$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa File: 3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa (raw, json) Hash identifier: tzvs9QrCz3ljL77OIc0uAPrT5KVs/VdV4UBc+0F7yGM= Subject key identifier: 3F:A1:9B:7B:15:CC:80:91:70:5A:9E:85:BB:37:9C:F6:14:8E:1E:40 Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F Certificate serial: 41FFE45356F37934671A4346948635127B65ECDB Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa Signing time: Tue 08 Sep 2026 07:44:12 +0000 ROA not before: Tue 08 Sep 2026 07:39:12 +0000 ROA not after: Tue 07 Sep 2027 07:44:12 +0000 asID: 4780 IP address blocks: 180.214.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ff:e4:53:56:f3:79:34:67:1a:43:46:94:86:35:12:7b:65:ec:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F Validity Not Before: Sep 8 07:39:12 2026 GMT Not After : Sep 7 07:44:12 2027 GMT Subject: CN=3FA19B7B15CC8091705A9E85BB379CF6148E1E40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d6:c5:9b:63:fe:5a:f7:ed:e2:aa:8d:d4:1a: f8:48:57:02:1f:c3:41:11:c0:82:5e:ba:a1:ce:af: 82:2b:2b:a6:3f:80:0c:91:81:b4:27:1d:ca:9b:0d: f4:f7:e0:a5:2d:95:29:0d:8d:4f:5a:2a:0e:71:76: 66:c4:aa:de:0b:25:47:69:ea:2b:99:56:70:5d:4d: 19:8b:e1:47:56:01:3a:dd:b6:4e:2e:25:62:e4:f6: 1b:f2:30:a9:87:21:41:03:72:40:ea:7a:83:3a:c3: b5:9b:67:13:d6:c2:94:8b:9d:b4:d0:96:38:44:19: 53:8c:aa:cb:a0:99:ad:cf:80:42:c5:10:dd:dc:f1: 9e:d1:c7:78:e4:78:a9:4a:1f:f3:ab:63:72:b8:87: c1:48:74:c9:bc:b7:1a:45:82:ff:0a:8f:42:6f:65: c8:55:4f:90:c7:6f:51:3e:39:00:ac:1f:1e:af:5d: 12:c9:8f:3c:5b:80:6f:e5:e3:2e:69:50:50:d8:a5: 21:54:9b:1c:e0:87:ec:4c:c2:76:17:74:0f:3d:92: ec:e7:15:2e:15:4f:3b:c1:65:fa:d4:c6:42:8c:60: e2:cc:ab:12:fe:f0:aa:b6:3f:17:73:e6:37:7f:25: 2e:47:e6:8a:de:c1:18:a5:06:3f:bd:41:44:8d:21: d3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A1:9B:7B:15:CC:80:91:70:5A:9E:85:BB:37:9C:F6:14:8E:1E:40 X509v3 Authority Key Identifier: keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.214.176.0/20 Signature Algorithm: sha256WithRSAEncryption 33:f4:f7:57:a5:2d:f4:5e:4b:8b:76:f8:17:93:f0:b9:b3:00: d3:17:41:1f:4b:21:06:ca:62:cf:76:ac:af:92:65:71:ff:4a: 0f:d9:44:96:c8:a7:21:e7:8b:02:84:75:eb:95:c4:b4:e6:81: fb:af:53:d1:6a:19:24:b2:21:0d:f7:4a:c8:98:1d:b2:82:e1: f0:bd:62:7f:c6:05:2c:34:ea:99:9c:ab:da:1c:b1:68:bb:8e: 04:de:b0:53:d8:ec:df:ec:02:a4:1d:d0:8f:9c:7c:09:22:b4: b6:06:ca:68:6a:a5:16:1c:7d:6a:68:0b:7c:40:a2:09:5d:d1: 1c:56:87:66:fc:e5:4c:a6:63:99:4c:29:5d:8e:56:53:1f:90: 06:08:bc:95:a6:ef:46:0d:03:bf:03:d0:9b:ef:de:de:54:20: 33:71:e7:ba:86:94:30:e4:66:f4:2b:e8:9d:22:fe:70:5c:f5: f4:1b:a9:ff:91:e2:64:91:2b:14:39:71:4c:9c:52:8c:8d:59: 60:14:54:04:df:5c:f0:92:40:9a:1c:c8:67:6a:30:9c:c2:e9: 79:91:60:db:d9:50:63:89:79:da:9b:63:b3:1e:0f:a9:fb:ed: 89:51:31:fc:7d:52:69:6e:b9:5f:c1:70:b1:c3:06:e9:d7:23: a6:0d:cb:d8 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUQf/kU1bzeTRnGkNGlIY1Entl7NswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx ODA3RjY2RjAeFw0yNjA5MDgwNzM5MTJaFw0yNzA5MDcwNzQ0MTJaMDMxMTAvBgNV BAMTKDNGQTE5QjdCMTVDQzgwOTE3MDVBOUU4NUJCMzc5Q0Y2MTQ4RTFFNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1sWbY/5a9+3iqo3UGvhIVwIf w0ERwIJeuqHOr4IrK6Y/gAyRgbQnHcqbDfT34KUtlSkNjU9aKg5xdmbEqt4LJUdp 6iuZVnBdTRmL4UdWATrdtk4uJWLk9hvyMKmHIUEDckDqeoM6w7WbZxPWwpSLnbTQ ljhEGVOMqsugma3PgELFEN3c8Z7Rx3jkeKlKH/OrY3K4h8FIdMm8txpFgv8Kj0Jv ZchVT5DHb1E+OQCsHx6vXRLJjzxbgG/l4y5pUFDYpSFUmxzgh+xMwnYXdA89kuzn FS4VTzvBZfrUxkKMYOLMqxL+8Kq2Pxdz5jd/JS5H5orewRilBj+9QUSNIdNXAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUP6GbexXMgJFwWp6Fuzec9hSOHkAwHwYDVR0j BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF OUM3MTgwN0Y2NkYuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMxMzgzMDJlMzIzMTM0 MmUzMTM3MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNDM3MzgzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBLTWsDANBgkqhkiG9w0BAQsFAAOCAQEAM/T3V6Ut9F5Li3b4F5PwubMA0xdB H0shBspiz3asr5Jlcf9KD9lElsinIeeLAoR165XEtOaB+69T0WoZJLIhDfdKyJgd soLh8L1if8YFLDTqmZyr2hyxaLuOBN6wU9js3+wCpB3Qj5x8CSK0tgbKaGqlFhx9 amgLfECiCV3RHFaHZvzlTKZjmUwpXY5WUx+QBgi8labvRg0DvwPQm+/e3lQgM3Hn uoaUMORm9CvonSL+cFz19Bup/5HiZJErFDlxTJxSjI1ZYBRUBN9c8JJAmhzIZ2ow nMLpeZFg29lQY4l52ptjsx4PqfvtiVEx/H1SaW65X8FwscMG6dcjpg3L2A== -----END CERTIFICATE-----Generated at Mon Sep 21 15:58:26 2026 by rpki-client