$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3232342e302f32302d3234203d3e2034373830.roa File: 3230332e3132312e3232342e302f32302d3234203d3e2034373830.roa (raw, json) Hash identifier: v24846ZMc+9mp+wpeTl2YRx8kdrUozogRpm6tDj9RqA= Subject key identifier: 4B:E4:25:76:24:E7:54:5F:B8:16:27:9A:29:2E:BB:27:46:AD:41:0B Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F Certificate serial: 2EF16409BF69B3ADECF86D2A36A0B03F0C3CFEA0 Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3232342e302f32302d3234203d3e2034373830.roa Signing time: Tue 08 Sep 2026 07:44:14 +0000 ROA not before: Tue 08 Sep 2026 07:39:14 +0000 ROA not after: Tue 07 Sep 2027 07:44:14 +0000 asID: 4780 IP address blocks: 203.121.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f1:64:09:bf:69:b3:ad:ec:f8:6d:2a:36:a0:b0:3f:0c:3c:fe:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F Validity Not Before: Sep 8 07:39:14 2026 GMT Not After : Sep 7 07:44:14 2027 GMT Subject: CN=4BE4257624E7545FB816279A292EBB2746AD410B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9b:5d:31:3b:a0:fd:bb:bb:0f:73:a2:4a:ea: 1d:cf:4b:94:cf:24:d0:02:96:3a:24:6b:60:79:e2: 78:fa:5c:62:ca:74:b9:43:ee:af:19:90:b9:a1:51: e3:2d:65:9e:61:00:7a:e6:16:4f:76:e6:bf:08:54: 2f:b8:c4:3b:0f:a3:fb:7f:50:9e:d7:f1:e9:7d:f4: d1:6a:98:39:3d:d7:97:8e:62:f4:dd:dc:5b:06:5c: 29:0f:35:45:89:b6:a4:11:9f:02:ea:7e:c9:0b:55: 2f:4c:5c:05:70:3c:32:99:79:f6:f9:00:3d:d8:6e: b8:1d:0b:4a:52:78:58:17:12:b8:e4:6a:a5:59:7c: 79:71:da:60:f9:e9:38:02:ce:c3:ae:4e:d4:b8:ea: 4a:1e:da:cb:67:57:6e:84:7b:ea:6e:28:31:da:a2: 73:9d:ed:08:32:3c:67:1f:2f:3e:ff:b6:28:28:2a: 6a:b7:9f:a5:a3:06:44:29:d5:08:a9:62:df:37:b6: 3f:49:54:77:7d:2d:e3:5d:e2:a1:4c:52:0a:c0:34: e3:0d:0f:e3:8e:c9:65:b5:fe:bd:04:45:b0:4a:87: 70:32:ce:c4:dc:82:49:4c:d4:1e:ad:88:8b:25:49: 39:7c:41:71:a6:b5:b9:8e:bb:6b:40:17:aa:bd:44: 8e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E4:25:76:24:E7:54:5F:B8:16:27:9A:29:2E:BB:27:46:AD:41:0B X509v3 Authority Key Identifier: keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3232342e302f32302d3234203d3e2034373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.121.224.0/20 Signature Algorithm: sha256WithRSAEncryption 9d:3a:43:81:62:a9:3a:f7:2b:2f:eb:9c:86:f3:ed:48:26:42: ae:a1:3e:59:88:84:ed:06:5d:e1:71:60:d9:9d:90:49:a9:1f: c7:f7:62:ac:70:f2:0c:2c:81:ba:24:dd:a4:b2:aa:48:8e:1a: 82:90:d6:d4:a4:17:03:80:ed:52:a0:c8:cf:0d:4c:fc:e3:f0: 87:86:a9:eb:de:5a:04:8b:6e:ae:6f:16:23:54:43:14:33:8e: 84:37:ea:63:d7:71:c7:5c:34:75:76:ca:48:3c:22:cf:6a:39: f4:6a:3f:8d:35:ae:9c:51:82:e9:90:0f:45:ba:45:98:55:02: 77:d1:6f:bb:98:43:d9:cd:f1:40:67:d0:db:ed:7f:64:09:e7: 9a:7c:5e:71:5d:62:81:cb:58:bd:d9:15:b5:4d:36:2d:b1:81: 81:8c:57:84:f2:6e:a7:26:50:18:37:cc:7f:06:f2:4c:67:ae: 83:2a:85:1d:40:95:6d:f6:5b:ba:2b:a7:90:39:f7:a1:11:3e: 28:13:1f:4f:df:c3:45:94:68:5b:20:05:d4:54:21:fd:d1:9f: 61:25:82:89:67:d1:1f:7f:b5:8b:49:08:70:99:2b:9d:c6:26: 25:79:90:06:d0:95:42:c0:f8:b3:b2:46:01:26:6c:b3:20:6e: e2:b1:cf:3d -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIULvFkCb9ps63s+G0qNqCwPww8/qAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx ODA3RjY2RjAeFw0yNjA5MDgwNzM5MTRaFw0yNzA5MDcwNzQ0MTRaMDMxMTAvBgNV BAMTKDRCRTQyNTc2MjRFNzU0NUZCODE2Mjc5QTI5MkVCQjI3NDZBRDQxMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsm10xO6D9u7sPc6JK6h3PS5TP JNACljoka2B54nj6XGLKdLlD7q8ZkLmhUeMtZZ5hAHrmFk925r8IVC+4xDsPo/t/ UJ7X8el99NFqmDk915eOYvTd3FsGXCkPNUWJtqQRnwLqfskLVS9MXAVwPDKZefb5 AD3YbrgdC0pSeFgXErjkaqVZfHlx2mD56TgCzsOuTtS46koe2stnV26Ee+puKDHa onOd7QgyPGcfLz7/tigoKmq3n6WjBkQp1QipYt83tj9JVHd9LeNd4qFMUgrANOMN D+OOyWW1/r0ERbBKh3AyzsTcgklM1B6tiIslSTl8QXGmtbmOu2tAF6q9RI6DAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQUS+QldiTnVF+4FieaKS67J0atQQswHwYDVR0j BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF OUM3MTgwN0Y2NkYuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMyMzAzMzJlMzEzMjMx MmUzMjMyMzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNDM3MzgzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMt54DANBgkqhkiG9w0BAQsFAAOCAQEAnTpDgWKpOvcrL+uchvPtSCZCrqE+ WYiE7QZd4XFg2Z2QSakfx/dirHDyDCyBuiTdpLKqSI4agpDW1KQXA4DtUqDIzw1M /OPwh4ap695aBIturm8WI1RDFDOOhDfqY9dxx1w0dXbKSDwiz2o59Go/jTWunFGC 6ZAPRbpFmFUCd9Fvu5hD2c3xQGfQ2+1/ZAnnmnxecV1igctYvdkVtU02LbGBgYxX hPJupyZQGDfMfwbyTGeugyqFHUCVbfZbuiunkDn3oRE+KBMfT9/DRZRoWyAF1FQh /dGfYSWCiWfRH3+1i0kIcJkrncYmJXmQBtCVQsD4s7JGASZssyBu4rHPPQ== -----END CERTIFICATE-----Generated at Mon Sep 21 14:46:01 2026 by rpki-client