$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e3232382e302f32322d3234203d3e2034373830.roa File: 3135302e3132392e3232382e302f32322d3234203d3e2034373830.roa (raw, json) Hash identifier: q9PJ3PsyhSTPLS/vMO94ePBZNqEjZtU9gQFNirsIHzs= Subject key identifier: 32:E8:73:9B:17:12:01:9E:D6:F0:22:D0:98:56:3F:C3:B6:4C:87:86 Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F Certificate serial: 5DFB7B9A0245CC7E018A6DDB3CCBE3434586D090 Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e3232382e302f32322d3234203d3e2034373830.roa Signing time: Tue 08 Sep 2026 07:44:04 +0000 ROA not before: Tue 08 Sep 2026 07:39:04 +0000 ROA not after: Tue 07 Sep 2027 07:44:04 +0000 asID: 4780 IP address blocks: 150.129.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fb:7b:9a:02:45:cc:7e:01:8a:6d:db:3c:cb:e3:43:45:86:d0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F Validity Not Before: Sep 8 07:39:04 2026 GMT Not After : Sep 7 07:44:04 2027 GMT Subject: CN=32E8739B1712019ED6F022D098563FC3B64C8786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:66:ed:a4:88:06:75:d0:28:85:0b:ba:66: 4b:af:8f:74:35:f1:82:2e:a4:cc:a3:23:c1:f4:04: 18:47:2f:77:1c:23:94:fd:62:b7:31:a8:30:d6:81: 45:ab:b7:21:62:e8:14:81:75:6c:d3:f5:04:f8:1d: 17:77:a9:6e:85:1a:d4:da:32:e8:64:2c:9f:2a:65: 70:7f:20:4b:73:9e:8a:60:72:c4:7b:29:01:69:f3: 61:10:ed:d0:08:6e:34:a6:93:7b:04:7e:1b:f5:c4: 8f:4b:65:05:6b:a0:04:2a:c7:a1:6c:7e:f4:8a:68: 13:32:5c:f1:0f:37:86:55:cb:a1:35:62:da:04:a2: 04:0a:8c:8b:b1:b1:60:6c:64:de:3d:81:38:9a:d2: bc:47:98:f9:0e:59:51:b8:9c:0f:2b:ff:22:32:78: e5:05:3d:52:a6:24:de:82:80:18:dd:59:be:54:58: 6a:49:7a:2e:2a:71:68:7c:a0:14:38:83:29:3c:86: bd:d3:13:42:d6:72:1f:8b:cd:e6:85:e5:00:28:87: e4:42:9b:e8:4d:62:83:d7:cc:bd:fb:e8:2e:4f:95: 5a:aa:e9:99:41:c1:c2:b0:fa:24:7c:36:d2:4a:37: d7:e9:05:7b:5f:29:b1:92:6a:fe:97:1e:52:3d:4d: 48:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E8:73:9B:17:12:01:9E:D6:F0:22:D0:98:56:3F:C3:B6:4C:87:86 X509v3 Authority Key Identifier: keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3135302e3132392e3232382e302f32322d3234203d3e2034373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.129.228.0/22 Signature Algorithm: sha256WithRSAEncryption 93:8a:ab:de:6e:1d:18:fd:19:2a:09:ef:13:d2:77:eb:a1:e2: d1:10:88:61:27:76:cb:d5:6e:45:97:e9:6e:47:c6:a2:82:fe: bd:01:56:00:26:42:28:a6:06:92:9d:36:39:cc:bb:da:31:0d: 02:6c:f4:0b:79:1f:ca:cc:3e:0f:fe:5b:59:c3:de:10:bf:c9: 61:c3:11:b3:f9:3e:49:f9:9e:ea:4c:35:bb:57:ec:23:d4:b6: 0d:38:43:58:9e:d7:b1:e4:1e:fd:94:9b:c0:a9:53:4a:12:5f: 70:73:a2:5d:9e:ee:aa:eb:7a:b1:87:3b:82:99:6b:fe:c9:76: 03:48:4e:02:a0:4b:6f:f3:3a:83:e9:b9:3e:34:e6:7f:65:98: fb:2d:40:c1:f8:31:6a:bd:08:4c:41:e7:8a:e4:f7:72:a9:a4: 47:98:39:55:de:35:76:c6:75:06:1c:fb:03:9b:28:bb:5d:90: ef:54:d4:89:60:8f:b7:a3:62:dc:e9:1f:21:17:9c:67:2d:71: 23:24:ef:67:20:ab:75:e8:ff:bb:f0:95:82:b6:f5:d1:c7:e0: d9:a8:54:26:6f:31:bc:2d:c0:dd:d2:29:aa:ae:70:ce:0d:cc: 12:d9:a0:1c:3b:20:6d:19:7b:9a:00:7c:21:02:fe:7a:d0:d3: 6f:99:34:57 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUXft7mgJFzH4Bim3bPMvjQ0WG0JAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx ODA3RjY2RjAeFw0yNjA5MDgwNzM5MDRaFw0yNzA5MDcwNzQ0MDRaMDMxMTAvBgNV BAMTKDMyRTg3MzlCMTcxMjAxOUVENkYwMjJEMDk4NTYzRkMzQjY0Qzg3ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+WbtpIgGddAohQu6Zkuvj3Q1 8YIupMyjI8H0BBhHL3ccI5T9YrcxqDDWgUWrtyFi6BSBdWzT9QT4HRd3qW6FGtTa MuhkLJ8qZXB/IEtznopgcsR7KQFp82EQ7dAIbjSmk3sEfhv1xI9LZQVroAQqx6Fs fvSKaBMyXPEPN4ZVy6E1YtoEogQKjIuxsWBsZN49gTia0rxHmPkOWVG4nA8r/yIy eOUFPVKmJN6CgBjdWb5UWGpJei4qcWh8oBQ4gyk8hr3TE0LWch+LzeaF5QAoh+RC m+hNYoPXzL376C5PlVqq6ZlBwcKw+iR8NtJKN9fpBXtfKbGSav6XHlI9TUhbAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUMuhzmxcSAZ7W8CLQmFY/w7ZMh4YwHwYDVR0j BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF OUM3MTgwN0Y2NkYuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMxMzUzMDJlMzEzMjM5 MmUzMjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzgzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEApaB5DANBgkqhkiG9w0BAQsFAAOCAQEAk4qr3m4dGP0ZKgnvE9J366Hi0RCI YSd2y9VuRZfpbkfGooL+vQFWACZCKKYGkp02Ocy72jENAmz0C3kfysw+D/5bWcPe EL/JYcMRs/k+Sfme6kw1u1fsI9S2DThDWJ7XseQe/ZSbwKlTShJfcHOiXZ7uqut6 sYc7gplr/sl2A0hOAqBLb/M6g+m5PjTmf2WY+y1Awfgxar0ITEHniuT3cqmkR5g5 Vd41dsZ1Bhz7A5sou12Q71TUiWCPt6Ni3OkfIRecZy1xIyTvZyCrdej/u/CVgrb1 0cfg2ahUJm8xvC3A3dIpqq5wzg3MEtmgHDsgbRl7mgB8IQL+etDTb5k0Vw== -----END CERTIFICATE-----Generated at Tue Sep 22 08:58:50 2026 by rpki-client