$ rpki-client -vvf rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e32382e302f32322d3232203d3e203137383039.roa File: 3230332e3232322e32382e302f32322d3232203d3e203137383039.roa (raw, json) Hash identifier: 9XG+/PeRJ9SwBDYRZliQD2rWJxopAk8WFxNd7ha3850= Subject key identifier: 82:55:74:FE:AB:86:0C:AE:8E:86:0A:8C:9A:35:CB:B5:28:CB:F6:66 Certificate issuer: /CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671 Certificate serial: 6C42F928371AB1F305D3C7B97B0E25AB07AA305D Authority key identifier: EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer Subject info access: rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e32382e302f32322d3232203d3e203137383039.roa Signing time: Thu 21 May 2026 15:57:04 +0000 ROA not before: Thu 21 May 2026 15:52:04 +0000 ROA not after: Thu 20 May 2027 15:57:04 +0000 asID: 17809 IP address blocks: 203.222.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:42:f9:28:37:1a:b1:f3:05:d3:c7:b9:7b:0e:25:ab:07:aa:30:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ECA3BB4256FC8CACBF436229ABC0DA288E64A671 Validity Not Before: May 21 15:52:04 2026 GMT Not After : May 20 15:57:04 2027 GMT Subject: CN=825574FEAB860CAE8E860A8C9A35CBB528CBF666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:a2:25:f1:31:a0:8a:09:e1:b6:03:49:e1: 95:0b:f3:d8:4b:b4:ec:93:f6:a5:90:5a:86:76:df: 4b:d4:ba:a0:3e:18:5b:4c:f5:af:e3:83:db:9e:28: b6:ab:94:e2:0d:e8:1c:b1:81:84:c8:6a:be:7d:74: 07:96:42:92:fb:aa:2a:b5:8e:8a:28:90:85:52:c1: cf:9c:ae:cd:8f:7c:11:3a:0c:bd:ad:e8:1d:aa:54: 47:72:ab:d5:d5:68:0c:b6:d5:32:bd:a1:ff:b5:f8: 15:60:49:b9:4f:f8:d6:96:8c:e6:ef:98:c1:f3:26: 08:3a:c3:e1:55:38:b2:2a:6d:68:c8:d5:7c:69:6d: f7:5a:4a:90:fb:c4:cb:f1:f4:10:23:e8:66:12:34: 2f:51:32:ea:21:d1:66:16:1b:7e:ab:9d:ed:8e:30: 9a:89:8b:c6:63:f5:9f:90:ad:bd:c7:c8:a5:23:d9: 21:d3:69:03:fa:fa:a1:a9:8d:b5:54:d1:3b:a8:d4: 8a:85:7d:38:0a:40:51:eb:1a:ce:5c:61:92:e8:5e: b7:35:d4:63:cc:de:f5:0e:ce:48:38:e7:15:04:bd: 44:41:a3:7e:4a:a0:6d:05:a9:e0:4f:4a:29:ec:8e: 1a:6c:ce:b8:9b:92:57:42:ed:1b:f3:c5:14:c7:8e: d1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:55:74:FE:AB:86:0C:AE:8E:86:0A:8C:9A:35:CB:B5:28:CB:F6:66 X509v3 Authority Key Identifier: keyid:EC:A3:BB:42:56:FC:8C:AC:BF:43:62:29:AB:C0:DA:28:8E:64:A6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/ECA3BB4256FC8CACBF436229ABC0DA288E64A671.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VEETIME/0/3230332e3232322e32382e302f32322d3232203d3e203137383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.222.28.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:29:e9:3a:50:eb:c7:0e:b4:b5:75:06:36:14:fa:fa:0a:79: 06:c0:a7:db:06:cd:32:2f:03:de:19:8c:7b:5a:39:26:b4:b3: 9b:1e:56:a6:8d:13:ec:fa:b1:d6:3c:ce:18:d5:44:d2:c0:15: a6:2a:e8:0f:a8:5f:50:a6:57:4c:9d:9b:ed:3b:1b:3b:e4:c4: 9f:c2:61:80:23:fa:9a:d7:da:b9:dc:db:2e:5f:73:6f:79:fc: 68:ad:ed:26:7f:9a:40:e9:84:a1:16:aa:42:de:db:4d:e4:3d: 51:ad:37:6c:6e:13:f1:f1:60:81:4d:d8:e9:a8:f1:c8:0e:b7: f1:d9:f3:b8:f6:7d:26:2e:9c:0f:d3:d9:f9:58:a1:26:d5:6b: 76:72:31:52:30:d8:52:a4:88:9f:58:58:32:9c:29:70:86:b9: 43:bc:79:6e:c2:75:38:51:e7:8f:68:47:09:be:bc:51:12:15: 77:bc:70:c5:d6:a8:86:9c:09:7b:9f:3b:7e:ad:56:c4:e4:5c: ce:c3:13:67:c1:98:2b:be:22:ac:e7:aa:81:8b:bc:24:e0:45: 99:c3:5c:f2:03:0d:3d:65:f3:b4:46:31:e4:ff:fb:7d:4e:bd: e3:81:6e:f9:7f:7c:d5:f3:39:dd:22:dd:f0:b7:d8:d5:16:01: d3:2c:fe:8b -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUbEL5KDcasfMF08e5ew4lqweqMF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJDMERBMjg4 RTY0QTY3MTAeFw0yNjA1MjExNTUyMDRaFw0yNzA1MjAxNTU3MDRaMDMxMTAvBgNV BAMTKDgyNTU3NEZFQUI4NjBDQUU4RTg2MEE4QzlBMzVDQkI1MjhDQkY2NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fKIl8TGgignhtgNJ4ZUL89hL tOyT9qWQWoZ230vUuqA+GFtM9a/jg9ueKLarlOIN6ByxgYTIar59dAeWQpL7qiq1 joookIVSwc+crs2PfBE6DL2t6B2qVEdyq9XVaAy21TK9of+1+BVgSblP+NaWjObv mMHzJgg6w+FVOLIqbWjI1XxpbfdaSpD7xMvx9BAj6GYSNC9RMuoh0WYWG36rne2O MJqJi8Zj9Z+Qrb3HyKUj2SHTaQP6+qGpjbVU0Tuo1IqFfTgKQFHrGs5cYZLoXrc1 1GPM3vUOzkg45xUEvURBo35KoG0FqeBPSinsjhpszribkldC7RvzxRTHjtHzAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUglV0/quGDK6OhgqMmjXLtSjL9mYwHwYDVR0j BBgwFoAU7KO7Qlb8jKy/Q2Ipq8DaKI5kpnEwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVFVElN RS8wL0VDQTNCQjQyNTZGQzhDQUNCRjQzNjIyOUFCQzBEQTI4OEU2NEE2NzEuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvRUNBM0JCNDI1NkZDOENBQ0JGNDM2MjI5QUJD MERBMjg4RTY0QTY3MS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1ZFRVRJTUUvMC8zMjMwMzMyZTMy MzIzMjJlMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzczODMwMzkucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBALL3hwwDQYJKoZIhvcNAQELBQADggEBAD0p6TpQ68cOtLV1BjYU+voK eQbAp9sGzTIvA94ZjHtaOSa0s5seVqaNE+z6sdY8zhjVRNLAFaYq6A+oX1CmV0yd m+07GzvkxJ/CYYAj+prX2rnc2y5fc295/Git7SZ/mkDphKEWqkLe203kPVGtN2xu E/HxYIFN2Omo8cgOt/HZ87j2fSYunA/T2flYoSbVa3ZyMVIw2FKkiJ9YWDKcKXCG uUO8eW7CdThR549oRwm+vFESFXe8cMXWqIacCXufO36tVsTkXM7DE2fBmCu+Iqzn qoGLvCTgRZnDXPIDDT1l87RGMeT/+31OveOBbvl/fNXzOd0i3fC32NUWAdMs/os= -----END CERTIFICATE-----Generated at Sat Jun 13 15:41:38 2026 by rpki-client