$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a623639333a3a2f34382d3634203d3e20313532363132.roa File: 323430323a343365303a623639333a3a2f34382d3634203d3e20313532363132.roa (raw, json) Hash identifier: xfNSKb3eMl5qrx7slTef/RABgMHr3zPmfnyDAG9hy/E= Subject key identifier: F4:08:F5:F0:85:29:6E:47:75:9D:93:76:0E:B1:10:36:13:E8:DB:DD Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Certificate serial: 20147FD4355C024FABBA44E85B794287D665735A Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a623639333a3a2f34382d3634203d3e20313532363132.roa Signing time: Tue 01 Sep 2026 16:44:01 +0000 ROA not before: Tue 01 Sep 2026 16:39:01 +0000 ROA not after: Tue 31 Aug 2027 16:44:01 +0000 asID: 152612 IP address blocks: 2402:43e0:b693::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 06:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:14:7f:d4:35:5c:02:4f:ab:ba:44:e8:5b:79:42:87:d6:65:73:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Validity Not Before: Sep 1 16:39:01 2026 GMT Not After : Aug 31 16:44:01 2027 GMT Subject: CN=F408F5F085296E47759D93760EB1103613E8DBDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e2:79:47:e8:b0:c9:b9:d8:c6:75:4e:ff:40: 79:cf:7f:70:9c:db:7f:63:18:42:b4:91:aa:c2:1b: 6a:5f:76:3c:c5:ae:af:20:07:43:25:a4:c2:2d:a0: d6:1f:f2:c6:d7:a4:3c:c9:81:1c:76:9f:3e:f0:6a: 79:31:67:9a:59:e4:a0:fb:e0:0a:06:66:3d:cc:9b: af:bd:87:d0:cc:33:f9:68:d3:7d:ab:40:09:0d:6e: 3f:8e:77:c5:4d:4e:a4:bf:21:54:95:80:e7:15:40: 99:72:c3:b1:da:bb:d6:56:a0:a2:75:4a:3c:1d:47: 3e:ba:6c:a8:48:ca:ae:51:26:d6:e1:54:79:3a:51: 73:b1:00:80:ca:91:59:40:85:aa:ca:ea:d8:fd:57: 31:8b:f9:b9:83:7b:03:07:c6:12:e5:80:89:33:90: 4c:c5:71:5f:0d:62:e1:4c:8d:c3:6c:5d:e8:20:81: 13:09:c9:1a:aa:2e:04:30:6a:ae:85:77:c2:cf:89: 69:0f:e9:27:af:f4:d2:18:f6:31:07:c6:40:3c:7f: ba:ee:53:f3:4b:de:7e:84:ad:57:4d:2a:0e:21:bd: a8:4a:d0:9d:8c:70:5d:51:b9:1d:5a:13:0e:9f:04: a6:1c:0f:b4:42:07:13:ef:09:2f:37:24:39:70:9e: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:08:F5:F0:85:29:6E:47:75:9D:93:76:0E:B1:10:36:13:E8:DB:DD X509v3 Authority Key Identifier: keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a623639333a3a2f34382d3634203d3e20313532363132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:43e0:b693::/48 Signature Algorithm: sha256WithRSAEncryption 99:d0:84:16:4e:f4:27:d4:64:31:6d:c7:c0:5b:01:4a:1e:9c: dc:17:56:2f:c3:c3:25:1a:36:52:96:d8:6f:38:9c:0c:f2:61: e8:83:13:62:82:f5:5e:4f:1a:c7:d1:39:ea:e1:11:11:e6:ce: ff:f8:98:e9:e6:18:51:b4:fd:76:68:51:f2:49:ba:1b:8a:8d: f2:4c:44:a3:ad:95:1d:d8:93:7b:9a:6c:12:10:ea:0c:49:ef: d4:dd:06:81:eb:5d:94:51:4d:7a:6f:19:87:55:23:37:c0:7d: 3b:c4:db:3d:30:83:32:85:48:1e:5c:63:b9:f8:ba:9b:a1:df: 3b:5b:e7:fe:96:6c:44:43:b8:52:75:69:3d:24:6f:9d:f1:8b: 45:ee:b4:ba:65:ea:4e:23:7f:33:e7:92:c5:53:f8:c3:81:c4: 6a:ee:2c:3e:18:8b:44:1b:fb:c1:5f:1d:1c:53:26:86:6b:1f: 43:91:e2:a7:35:9b:44:f9:ea:b2:94:40:ba:16:2f:a8:15:c7: 9b:21:d9:34:f7:8e:5b:12:de:39:42:e5:f4:4b:8e:9c:f5:dc: 0d:1a:ec:df:cd:7f:e2:62:44:02:e7:a6:17:69:b2:55:b9:f5: 20:60:d7:39:2a:e6:e0:c2:5b:e2:95:35:4a:ea:7b:f5:fb:b6: 8f:69:11:91 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgIUIBR/1DVcAk+rukToW3lCh9Zlc1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY2QjM0MjdDRDQwM0RFNzBEOTdDRERDQUZBMEJEQkMx NjZDM0U3ODAeFw0yNjA5MDExNjM5MDFaFw0yNzA4MzExNjQ0MDFaMDMxMTAvBgNV BAMTKEY0MDhGNUYwODUyOTZFNDc3NTlEOTM3NjBFQjExMDM2MTNFOERCREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCG4nlH6LDJudjGdU7/QHnPf3Cc 239jGEK0karCG2pfdjzFrq8gB0MlpMItoNYf8sbXpDzJgRx2nz7wankxZ5pZ5KD7 4AoGZj3Mm6+9h9DMM/lo032rQAkNbj+Od8VNTqS/IVSVgOcVQJlyw7Hau9ZWoKJ1 SjwdRz66bKhIyq5RJtbhVHk6UXOxAIDKkVlAharK6tj9VzGL+bmDewMHxhLlgIkz kEzFcV8NYuFMjcNsXegggRMJyRqqLgQwaq6Fd8LPiWkP6Sev9NIY9jEHxkA8f7ru U/NL3n6ErVdNKg4hvahK0J2McF1RuR1aEw6fBKYcD7RCBxPvCS83JDlwnpQfAgMB AAGjggH1MIIB8TAdBgNVHQ4EFgQU9Aj18IUpbkd1nZN2DrEQNhPo290wHwYDVR0j BBgwFoAUD2s0J81APecNl83cr6C9vBZsPngwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMC8wRjZCMzQyN0NENDAzREU3MEQ5N0NERENBRkEwQkRCQzE2NkMzRTc4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzBGNkIzNDI3Q0Q0MDNERTcwRDk3Q0REQ0FG QTBCREJDMTY2QzNFNzguY2VyMIGIBggrBgEFBQcBCwR8MHoweAYIKwYBBQUHMAuG bHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJORVQvMC8zMjM0MzAz MjNhMzQzMzY1MzAzYTYyMzYzOTMzM2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEz NTMyMzYzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF BwEHAQH/BBMwETAPBAIAAjAJAwcAJAJD4LaTMA0GCSqGSIb3DQEBCwUAA4IBAQCZ 0IQWTvQn1GQxbcfAWwFKHpzcF1Yvw8MlGjZSlthvOJwM8mHogxNigvVeTxrH0Tnq 4RER5s7/+Jjp5hhRtP12aFHySbobio3yTESjrZUd2JN7mmwSEOoMSe/U3QaB612U UU16bxmHVSM3wH07xNs9MIMyhUgeXGO5+Lqbod87W+f+lmxEQ7hSdWk9JG+d8YtF 7rS6ZepOI38z55LFU/jDgcRq7iw+GItEG/vBXx0cUyaGax9DkeKnNZtE+eqylEC6 Fi+oFcebIdk0945bEt45QuX0S46c9dwNGuzfzX/iYkQC56YXabJVufUgYNc5Kubg wlvilTVK6nv1+7aPaRGR -----END CERTIFICATE-----Generated at Tue Sep 22 22:14:37 2026 by rpki-client