$ rpki-client -vvvf rpkica.twnic.tw/rpki/APWON/0/3136322e342e3132312e302f32342d3234203d3e2037353338.roa File: 3136322e342e3132312e302f32342d3234203d3e2037353338.roa (raw, json) Hash identifier: JjMarjg2Zc6hqoQZgUCo2VMeha5Gj5iiZIx9vvG1h9o= Subject key identifier: F4:BA:DF:FF:14:4C:CF:D8:08:70:BC:F6:A3:A6:22:2A:63:AA:CE:92 Certificate issuer: /CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Certificate serial: 1307CE380A60BA4497EB397DE6585123316606EB Authority key identifier: C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/APWON/0/3136322e342e3132312e302f32342d3234203d3e2037353338.roa Signing time: Thu 03 Sep 2026 09:24:01 +0000 ROA not before: Thu 03 Sep 2026 09:19:01 +0000 ROA not after: Thu 02 Sep 2027 09:24:01 +0000 asID: 7538 IP address blocks: 162.4.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 07:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:07:ce:38:0a:60:ba:44:97:eb:39:7d:e6:58:51:23:31:66:06:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E Validity Not Before: Sep 3 09:19:01 2026 GMT Not After : Sep 2 09:24:01 2027 GMT Subject: CN=F4BADFFF144CCFD80870BCF6A3A6222A63AACE92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:d2:0a:a6:ff:9f:41:fc:12:15:42:f6:09: 2a:d8:fd:f2:46:77:48:f3:3d:6a:06:b9:16:8d:cb: 27:9f:3a:17:bd:9c:e8:e5:aa:fa:0a:7d:85:30:ab: d8:75:ee:c8:df:c1:77:53:99:0a:7d:84:05:00:d4: 1b:63:c8:43:0e:a3:21:b8:4f:cd:65:bc:47:56:73: 84:27:d9:94:9b:e8:0f:c2:d2:e0:93:1e:7f:cd:d4: fd:2c:79:c5:19:21:b8:b6:63:44:54:bf:2a:b5:32: 3b:50:05:06:6c:23:86:8f:cb:6a:eb:52:f8:89:32: d4:98:00:4f:f3:17:cf:0e:c5:11:8e:56:4a:98:27: 8b:0a:0a:1b:cd:8b:c9:10:38:0b:74:f7:5e:8f:1e: 2d:79:b1:fb:70:61:51:89:77:4c:1a:d2:cf:20:7f: ff:fd:ae:57:33:2d:fc:6a:d0:4e:6f:ce:21:fb:9f: e5:b9:62:b9:eb:03:57:e8:99:0f:95:d5:5f:60:f4: 6b:77:8e:a1:14:46:d6:1b:6f:71:ad:8e:84:74:34: c5:77:bb:1b:64:c4:40:07:e1:76:37:47:3e:41:fc: 59:4d:b3:30:b8:85:d7:d8:a2:d2:4d:78:7d:b5:c4: 3b:2d:14:09:3f:aa:23:99:09:05:92:e0:69:5e:dc: 25:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BA:DF:FF:14:4C:CF:D8:08:70:BC:F6:A3:A6:22:2A:63:AA:CE:92 X509v3 Authority Key Identifier: keyid:C5:89:CC:0D:2C:F0:D6:34:CB:4E:90:06:EA:7A:55:DD:77:E2:CB:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/APWON/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C589CC0D2CF0D634CB4E9006EA7A55DD77E2CB9E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/APWON/0/3136322e342e3132312e302f32342d3234203d3e2037353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.121.0/24 Signature Algorithm: sha256WithRSAEncryption 99:db:fc:c7:8d:c3:43:1f:e6:3d:3d:05:db:22:14:77:07:dc: af:ba:3e:e3:29:fc:7f:6c:1b:53:44:fd:2d:18:e6:ca:ba:17: 82:da:59:bf:29:44:35:81:ac:0e:ea:9a:73:c5:f8:57:8a:c5: b4:b7:0e:ee:44:7f:3c:ce:07:0f:0f:df:dd:63:d0:51:54:3c: 1d:aa:cb:17:18:c9:88:c1:48:40:99:3a:b5:17:97:c5:c5:84: 5a:30:72:dd:78:ef:bf:8a:b5:a0:9b:bb:d5:22:4f:23:2f:20: 45:81:54:f9:02:68:e0:b3:ba:62:52:4c:95:5d:8a:c4:da:09: 27:16:06:b6:c6:61:f7:49:d4:43:fb:51:17:c1:17:a3:9a:1a: b8:31:08:f5:cb:d3:5e:e3:19:b4:c8:b0:89:19:ee:46:6d:ab: 84:f1:fe:4b:95:5c:85:c9:20:86:06:58:14:a4:f1:0b:3e:ab: 75:81:33:0f:e4:83:4e:1f:ae:eb:89:70:95:35:be:5b:d6:f9: f1:3b:8d:f1:77:a4:30:47:35:a0:2b:09:6a:dd:40:de:16:67: 63:4d:b5:38:2e:39:52:de:32:cf:1c:6f:15:e2:4a:e5:7c:d8: e8:13:ab:90:64:50:2f:e6:d6:e4:7c:d0:e7:f2:10:d4:a1:a8: 28:65:63:42 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgIUEwfOOApgukSX6zl95lhRIzFmBuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU4OUNDMEQyQ0YwRDYzNENCNEU5MDA2RUE3QTU1REQ3 N0UyQ0I5RTAeFw0yNjA5MDMwOTE5MDFaFw0yNzA5MDIwOTI0MDFaMDMxMTAvBgNV BAMTKEY0QkFERkZGMTQ0Q0NGRDgwODcwQkNGNkEzQTYyMjJBNjNBQUNFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCui9IKpv+fQfwSFUL2CSrY/fJG d0jzPWoGuRaNyyefOhe9nOjlqvoKfYUwq9h17sjfwXdTmQp9hAUA1BtjyEMOoyG4 T81lvEdWc4Qn2ZSb6A/C0uCTHn/N1P0secUZIbi2Y0RUvyq1MjtQBQZsI4aPy2rr UviJMtSYAE/zF88OxRGOVkqYJ4sKChvNi8kQOAt0916PHi15sftwYVGJd0wa0s8g f//9rlczLfxq0E5vziH7n+W5YrnrA1fomQ+V1V9g9Gt3jqEURtYbb3GtjoR0NMV3 uxtkxEAH4XY3Rz5B/FlNszC4hdfYotJNeH21xDstFAk/qiOZCQWS4Gle3CVDAgMB AAGjggHdMIIB2TAdBgNVHQ4EFgQU9Lrf/xRMz9gIcLz2o6YiKmOqzpIwHwYDVR0j BBgwFoAUxYnMDSzw1jTLTpAG6npV3Xfiy54wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQVBXT04v MC9DNTg5Q0MwRDJDRjBENjM0Q0I0RTkwMDZFQTdBNTVERDc3RTJDQjlFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0M1ODlDQzBEMkNGMEQ2MzRDQjRFOTAwNkVBN0E1 NURENzdFMkNCOUUuY2VyMHcGCCsGAQUFBwELBGswaTBnBggrBgEFBQcwC4ZbcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BUFdPTi8wLzMxMzYzMjJlMzQyZTMx MzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM3MzUzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA ogR5MA0GCSqGSIb3DQEBCwUAA4IBAQCZ2/zHjcNDH+Y9PQXbIhR3B9yvuj7jKfx/ bBtTRP0tGObKuheC2lm/KUQ1gawO6ppzxfhXisW0tw7uRH88zgcPD9/dY9BRVDwd qssXGMmIwUhAmTq1F5fFxYRaMHLdeO+/irWgm7vVIk8jLyBFgVT5Amjgs7piUkyV XYrE2gknFga2xmH3SdRD+1EXwRejmhq4MQj1y9Ne4xm0yLCJGe5GbauE8f5LlVyF ySCGBlgUpPELPqt1gTMP5INOH67riXCVNb5b1vnxO43xd6QwRzWgKwlq3UDeFmdj TbU4LjlS3jLPHG8V4krlfNjoE6uQZFAv5tbkfNDn8hDUoagoZWNC -----END CERTIFICATE-----Generated at Mon Sep 21 17:08:56 2026 by rpki-client