$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3132342e3130392e3131322e302f32302d3234203d3e2034373830.roa File: 3132342e3130392e3131322e302f32302d3234203d3e2034373830.roa (raw, json) Hash identifier: K2CnPWCCQSIR8MzBRJhfVE8C5iYS5C2S0yQ5v7j55mo= Subject key identifier: 89:B1:FE:7C:D6:31:86:D3:6B:71:85:1D:26:41:A5:C0:D4:18:04:B9 Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F Certificate serial: 670EAB2F978DEABAD739D635DB09D154DB3FCE4D Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3132342e3130392e3131322e302f32302d3234203d3e2034373830.roa Signing time: Tue 08 Sep 2026 07:44:08 +0000 ROA not before: Tue 08 Sep 2026 07:39:08 +0000 ROA not after: Tue 07 Sep 2027 07:44:08 +0000 asID: 4780 IP address blocks: 124.109.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:0e:ab:2f:97:8d:ea:ba:d7:39:d6:35:db:09:d1:54:db:3f:ce:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F Validity Not Before: Sep 8 07:39:08 2026 GMT Not After : Sep 7 07:44:08 2027 GMT Subject: CN=89B1FE7CD63186D36B71851D2641A5C0D41804B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9b:b1:5f:11:02:85:88:1b:f1:63:34:57:c1: 48:7a:9f:a9:ac:be:98:83:c4:e0:3b:0d:eb:b3:c0: fe:fa:d7:a4:d0:dd:d1:c7:7d:c1:86:23:14:01:a8: 2f:cb:92:07:c3:45:c3:cb:fb:50:7b:ce:cc:af:89: a3:c0:38:c8:77:eb:b4:49:6d:cf:4d:da:9e:32:63: e5:99:4a:a4:c7:c9:c0:59:0a:12:5f:69:51:ac:a2: 10:e0:09:9c:19:28:33:5e:8a:81:19:af:dd:61:70: a1:75:54:05:f8:49:23:b7:8d:40:d1:c3:1a:ee:b6: f6:a3:0c:0c:2e:2a:75:d1:bb:c6:f7:65:da:9e:5a: 71:fc:30:fa:fe:9d:7b:df:7b:99:b0:39:84:2c:3a: 9c:c8:32:1d:83:fc:de:2e:aa:05:39:96:36:f4:be: 41:8c:c1:11:f2:52:3d:e7:d6:42:4d:1f:1e:09:cb: f8:46:da:ae:50:f3:7b:7a:8e:6c:fc:7e:bd:60:13: ef:fa:4b:8e:d2:6e:af:86:e7:19:09:bd:22:c1:dc: ba:28:05:5e:de:40:7e:53:19:f2:98:9f:9d:b7:3e: a1:e8:f5:b9:93:4c:83:b7:62:51:a3:89:28:88:0a: 6b:7e:74:35:be:15:bc:bf:12:74:b6:1e:3c:35:f7: a2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B1:FE:7C:D6:31:86:D3:6B:71:85:1D:26:41:A5:C0:D4:18:04:B9 X509v3 Authority Key Identifier: keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3132342e3130392e3131322e302f32302d3234203d3e2034373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.109.112.0/20 Signature Algorithm: sha256WithRSAEncryption 59:80:e3:46:fb:13:33:55:ca:85:af:91:59:c6:c8:d0:90:46: 32:8f:6d:e3:a6:a7:ee:04:6a:af:db:c8:5b:9d:01:97:c4:af: a8:a1:13:64:78:50:ff:36:90:ba:a4:55:12:10:50:5f:62:be: d7:3e:84:74:4d:7b:e9:ad:4e:7a:2d:b0:f8:d3:da:02:fe:c3: 86:b7:00:79:2b:b6:a9:07:52:93:75:4b:b8:b1:05:94:b4:f7: ee:49:5c:e5:3f:de:73:05:36:c5:86:a6:18:a0:48:0b:43:4e: 65:48:85:2b:08:de:49:5e:e9:97:a5:75:7f:88:c6:67:fb:6e: 44:61:c5:09:f6:a8:6f:1c:27:1b:94:88:60:99:9e:b7:35:2f: 4f:63:4d:d0:83:79:c1:1f:9c:d3:46:52:5e:2e:b3:b7:b1:5e: fd:61:e5:e2:3b:70:a5:f9:61:2f:ac:07:3b:a0:04:80:53:bb: 27:24:2f:6e:32:6e:bf:2a:20:1b:e0:62:a0:48:08:10:95:21: 81:4f:cf:72:82:83:95:6b:d3:07:eb:cd:6c:a5:ef:02:bc:0c: f9:de:cf:21:3a:f8:cb:86:8d:4f:eb:69:e3:74:2d:20:ae:0f: 23:81:0d:7f:05:43:c8:f4:bc:dc:3f:68:48:13:b5:c2:55:d7: 7f:c6:47:b0 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUZw6rL5eN6rrXOdY12wnRVNs/zk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx ODA3RjY2RjAeFw0yNjA5MDgwNzM5MDhaFw0yNzA5MDcwNzQ0MDhaMDMxMTAvBgNV BAMTKDg5QjFGRTdDRDYzMTg2RDM2QjcxODUxRDI2NDFBNUMwRDQxODA0QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjm7FfEQKFiBvxYzRXwUh6n6ms vpiDxOA7DeuzwP7616TQ3dHHfcGGIxQBqC/LkgfDRcPL+1B7zsyviaPAOMh367RJ bc9N2p4yY+WZSqTHycBZChJfaVGsohDgCZwZKDNeioEZr91hcKF1VAX4SSO3jUDR wxrutvajDAwuKnXRu8b3ZdqeWnH8MPr+nXvfe5mwOYQsOpzIMh2D/N4uqgU5ljb0 vkGMwRHyUj3n1kJNHx4Jy/hG2q5Q83t6jmz8fr1gE+/6S47Sbq+G5xkJvSLB3Loo BV7eQH5TGfKYn523PqHo9bmTTIO3YlGjiSiICmt+dDW+Fby/EnS2Hjw196LbAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUibH+fNYxhtNrcYUdJkGlwNQYBLkwHwYDVR0j BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF OUM3MTgwN0Y2NkYuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMxMzIzNDJlMzEzMDM5 MmUzMTMxMzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNDM3MzgzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBHxtcDANBgkqhkiG9w0BAQsFAAOCAQEAWYDjRvsTM1XKha+RWcbI0JBGMo9t 46an7gRqr9vIW50Bl8SvqKETZHhQ/zaQuqRVEhBQX2K+1z6EdE176a1Oei2w+NPa Av7DhrcAeSu2qQdSk3VLuLEFlLT37klc5T/ecwU2xYamGKBIC0NOZUiFKwjeSV7p l6V1f4jGZ/tuRGHFCfaobxwnG5SIYJmetzUvT2NN0IN5wR+c00ZSXi6zt7Fe/WHl 4jtwpflhL6wHO6AEgFO7JyQvbjJuvyogG+BioEgIEJUhgU/PcoKDlWvTB+vNbKXv ArwM+d7PITr4y4aNT+tp43QtIK4PI4ENfwVDyPS83D9oSBO1wlXXf8ZHsA== -----END CERTIFICATE-----Generated at Mon Sep 21 13:48:16 2026 by rpki-client