$ rpki-client -vvvf rpkica.twnic.tw/rpki/APWON/0/3136322e342e3132302e302f32342d3234203d3e2037353338.roa File: 3136322e342e3132302e302f32342d3234203d3e2037353338.roa (raw, json) Hash identifier: +oL4eb5beCTbwHQv05IGNdDaYgTzY6FmysDdzyN7dbc= Subject key identifier: 83:CC:3F:F3:8E:0A:C8:10:6D:4A:6A:06:BF:B9:71:00:0B:5A:CF:FF Certificate issuer: /CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Certificate serial: 311CB46B0421F3BB9566AFC04B31F0B69AB7AEDF Authority key identifier: C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/APWON/0/3136322e342e3132302e302f32342d3234203d3e2037353338.roa Signing time: Thu 03 Sep 2026 09:24:02 +0000 ROA not before: Thu 03 Sep 2026 09:19:02 +0000 ROA not after: Thu 02 Sep 2027 09:24:02 +0000 asID: 7538 IP address blocks: 162.4.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 07:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1c:b4:6b:04:21:f3:bb:95:66:af:c0:4b:31:f0:b6:9a:b7:ae:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Validity Not Before: Sep 3 09:19:02 2026 GMT Not After : Sep 2 09:24:02 2027 GMT Subject: CN=83CC3FF38E0AC8106D4A6A06BFB971000B5ACFFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4a:48:45:b4:ec:f1:e8:73:e2:00:9f:98:bd: 46:f3:ab:00:3b:78:f1:1a:dd:60:3d:9f:48:78:0f: 6c:89:9d:a3:8e:a9:7f:bb:35:51:48:e6:78:6f:a0: 9a:36:7a:9a:22:33:2b:00:af:61:eb:38:04:e9:8b: 37:46:c3:32:de:39:5d:2f:07:e2:f6:ca:ee:59:39: b8:05:1a:64:4c:53:ed:87:4d:89:94:24:f4:6f:50: 28:25:3b:74:9a:23:40:34:08:1a:44:9a:8d:37:d4: 90:7f:0b:43:fd:18:df:9a:84:6f:ed:9d:31:5a:fc: 7b:cc:c0:99:f5:68:02:db:13:1e:e6:ac:b3:28:c8: 54:ed:7d:e9:f5:56:f9:4a:ad:c0:fb:e2:02:4d:95: 2b:97:4b:a0:0e:08:fb:e0:d7:0a:8a:8a:5a:da:81: 77:ba:62:e8:db:c5:49:51:e0:53:b6:4f:fe:7b:59: 4c:49:72:83:54:bf:0c:ec:6f:f5:01:fb:0b:03:de: 44:c7:2c:64:40:4c:e7:d5:ca:2e:18:b2:a8:f7:98: 92:34:fb:e5:62:b1:e8:2d:a8:89:a9:68:72:c4:11: 7a:d7:e0:74:f2:bd:9e:46:55:ba:cb:1d:a6:31:87: 15:15:ce:95:e9:20:bb:e6:a9:b5:a2:65:9e:b9:ff: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CC:3F:F3:8E:0A:C8:10:6D:4A:6A:06:BF:B9:71:00:0B:5A:CF:FF X509v3 Authority Key Identifier: keyid:C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APWON/0/3136322e342e3132302e302f32342d3234203d3e2037353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.120.0/24 Signature Algorithm: sha256WithRSAEncryption 54:66:2f:29:44:61:0c:62:ec:18:f4:32:43:81:24:f5:5a:e5: 62:bc:34:36:e1:73:bb:fb:01:85:ec:60:6b:58:1f:68:f9:61: ec:a5:92:34:1f:3c:53:1d:2f:f6:ea:5d:0d:4a:50:93:06:54: 72:77:a0:d0:1c:8f:7f:21:18:92:c5:5b:74:a5:fb:34:75:9b: a8:fe:a9:af:ba:19:5d:f6:f5:5e:a0:38:f1:42:86:3c:fa:1a: b6:73:14:cc:07:00:b9:b5:f5:92:77:e8:4c:a9:92:2b:bf:9c: fd:bc:72:de:50:5c:10:84:da:a5:2c:8a:3d:3a:44:8c:ab:ac: 94:c4:a2:34:7b:72:11:9c:e5:23:c2:51:e6:9f:de:36:5d:80: ae:e7:f8:56:47:95:80:e1:63:31:45:00:50:56:bc:32:6f:11: a1:fb:df:53:ef:7b:49:12:a6:77:71:6f:24:71:f3:ec:4d:e1: e1:17:24:b2:d7:fc:23:81:2b:a4:fa:e7:14:55:4f:4f:a9:d2: 68:3d:ea:e8:e2:e9:86:0f:a8:f5:d3:0b:a7:6d:8b:12:5d:e4: e8:a4:e9:80:31:2d:24:b8:f3:47:8e:e7:fe:01:7f:54:ae:79: eb:cf:ac:d0:cd:ad:c1:87:ee:13:89:fb:ed:23:01:df:a2:50: 57:ca:5a:ea -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUMRy0awQh87uVZq/ASzHwtpq3rt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU4OUNDMEQyQ0YwRDYzNENCNEU5MDA2RUE3QTU1REQ3 N0UyQ0I5RTAeFw0yNjA5MDMwOTE5MDJaFw0yNzA5MDIwOTI0MDJaMDMxMTAvBgNV BAMTKDgzQ0MzRkYzOEUwQUM4MTA2RDRBNkEwNkJGQjk3MTAwMEI1QUNGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1SkhFtOzx6HPiAJ+YvUbzqwA7 ePEa3WA9n0h4D2yJnaOOqX+7NVFI5nhvoJo2epoiMysAr2HrOATpizdGwzLeOV0v B+L2yu5ZObgFGmRMU+2HTYmUJPRvUCglO3SaI0A0CBpEmo031JB/C0P9GN+ahG/t nTFa/HvMwJn1aALbEx7mrLMoyFTtfen1VvlKrcD74gJNlSuXS6AOCPvg1wqKilra gXe6YujbxUlR4FO2T/57WUxJcoNUvwzsb/UB+wsD3kTHLGRATOfVyi4Ysqj3mJI0 ++VisegtqImpaHLEEXrX4HTyvZ5GVbrLHaYxhxUVzpXpILvmqbWiZZ65/6+dAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQUg8w/844KyBBtSmoGv7lxAAtaz/8wHwYDVR0j BBgwFoAUxYnMDSzw1jTLTpAG6npV3Xfiy54wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBXT04v MC9DNTg5Q0MwRDJDRjBENjM0Q0I0RTkwMDZFQTdBNTVERDc3RTJDQjlFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0M1ODlDQzBEMkNGMEQ2MzRDQjRFOTAwNkVBN0E1 NURENzdFMkNCOUUuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUFdPTi8wLzMxMzYzMjJlMzQyZTMx MzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM3MzUzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA ogR4MA0GCSqGSIb3DQEBCwUAA4IBAQBUZi8pRGEMYuwY9DJDgST1WuVivDQ24XO7 +wGF7GBrWB9o+WHspZI0HzxTHS/26l0NSlCTBlRyd6DQHI9/IRiSxVt0pfs0dZuo /qmvuhld9vVeoDjxQoY8+hq2cxTMBwC5tfWSd+hMqZIrv5z9vHLeUFwQhNqlLIo9 OkSMq6yUxKI0e3IRnOUjwlHmn942XYCu5/hWR5WA4WMxRQBQVrwybxGh+99T73tJ EqZ3cW8kcfPsTeHhFySy1/wjgSuk+ucUVU9PqdJoPero4umGD6j10wunbYsSXeTo pOmAMS0kuPNHjuf+AX9Urnnrz6zQza3Bh+4TifvtIwHfolBXylrq -----END CERTIFICATE-----Generated at Mon Sep 21 17:08:55 2026 by rpki-client