$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3330313a3a2f34382d3634203d3e20313532363132.roa File: 323430323a343365303a3330313a3a2f34382d3634203d3e20313532363132.roa (raw, json) Hash identifier: yOQ81rEugef2W5X34ssZgoHH+7NuHAx/mifWNMD85ZE= Subject key identifier: B4:D8:C4:5F:99:A0:EF:59:53:72:3B:3D:7F:2E:98:8B:96:B0:AE:6D Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Certificate serial: 3F663731DE7B06B21FE1EC4A28A2E76C6039AA2B Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3330313a3a2f34382d3634203d3e20313532363132.roa Signing time: Fri 28 Aug 2026 05:04:02 +0000 ROA not before: Fri 28 Aug 2026 04:59:02 +0000 ROA not after: Fri 27 Aug 2027 05:04:02 +0000 asID: 152612 IP address blocks: 2402:43e0:301::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 01:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:66:37:31:de:7b:06:b2:1f:e1:ec:4a:28:a2:e7:6c:60:39:aa:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Validity Not Before: Aug 28 04:59:02 2026 GMT Not After : Aug 27 05:04:02 2027 GMT Subject: CN=B4D8C45F99A0EF5953723B3D7F2E988B96B0AE6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:8f:58:2b:df:dd:6c:58:5d:47:d0:5a:66: f5:38:41:dc:b9:b5:1a:1a:9d:15:79:d3:6f:1c:02: c5:d7:62:57:d2:2c:49:71:21:80:52:6a:e3:7b:f6: 5b:b3:0f:26:1c:cc:db:3b:f8:71:f1:cb:94:00:0f: f8:b4:9f:d1:cc:b8:0d:30:33:c5:b7:54:13:81:e7: b7:94:e9:89:23:78:3b:0f:cc:41:9f:7f:1c:92:35: 5a:85:2a:cb:a0:9b:cc:7b:88:4e:da:80:cc:13:b4: 1c:04:9b:c3:03:3c:fb:8a:20:62:9c:60:3a:6e:95: 39:65:20:08:17:7e:44:c1:63:64:7b:e3:b8:a1:43: 60:d2:62:a8:ed:83:e7:82:db:44:c6:f3:8d:22:84: 4b:b2:18:ff:ab:ac:19:02:6f:04:c8:f6:44:71:a0: 55:47:df:8b:3a:f7:b5:04:71:79:dd:a3:ad:41:8b: f0:82:a1:ed:9f:c2:f8:c9:08:a2:dd:ff:7d:d8:62: a5:5f:57:af:22:94:21:22:87:d1:08:bf:5c:77:f8: eb:3d:b3:7d:f6:cf:bf:26:13:c7:93:8c:cc:32:29: 20:41:3f:e7:32:a9:a6:e7:44:8b:06:89:97:6e:3b: be:c9:5f:fb:30:a4:75:09:cc:14:bc:7c:73:49:31: 00:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D8:C4:5F:99:A0:EF:59:53:72:3B:3D:7F:2E:98:8B:96:B0:AE:6D X509v3 Authority Key Identifier: keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3330313a3a2f34382d3634203d3e20313532363132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:43e0:301::/48 Signature Algorithm: sha256WithRSAEncryption 7c:60:44:a0:33:6e:f6:3a:dd:3b:96:55:67:ff:1f:be:47:45: 05:9d:f2:48:30:c6:33:5e:81:df:9b:9d:10:a5:bc:b6:04:88: 07:f8:6c:2f:ff:39:6c:fa:f1:c7:87:35:e5:7a:16:ca:53:bf: 10:79:8b:b7:c9:cd:55:bb:a1:be:26:ca:35:3d:15:7e:47:98: 7d:8d:0a:38:fe:0a:f7:30:3f:ed:11:da:ab:58:21:25:f6:4d: 0a:7d:dc:d7:0b:a6:ef:bb:03:52:0d:f7:29:60:e6:67:1f:09: 43:28:47:06:7a:06:ff:5a:57:b9:57:47:36:f2:61:ed:da:4e: 72:ce:0a:65:80:44:e6:46:e2:71:a6:7d:9f:33:98:1c:0f:16: 62:16:e8:37:8e:a8:53:44:31:7b:a2:75:93:a3:1e:21:27:e1: 51:e5:4f:54:81:4a:84:e2:c9:d6:26:f5:b8:25:fe:6d:48:d8: b9:33:6f:c7:ce:2c:10:93:e8:96:7c:44:ac:c8:be:3d:1a:8d: 3a:b9:0c:85:4d:65:8a:9a:4c:13:be:fa:79:e5:78:35:0a:e9: 62:4b:8d:63:cd:08:a2:da:da:c4:ec:33:98:ab:39:f8:ff:57: 81:6f:30:fe:5d:d8:03:37:90:27:ae:c9:14:2a:fc:7f:9c:d8: 53:20:e8:1d -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUP2Y3Md57BrIf4exKKKLnbGA5qiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY2QjM0MjdDRDQwM0RFNzBEOTdDRERDQUZBMEJEQkMx NjZDM0U3ODAeFw0yNjA4MjgwNDU5MDJaFw0yNzA4MjcwNTA0MDJaMDMxMTAvBgNV BAMTKEI0RDhDNDVGOTlBMEVGNTk1MzcyM0IzRDdGMkU5ODhCOTZCMEFFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClnI9YK9/dbFhdR9BaZvU4Qdy5 tRoanRV5028cAsXXYlfSLElxIYBSauN79luzDyYczNs7+HHxy5QAD/i0n9HMuA0w M8W3VBOB57eU6YkjeDsPzEGffxySNVqFKsugm8x7iE7agMwTtBwEm8MDPPuKIGKc YDpulTllIAgXfkTBY2R747ihQ2DSYqjtg+eC20TG840ihEuyGP+rrBkCbwTI9kRx oFVH34s697UEcXndo61Bi/CCoe2fwvjJCKLd/33YYqVfV68ilCEih9EIv1x3+Os9 s332z78mE8eTjMwyKSBBP+cyqabnRIsGiZduO77JX/swpHUJzBS8fHNJMQBRAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUtNjEX5mg71lTcjs9fy6Yi5awrm0wHwYDVR0j BBgwFoAUD2s0J81APecNl83cr6C9vBZsPngwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMC8wRjZCMzQyN0NENDAzREU3MEQ5N0NERENBRkEwQkRCQzE2NkMzRTc4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzBGNkIzNDI3Q0Q0MDNERTcwRDk3Q0REQ0FG QTBCREJDMTY2QzNFNzguY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuG anJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJORVQvMC8zMjM0MzAz MjNhMzQzMzY1MzAzYTMzMzAzMTNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDMxMzUz MjM2MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQCQ+ADATANBgkqhkiG9w0BAQsFAAOCAQEAfGBE oDNu9jrdO5ZVZ/8fvkdFBZ3ySDDGM16B35udEKW8tgSIB/hsL/85bPrxx4c15XoW ylO/EHmLt8nNVbuhvibKNT0VfkeYfY0KOP4K9zA/7RHaq1ghJfZNCn3c1wum77sD Ug33KWDmZx8JQyhHBnoG/1pXuVdHNvJh7dpOcs4KZYBE5kbicaZ9nzOYHA8WYhbo N46oU0Qxe6J1k6MeISfhUeVPVIFKhOLJ1ib1uCX+bUjYuTNvx84sEJPolnxErMi+ PRqNOrkMhU1lippME776eeV4NQrpYkuNY80IotraxOwzmKs5+P9XgW8w/l3YAzeQ J67JFCr8f5zYUyDoHQ== -----END CERTIFICATE-----Generated at Wed Sep 23 12:05:15 2026 by rpki-client