$ rpki-client -vvvf rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234332e302f32342d3332203d3e20313532363237.roa File: 3138372e37392e3234332e302f32342d3332203d3e20313532363237.roa (raw, json) Hash identifier: g5g71SS0hEmKR6eQgaJ7zWq0tOfD6hYFf5XTJJ5szwg= Subject key identifier: 0F:4C:F6:C9:4B:E1:89:CD:E0:17:2F:40:B3:7C:66:B8:9F:02:9D:2B Certificate issuer: /CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Certificate serial: 2702C17A4C77D4E4C8D7AAEEA15527F5D91575E5 Authority key identifier: 3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234332e302f32342d3332203d3e20313532363237.roa Signing time: Mon 14 Sep 2026 16:04:01 +0000 ROA not before: Mon 14 Sep 2026 15:59:01 +0000 ROA not after: Mon 13 Sep 2027 16:04:01 +0000 asID: 152627 IP address blocks: 187.79.243.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 13:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:02:c1:7a:4c:77:d4:e4:c8:d7:aa:ee:a1:55:27:f5:d9:15:75:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C219263F26B99E2DB375CD0CDFE5E54B57B5C26 Validity Not Before: Sep 14 15:59:01 2026 GMT Not After : Sep 13 16:04:01 2027 GMT Subject: CN=0F4CF6C94BE189CDE0172F40B37C66B89F029D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8e:3c:6a:37:67:54:30:c8:b4:88:8a:f4:7c: de:5b:db:81:81:aa:da:b1:ab:52:41:6e:48:d8:ee: 60:8c:6d:46:10:45:79:fe:9a:34:80:8c:0f:cc:1b: f9:1f:32:fc:29:e0:13:6c:f7:44:2b:3a:64:61:d1: c4:a4:3a:3a:46:d5:f2:68:68:bb:2f:33:42:ad:06: eb:b4:74:da:6c:b2:13:46:72:a5:10:ef:d2:5d:d0: 51:50:99:52:bc:fc:23:ca:1b:00:7c:65:8c:ef:e5: fa:ee:93:c2:91:b1:46:cb:30:04:4d:ae:3e:16:93: c9:51:99:c1:00:6e:70:02:05:20:11:df:c5:e7:66: 5a:51:0d:23:c0:19:71:79:40:4f:79:a3:e5:1d:dc: eb:cc:95:43:46:f5:8b:2d:33:42:96:58:48:02:fc: 0e:be:f2:e0:0a:2f:19:a7:b1:a0:4b:69:aa:c3:48: ca:d0:76:7d:47:02:dd:d6:1b:7b:d5:e3:ad:81:28: 56:1b:4f:ec:f5:35:18:80:e8:9e:94:c8:a0:bf:c0: ee:81:3c:fd:ea:c5:f6:bc:57:ec:16:eb:44:59:96: 4e:84:b1:c5:bf:33:65:39:62:a3:3c:31:38:db:45: 91:5b:a5:cb:6f:7c:cc:8c:81:4a:f3:1b:ba:46:cd: 9b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4C:F6:C9:4B:E1:89:CD:E0:17:2F:40:B3:7C:66:B8:9F:02:9D:2B X509v3 Authority Key Identifier: keyid:3C:21:92:63:F2:6B:99:E2:DB:37:5C:D0:CD:FE:5E:54:B5:7B:5C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/1/3138372e37392e3234332e302f32342d3332203d3e20313532363237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.79.243.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:78:66:c5:94:2c:5e:e2:80:9b:5c:3b:f9:16:13:a2:d1:48: 49:d5:2b:ce:22:bd:95:64:93:54:41:2b:4f:ff:10:51:1f:86: b7:81:44:f5:e2:cf:a2:eb:b0:c5:24:dc:a2:4f:c3:b0:7e:65: 22:8c:87:b2:4d:71:76:cd:c3:bb:d2:f7:cb:ec:75:16:06:56: 5a:4c:1d:64:48:38:94:e5:1e:fd:e8:8b:52:eb:0a:0d:2a:40: e0:a9:1b:5a:6d:0c:2d:99:78:45:d8:6f:74:68:b7:d9:16:9c: 91:45:34:33:16:47:8c:bf:c2:fb:2b:a6:3b:63:d4:5c:2a:7d: 2c:09:4c:c6:b6:46:86:4d:51:30:0a:e2:1a:1c:f1:a3:e9:a6: 68:1b:12:fb:ec:83:66:dc:e1:96:aa:4a:7c:36:08:00:a7:9c: 58:b2:d1:a1:2a:9e:ee:8b:63:e4:00:a5:db:b4:40:d4:21:42: d8:c5:b6:70:d9:07:df:cb:6e:24:db:e4:10:26:5e:58:29:9e: 55:95:27:f5:52:08:6c:0d:36:f6:21:a4:50:25:cb:5a:f6:2c: b9:97:6c:9a:3a:89:cf:f9:fa:c7:e7:84:07:0d:e3:00:3d:8d: 23:3b:92:05:5c:6e:0d:14:fd:fe:4d:af:9c:d1:5c:f8:4c:42: a9:f5:ab:62 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIUJwLBekx31OTI16ruoVUn9dkVdeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRC NTdCNUMyNjAeFw0yNjA5MTQxNTU5MDFaFw0yNzA5MTMxNjA0MDFaMDMxMTAvBgNV BAMTKDBGNENGNkM5NEJFMTg5Q0RFMDE3MkY0MEIzN0M2NkI4OUYwMjlEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgjjxqN2dUMMi0iIr0fN5b24GB qtqxq1JBbkjY7mCMbUYQRXn+mjSAjA/MG/kfMvwp4BNs90QrOmRh0cSkOjpG1fJo aLsvM0KtBuu0dNpsshNGcqUQ79Jd0FFQmVK8/CPKGwB8ZYzv5fruk8KRsUbLMARN rj4Wk8lRmcEAbnACBSAR38XnZlpRDSPAGXF5QE95o+Ud3OvMlUNG9YstM0KWWEgC /A6+8uAKLxmnsaBLaarDSMrQdn1HAt3WG3vV462BKFYbT+z1NRiA6J6UyKC/wO6B PP3qxfa8V+wW60RZlk6EscW/M2U5YqM8MTjbRZFbpctvfMyMgUrzG7pGzZurAgMB AAGjggHfMIIB2zAdBgNVHQ4EFgQUD0z2yUvhic3gFy9As3xmuJ8CnSswHwYDVR0j BBgwFoAUPCGSY/JrmeLbN1zQzf5eVLV7XCYwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEv M0MyMTkyNjNGMjZCOTlFMkRCMzc1Q0QwQ0RGRTVFNTRCNTdCNUMyNi5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMi8zQzIxOTI2M0YyNkI5OUUyREIzNzVDRDBDREZFNUU1 NEI1N0I1QzI2LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuGX3JzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUE5JLzEvMzEzODM3MmUzNzM5MmUzMjM0 MzMyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTM1MzIzNjMyMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC7T/MwDQYJKoZIhvcNAQELBQADggEBAHt4ZsWULF7igJtcO/kWE6LRSEnVK84i vZVkk1RBK0//EFEfhreBRPXiz6LrsMUk3KJPw7B+ZSKMh7JNcXbNw7vS98vsdRYG VlpMHWRIOJTlHv3oi1LrCg0qQOCpG1ptDC2ZeEXYb3Rot9kWnJFFNDMWR4y/wvsr pjtj1FwqfSwJTMa2RoZNUTAK4hoc8aPppmgbEvvsg2bc4ZaqSnw2CACnnFiy0aEq nu6LY+QApdu0QNQhQtjFtnDZB9/LbiTb5BAmXlgpnlWVJ/VSCGwNNvYhpFAly1r2 LLmXbJo6ic/5+sfnhAcN4wA9jSM7kgVcbg0U/f5Nr5zRXPhMQqn1q2I= -----END CERTIFICATE-----Generated at Tue Sep 22 19:22:35 2026 by rpki-client