$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32332d3233203d3e20313331363330.roa File: 3136322e342e3233362e302f32332d3233203d3e20313331363330.roa (raw, json) Hash identifier: W1CiJP1fcJGIBc6vJyxp+aVBKQhzLI93m00Pia4UGPk= Subject key identifier: A6:07:D4:07:47:9F:8B:CB:D5:13:9F:F2:C8:28:8C:EB:31:FF:B6:A1 Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 773091832A5176D437142F2950719CDEE0A2DA86 Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32332d3233203d3e20313331363330.roa Signing time: Sat 13 Jun 2026 04:03:49 +0000 ROA not before: Sat 13 Jun 2026 03:58:49 +0000 ROA not after: Sat 12 Jun 2027 04:03:49 +0000 asID: 131630 IP address blocks: 162.4.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 22:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:30:91:83:2a:51:76:d4:37:14:2f:29:50:71:9c:de:e0:a2:da:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Jun 13 03:58:49 2026 GMT Not After : Jun 12 04:03:49 2027 GMT Subject: CN=A607D407479F8BCBD5139FF2C8288CEB31FFB6A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:79:62:65:41:58:c7:4e:e6:0d:05:cc:27: ce:14:ec:3c:a0:cf:57:0f:9c:de:b0:ed:ac:26:8b: c7:95:dd:b2:a6:f1:84:c3:07:2e:49:a5:66:84:98: 7c:98:00:73:cc:d1:51:22:e9:fd:72:1f:56:06:7a: f1:d8:90:07:0f:51:52:d2:ca:2a:c3:6d:cc:ab:9a: f5:98:91:b8:4c:f3:30:b9:11:8c:da:9a:e8:05:ec: 59:c4:48:c0:f8:be:70:78:bf:0f:9d:5a:ce:d3:1f: 11:70:24:36:05:0a:83:43:2a:60:88:dc:70:d9:3e: ad:d5:cb:42:e0:e6:e0:ba:aa:00:80:92:94:6d:44: a3:4d:2c:47:b2:af:0f:09:59:9f:07:64:f6:04:48: 0f:fe:e7:bd:70:35:e3:d0:ca:9b:90:c2:8d:ea:6d: bb:20:39:4f:4b:fc:76:52:79:3d:82:7c:11:b2:75: ca:b7:64:0d:eb:6b:29:c0:fa:c4:c9:95:73:56:4d: 76:a9:68:ea:4e:53:9f:97:c7:a6:42:42:be:46:f9: 8d:e4:d7:74:36:96:d5:cb:a1:99:21:08:5d:3b:11: b3:9d:7f:69:ba:c5:6f:f9:4d:43:26:22:4a:cc:67: e7:33:39:57:5a:a2:6d:ad:cb:b5:4b:0e:7c:70:f2: dc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:07:D4:07:47:9F:8B:CB:D5:13:9F:F2:C8:28:8C:EB:31:FF:B6:A1 X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32332d3233203d3e20313331363330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.236.0/23 Signature Algorithm: sha256WithRSAEncryption b8:25:44:1f:4a:cd:42:5f:68:db:2e:67:70:9d:80:19:2a:6e: d4:24:d1:58:dc:1f:6f:68:06:b7:c0:2d:d1:83:df:42:a7:a9: dc:6a:ad:05:22:de:53:90:b3:eb:cf:12:cc:1c:72:a4:ba:a3: ef:4d:a2:03:87:73:6c:1b:4a:89:e5:d6:4c:e5:cc:24:57:88: 9f:42:45:fb:c6:1a:bd:34:c7:6a:bb:99:47:5f:8f:a3:d0:be: a2:5f:20:8c:30:0a:4c:30:a8:e3:86:52:68:34:46:d4:61:8b: d8:4a:30:98:3b:7a:89:e0:3b:b8:e5:de:5f:c8:1b:01:77:4e: a3:f8:42:2a:be:ef:9f:36:b5:a7:32:55:29:8a:d7:1d:be:ce: 77:c8:6b:5f:14:35:ce:57:41:50:29:13:87:fd:bd:35:5a:dc: 60:d5:b1:35:91:9d:8f:b4:ad:59:46:a5:6b:f3:0c:40:48:14: bc:0b:25:54:e7:cd:81:46:95:04:24:a1:33:5c:4a:ab:d4:32: 06:10:ff:13:90:38:3a:c8:08:22:7f:c4:7a:78:04:2b:99:2c: 50:0e:91:ff:3b:18:28:81:78:7c:c3:b3:1a:8d:5e:94:8a:ac: 97:cb:57:3f:34:5e:d5:cb:31:99:ec:2a:a5:c8:3d:78:43:db: c9:ea:c0:ab -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUdzCRgypRdtQ3FC8pUHGc3uCi2oYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjA2MTMwMzU4NDlaFw0yNzA2MTIwNDAzNDlaMDMxMTAvBgNV BAMTKEE2MDdENDA3NDc5RjhCQ0JENTEzOUZGMkM4Mjg4Q0VCMzFGRkI2QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvdXliZUFYx07mDQXMJ84U7Dyg z1cPnN6w7awmi8eV3bKm8YTDBy5JpWaEmHyYAHPM0VEi6f1yH1YGevHYkAcPUVLS yirDbcyrmvWYkbhM8zC5EYzamugF7FnESMD4vnB4vw+dWs7THxFwJDYFCoNDKmCI 3HDZPq3Vy0Lg5uC6qgCAkpRtRKNNLEeyrw8JWZ8HZPYESA/+571wNePQypuQwo3q bbsgOU9L/HZSeT2CfBGydcq3ZA3raynA+sTJlXNWTXapaOpOU5+Xx6ZCQr5G+Y3k 13Q2ltXLoZkhCF07EbOdf2m6xW/5TUMmIkrMZ+czOVdaom2ty7VLDnxw8tw1AgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUpgfUB0efi8vVE5/yyCiM6zH/tqEwHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvMzEzNjMyMmUzNDJl MzIzMzM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzMzMxMzYzMzMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQBogTsMA0GCSqGSIb3DQEBCwUAA4IBAQC4JUQfSs1CX2jbLmdwnYAZKm7U JNFY3B9vaAa3wC3Rg99Cp6ncaq0FIt5TkLPrzxLMHHKkuqPvTaIDh3NsG0qJ5dZM 5cwkV4ifQkX7xhq9NMdqu5lHX4+j0L6iXyCMMApMMKjjhlJoNEbUYYvYSjCYO3qJ 4Du45d5fyBsBd06j+EIqvu+fNrWnMlUpitcdvs53yGtfFDXOV0FQKROH/b01Wtxg 1bE1kZ2PtK1ZRqVr8wxASBS8CyVU582BRpUEJKEzXEqr1DIGEP8TkDg6yAgif8R6 eAQrmSxQDpH/OxgogXh8w7MajV6UiqyXy1c/NF7VyzGZ7CqlyD14Q9vJ6sCr -----END CERTIFICATE-----Generated at Sat Jun 13 15:00:16 2026 by rpki-client