$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa File: 3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa (raw, json) Hash identifier: bY0NXv0PHRUL6Unr7YOWL3dkWK/NFv0qutXeYULSTOo= Subject key identifier: D3:D0:EA:DD:7E:B5:A6:B7:70:C3:78:A9:81:3B:D0:3C:43:C7:56:A9 Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F Certificate serial: 04F21548E6A0E375E543644F1A1EEDF819293B1A Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa Signing time: Tue 08 Sep 2026 07:44:14 +0000 ROA not before: Tue 08 Sep 2026 07:39:14 +0000 ROA not after: Tue 07 Sep 2027 07:44:14 +0000 asID: 18419 IP address blocks: 103.234.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f2:15:48:e6:a0:e3:75:e5:43:64:4f:1a:1e:ed:f8:19:29:3b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F Validity Not Before: Sep 8 07:39:14 2026 GMT Not After : Sep 7 07:44:14 2027 GMT Subject: CN=D3D0EADD7EB5A6B770C378A9813BD03C43C756A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:34:d4:4c:17:2e:6d:4a:c7:f9:b1:25:a3:e2: 62:0c:ed:43:10:ca:08:8f:27:60:64:6e:f7:dc:27: a0:b6:61:6f:51:85:f7:7f:67:c7:bb:a7:82:4e:e5: c6:6f:a2:c8:b9:2c:f9:d5:80:cb:4c:52:c3:93:59: 40:a4:fb:34:af:79:2c:7d:fa:57:a9:ca:82:a2:00: 7c:bc:37:d1:c4:bf:73:a3:5b:a3:30:64:52:12:d2: 95:0b:95:a0:af:44:2a:1e:bd:56:3a:0d:2f:21:75: ec:46:e4:ad:eb:65:fb:68:47:36:01:10:26:5a:c1: 47:39:d6:c7:cf:60:0e:74:ca:e2:6f:73:07:09:26: c0:13:1a:35:9c:aa:7a:39:60:9c:b2:9f:d8:c1:a0: 9b:31:9e:b3:14:5a:ff:d7:d3:68:ac:07:4a:52:53: fa:6b:22:64:60:57:68:67:0c:f1:0d:94:81:80:3e: 7a:ca:f9:ff:08:3e:55:7e:cf:82:b4:03:2b:c3:dc: 27:c3:e6:3d:bd:66:d9:76:90:f5:c4:01:30:c4:36: 76:0d:c6:2a:7a:3c:07:f9:2b:83:b7:82:dd:30:64: 60:30:f5:d2:9f:3c:d5:4d:2d:2c:0d:82:9f:9b:a1: 61:3c:74:d5:14:12:fb:09:aa:26:09:9a:e1:6a:aa: 6a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D0:EA:DD:7E:B5:A6:B7:70:C3:78:A9:81:3B:D0:3C:43:C7:56:A9 X509v3 Authority Key Identifier: keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.228.0/22 Signature Algorithm: sha256WithRSAEncryption 67:5b:67:ec:4f:4d:ea:b8:ea:f4:f5:27:6b:e9:06:f4:24:85: 31:f7:1d:61:ba:61:27:61:42:49:58:a6:45:6b:9c:6e:e8:39: aa:85:1e:92:c2:f0:d4:e1:e9:90:c8:83:46:ca:c8:55:e1:d8: 51:c1:74:3a:d3:c1:a3:c5:6e:61:62:e4:ec:2e:46:c9:03:78: 94:c2:09:f2:93:cc:c8:87:e2:d2:e8:5e:43:3c:fe:ef:b1:f6: c3:23:3e:1e:18:cf:94:32:c9:5d:1b:82:4e:16:25:6a:ad:3d: 1c:86:09:58:24:c3:ce:60:36:7d:91:ed:cb:b1:74:b9:a0:c2: fa:56:00:9b:8b:38:1f:23:6d:05:2d:09:9f:63:c1:4c:17:38: ee:f3:82:9d:41:6d:51:64:d3:93:1f:5d:ac:5c:f8:ea:51:60: 7e:9f:f6:3f:e7:7a:bb:da:12:d9:7c:81:ba:d6:2a:d7:1f:c3: c8:90:1f:b2:c1:50:8c:24:85:44:03:ee:90:94:5d:b1:c8:76: 92:cb:49:1d:66:01:20:a2:5c:9c:a2:e4:3a:98:b0:f2:31:39: 2c:67:63:f1:2d:7d:24:72:f2:c0:65:6c:4a:52:8a:77:8e:36: 7a:c1:95:e3:85:b5:94:75:75:db:27:36:18:79:6c:77:49:e3: e1:4d:78:22 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUBPIVSOag43XlQ2RPGh7t+BkpOxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx ODA3RjY2RjAeFw0yNjA5MDgwNzM5MTRaFw0yNzA5MDcwNzQ0MTRaMDMxMTAvBgNV BAMTKEQzRDBFQUREN0VCNUE2Qjc3MEMzNzhBOTgxM0JEMDNDNDNDNzU2QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdNNRMFy5tSsf5sSWj4mIM7UMQ ygiPJ2BkbvfcJ6C2YW9Rhfd/Z8e7p4JO5cZvosi5LPnVgMtMUsOTWUCk+zSveSx9 +lepyoKiAHy8N9HEv3OjW6MwZFIS0pULlaCvRCoevVY6DS8hdexG5K3rZftoRzYB ECZawUc51sfPYA50yuJvcwcJJsATGjWcqno5YJyyn9jBoJsxnrMUWv/X02isB0pS U/prImRgV2hnDPENlIGAPnrK+f8IPlV+z4K0AyvD3CfD5j29Ztl2kPXEATDENnYN xip6PAf5K4O3gt0wZGAw9dKfPNVNLSwNgp+boWE8dNUUEvsJqiYJmuFqqmpjAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQU09Dq3X61prdww3ipgTvQPEPHVqkwHwYDVR0j BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF OUM3MTgwN0Y2NkYuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMxMzAzMzJlMzIzMzM0 MmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM4MzQzMTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCZ+rkMA0GCSqGSIb3DQEBCwUAA4IBAQBnW2fsT03quOr09Sdr6Qb0JIUx 9x1humEnYUJJWKZFa5xu6DmqhR6SwvDU4emQyINGyshV4dhRwXQ608GjxW5hYuTs LkbJA3iUwgnyk8zIh+LS6F5DPP7vsfbDIz4eGM+UMsldG4JOFiVqrT0chglYJMPO YDZ9ke3LsXS5oML6VgCbizgfI20FLQmfY8FMFzju84KdQW1RZNOTH12sXPjqUWB+ n/Y/53q72hLZfIG61irXH8PIkB+ywVCMJIVEA+6QlF2xyHaSy0kdZgEgolycouQ6 mLDyMTksZ2PxLX0kcvLAZWxKUop3jjZ6wZXjhbWUdXXbJzYYeWx3SePhTXgi -----END CERTIFICATE-----Generated at Tue Sep 22 18:05:41 2026 by rpki-client