$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e302e302f31392d3234203d3e203137383039.roa File: 3230332e3232322e302e302f31392d3234203d3e203137383039.roa (raw, json) Hash identifier: KkCdcAcpak287YPai73LVgMeBLlzxVsdNgufE7M2xy0= Subject key identifier: F0:B6:C7:F2:CF:EA:1E:83:17:5F:73:F8:9C:9C:8B:F4:C6:75:7D:E0 Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671 Certificate serial: 120E6C265A6192A33BAF4A6830B03D61BA672CEC Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e302e302f31392d3234203d3e203137383039.roa Signing time: Thu 21 May 2026 15:57:21 +0000 ROA not before: Thu 21 May 2026 15:52:21 +0000 ROA not after: Thu 20 May 2027 15:57:21 +0000 asID: 17809 IP address blocks: 203.222.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:0e:6c:26:5a:61:92:a3:3b:af:4a:68:30:b0:3d:61:ba:67:2c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671 Validity Not Before: May 21 15:52:21 2026 GMT Not After : May 20 15:57:21 2027 GMT Subject: CN=F0B6C7F2CFEA1E83175F73F89C9C8BF4C6757DE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:d2:31:11:87:87:17:c1:ca:cb:ff:37:d2: e1:bb:e0:69:81:ec:37:4e:4e:67:5a:38:37:c2:17: b8:9c:52:16:dd:e4:9b:1d:9a:36:07:81:93:13:c3: 22:24:64:c1:04:71:09:18:ac:73:1f:3c:aa:73:d9: 20:db:0a:17:43:01:84:ad:f4:bb:c9:18:08:db:82: 7e:16:8b:76:bd:2c:0e:01:f7:ca:65:80:4e:10:40: 9c:76:93:7a:32:42:5a:64:13:2b:9a:7b:78:d4:78: 9d:02:7b:b5:c7:20:32:a7:9c:a7:98:5d:a8:89:06: 63:fa:66:1a:c7:1d:3f:b4:13:57:47:ee:fb:b9:37: 83:8d:ec:fe:ca:70:b3:26:69:e2:4c:cf:70:e9:cf: 81:90:c4:eb:1f:83:ec:42:f9:d4:c4:fc:c6:54:fa: e0:ce:f4:50:cb:18:e2:ab:b3:dd:06:ec:43:78:3e: 38:5a:07:e7:b7:84:ff:cd:e6:db:93:3c:2e:90:b0: 82:25:f6:74:d1:86:e8:71:38:8b:85:89:5e:19:2e: 83:ce:b0:04:94:2d:07:66:6c:12:9f:1a:96:d3:e6: 0a:55:6c:9c:8f:ca:42:85:2d:05:9d:4f:51:f3:f5: 91:47:90:46:0c:9b:b9:3e:0d:7d:21:1b:a9:b1:0f: 2a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B6:C7:F2:CF:EA:1E:83:17:5F:73:F8:9C:9C:8B:F4:C6:75:7D:E0 X509v3 Authority Key Identifier: keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e302e302f31392d3234203d3e203137383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.222.0.0/19 Signature Algorithm: sha256WithRSAEncryption 3c:6e:47:d3:b1:88:85:c8:f0:8a:54:b9:ad:eb:14:b7:7c:7b: ea:bb:b4:22:b0:ec:03:fd:f5:fa:20:aa:aa:7e:9d:af:2e:b2: d5:27:cd:ab:c8:d7:12:61:88:33:49:d8:90:1e:fc:20:29:a1: d5:b3:c4:3b:93:1b:43:22:62:19:1a:7c:d1:0e:17:52:e1:e4: b4:9f:34:bc:28:86:46:ec:bf:b8:52:1a:32:70:db:9a:27:8b: ab:29:dc:71:3d:a8:5c:f8:d4:38:58:85:5b:67:00:86:5f:40: 56:4d:fc:27:ea:9f:6d:50:71:8d:e6:8f:e9:30:f8:b3:6f:3f: 77:f8:d7:e1:ff:48:30:3e:1d:30:94:d5:be:dc:ef:15:b1:59: 5b:54:e7:75:d9:dc:a5:7e:a2:90:09:72:3b:97:0e:02:9e:22: 73:69:cf:bd:97:52:71:4c:5a:8b:08:3f:37:26:f4:d2:e9:f2: 36:9e:3a:9a:fd:f7:ca:3f:f5:a6:53:2d:29:d0:36:dd:bb:c1: ef:e2:52:aa:89:a8:c8:3b:f5:e9:30:61:b7:11:8b:3c:68:dc: 70:81:1c:9a:3b:43:c1:16:92:ed:f8:a6:f4:42:9a:c2:31:ef: df:11:4f:33:c1:5c:5f:43:46:13:74:82:b8:e9:55:42:7b:cf: 84:86:7f:f3 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEg5sJlphkqM7r0poMLA9YbpnLOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJDMERBMjg4 RTY0QTY3MTAeFw0yNjA1MjExNTUyMjFaFw0yNzA1MjAxNTU3MjFaMDMxMTAvBgNV BAMTKEYwQjZDN0YyQ0ZFQTFFODMxNzVGNzNGODlDOUM4QkY0QzY3NTdERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChKdIxEYeHF8HKy/830uG74GmB 7DdOTmdaODfCF7icUhbd5JsdmjYHgZMTwyIkZMEEcQkYrHMfPKpz2SDbChdDAYSt 9LvJGAjbgn4Wi3a9LA4B98plgE4QQJx2k3oyQlpkEyuae3jUeJ0Ce7XHIDKnnKeY XaiJBmP6ZhrHHT+0E1dH7vu5N4ON7P7KcLMmaeJMz3Dpz4GQxOsfg+xC+dTE/MZU +uDO9FDLGOKrs90G7EN4PjhaB+e3hP/N5tuTPC6QsIIl9nTRhuhxOIuFiV4ZLoPO sASULQdmbBKfGpbT5gpVbJyPykKFLQWdT1Hz9ZFHkEYMm7k+DX0hG6mxDyonAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQU8LbH8s/qHoMXX3P4nJyL9MZ1feAwHwYDVR0j BBgwFoAU7KO7Qlb8jKy/Q2Ipq8DaKI5kpnEwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVFVElN RS8wL0VDQTNCQjQyNTZGQzhDQUNCRjQzNjIyOUFCQzBEQTI4OEU2NEE2NzEuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJD MERBMjg4RTY0QTY3MS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9y c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1ZFRVRJTUUvMC8zMjMwMzMyZTMy MzIzMjJlMzAyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMTM3MzgzMDM5LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQFy94AMA0GCSqGSIb3DQEBCwUAA4IBAQA8bkfTsYiFyPCKVLmt6xS3fHvq u7QisOwD/fX6IKqqfp2vLrLVJ82ryNcSYYgzSdiQHvwgKaHVs8Q7kxtDImIZGnzR DhdS4eS0nzS8KIZG7L+4UhoycNuaJ4urKdxxPahc+NQ4WIVbZwCGX0BWTfwn6p9t UHGN5o/pMPizbz93+Nfh/0gwPh0wlNW+3O8VsVlbVOd12dylfqKQCXI7lw4CniJz ac+9l1JxTFqLCD83JvTS6fI2njqa/ffKP/WmUy0p0Dbdu8Hv4lKqiajIO/XpMGG3 EYs8aNxwgRyaO0PBFpLt+Kb0QprCMe/fEU8zwVxfQ0YTdIK46VVCe8+Ehn/z -----END CERTIFICATE-----Generated at Sat Jun 13 12:55:58 2026 by rpki-client