$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3234302e302f32302d3234203d3e203138343139.roa File: 3230332e3132312e3234302e302f32302d3234203d3e203138343139.roa (raw, json) Hash identifier: kpSiUGCscDYyCcHy/chJfosfR60d3BlDLVwnm6X4EKU= Subject key identifier: CF:6C:09:1D:FA:5F:40:13:58:19:87:82:7A:40:C0:0F:A5:78:CB:0B Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F Certificate serial: 6623029521F7A5859601C26BBA5EACEB500AE1B6 Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3234302e302f32302d3234203d3e203138343139.roa Signing time: Tue 08 Sep 2026 07:44:03 +0000 ROA not before: Tue 08 Sep 2026 07:39:03 +0000 ROA not after: Tue 07 Sep 2027 07:44:03 +0000 asID: 18419 IP address blocks: 203.121.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 23:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:23:02:95:21:f7:a5:85:96:01:c2:6b:ba:5e:ac:eb:50:0a:e1:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F Validity Not Before: Sep 8 07:39:03 2026 GMT Not After : Sep 7 07:44:03 2027 GMT Subject: CN=CF6C091DFA5F4013581987827A40C00FA578CB0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9c:46:8a:2d:b5:e9:e5:6e:f2:8b:a3:83:f6: d2:79:01:ea:bd:63:85:d2:bf:e0:5e:23:3b:ee:0e: fe:04:bc:35:8e:65:e4:4d:0e:24:3b:4f:37:42:d8: 4b:f8:5b:92:6d:3a:02:8f:1f:8b:29:c5:ee:22:81: 5e:92:51:9e:f1:39:34:73:dd:d7:53:07:0b:25:07: 8c:01:cf:72:aa:2f:44:b3:72:df:3a:05:26:c7:e4: 8b:34:d5:f8:3b:2b:f4:f9:fa:9e:15:c2:ec:2f:a6: fd:19:2c:3b:75:04:32:9d:9d:02:98:ad:c0:12:60: d2:ea:28:00:36:29:87:3f:c3:33:e3:13:f2:82:de: b3:6d:b7:d6:bb:0c:20:6f:6e:3d:38:3d:c3:d3:94: 9a:18:0c:d8:02:84:c0:94:23:a5:f7:c4:1e:dd:f0: 8f:c9:59:61:e0:96:f8:0f:14:48:60:78:6f:f5:3f: b0:ec:16:37:65:7d:a4:c9:70:e8:6d:9a:45:a8:59: c0:f0:bb:2b:98:9d:ce:d7:59:78:80:4f:d2:e6:10: f9:17:dd:0d:1e:4d:b7:a3:bc:0f:fd:41:c3:86:e9: 3a:d0:d0:70:ec:fc:50:91:fd:f6:4b:43:19:cc:65: 00:4b:f4:bf:ff:d4:6c:37:ae:13:e8:5d:d1:2b:d9: ae:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6C:09:1D:FA:5F:40:13:58:19:87:82:7A:40:C0:0F:A5:78:CB:0B X509v3 Authority Key Identifier: keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3234302e302f32302d3234203d3e203138343139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.121.240.0/20 Signature Algorithm: sha256WithRSAEncryption 17:57:92:96:4a:86:c1:be:9d:c3:c8:8c:45:6c:d5:d7:25:a2: 20:58:b7:74:b6:b3:88:60:cc:fa:29:69:99:54:5e:a5:fe:79: f1:df:54:90:d8:21:4c:4e:af:a7:e1:b7:ae:db:c2:69:1b:29: c2:2c:92:8c:09:ed:1e:bb:4e:04:e7:0f:c8:6e:da:f1:6f:26: 54:31:43:38:49:95:d5:0b:e3:39:06:50:60:9c:73:51:a6:80: c8:58:f5:1c:66:90:3e:b0:80:35:22:46:53:bd:1b:c9:f4:71: d7:43:2c:de:81:9b:18:d3:55:10:0f:d4:1b:af:33:fc:fe:92: 78:9f:1e:6a:35:d9:59:f5:90:fb:5b:55:d1:df:3a:52:64:11: 29:b7:67:ff:f1:b1:c0:31:77:fb:13:e1:28:a5:21:f3:e3:ef: 00:b1:14:ed:fb:26:e2:0d:f3:c6:33:74:cb:be:03:1b:1d:23: ab:db:ff:5f:a7:0d:4a:de:4d:41:74:e3:82:3f:54:a4:44:59: ac:5a:ac:a4:75:50:b7:81:5e:7f:28:b6:f9:35:63:80:c9:6e: 19:bb:0c:8c:de:2a:e4:29:e9:ac:e5:9f:71:ce:ae:1d:96:60: 03:b5:ca:dd:29:d0:e2:7b:44:5c:99:88:02:81:e7:78:42:aa: 16:43:a5:2f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUZiMClSH3pYWWAcJrul6s61AK4bYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx ODA3RjY2RjAeFw0yNjA5MDgwNzM5MDNaFw0yNzA5MDcwNzQ0MDNaMDMxMTAvBgNV BAMTKENGNkMwOTFERkE1RjQwMTM1ODE5ODc4MjdBNDBDMDBGQTU3OENCMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5nEaKLbXp5W7yi6OD9tJ5Aeq9 Y4XSv+BeIzvuDv4EvDWOZeRNDiQ7TzdC2Ev4W5JtOgKPH4spxe4igV6SUZ7xOTRz 3ddTBwslB4wBz3KqL0Szct86BSbH5Is01fg7K/T5+p4Vwuwvpv0ZLDt1BDKdnQKY rcASYNLqKAA2KYc/wzPjE/KC3rNtt9a7DCBvbj04PcPTlJoYDNgChMCUI6X3xB7d 8I/JWWHglvgPFEhgeG/1P7DsFjdlfaTJcOhtmkWoWcDwuyuYnc7XWXiAT9LmEPkX 3Q0eTbejvA/9QcOG6TrQ0HDs/FCR/fZLQxnMZQBL9L//1Gw3rhPoXdEr2a67AgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUz2wJHfpfQBNYGYeCekDAD6V4ywswHwYDVR0j BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF OUM3MTgwN0Y2NkYuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcwC4ZhcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMyMzAzMzJlMzEzMjMx MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMTM4MzQzMTM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQEy3nwMA0GCSqGSIb3DQEBCwUAA4IBAQAXV5KWSobBvp3DyIxFbNXXJaIg WLd0trOIYMz6KWmZVF6l/nnx31SQ2CFMTq+n4beu28JpGynCLJKMCe0eu04E5w/I btrxbyZUMUM4SZXVC+M5BlBgnHNRpoDIWPUcZpA+sIA1IkZTvRvJ9HHXQyzegZsY 01UQD9QbrzP8/pJ4nx5qNdlZ9ZD7W1XR3zpSZBEpt2f/8bHAMXf7E+EopSHz4+8A sRTt+ybiDfPGM3TLvgMbHSOr2/9fpw1K3k1BdOOCP1SkRFmsWqykdVC3gV5/KLb5 NWOAyW4ZuwyM3irkKems5Z9xzq4dlmADtcrdKdDie0RcmYgCged4QqoWQ6Uv -----END CERTIFICATE-----Generated at Wed Sep 23 07:58:13 2026 by rpki-client