60:ca:78:a8:3a:4a:12:32:f1:1a:c9: 8a:d1:15:83:df:8f:32:4d:5a:45:76:2e:2e:37:0c: a2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8D:83:6A:B5:72:3E:69:74:3E:20:7D:D4:D2:50:64:6B:5C:C4:B6 X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234312e302f32342d3332203d3e203633393037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.79.241.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:81:eb:a5:1c:44:e9:64:6d:57:7d:bc:02:e1:41:55:a9:e2: 41:67:ee:6b:03:2a:85:3b:53:ec:f0:46:46:99:f4:dd:cc:24: 44:b5:e1:cf:c9:ab:ff:77:13:71:7d:9d:6d:80:64:96:74:48: a6:00:bd:51:ed:d1:c6:28:8e:aa:21:4f:55:66:1d:74:be:e4: d7:a1:0a:4d:ff:2d:71:b6:80:6c:0d:b5:21:d6:d9:07:64:f5: 9b:7d:98:86:ba:52:be:9d:ab:f7:76:d1:07:ba:1f:3d:20:ba: e8:05:98:c4:8a:22:e7:da:96:a3:e6:83:d8:60:79:4e:31:39: 1b:7d:0d:08:01:12:21:74:47:9a:ec:2d:69:a3:ba:e4:f6:49: 33:91:a7:55:9c:5f:55:3c:84:60:7c:8a:cb:1c:13:95:df:b6: 7c:07:81:6b:04:91:5d:cf:81:3b:fb:2f:96:0a:c9:6f:0e:d9: d1:2b:d9:9c:52:88:f1:81:d3:a0:44:b5:02:74:9a:d6:13:a1: c0:e6:34:b0:8e:15:31:58:28:c7:ce:80:41:77:58:82:48:d0: 8b:63:b6:9b:1b:68:7e:03:66:a2:39:b2:2f:53:0e:32:63:47: e0:23:9f:76:5b:aa:97:02:a4:bf:fd:c3:ce:71:a7:da:e1:33: d2:b0:6c:5e -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUYLXNkl9cJmjygKzm6mOCbwpDaMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjA5MTQxNjE5MDBaFw0yNzA5MTMxNjI0MDBaMDMxMTAvBgNV BAMTKDczOEQ4MzZBQjU3MjNFNjk3NDNFMjA3REQ0RDI1MDY0NkI1Q0M0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtB2+BMLPR8H+He15SzDkQu7I a14usMRD+5nulMt1ec58+Jlg0LM6cYXU1rN1yKjEfnyjGiMufkNtZeoJuWjcsU3y FR2Aa6+1JmRbwGA0EtO199hwywA5d/hity+kKJenVlBS9NS/Wgu40ShBoPMzMwvC R6cDaBXyIuvI5L0W0+MEgdfGnVyHcz8IhwkzP+kKOk2n7SJKwqfDLFZSF5ZH5smn J8z7jFHbujuGDtYf/L6V6P6UvNWvu+FMGRxZZWkqXgEroXCGAlYuP1UBaagpm9Hd Ll8CN8E5FV1Y70e3O4JtpkZgynioOkoSMvEayYrRFYPfjzJNWkV2Li43DKIZAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUc42DarVyPml0PiB91NJQZGtcxLYwHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvMzEzODM3MmUzNzM5MmUzMjM0 MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNjMzMzkzMDM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA u0/xMA0GCSqGSIb3DQEBCwUAA4IBAQBcgeulHETpZG1XfbwC4UFVqeJBZ+5rAyqF O1Ps8EZGmfTdzCREteHPyav/dxNxfZ1tgGSWdEimAL1R7dHGKI6qIU9VZh10vuTX oQpN/y1xtoBsDbUh1tkHZPWbfZiGulK+nav3dtEHuh89ILroBZjEiiLn2paj5oPY YHlOMTkbfQ0IARIhdEea7C1po7rk9kkzkadVnF9VPIRgfIrLHBOV37Z8B4FrBJFd z4E7+y+WCslvDtnRK9mcUojxgdOgRLUCdJrWE6HA5jSwjhUxWCjHzoBBd1iCSNCL Y7abG2h+A2aiObIvUw4yY0fgI592W6qXAqS//cPOcafa4TPSsGxe -----END CERTIFICATE-----Generated at Tue Sep 22 20:50:47 2026 by rpki-client