$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234322e302f32342d3332203d3e20313532363237.roa File: 3138372e37392e3234322e302f32342d3332203d3e20313532363237.roa (raw, json) Hash identifier: rDdKFeMf3jMoCFWR1NywslztzyvdRKt2kDtU6UZnvp8= Subject key identifier: 14:41:B1:AC:5F:F1:09:AF:A9:3E:07:D5:9E:E0:D4:03:D4:20:8E:AA Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 02E5E959D24A1261CAB6CC568DDD4B4E7D0B08CD Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234322e302f32342d3332203d3e20313532363237.roa Signing time: Mon 14 Sep 2026 16:04:01 +0000 ROA not before: Mon 14 Sep 2026 15:59:01 +0000 ROA not after: Mon 13 Sep 2027 16:04:01 +0000 asID: 152627 IP address blocks: 187.79.242.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 19:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e5:e9:59:d2:4a:12:61:ca:b6:cc:56:8d:dd:4b:4e:7d:0b:08:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Sep 14 15:59:01 2026 GMT Not After : Sep 13 16:04:01 2027 GMT Subject: CN=1441B1AC5FF109AFA93E07D59EE0D403D4208EAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ba:ec:19:83:8a:83:ab:44:d3:2f:5e:d1:8c: 6d:3c:aa:e8:ab:c6:b6:df:c1:11:7b:e1:e7:60:5e: ef:7e:69:5b:0e:7e:9f:e2:88:5c:c0:7f:6d:ea:30: 86:88:da:09:05:ad:69:8d:bd:db:c7:f3:0a:52:94: 5a:ad:83:43:c2:67:f9:64:1c:66:a5:53:0e:73:0d: b6:cc:c7:40:51:90:b4:84:32:fe:b6:2d:d5:09:7d: 5f:bc:48:dc:2b:a9:9d:3e:c4:88:7a:7c:a1:8c:6b: 88:c9:d9:98:0a:82:c8:a6:a5:c5:4f:e6:54:b5:75: 9d:a5:f1:bc:08:26:ad:e7:90:98:17:0a:6b:98:c5: 91:70:ce:fe:93:40:19:f8:8e:ce:6d:b1:99:7e:26: 9a:a8:3e:77:67:fd:18:28:90:d3:e7:af:7a:3d:67: 96:1f:34:6b:42:e1:d5:52:d4:8d:f6:c5:0f:9f:3b: b2:af:09:cb:20:ff:7e:0a:c5:e6:10:bb:7e:7b:c2: ba:a3:2a:77:a6:b7:79:50:4e:76:4a:4f:28:ab:f7: 3c:39:4b:5a:66:0c:17:f9:f9:84:aa:2d:cf:77:c3: 3e:a5:8a:17:b8:1d:67:9b:a5:2f:e8:b8:7c:34:6b: 5a:72:88:bd:f1:b5:61:3e:83:a9:a3:0e:ba:e2:9a: c7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:41:B1:AC:5F:F1:09:AF:A9:3E:07:D5:9E:E0:D4:03:D4:20:8E:AA X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234322e302f32342d3332203d3e20313532363237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.79.242.0/24 Signature Algorithm: sha256WithRSAEncryption a7:f6:d2:64:37:be:62:2d:73:0e:02:54:20:a8:33:54:10:02: aa:13:f2:d7:5d:2f:1c:d9:9c:39:1f:6e:5a:c1:3d:dd:f5:58: 6d:19:b1:cd:01:95:34:26:80:d6:0b:ad:a0:3b:de:b9:85:92: fb:ba:9e:37:53:c3:3a:b4:56:fd:54:53:43:04:7f:a6:25:9b: 06:52:ac:dd:d6:36:0a:0e:de:58:0c:7d:64:71:7d:41:57:4b: 12:92:c4:c5:27:08:9e:ee:d6:d4:2c:78:7e:34:d8:72:78:9e: 95:47:9e:65:68:87:35:7c:c2:17:f8:a8:5b:1d:a7:93:02:72: f4:81:64:30:68:f7:a3:46:03:4d:05:48:0f:36:41:45:79:f7: 7a:93:21:88:4e:22:c0:51:e3:14:ed:44:e4:fe:4f:07:c4:d4: e7:a5:f8:c9:ab:30:a1:e0:bc:a2:c7:e8:ca:68:ce:13:08:61: ac:d9:53:22:32:77:de:e9:08:a7:d9:be:98:de:38:37:58:a5: c5:f0:52:c7:bd:89:f8:07:37:28:c4:4b:e8:72:ce:43:05:24: 8b:00:06:18:d2:fd:9c:bd:c0:b5:1b:90:56:ad:0f:7e:7e:9d: 88:aa:cf:b2:1a:a5:df:69:7f:7b:c8:3b:5c:62:66:79:95:78: 17:2d:8e:d1 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUAuXpWdJKEmHKtsxWjd1LTn0LCM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjA5MTQxNTU5MDFaFw0yNzA5MTMxNjA0MDFaMDMxMTAvBgNV BAMTKDE0NDFCMUFDNUZGMTA5QUZBOTNFMDdENTlFRTBENDAzRDQyMDhFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLuuwZg4qDq0TTL17RjG08quir xrbfwRF74edgXu9+aVsOfp/iiFzAf23qMIaI2gkFrWmNvdvH8wpSlFqtg0PCZ/lk HGalUw5zDbbMx0BRkLSEMv62LdUJfV+8SNwrqZ0+xIh6fKGMa4jJ2ZgKgsimpcVP 5lS1dZ2l8bwIJq3nkJgXCmuYxZFwzv6TQBn4js5tsZl+JpqoPndn/RgokNPnr3o9 Z5YfNGtC4dVS1I32xQ+fO7KvCcsg/34KxeYQu357wrqjKnemt3lQTnZKTyir9zw5 S1pmDBf5+YSqLc93wz6lihe4HWebpS/ouHw0a1pyiL3xtWE+g6mjDrrimscRAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUFEGxrF/xCa+pPgfVnuDUA9QgjqowHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvMzEzODM3MmUzNzM5MmUzMjM0 MzIyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTM1MzIzNjMyMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC7T/IwDQYJKoZIhvcNAQELBQADggEBAKf20mQ3vmItcw4CVCCoM1QQAqoT8tdd LxzZnDkfblrBPd31WG0Zsc0BlTQmgNYLraA73rmFkvu6njdTwzq0Vv1UU0MEf6Yl mwZSrN3WNgoO3lgMfWRxfUFXSxKSxMUnCJ7u1tQseH402HJ4npVHnmVohzV8whf4 qFsdp5MCcvSBZDBo96NGA00FSA82QUV593qTIYhOIsBR4xTtROT+TwfE1Oel+Mmr MKHgvKLH6MpozhMIYazZUyIyd97pCKfZvpjeODdYpcXwUse9ifgHNyjES+hyzkMF JIsABhjS/Zy9wLUbkFatD35+nYiqz7Iapd9pf3vIO1xiZnmVeBctjtE= -----END CERTIFICATE-----Generated at Tue Sep 22 11:20:35 2026 by rpki-client