$ rpki-client -vvvf rpkica.twnic.tw/rpki/APWON/0/3136322e342e3132302e302f32332d3234203d3e2037353338.roa File: 3136322e342e3132302e302f32332d3234203d3e2037353338.roa (raw, json) Hash identifier: Mi+0JEPMuVlJEXsdnA5LTDCvWWBkvP7mWCGahHVlu/o= Subject key identifier: D6:D3:15:FE:49:15:BB:B0:8B:8A:96:84:7F:D5:5B:5F:52:7F:8D:BB Certificate issuer: /CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Certificate serial: 0E8031CFDB66E1810A72173CDCDF1627CD31052D Authority key identifier: C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/APWON/0/3136322e342e3132302e302f32332d3234203d3e2037353338.roa Signing time: Wed 26 Aug 2026 06:04:02 +0000 ROA not before: Wed 26 Aug 2026 05:59:02 +0000 ROA not after: Wed 25 Aug 2027 06:04:02 +0000 asID: 7538 IP address blocks: 162.4.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 07:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:80:31:cf:db:66:e1:81:0a:72:17:3c:dc:df:16:27:cd:31:05:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Validity Not Before: Aug 26 05:59:02 2026 GMT Not After : Aug 25 06:04:02 2027 GMT Subject: CN=D6D315FE4915BBB08B8A96847FD55B5F527F8DBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cd:55:a7:ce:f5:32:1f:5a:e3:8d:36:0b:32: ba:1b:66:4e:a8:2f:1a:3f:d0:13:5a:f3:a1:dc:15: 6c:64:e3:ba:0d:d8:ea:a2:88:19:58:1a:2a:49:00: 78:0e:4f:32:8f:4b:cd:5f:b4:28:9f:3a:dd:d3:83: 1d:6b:95:9f:c3:63:75:33:4e:6c:20:74:df:a4:f4: dd:e5:bb:3c:52:8c:c4:5c:64:d7:c7:00:16:e0:80: 81:6b:88:32:06:19:c5:87:1a:30:dd:83:88:97:6c: 43:e3:46:62:81:c4:7e:55:b6:15:cb:cd:e4:83:7f: 3c:e7:f7:eb:0a:ff:13:92:fc:81:34:47:45:e5:b3: 54:b8:99:c5:12:68:e5:0f:b5:8f:5e:ca:86:fe:ee: a2:98:b5:11:9a:10:24:f7:6e:f5:99:de:42:25:a7: 15:af:55:90:98:74:16:9e:a4:d0:1f:13:c4:a6:e3: 24:27:a8:cb:6d:83:bb:0f:25:6a:33:a9:8f:a3:4e: f1:e8:ae:8a:a8:db:5d:59:22:04:5c:dd:7f:bc:4f: 07:d1:e7:06:9c:1d:8e:ff:db:f7:73:05:3f:91:fc: f4:b7:94:a2:07:f8:fc:10:b0:17:03:ba:21:33:7f: 23:a1:15:08:85:ed:e2:d1:70:32:1c:e6:57:e4:78: fc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D3:15:FE:49:15:BB:B0:8B:8A:96:84:7F:D5:5B:5F:52:7F:8D:BB X509v3 Authority Key Identifier: keyid:C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APWON/0/3136322e342e3132302e302f32332d3234203d3e2037353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.120.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:46:77:15:28:9d:a5:a9:cb:b7:e6:26:6a:99:6a:20:f1:b5: f0:10:c2:af:11:d3:21:93:18:0a:3e:09:19:07:98:88:99:7a: 32:19:d9:b2:bf:c0:bd:f0:23:5e:dd:80:ef:b9:7b:9a:49:60: 6b:e8:1a:66:ea:eb:58:66:51:62:da:5e:04:59:9c:a9:d2:db: 2a:41:16:a7:97:ce:38:51:65:52:b5:67:c2:7f:d0:e1:65:20: 1f:ec:e4:5b:dd:9a:ec:d2:55:db:0d:0e:65:a4:6e:8c:37:cc: a2:b0:c6:9c:6b:11:13:47:6a:ab:76:07:44:a2:14:4e:bc:c6: 2d:1d:a4:a3:3c:ef:04:73:70:ec:d4:3a:d4:1a:3b:e6:66:39: b0:8b:2a:3c:dd:50:16:88:13:b3:36:5e:5d:45:f3:d9:b7:d7: e4:8e:cd:08:05:e5:55:59:fe:7b:f8:e7:7c:79:8e:58:95:e5: ec:04:5a:d6:8f:d5:12:ce:9c:e4:b9:0f:63:47:64:41:d9:7b: 35:4b:ec:21:81:0e:32:3e:4e:f9:1d:04:34:9a:e7:82:67:28: 56:9f:2f:9f:64:3b:83:91:50:10:0d:86:8e:46:09:53:21:57: 01:7f:6e:99:3f:bc:77:8d:bb:b1:ff:f6:da:ef:36:da:4e:84: ef:62:75:3a -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUDoAxz9tm4YEKchc83N8WJ80xBS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU4OUNDMEQyQ0YwRDYzNENCNEU5MDA2RUE3QTU1REQ3 N0UyQ0I5RTAeFw0yNjA4MjYwNTU5MDJaFw0yNzA4MjUwNjA0MDJaMDMxMTAvBgNV BAMTKEQ2RDMxNUZFNDkxNUJCQjA4QjhBOTY4NDdGRDU1QjVGNTI3RjhEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+zVWnzvUyH1rjjTYLMrobZk6o Lxo/0BNa86HcFWxk47oN2OqiiBlYGipJAHgOTzKPS81ftCifOt3Tgx1rlZ/DY3Uz TmwgdN+k9N3luzxSjMRcZNfHABbggIFriDIGGcWHGjDdg4iXbEPjRmKBxH5VthXL zeSDfzzn9+sK/xOS/IE0R0Xls1S4mcUSaOUPtY9eyob+7qKYtRGaECT3bvWZ3kIl pxWvVZCYdBaepNAfE8Sm4yQnqMttg7sPJWozqY+jTvHoroqo211ZIgRc3X+8TwfR 5wacHY7/2/dzBT+R/PS3lKIH+PwQsBcDuiEzfyOhFQiF7eLRcDIc5lfkePzZAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQU1tMV/kkVu7CLipaEf9VbX1J/jbswHwYDVR0j BBgwFoAUxYnMDSzw1jTLTpAG6npV3Xfiy54wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBXT04v MC9DNTg5Q0MwRDJDRjBENjM0Q0I0RTkwMDZFQTdBNTVERDc3RTJDQjlFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0M1ODlDQzBEMkNGMEQ2MzRDQjRFOTAwNkVBN0E1 NURENzdFMkNCOUUuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUFdPTi8wLzMxMzYzMjJlMzQyZTMx MzIzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM3MzUzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB ogR4MA0GCSqGSIb3DQEBCwUAA4IBAQCORncVKJ2lqcu35iZqmWog8bXwEMKvEdMh kxgKPgkZB5iImXoyGdmyv8C98CNe3YDvuXuaSWBr6Bpm6utYZlFi2l4EWZyp0tsq QRanl844UWVStWfCf9DhZSAf7ORb3Zrs0lXbDQ5lpG6MN8yisMacaxETR2qrdgdE ohROvMYtHaSjPO8Ec3Ds1DrUGjvmZjmwiyo83VAWiBOzNl5dRfPZt9fkjs0IBeVV Wf57+Od8eY5YleXsBFrWj9USzpzkuQ9jR2RB2Xs1S+whgQ4yPk75HQQ0mueCZyhW ny+fZDuDkVAQDYaORglTIVcBf26ZP7x3jbux//ba7zbaToTvYnU6 -----END CERTIFICATE-----Generated at Mon Sep 21 17:08:53 2026 by rpki-client