$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa File: 3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa (raw, json) Hash identifier: n5352g6Ik4h5sMcfAQRtmkDM+UGy7/md/q0xICjyUFo= Subject key identifier: CA:1D:2D:74:47:DB:51:F0:48:1E:8B:08:88:8E:16:09:FB:2E:C4:A2 Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F Certificate serial: 40D9D434E52B22960A56042FBFA6940F9A3713AC Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa Signing time: Tue 08 Sep 2026 07:44:13 +0000 ROA not before: Tue 08 Sep 2026 07:39:13 +0000 ROA not after: Tue 07 Sep 2027 07:44:13 +0000 asID: 18419 IP address blocks: 124.109.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 09:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d9:d4:34:e5:2b:22:96:0a:56:04:2f:bf:a6:94:0f:9a:37:13:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F Validity Not Before: Sep 8 07:39:13 2026 GMT Not After : Sep 7 07:44:13 2027 GMT Subject: CN=CA1D2D7447DB51F0481E8B08888E1609FB2EC4A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:78:6c:dc:59:18:f0:1d:57:a0:7d:29:4a:c8: 28:68:2f:da:7b:a8:af:96:7e:51:16:0c:2a:26:14: 9f:1a:b3:02:60:94:03:a7:c0:ac:24:7c:5c:20:fe: ad:63:2d:a1:40:66:19:19:db:6e:45:2c:2d:eb:2e: 64:ec:0a:40:82:44:32:5c:1d:ab:14:7d:a5:d7:b1: dd:b3:34:52:16:34:72:8c:03:bb:28:4f:c8:e7:4e: 8a:7e:ed:57:ba:68:ed:74:85:b2:e2:98:ec:b7:60: 05:48:42:0d:90:66:73:c9:48:36:9a:4e:aa:35:4d: 2d:65:80:cd:b1:77:0b:24:5d:7e:48:c5:0f:07:74: 94:93:fe:eb:15:f2:3c:11:c6:54:dd:6b:bc:2b:96: d2:14:14:62:0e:3a:6f:01:46:77:96:6a:6a:ce:d5: 8f:ae:85:57:ce:5b:5c:72:ae:d4:e3:5f:4b:d1:db: 72:d9:4a:eb:99:b5:f8:b9:38:bf:48:a1:f2:83:21: 89:2f:01:d2:23:46:0a:66:d5:55:6e:96:dd:d3:10: e1:da:8e:bc:78:63:39:03:4f:53:af:2d:59:d8:75: 2e:83:2c:7d:67:c4:3e:64:14:fa:64:40:6c:6b:23: c4:b7:dc:96:d1:d1:c3:fd:2b:2a:d8:c2:be:fd:7f: fb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1D:2D:74:47:DB:51:F0:48:1E:8B:08:88:8E:16:09:FB:2E:C4:A2 X509v3 Authority Key Identifier: keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.109.112.0/20 Signature Algorithm: sha256WithRSAEncryption 54:11:78:c1:3c:fc:aa:a3:bb:cb:33:f1:67:ee:82:bb:2c:58: 14:72:bf:3a:a5:38:e9:17:39:c1:13:d7:a3:61:b2:6d:f3:14: c7:05:fb:ba:72:30:36:3f:0c:dc:53:99:31:a1:0c:84:0c:66: 30:21:13:73:01:b0:5b:71:7c:31:0f:d9:eb:c8:f7:e0:4a:90: 77:92:ac:0d:52:52:9e:df:15:da:69:33:dc:8c:1c:e5:34:d7: 95:77:48:0a:79:e0:47:d8:95:42:dc:03:2f:a8:0a:64:64:07: fc:e1:e6:96:8d:20:76:bb:58:ad:4a:fa:3f:2e:f8:e8:9f:68: f5:bc:0e:89:2f:f8:c2:ed:24:ba:aa:a9:e3:56:1f:62:c2:0b: d2:e6:c6:d8:0d:f9:57:2b:ed:a0:c3:92:d7:29:13:94:f0:37: 66:ab:98:95:bc:86:d4:38:91:56:45:ed:8e:93:d7:a2:7f:ac: 2b:b9:de:0b:d7:57:3a:c2:0b:45:6d:57:1a:ee:00:04:ec:05: 9b:ed:42:7e:cf:1f:45:99:f4:58:e7:11:0a:fc:71:71:66:0f: a9:6c:c6:1c:53:7e:51:2f:b1:44:90:c3:d0:3d:06:f9:e0:ca: 67:28:80:2f:90:75:87:9f:da:5d:7f:2b:62:5c:e3:52:ce:9e: df:8a:b8:ea -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUQNnUNOUrIpYKVgQvv6aUD5o3E6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx ODA3RjY2RjAeFw0yNjA5MDgwNzM5MTNaFw0yNzA5MDcwNzQ0MTNaMDMxMTAvBgNV BAMTKENBMUQyRDc0NDdEQjUxRjA0ODFFOEIwODg4OEUxNjA5RkIyRUM0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMeGzcWRjwHVegfSlKyChoL9p7 qK+WflEWDComFJ8aswJglAOnwKwkfFwg/q1jLaFAZhkZ225FLC3rLmTsCkCCRDJc HasUfaXXsd2zNFIWNHKMA7soT8jnTop+7Ve6aO10hbLimOy3YAVIQg2QZnPJSDaa Tqo1TS1lgM2xdwskXX5IxQ8HdJST/usV8jwRxlTda7wrltIUFGIOOm8BRneWamrO 1Y+uhVfOW1xyrtTjX0vR23LZSuuZtfi5OL9IofKDIYkvAdIjRgpm1VVult3TEOHa jrx4YzkDT1OvLVnYdS6DLH1nxD5kFPpkQGxrI8S33JbR0cP9KyrYwr79f/vdAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUyh0tdEfbUfBIHosIiI4WCfsuxKIwHwYDVR0j BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF OUM3MTgwN0Y2NkYuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMxMzIzNDJlMzEzMDM5 MmUzMTMxMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTM4MzQzMTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQEfG1wMA0GCSqGSIb3DQEBCwUAA4IBAQBUEXjBPPyqo7vLM/Fn7oK7LFgU cr86pTjpFznBE9ejYbJt8xTHBfu6cjA2PwzcU5kxoQyEDGYwIRNzAbBbcXwxD9nr yPfgSpB3kqwNUlKe3xXaaTPcjBzlNNeVd0gKeeBH2JVC3AMvqApkZAf84eaWjSB2 u1itSvo/Lvjon2j1vA6JL/jC7SS6qqnjVh9iwgvS5sbYDflXK+2gw5LXKROU8Ddm q5iVvIbUOJFWRe2Ok9eif6wrud4L11c6wgtFbVca7gAE7AWb7UJ+zx9FmfRY5xEK /HFxZg+pbMYcU35RL7FEkMPQPQb54MpnKIAvkHWHn9pdfytiXONSzp7firjq -----END CERTIFICATE-----Generated at Tue Sep 22 03:57:03 2026 by rpki-client