$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3234302e302f32302d3234203d3e2034373830.roa File: 3230332e3132312e3234302e302f32302d3234203d3e2034373830.roa (raw, json) Hash identifier: S3KOeJqer390u+4j9gUhzn/5mAOL6ZHJUcPQ8Fvcld0= Subject key identifier: FF:59:62:24:EE:49:17:ED:5E:45:6E:D8:BF:85:38:18:FB:DC:53:1D Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F Certificate serial: 1F28EC7D77DA5923027DEC25E317BFE12B532EA7 Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3234302e302f32302d3234203d3e2034373830.roa Signing time: Tue 08 Sep 2026 07:44:11 +0000 ROA not before: Tue 08 Sep 2026 07:39:11 +0000 ROA not after: Tue 07 Sep 2027 07:44:11 +0000 asID: 4780 IP address blocks: 203.121.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:28:ec:7d:77:da:59:23:02:7d:ec:25:e3:17:bf:e1:2b:53:2e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F Validity Not Before: Sep 8 07:39:11 2026 GMT Not After : Sep 7 07:44:11 2027 GMT Subject: CN=FF596224EE4917ED5E456ED8BF853818FBDC531D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:ec:c1:69:bd:a1:bb:39:a1:3b:74:48:a5: 54:48:aa:c7:3c:e9:78:41:ab:57:93:7b:ff:94:7d: 3c:1c:2e:4b:99:28:64:81:c0:a4:e5:c5:02:67:ad: d5:d0:5b:1e:9b:af:21:a1:06:27:6f:66:ed:e9:5a: 09:25:19:0f:82:c5:c0:ee:aa:f6:4b:5a:93:25:23: 93:a9:ce:bf:07:11:61:35:55:17:8b:6d:ed:31:92: c3:ab:0b:23:67:4e:27:f1:c9:60:15:74:87:ef:8b: 41:c3:5e:42:58:1b:88:17:ed:17:5d:e8:32:de:fa: 7b:46:df:bf:01:f1:d8:a1:bf:57:92:c3:c1:6d:d2: a9:86:4e:4d:d2:09:41:09:bb:38:8e:5f:cb:41:b8: fd:42:5f:56:c5:f8:20:01:a3:a8:1f:88:fa:e0:47: ce:c1:48:55:1a:60:27:2a:fb:a6:bd:7b:a9:fe:8f: 6e:6d:14:e5:f8:64:05:35:8b:6b:74:26:69:bd:e9: 5d:d2:b3:4d:e1:2d:72:4d:0f:65:79:0f:f0:79:ae: b3:99:dd:21:4d:ad:db:3f:2b:e7:77:1c:30:4b:b5: d8:e3:a9:c6:4f:63:ba:e1:39:36:c6:75:2e:a1:5e: ad:0b:f5:54:55:66:33:8a:89:bf:48:93:18:dc:46: ce:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:59:62:24:EE:49:17:ED:5E:45:6E:D8:BF:85:38:18:FB:DC:53:1D X509v3 Authority Key Identifier: keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/3230332e3132312e3234302e302f32302d3234203d3e2034373830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.121.240.0/20 Signature Algorithm: sha256WithRSAEncryption 20:57:de:b8:0f:c4:c6:aa:4b:2e:b6:98:de:79:f6:37:02:96: 3d:f4:93:6e:71:41:49:57:3f:60:c4:5c:5e:8f:9b:b0:36:3f: 8e:2c:33:07:a1:b5:69:69:37:43:8c:9c:21:f0:35:ce:69:6e: 5d:24:c7:63:68:d1:61:df:76:c8:79:53:92:08:32:93:34:2e: de:16:ab:b4:1e:b1:a9:84:87:db:90:43:67:c6:e6:bc:3c:6a: dd:54:65:69:fc:f7:f3:df:bc:96:a6:c6:70:2f:31:e4:9e:b9: 70:1a:8c:ce:74:ed:60:f2:b1:98:d6:46:ab:a0:45:2b:ab:d6: 83:a5:a0:55:3c:d8:9d:43:8d:74:2b:13:36:3d:b0:e7:89:72: 35:bf:5a:94:86:44:90:78:6a:55:2c:dd:7b:4b:a9:f6:d9:e4: 5b:d2:f8:a3:be:ec:6a:f9:72:6a:12:05:c2:08:c3:71:80:34: a6:47:9c:f9:a6:f2:2c:72:12:9d:eb:93:1b:1b:ee:2c:6b:e7: 3b:0d:ff:7c:09:b2:1c:e1:2e:51:e7:89:a3:7c:79:f6:f5:e3: 03:2c:3a:89:74:a8:9c:7a:3e:db:b5:da:04:9d:93:3f:65:4e: 3f:59:a1:e2:53:3b:b9:94:39:f0:4e:12:c7:4b:1d:06:6c:2d: b2:a0:fa:5c -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIUHyjsfXfaWSMCfewl4xe/4StTLqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx ODA3RjY2RjAeFw0yNjA5MDgwNzM5MTFaFw0yNzA5MDcwNzQ0MTFaMDMxMTAvBgNV BAMTKEZGNTk2MjI0RUU0OTE3RUQ1RTQ1NkVEOEJGODUzODE4RkJEQzUzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7SezBab2huzmhO3RIpVRIqsc8 6XhBq1eTe/+UfTwcLkuZKGSBwKTlxQJnrdXQWx6bryGhBidvZu3pWgklGQ+CxcDu qvZLWpMlI5Opzr8HEWE1VReLbe0xksOrCyNnTifxyWAVdIfvi0HDXkJYG4gX7Rdd 6DLe+ntG378B8dihv1eSw8Ft0qmGTk3SCUEJuziOX8tBuP1CX1bF+CABo6gfiPrg R87BSFUaYCcq+6a9e6n+j25tFOX4ZAU1i2t0Jmm96V3Ss03hLXJND2V5D/B5rrOZ 3SFNrds/K+d3HDBLtdjjqcZPY7rhOTbGdS6hXq0L9VRVZjOKib9IkxjcRs5FAgMB AAGjggHhMIIB3TAdBgNVHQ4EFgQU/1liJO5JF+1eRW7Yv4U4GPvcUx0wHwYDVR0j BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF OUM3MTgwN0Y2NkYuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzMyMzAzMzJlMzEzMjMx MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNDM3MzgzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMt58DANBgkqhkiG9w0BAQsFAAOCAQEAIFfeuA/ExqpLLraY3nn2NwKWPfST bnFBSVc/YMRcXo+bsDY/jiwzB6G1aWk3Q4ycIfA1zmluXSTHY2jRYd92yHlTkggy kzQu3hartB6xqYSH25BDZ8bmvDxq3VRlafz389+8lqbGcC8x5J65cBqMznTtYPKx mNZGq6BFK6vWg6WgVTzYnUONdCsTNj2w54lyNb9alIZEkHhqVSzde0up9tnkW9L4 o77savlyahIFwgjDcYA0pkec+abyLHISneuTGxvuLGvnOw3/fAmyHOEuUeeJo3x5 9vXjAyw6iXSonHo+27XaBJ2TP2VOP1mh4lM7uZQ58E4Sx0sdBmwtsqD6XA== -----END CERTIFICATE-----Generated at Mon Sep 21 19:47:39 2026 by rpki-client