
$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a623639313a3a2f34382d3634203d3e20313532363132.roa
File: 323430323a343365303a623639313a3a2f34382d3634203d3e20313532363132.roa (raw, json)
Hash identifier: /ZMYMcRfS4rihkl6K+danfG6J1+aix3g9hU8GRVSTWM=
Subject key identifier: EA:D8:FF:C5:8F:29:3A:06:9E:50:79:92:2D:0F:69:1B:1C:ED:C0:6A
Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Certificate serial: 20AFF88277A388345F1A7B441A8EB97B484B1CA5
Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a623639313a3a2f34382d3634203d3e20313532363132.roa
Signing time: Tue 01 Sep 2026 16:44:02 +0000
ROA not before: Tue 01 Sep 2026 16:39:02 +0000
ROA not after: Tue 31 Aug 2027 16:44:02 +0000
asID: 152612
IP address blocks: 2402:43e0:b691::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:af:f8:82:77:a3:88:34:5f:1a:7b:44:1a:8e:b9:7b:48:4b:1c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78
Validity
Not Before: Sep 1 16:39:02 2026 GMT
Not After : Aug 31 16:44:02 2027 GMT
Subject: CN=EAD8FFC58F293A069E5079922D0F691B1CEDC06A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:58:97:3b:64:7a:aa:b6:1d:48:35:3a:d4:
ac:c3:43:86:e8:24:e6:9b:8c:7f:00:26:09:0b:e9:
6b:14:4f:a8:22:ad:e1:59:e8:9d:aa:c9:a8:07:db:
3d:86:7c:cc:9f:e5:a8:8e:2a:4d:4a:43:08:2e:fa:
2a:a5:8c:2e:d5:19:11:53:d1:d6:ef:1c:12:dc:97:
0d:bb:a6:27:9f:42:33:cc:76:14:68:0a:fc:ef:ea:
c7:1e:94:f0:63:04:e0:15:49:23:c0:de:dd:03:54:
40:59:e6:85:7b:02:0d:33:e8:53:13:a7:8c:3c:78:
70:f1:8e:17:b1:93:4c:b5:40:ee:a8:65:0e:34:03:
35:dc:be:dc:a8:5d:2e:5b:86:34:d5:78:ab:19:79:
42:af:0e:65:5d:a2:23:3e:d6:02:ad:54:fb:31:97:
a8:ee:4d:bc:98:ee:70:43:2f:9f:14:66:fc:2d:46:
1d:cf:a1:3f:93:44:ea:d5:22:f8:54:a6:4e:ee:9e:
04:e3:c0:ab:6a:7e:4a:57:72:ee:3c:35:26:c7:23:
36:d0:3b:7c:d0:1a:c8:c9:26:a7:50:7d:97:27:5f:
d3:59:50:05:8c:9e:c8:ee:fc:01:13:1d:64:d6:e6:
ec:80:2d:7c:61:a7:3e:7b:b1:66:4b:3b:95:c0:03:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D8:FF:C5:8F:29:3A:06:9E:50:79:92:2D:0F:69:1B:1C:ED:C0:6A
X509v3 Authority Key Identifier:
keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a623639313a3a2f34382d3634203d3e20313532363132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2402:43e0:b691::/48
Signature Algorithm: sha256WithRSAEncryption
82:ce:75:d9:5d:7f:eb:ca:c5:1f:2f:e1:c5:d4:3b:50:53:4a:
58:3d:be:00:85:68:71:25:d4:3a:0d:a3:11:61:8d:ac:a7:9a:
2f:00:8d:fe:5c:08:03:13:6b:4d:82:ab:e9:6b:8f:83:11:ea:
ab:09:b3:28:b0:84:73:ba:64:72:09:a8:c5:67:91:48:23:c8:
24:e8:3d:2e:9a:92:f6:05:67:b3:a7:0c:8d:f0:df:f0:35:91:
e8:27:58:2d:bc:78:f8:70:84:6c:5b:b7:56:a7:b9:bc:aa:04:
0c:29:20:25:3c:86:30:cc:4f:e8:fa:99:26:78:bb:cc:e4:01:
d5:77:bd:e8:e1:2f:b4:20:cc:0b:2d:20:e6:cc:eb:d9:52:c0:
cd:38:ff:78:8a:d7:32:f2:5e:fe:08:7f:92:b6:d3:47:30:d8:
92:de:c0:fb:06:d8:28:4d:8d:b3:ee:c6:83:10:9e:ad:ce:64:
ca:a0:54:a9:63:40:9b:85:32:1a:f6:5c:4e:e8:49:8b:64:25:
7a:43:c2:74:c0:b1:64:50:d6:58:af:62:8c:bc:9c:5c:87:8d:
8b:b7:4a:a5:32:b5:02:a7:60:51:f7:86:95:df:93:ba:67:be:
ce:b8:9e:4f:a4:14:4e:24:a5:13:25:bd:d2:96:e9:f1:17:5c:
3e:81:be:fd
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIUIK/4gnejiDRfGntEGo65e0hLHKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEY2QjM0MjdDRDQwM0RFNzBEOTdDRERDQUZBMEJEQkMx
NjZDM0U3ODAeFw0yNjA5MDExNjM5MDJaFw0yNzA4MzExNjQ0MDJaMDMxMTAvBgNV
BAMTKEVBRDhGRkM1OEYyOTNBMDY5RTUwNzk5MjJEMEY2OTFCMUNFREMwNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpQFiXO2R6qrYdSDU61KzDQ4bo
JOabjH8AJgkL6WsUT6gireFZ6J2qyagH2z2GfMyf5aiOKk1KQwgu+iqljC7VGRFT
0dbvHBLclw27piefQjPMdhRoCvzv6scelPBjBOAVSSPA3t0DVEBZ5oV7Ag0z6FMT
p4w8eHDxjhexk0y1QO6oZQ40AzXcvtyoXS5bhjTVeKsZeUKvDmVdoiM+1gKtVPsx
l6juTbyY7nBDL58UZvwtRh3PoT+TROrVIvhUpk7ungTjwKtqfkpXcu48NSbHIzbQ
O3zQGsjJJqdQfZcnX9NZUAWMnsju/AETHWTW5uyALXxhpz57sWZLO5XAA+YVAgMB
AAGjggH1MIIB8TAdBgNVHQ4EFgQU6tj/xY8pOgaeUHmSLQ9pGxztwGowHwYDVR0j
BBgwFoAUD2s0J81APecNl83cr6C9vBZsPngwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO
RVQvMC8wRjZCMzQyN0NENDAzREU3MEQ5N0NERENBRkEwQkRCQzE2NkMzRTc4LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzBGNkIzNDI3Q0Q0MDNERTcwRDk3Q0REQ0FG
QTBCREJDMTY2QzNFNzguY2VyMIGIBggrBgEFBQcBCwR8MHoweAYIKwYBBQUHMAuG
bHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJORVQvMC8zMjM0MzAz
MjNhMzQzMzY1MzAzYTYyMzYzOTMxM2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEz
NTMyMzYzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAJAJD4LaRMA0GCSqGSIb3DQEBCwUAA4IBAQCC
znXZXX/rysUfL+HF1DtQU0pYPb4AhWhxJdQ6DaMRYY2sp5ovAI3+XAgDE2tNgqvp
a4+DEeqrCbMosIRzumRyCajFZ5FII8gk6D0umpL2BWezpwyN8N/wNZHoJ1gtvHj4
cIRsW7dWp7m8qgQMKSAlPIYwzE/o+pkmeLvM5AHVd73o4S+0IMwLLSDmzOvZUsDN
OP94itcy8l7+CH+SttNHMNiS3sD7BtgoTY2z7saDEJ6tzmTKoFSpY0CbhTIa9lxO
6EmLZCV6Q8J0wLFkUNZYr2KMvJxch42Lt0qlMrUCp2BR94aV35O6Z77OuJ5PpBRO
JKUTJb3SlunxF1w+gb79
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:59:34 2026 by rpki-client