$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa File: 3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa (raw, json) Hash identifier: Hak2Kjh6kJ7ksPJnjjQX/qj2mj03vkETTEsjCwHEy1k= Subject key identifier: 14:43:4A:6E:82:94:DB:C3:A2:8D:E9:0C:88:D8:31:D0:A8:AE:7A:09 Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F Certificate serial: 241DABFC7DF95D77A2A00C4AA4B90E73F839C852 Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa Signing time: Tue 08 Sep 2026 07:44:08 +0000 ROA not before: Tue 08 Sep 2026 07:39:08 +0000 ROA not after: Tue 07 Sep 2027 07:44:08 +0000 asID: 4780 IP address blocks: 202.148.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 04:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1d:ab:fc:7d:f9:5d:77:a2:a0:0c:4a:a4:b9:0e:73:f8:39:c8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F Validity Not Before: Sep 8 07:39:08 2026 GMT Not After : Sep 7 07:44:08 2027 GMT Subject: CN=14434A6E8294DBC3A28DE90C88D831D0A8AE7A09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:29:b6:54:7e:24:19:6e:9a:72:80:ae:6f: fa:fd:89:70:6d:aa:fd:06:83:f7:e2:5c:09:ee:b5: 73:65:7a:af:39:aa:de:4d:2b:0a:81:aa:5a:88:27: 01:17:69:39:af:83:ea:9e:07:91:9d:8d:ed:07:1d: bb:5a:5e:15:53:32:d1:e0:8f:7a:db:f3:2c:e4:5d: ea:1f:54:ae:ae:3a:0b:f8:f5:0b:da:ae:d3:c9:5d: a3:8f:b0:71:e5:22:84:14:a5:9e:61:d5:02:b6:3b: b3:45:83:a0:51:29:c1:5d:61:17:0a:bc:15:b0:06: 33:95:4a:69:28:f6:64:29:ab:7b:dd:73:d7:60:cf: 55:a8:0e:f8:c6:c9:6c:e2:04:11:74:44:04:bd:0a: 0d:ab:d2:9f:f1:2c:59:f4:af:2c:3f:12:12:a8:fa: 17:64:8e:b8:54:78:4b:c5:05:3a:1e:09:4d:3f:65: 4c:b7:38:3d:24:5e:87:8d:f2:8c:a4:61:54:13:66: 9b:ed:d3:03:57:1a:ed:38:8c:ea:0f:5a:51:b3:d6: 3c:a5:42:22:52:f3:a3:83:0d:57:57:d3:1f:65:cc: a0:f2:12:e0:ef:aa:e6:9a:c6:4a:6d:d3:a0:51:36: dd:31:4a:0f:9a:b8:b8:a1:6b:b3:c1:49:d2:b5:19: f8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:43:4A:6E:82:94:DB:C3:A2:8D:E9:0C:88:D8:31:D0:A8:AE:7A:09 X509v3 Authority Key Identifier: keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.148.218.0/23 Signature Algorithm: sha256WithRSAEncryption 81:f0:77:9e:50:3f:f9:2a:76:10:4e:98:06:79:04:af:82:6c: a5:fa:cc:69:ba:ea:c2:12:8c:19:dd:31:3b:08:b7:46:10:41: af:59:85:25:ec:c9:27:d9:9e:24:53:bf:91:c1:07:a2:66:c7: 84:1f:da:20:f2:3e:b5:b8:78:99:4a:67:65:71:5f:88:90:77: 70:7d:4b:94:f6:56:6b:64:58:d2:99:78:f1:a7:6d:2d:1c:0a: 22:d7:bf:2e:dd:55:81:70:71:ba:d5:12:55:1d:56:e3:50:c5: 80:b1:3e:a6:a7:e4:f5:d1:43:61:7d:73:6d:69:ea:3a:fb:af: ee:2c:65:75:c0:a7:fa:5a:3e:e8:94:cc:cc:da:74:64:fb:80: 5e:ac:2c:aa:33:c8:10:b7:bd:0b:fc:7e:6c:fc:e3:a0:72:ff: 0c:be:40:28:bf:b6:d0:9d:54:37:d1:2b:23:2c:c3:a1:40:60: dd:e2:c3:a0:86:aa:fc:7a:02:41:25:f8:38:66:b4:5d:f4:e2: 41:f9:c5:5a:cf:05:a5:d6:04:54:2d:30:82:18:dd:1b:b3:3e: e9:8c:aa:c5:97:7d:33:a2:77:d6:5e:2a:fa:18:df:a8:5d:d2: 16:ba:46:c0:9d:57:fe:ce:8c:db:dc:5f:21:b4:45:2b:dc:fd: a6:88:53:d5 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUJB2r/H35XXeioAxKpLkOc/g5yFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx ODA3RjY2RjAeFw0yNjA5MDgwNzM5MDhaFw0yNzA5MDcwNzQ0MDhaMDMxMTAvBgNV BAMTKDE0NDM0QTZFODI5NERCQzNBMjhERTkwQzg4RDgzMUQwQThBRTdBMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKym2VH4kGW6acoCub/r9iXBt qv0Gg/fiXAnutXNleq85qt5NKwqBqlqIJwEXaTmvg+qeB5Gdje0HHbtaXhVTMtHg j3rb8yzkXeofVK6uOgv49QvartPJXaOPsHHlIoQUpZ5h1QK2O7NFg6BRKcFdYRcK vBWwBjOVSmko9mQpq3vdc9dgz1WoDvjGyWziBBF0RAS9Cg2r0p/xLFn0ryw/EhKo +hdkjrhUeEvFBToeCU0/ZUy3OD0kXoeN8oykYVQTZpvt0wNXGu04jOoPWlGz1jyl QiJS86ODDVdX0x9lzKDyEuDvquaaxkpt06BRNt0xSg+auLiha7PBSdK1GfghAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUFENKboKU28OijekMiNgx0KiuegkwHwYDVR0j BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF OUM3MTgwN0Y2NkYuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMyMzAzMjJlMzEzNDM4 MmUzMjMxMzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzgzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAcqU2jANBgkqhkiG9w0BAQsFAAOCAQEAgfB3nlA/+Sp2EE6YBnkEr4JspfrM abrqwhKMGd0xOwi3RhBBr1mFJezJJ9meJFO/kcEHombHhB/aIPI+tbh4mUpnZXFf iJB3cH1LlPZWa2RY0pl48adtLRwKIte/Lt1VgXBxutUSVR1W41DFgLE+pqfk9dFD YX1zbWnqOvuv7ixldcCn+lo+6JTMzNp0ZPuAXqwsqjPIELe9C/x+bPzjoHL/DL5A KL+20J1UN9ErIyzDoUBg3eLDoIaq/HoCQSX4OGa0XfTiQfnFWs8FpdYEVC0wghjd G7M+6YyqxZd9M6J31l4q+hjfqF3SFrpGwJ1X/s6M29xfIbRFK9z9pohT1Q== -----END CERTIFICATE-----Generated at Tue Sep 22 19:36:10 2026 by rpki-client