$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6265653a3a2f34382d3634203d3e20323136313938.roa File: 323430323a343365303a6265653a3a2f34382d3634203d3e20323136313938.roa (raw, json) Hash identifier: G5ZHFEs/k5egpnslebEEFOvxulbKp3nlVsyJc87M8lQ= Subject key identifier: BE:88:1E:4E:7D:54:D8:D1:EC:01:85:D3:9A:C7:D5:53:1E:EC:41:BE Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Certificate serial: 2C842148DADFE2F24D899579B135219F7EA3BF Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6265653a3a2f34382d3634203d3e20323136313938.roa Signing time: Sun 26 Jul 2026 15:24:00 +0000 ROA not before: Sun 26 Jul 2026 15:19:00 +0000 ROA not after: Sun 25 Jul 2027 15:24:00 +0000 asID: 216198 IP address blocks: 2402:43e0:bee::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:84:21:48:da:df:e2:f2:4d:89:95:79:b1:35:21:9f:7e:a3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Validity Not Before: Jul 26 15:19:00 2026 GMT Not After : Jul 25 15:24:00 2027 GMT Subject: CN=BE881E4E7D54D8D1EC0185D39AC7D5531EEC41BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:4c:df:97:f2:b5:79:4a:ca:55:b0:7c:ac: 9a:fc:97:ec:23:13:ac:de:ab:6b:53:5c:51:c1:6c: 8b:e2:de:c3:23:19:18:65:20:bd:ab:f6:8a:a9:de: 6c:af:d6:68:7a:a9:21:f0:13:18:60:61:ea:6c:b8: 26:28:87:cf:80:f0:d0:2e:cd:bf:c8:6d:62:ea:24: 38:86:e6:7c:e3:ec:24:67:53:2a:8d:f1:9c:54:ec: b8:22:4c:00:05:87:ea:f3:91:8f:0f:b6:79:74:1f: 4d:2f:f3:fd:c6:09:00:73:fa:cc:1c:eb:ba:78:94: d5:f2:9f:f9:e0:bc:f0:75:e5:2f:fc:60:60:14:4f: 2c:dd:d8:6c:99:e8:f5:a5:da:31:6c:6e:7a:68:56: 57:33:21:fa:a0:2e:24:37:3a:52:f5:c4:7e:68:37: fb:a7:da:bf:19:2b:8f:02:4d:3d:88:ef:21:33:48: b6:16:ca:2c:96:94:ce:a5:80:6d:fc:05:b2:e3:b4: 9a:93:1d:7a:10:1a:9b:8d:5e:ba:0f:a4:d0:f2:6e: 97:5c:44:69:0d:99:3a:4f:8f:12:9a:d8:dc:6a:de: fa:c6:21:0f:0c:94:ac:4b:03:11:25:39:5c:af:84: cd:0a:ec:08:99:3b:08:ac:11:5b:5f:4c:ce:ad:ab: 46:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:88:1E:4E:7D:54:D8:D1:EC:01:85:D3:9A:C7:D5:53:1E:EC:41:BE X509v3 Authority Key Identifier: keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a6265653a3a2f34382d3634203d3e20323136313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:43e0:bee::/48 Signature Algorithm: sha256WithRSAEncryption d5:45:d4:d4:df:97:ef:08:ba:a7:fb:8d:df:35:4f:ad:e0:a7: 02:db:53:b1:98:0b:c3:7c:b3:e5:f4:ca:ac:e4:f2:07:1a:17: 96:d0:90:8a:3e:91:12:49:a1:fa:b7:c0:14:99:0c:7f:4a:62: 70:d8:50:70:5b:f8:3a:8a:74:8d:83:d9:fb:68:d1:9e:aa:2a: 22:3d:e2:84:00:0f:23:ff:28:d0:47:ab:57:0b:3b:7e:7d:28: b6:e6:f5:53:e2:cf:0a:71:f1:8f:9e:f0:fe:51:cd:2b:69:0a: ce:18:d3:cd:9a:33:16:20:07:16:99:d0:63:8a:5c:3f:ea:8c: ec:d6:c5:c2:37:45:fa:99:00:ba:6f:f5:37:29:e8:97:3f:24: af:b5:2d:e4:8f:bc:8b:58:b4:71:c4:92:29:4a:b3:70:74:0f: 60:06:40:6e:bd:84:58:e6:a6:f5:7e:59:88:0f:13:b8:99:b0: 07:9d:b7:28:d7:c6:fe:41:f1:56:57:12:65:c2:6b:0e:07:33: 4b:32:8f:48:57:47:7b:7f:03:e1:df:1e:05:7e:43:5e:2c:b0: 8b:f4:89:86:77:74:31:ff:36:b9:f9:99:dc:46:93:4b:a9:db: 36:8a:63:be:16:47:8b:1d:c3:73:4c:1d:b2:9b:99:08:38:fd: 57:bf:8b:cb -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgITLIQhSNrf4vJNiZV5sTUhn36jvzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygwRjZCMzQyN0NENDAzREU3MEQ5N0NERENBRkEwQkRCQzE2 NkMzRTc4MB4XDTI2MDcyNjE1MTkwMFoXDTI3MDcyNTE1MjQwMFowMzExMC8GA1UE AxMoQkU4ODFFNEU3RDU0RDhEMUVDMDE4NUQzOUFDN0Q1NTMxRUVDNDFCRTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJofTN+X8rV5SspVsHysmvyX7CMT rN6ra1NcUcFsi+LewyMZGGUgvav2iqnebK/WaHqpIfATGGBh6my4JiiHz4Dw0C7N v8htYuokOIbmfOPsJGdTKo3xnFTsuCJMAAWH6vORjw+2eXQfTS/z/cYJAHP6zBzr uniU1fKf+eC88HXlL/xgYBRPLN3YbJno9aXaMWxuemhWVzMh+qAuJDc6UvXEfmg3 +6favxkrjwJNPYjvITNIthbKLJaUzqWAbfwFsuO0mpMdehAam41eug+k0PJul1xE aQ2ZOk+PEprY3Gre+sYhDwyUrEsDESU5XK+EzQrsCJk7CKwRW19Mzq2rRt8CAwEA AaOCAfMwggHvMB0GA1UdDgQWBBS+iB5OfVTY0ewBhdOax9VTHuxBvjAfBgNVHSME GDAWgBQPazQnzUA95w2XzdyvoL28Fmw+eDAOBgNVHQ8BAf8EBAMCB4AwZQYDVR0f BF4wXDBaoFigVoZUcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5F VC8wLzBGNkIzNDI3Q0Q0MDNERTcwRDk3Q0REQ0FGQTBCREJDMTY2QzNFNzguY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMEY2QjM0MjdDRDQwM0RFNzBEOTdDRERDQUZB MEJEQkMxNjZDM0U3OC5jZXIwgYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4Zq cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8wLzMyMzQzMDMy M2EzNDMzNjUzMDNhNjI2NTY1M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzIzMTM2 MzEzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH AQH/BBMwETAPBAIAAjAJAwcAJAJD4AvuMA0GCSqGSIb3DQEBCwUAA4IBAQDVRdTU 35fvCLqn+43fNU+t4KcC21OxmAvDfLPl9Mqs5PIHGheW0JCKPpESSaH6t8AUmQx/ SmJw2FBwW/g6inSNg9n7aNGeqioiPeKEAA8j/yjQR6tXCzt+fSi25vVT4s8KcfGP nvD+Uc0raQrOGNPNmjMWIAcWmdBjilw/6ozs1sXCN0X6mQC6b/U3KeiXPySvtS3k j7yLWLRxxJIpSrNwdA9gBkBuvYRY5qb1flmIDxO4mbAHnbco18b+QfFWVxJlwmsO BzNLMo9IV0d7fwPh3x4FfkNeLLCL9ImGd3Qx/za5+ZncRpNLqds2imO+FkeLHcNz TB2ym5kIOP1Xv4vL -----END CERTIFICATE-----Generated at Tue Jul 28 15:39:31 2026 by rpki-client