$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a61313a3a2f34382d3438203d3e203138303430.roa File: 323430323a343365303a61313a3a2f34382d3438203d3e203138303430.roa (raw, json) Hash identifier: /fSzJCSRkXzZoHEWDs9j2FnyyjuMApCOVFREiP2QtKk= Subject key identifier: A5:62:D8:C5:DA:34:F8:20:06:8D:8C:F3:23:11:23:24:75:C4:50:4C Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Certificate serial: 7A4B450FCA0BA44C47DCD0A0E76A45BFB41EBF6C Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a61313a3a2f34382d3438203d3e203138303430.roa Signing time: Thu 10 Sep 2026 09:44:00 +0000 ROA not before: Thu 10 Sep 2026 09:39:00 +0000 ROA not after: Thu 09 Sep 2027 09:44:00 +0000 asID: 18040 IP address blocks: 2402:43e0:a1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:4b:45:0f:ca:0b:a4:4c:47:dc:d0:a0:e7:6a:45:bf:b4:1e:bf:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Validity Not Before: Sep 10 09:39:00 2026 GMT Not After : Sep 9 09:44:00 2027 GMT Subject: CN=A562D8C5DA34F820068D8CF32311232475C4504C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:6c:fa:1d:52:34:dd:4a:6d:39:d8:53:a0: b6:c4:9d:ac:a7:4b:b6:80:57:bc:72:45:93:57:35: 67:b1:49:2a:d3:71:1d:9f:cd:3f:74:d3:83:b8:3b: ed:4a:bb:5e:90:06:a8:36:46:7d:d9:df:98:cb:48: 99:ef:9f:86:0a:16:28:5f:fc:a2:3e:5c:fe:4e:ba: ca:24:22:23:5d:d7:3b:23:4a:e1:01:41:1d:3b:27: 0c:50:ac:99:1d:67:5e:8d:a2:e4:aa:14:91:f0:17: 24:ea:b1:b2:a9:ac:57:0b:23:57:cf:4b:c9:bf:c8: 7b:64:b2:7b:0d:86:6a:e2:18:39:28:21:fe:03:a2: c9:22:2e:09:82:f3:ae:15:c0:b8:1b:b3:11:34:b9: b9:55:af:a3:e1:a6:67:24:95:6e:d0:83:a1:7b:b8: 77:43:cb:7c:b7:8b:de:fb:c6:f6:f0:71:2e:ce:7e: 7a:0b:c7:a1:e1:70:99:4c:d7:f4:5c:88:43:9a:51: 9b:ee:06:96:1d:41:d5:cd:c6:d4:d9:5c:1c:01:fc: 1a:25:0d:ee:ca:48:dd:1d:01:d6:4c:3f:b5:75:cc: 88:5b:16:a1:40:c3:19:6b:8a:b2:7b:a7:93:d8:5b: 0e:59:05:08:29:36:3a:35:74:fe:3b:fa:3b:97:e4: 55:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:62:D8:C5:DA:34:F8:20:06:8D:8C:F3:23:11:23:24:75:C4:50:4C X509v3 Authority Key Identifier: keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a61313a3a2f34382d3438203d3e203138303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:43e0:a1::/48 Signature Algorithm: sha256WithRSAEncryption 38:c5:9b:fc:92:e0:94:d5:21:84:23:d6:d8:37:67:bd:ca:32: 94:f7:43:28:84:a0:60:7a:ad:22:59:2f:47:59:4c:e5:0e:a8: 7d:b3:06:f1:5e:75:08:73:76:c2:a1:ee:73:91:7e:fb:3e:c6: 52:56:06:9d:b9:d2:41:79:42:17:7b:b6:a7:1c:c2:01:fd:3e: a6:9e:d1:5b:14:c4:fc:67:37:59:18:d3:f3:36:ca:11:d6:d3: 1c:36:4b:98:3a:bb:bb:b4:a0:a3:db:e3:98:8f:54:af:b9:9d: 5f:53:f7:85:e4:80:4d:3e:c6:45:92:95:58:46:7a:1a:fc:83: 9c:96:a8:89:17:ad:b9:0e:1e:50:d4:9c:5c:5c:11:01:16:69: c9:c7:a8:4b:6f:df:f1:44:1e:b0:bc:b1:28:eb:5c:31:d4:37: 0d:05:41:56:5c:ac:73:a0:02:bb:24:55:5c:3b:45:af:9c:a2: cc:7f:cc:e9:43:ff:d1:5e:22:ae:b1:51:f7:3c:5d:15:f2:f9: 3e:e1:77:b0:2b:ee:b0:03:64:c4:8b:0b:75:0e:5d:26:8a:a6: c7:8e:dc:f2:1c:8f:79:b5:b4:03:00:d5:e5:85:3f:93:5c:84: 45:a9:7b:42:00:a8:e2:3f:c3:e7:f2:33:ee:79:b0:bf:bc:17: 1c:3e:0e:df -----BEGIN CERTIFICATE----- MIIE5TCCA82gAwIBAgIUektFD8oLpExH3NCg52pFv7Qev2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY2QjM0MjdDRDQwM0RFNzBEOTdDRERDQUZBMEJEQkMx NjZDM0U3ODAeFw0yNjA5MTAwOTM5MDBaFw0yNzA5MDkwOTQ0MDBaMDMxMTAvBgNV BAMTKEE1NjJEOEM1REEzNEY4MjAwNjhEOENGMzIzMTEyMzI0NzVDNDUwNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTGz6HVI03UptOdhToLbEnayn S7aAV7xyRZNXNWexSSrTcR2fzT9004O4O+1Ku16QBqg2Rn3Z35jLSJnvn4YKFihf /KI+XP5OusokIiNd1zsjSuEBQR07JwxQrJkdZ16NouSqFJHwFyTqsbKprFcLI1fP S8m/yHtksnsNhmriGDkoIf4DoskiLgmC864VwLgbsxE0ublVr6PhpmcklW7Qg6F7 uHdDy3y3i977xvbwcS7OfnoLx6HhcJlM1/RciEOaUZvuBpYdQdXNxtTZXBwB/Bol De7KSN0dAdZMP7V1zIhbFqFAwxlrirJ7p5PYWw5ZBQgpNjo1dP47+juX5FWVAgMB AAGjggHvMIIB6zAdBgNVHQ4EFgQUpWLYxdo0+CAGjYzzIxEjJHXEUEwwHwYDVR0j BBgwFoAUD2s0J81APecNl83cr6C9vBZsPngwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMC8wRjZCMzQyN0NENDAzREU3MEQ5N0NERENBRkEwQkRCQzE2NkMzRTc4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzBGNkIzNDI3Q0Q0MDNERTcwRDk3Q0REQ0FG QTBCREJDMTY2QzNFNzguY2VyMIGCBggrBgEFBQcBCwR2MHQwcgYIKwYBBQUHMAuG ZnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJORVQvMC8zMjM0MzAz MjNhMzQzMzY1MzAzYTYxMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM4MzAz NDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAJAJD4AChMA0GCSqGSIb3DQEBCwUAA4IBAQA4xZv8kuCU 1SGEI9bYN2e9yjKU90MohKBgeq0iWS9HWUzlDqh9swbxXnUIc3bCoe5zkX77PsZS VgadudJBeUIXe7anHMIB/T6mntFbFMT8ZzdZGNPzNsoR1tMcNkuYOru7tKCj2+OY j1SvuZ1fU/eF5IBNPsZFkpVYRnoa/IOclqiJF625Dh5Q1JxcXBEBFmnJx6hLb9/x RB6wvLEo61wx1DcNBUFWXKxzoAK7JFVcO0WvnKLMf8zpQ//RXiKusVH3PF0V8vk+ 4XewK+6wA2TEiwt1Dl0miqbHjtzyHI95tbQDANXlhT+TXIRFqXtCAKjiP8Pn8jPu ebC/vBccPg7f -----END CERTIFICATE-----Generated at Mon Sep 21 22:12:12 2026 by rpki-client