$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa File: 3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa (raw, json) Hash identifier: AHKpE865GlsG7ePMxcW5/yf6Kw0p3VGx6fJVKAitAX4= Subject key identifier: B6:A4:AC:D3:AB:7C:80:7E:72:EC:33:C3:41:62:2A:88:AA:FE:64:02 Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F Certificate serial: 3869278D51613AEFDACA77D030B6E9F05058CB15 Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa Signing time: Tue 08 Sep 2026 07:44:10 +0000 ROA not before: Tue 08 Sep 2026 07:39:10 +0000 ROA not after: Tue 07 Sep 2027 07:44:10 +0000 asID: 18419 IP address blocks: 203.121.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:69:27:8d:51:61:3a:ef:da:ca:77:d0:30:b6:e9:f0:50:58:cb:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F Validity Not Before: Sep 8 07:39:10 2026 GMT Not After : Sep 7 07:44:10 2027 GMT Subject: CN=B6A4ACD3AB7C807E72EC33C341622A88AAFE6402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:94:69:3d:ad:5a:04:2b:45:12:7b:6a:9b: e5:cc:96:91:c2:d7:6f:c0:24:ff:44:fb:3f:7c:06: 3a:0d:f5:b3:af:64:1a:d1:cf:43:00:6f:de:1d:79: 92:dd:d1:42:d8:58:ec:3b:f5:3b:0e:a7:70:f9:6b: 6f:fa:38:74:7c:a2:a1:dc:84:b7:57:d5:78:32:c6: 4e:06:06:62:35:bf:96:c6:2c:ca:0a:1a:7d:7b:a6: f6:34:71:cd:43:67:ca:e3:c2:75:c4:cf:9e:7d:f5: 63:95:68:0f:1f:2c:76:81:1d:9d:5e:d1:40:d5:a8: 68:21:82:fe:26:8f:f7:c5:07:d1:10:7f:37:57:8b: 2e:e9:6b:43:8e:18:34:db:08:96:dc:4a:1f:09:0e: e5:b1:53:a4:94:ac:be:16:c6:eb:22:6e:23:db:d5: d9:a2:d9:ef:83:65:d1:47:46:76:dd:8b:46:37:e1: 47:5f:03:01:3a:b5:4c:6b:71:4e:f8:20:72:85:ea: 4c:7e:37:10:5a:7c:4e:18:7a:9a:29:19:d3:8a:71: 7c:cc:88:42:44:ab:8f:68:cc:63:99:90:81:6e:fe: 9e:27:12:fd:85:83:e7:5a:f2:98:70:35:b3:c7:4a: f8:21:5a:3d:96:bb:21:0a:d4:3f:83:2b:9c:0f:9a: a2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A4:AC:D3:AB:7C:80:7E:72:EC:33:C3:41:62:2A:88:AA:FE:64:02 X509v3 Authority Key Identifier: keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.121.224.0/20 Signature Algorithm: sha256WithRSAEncryption 3f:5f:bb:c2:69:e3:a9:3e:6e:67:90:a3:87:0c:bb:0f:73:c1: 83:4e:76:c8:ac:c9:73:9c:94:98:cf:8b:00:b6:dc:e3:1f:99: 53:ba:e0:67:b9:37:65:eb:65:2d:20:67:57:b1:a6:c9:9e:27: 62:d5:99:27:d1:f0:70:4d:a1:31:f1:41:0b:e4:3c:c3:2c:20: 29:09:08:c3:56:d4:dc:7e:2c:92:64:8b:47:49:cd:25:84:db: 09:36:7d:b8:5e:6f:a7:9b:ea:6d:76:88:f2:35:da:c2:f4:82: ab:81:47:d9:60:d1:cc:a5:ed:2d:db:ec:f4:43:75:80:cc:03: cc:99:99:e0:15:f6:35:7c:29:14:13:cd:e8:16:37:79:e6:f4: 1e:ae:cb:60:32:92:f8:1c:97:14:71:a3:f5:0c:65:cf:fb:00: 6e:3d:83:e2:c4:0b:20:76:0d:cf:54:40:e9:53:af:aa:79:91: bc:39:07:04:27:97:bf:c4:f7:38:81:82:9a:2f:ae:d2:a6:3f: 5d:64:10:4f:43:2d:f8:31:f1:8c:27:65:a0:87:d5:4a:b6:a6: ae:86:7f:a8:b0:bd:a8:3c:57:b5:3c:40:6e:05:73:ad:d6:6b: c3:9b:44:0b:77:73:60:e2:80:fc:77:ab:e9:59:dc:0a:b8:50: 83:eb:f1:a3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUOGknjVFhOu/aynfQMLbp8FBYyxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx ODA3RjY2RjAeFw0yNjA5MDgwNzM5MTBaFw0yNzA5MDcwNzQ0MTBaMDMxMTAvBgNV BAMTKEI2QTRBQ0QzQUI3QzgwN0U3MkVDMzNDMzQxNjIyQTg4QUFGRTY0MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCooJRpPa1aBCtFEntqm+XMlpHC 12/AJP9E+z98BjoN9bOvZBrRz0MAb94deZLd0ULYWOw79TsOp3D5a2/6OHR8oqHc hLdX1Xgyxk4GBmI1v5bGLMoKGn17pvY0cc1DZ8rjwnXEz5599WOVaA8fLHaBHZ1e 0UDVqGghgv4mj/fFB9EQfzdXiy7pa0OOGDTbCJbcSh8JDuWxU6SUrL4WxusibiPb 1dmi2e+DZdFHRnbdi0Y34UdfAwE6tUxrcU74IHKF6kx+NxBafE4YepopGdOKcXzM iEJEq49ozGOZkIFu/p4nEv2Fg+da8phwNbPHSvghWj2WuyEK1D+DK5wPmqLxAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUtqSs06t8gH5y7DPDQWIqiKr+ZAIwHwYDVR0j BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF OUM3MTgwN0Y2NkYuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMyMzAzMzJlMzEzMjMx MmUzMjMyMzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTM4MzQzMTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQEy3ngMA0GCSqGSIb3DQEBCwUAA4IBAQA/X7vCaeOpPm5nkKOHDLsPc8GD TnbIrMlznJSYz4sAttzjH5lTuuBnuTdl62UtIGdXsabJnidi1Zkn0fBwTaEx8UEL 5DzDLCApCQjDVtTcfiySZItHSc0lhNsJNn24Xm+nm+ptdojyNdrC9IKrgUfZYNHM pe0t2+z0Q3WAzAPMmZngFfY1fCkUE83oFjd55vQerstgMpL4HJcUcaP1DGXP+wBu PYPixAsgdg3PVEDpU6+qeZG8OQcEJ5e/xPc4gYKaL67Spj9dZBBPQy34MfGMJ2Wg h9VKtqauhn+osL2oPFe1PEBuBXOt1mvDm0QLd3Ng4oD8d6vpWdwKuFCD6/Gj -----END CERTIFICATE-----Generated at Mon Sep 21 19:46:26 2026 by rpki-client