$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3530313a3a2f34382d3634203d3e20313532363132.roa File: 323430323a343365303a3530313a3a2f34382d3634203d3e20313532363132.roa (raw, json) Hash identifier: sWy58u5i0NoASBHPtiUwZGiJ4LEba5OWhQM8D2/JecE= Subject key identifier: 94:5D:12:C9:B6:16:BA:73:2F:A2:89:FC:04:85:A8:75:99:DD:B8:F1 Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Certificate serial: 09FFBE0E49D7FFEACAC5129D34EF8A94A177CB74 Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3530313a3a2f34382d3634203d3e20313532363132.roa Signing time: Fri 28 Aug 2026 05:04:01 +0000 ROA not before: Fri 28 Aug 2026 04:59:01 +0000 ROA not after: Fri 27 Aug 2027 05:04:01 +0000 asID: 152612 IP address blocks: 2402:43e0:501::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ff:be:0e:49:d7:ff:ea:ca:c5:12:9d:34:ef:8a:94:a1:77:cb:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Validity Not Before: Aug 28 04:59:01 2026 GMT Not After : Aug 27 05:04:01 2027 GMT Subject: CN=945D12C9B616BA732FA289FC0485A87599DDB8F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:71:cc:6c:34:4e:8c:51:56:b5:29:4a:9b:f3: ff:c9:fa:43:59:ff:be:bb:39:a5:0d:39:f5:f4:48: e7:d9:82:07:49:1a:6c:7c:8a:92:0b:67:59:87:75: 39:03:9f:b8:06:3d:a1:8d:ce:ea:76:a9:61:11:a0: 25:cf:53:2d:46:2c:25:82:87:3e:cd:d4:a8:84:86: af:83:7c:7d:6f:66:56:10:f5:96:56:fd:a0:03:37: 16:4f:e0:ae:c0:2c:c0:88:0c:c8:20:17:fc:62:36: 9b:ce:a4:5e:24:0c:d9:2b:61:95:25:b4:2e:77:8f: 30:0f:c8:fd:39:13:5c:b4:25:51:f7:49:44:1a:d5: f3:bb:b2:21:54:90:8e:0c:56:ab:74:15:de:d4:cf: 23:92:47:e5:a8:88:a6:64:2b:7a:a8:bb:5a:70:d1: 5e:4e:8b:f5:2e:58:31:20:04:44:89:c1:27:64:ea: 95:16:26:49:1d:3e:cb:7d:a8:e3:71:77:59:4e:c1: bc:a5:05:66:8e:5d:c7:7e:e5:9d:98:7d:95:36:0b: a2:36:75:34:33:9c:e4:b3:b0:0f:c8:31:45:78:94: 83:d1:5c:50:e3:20:7a:62:61:71:2c:b4:b7:e4:94: db:24:8a:00:59:c7:08:58:7e:1a:7f:73:d9:8a:dc: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5D:12:C9:B6:16:BA:73:2F:A2:89:FC:04:85:A8:75:99:DD:B8:F1 X509v3 Authority Key Identifier: keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3530313a3a2f34382d3634203d3e20313532363132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:43e0:501::/48 Signature Algorithm: sha256WithRSAEncryption bd:48:10:7f:84:5f:d3:c6:dc:c8:36:73:cd:f1:63:b7:b1:5a: f7:f2:9c:cc:24:5c:a4:68:aa:77:00:c5:7b:2c:2d:c1:f3:33: 09:81:23:e7:c9:35:08:0a:29:45:33:b4:36:02:c9:58:a1:85: 3e:98:6a:69:08:73:db:19:da:56:ae:e5:49:43:e0:29:6a:34: 14:b9:c6:b1:6d:f0:84:11:57:17:39:81:d6:0d:cb:3c:db:66: 4e:5f:d2:43:36:b6:23:77:52:5b:d8:8c:ff:48:64:26:7a:29: 73:f6:4f:06:b1:ea:16:07:0b:36:8c:ba:7a:58:62:20:9d:9d: 4b:53:08:ee:43:fc:c8:55:5b:e2:de:d0:f8:4f:0a:a7:07:1e: 68:f3:ce:dd:3b:d9:72:53:9e:79:a6:da:90:45:a8:4c:7a:6d: 5f:4e:20:2e:a5:7c:72:95:8d:1b:b1:46:eb:99:77:77:0a:41: 98:95:71:b5:9b:52:00:b3:cb:f1:33:c3:a5:5c:73:66:47:21: f2:63:9b:00:6c:5c:56:cc:94:20:5a:cb:e5:93:46:a5:ef:6c: 0b:4d:2e:f7:d7:21:f0:b5:9e:f7:23:1b:78:2a:01:ef:5d:b9: 85:49:3b:06:2f:12:41:d3:b5:59:c1:86:79:d8:d3:ea:9a:8e: 9c:28:13:25 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUCf++DknX/+rKxRKdNO+KlKF3y3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY2QjM0MjdDRDQwM0RFNzBEOTdDRERDQUZBMEJEQkMx NjZDM0U3ODAeFw0yNjA4MjgwNDU5MDFaFw0yNzA4MjcwNTA0MDFaMDMxMTAvBgNV BAMTKDk0NUQxMkM5QjYxNkJBNzMyRkEyODlGQzA0ODVBODc1OTlEREI4RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeccxsNE6MUVa1KUqb8//J+kNZ /767OaUNOfX0SOfZggdJGmx8ipILZ1mHdTkDn7gGPaGNzup2qWERoCXPUy1GLCWC hz7N1KiEhq+DfH1vZlYQ9ZZW/aADNxZP4K7ALMCIDMggF/xiNpvOpF4kDNkrYZUl tC53jzAPyP05E1y0JVH3SUQa1fO7siFUkI4MVqt0Fd7UzyOSR+WoiKZkK3qou1pw 0V5Oi/UuWDEgBESJwSdk6pUWJkkdPst9qONxd1lOwbylBWaOXcd+5Z2YfZU2C6I2 dTQznOSzsA/IMUV4lIPRXFDjIHpiYXEstLfklNskigBZxwhYfhp/c9mK3Ls3AgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUlF0SybYWunMvoon8BIWodZnduPEwHwYDVR0j BBgwFoAUD2s0J81APecNl83cr6C9vBZsPngwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMC8wRjZCMzQyN0NENDAzREU3MEQ5N0NERENBRkEwQkRCQzE2NkMzRTc4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzBGNkIzNDI3Q0Q0MDNERTcwRDk3Q0REQ0FG QTBCREJDMTY2QzNFNzguY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuG anJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJORVQvMC8zMjM0MzAz MjNhMzQzMzY1MzAzYTM1MzAzMTNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDMxMzUz MjM2MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQCQ+AFATANBgkqhkiG9w0BAQsFAAOCAQEAvUgQ f4Rf08bcyDZzzfFjt7Fa9/KczCRcpGiqdwDFeywtwfMzCYEj58k1CAopRTO0NgLJ WKGFPphqaQhz2xnaVq7lSUPgKWo0FLnGsW3whBFXFzmB1g3LPNtmTl/SQza2I3dS W9iM/0hkJnopc/ZPBrHqFgcLNoy6elhiIJ2dS1MI7kP8yFVb4t7Q+E8KpwceaPPO 3TvZclOeeabakEWoTHptX04gLqV8cpWNG7FG65l3dwpBmJVxtZtSALPL8TPDpVxz Zkch8mObAGxcVsyUIFrL5ZNGpe9sC00u99ch8LWe9yMbeCoB7125hUk7Bi8SQdO1 WcGGedjT6pqOnCgTJQ== -----END CERTIFICATE-----Generated at Tue Sep 22 12:24:47 2026 by rpki-client