$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233372e302f32342d3234203d3e20323136343332.roa File: 3136322e342e3233372e302f32342d3234203d3e20323136343332.roa (raw, json) Hash identifier: XlAgg0iH/qhn/41L/oFVvuvgpv9LVS3KL4NDhTFX9EY= Subject key identifier: 8A:2A:97:1F:5B:B5:FF:ED:2E:E6:D8:35:82:3B:65:84:C4:FB:50:F2 Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 1091F3D4E39E8D465A219BD70DB0896BC574EEEE Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233372e302f32342d3234203d3e20323136343332.roa Signing time: Wed 30 Sep 2026 14:24:01 +0000 ROA not before: Wed 30 Sep 2026 14:19:01 +0000 ROA not after: Wed 29 Sep 2027 14:24:01 +0000 asID: 216432 IP address blocks: 162.4.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 17:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:91:f3:d4:e3:9e:8d:46:5a:21:9b:d7:0d:b0:89:6b:c5:74:ee:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Sep 30 14:19:01 2026 GMT Not After : Sep 29 14:24:01 2027 GMT Subject: CN=8A2A971F5BB5FFED2EE6D835823B6584C4FB50F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:39:5a:ad:23:6e:ea:9f:96:7d:42:97:5d: 0d:f3:9d:de:ea:fb:24:6e:99:70:1a:4d:dd:42:c4: 1c:04:41:09:3a:1b:f0:c1:0f:68:f7:0d:f4:c8:29: a9:72:83:81:98:0e:14:21:23:c8:4b:f6:2a:06:a3: 04:5b:2c:a9:57:04:03:c5:d0:19:03:c3:1b:f1:32: a1:fc:d4:9c:85:b6:7e:17:5f:3b:6e:7e:f1:19:34: da:48:59:f2:c9:a1:a9:f2:20:96:40:04:62:2f:2c: d4:60:ef:8e:e1:e7:63:e4:c3:8c:98:b3:5a:bd:7b: 74:35:4d:ad:7b:07:36:e4:52:da:e8:9c:3b:6c:4c: 58:69:e1:c5:86:78:9f:c5:43:61:e1:4b:17:46:91: d6:8e:b3:0e:ba:57:c6:4b:1b:d7:fb:bd:6d:f6:0e: 47:68:d5:3b:32:45:9a:6b:fa:e8:55:8a:d9:ec:fe: 2b:ae:f4:77:35:cb:af:96:b5:6e:ac:ae:48:23:c6: ea:da:8d:e0:59:f4:30:ba:15:bd:5d:78:8f:59:8c: 45:61:c6:c1:52:7e:78:02:9c:41:e1:cb:49:59:ac: 6b:58:b4:97:d6:15:56:45:8e:41:ae:0d:65:31:e6: 70:fe:53:56:33:ad:d6:13:4e:f5:75:42:0a:eb:3a: 95:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2A:97:1F:5B:B5:FF:ED:2E:E6:D8:35:82:3B:65:84:C4:FB:50:F2 X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233372e302f32342d3234203d3e20323136343332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.237.0/24 Signature Algorithm: sha256WithRSAEncryption 39:c2:1e:83:4e:73:c7:c5:52:78:e8:13:cd:eb:11:ca:af:3a: 79:67:85:54:18:6a:e9:51:e1:08:b6:a2:f3:6b:49:7b:56:03: f1:7f:18:b9:98:3c:21:d1:6f:b6:3d:82:b3:74:b3:35:6d:84: 63:05:e5:c8:6e:5b:1f:8d:53:ec:34:9d:53:4c:8b:5d:41:7b: cc:15:7d:d0:10:fe:32:0f:54:cc:20:fa:47:a4:0a:b1:d5:7d: e7:1e:36:bd:0d:38:dd:94:4f:57:3a:17:04:06:08:87:4c:3d: 67:d8:66:40:8e:0e:cc:15:51:33:fe:7a:59:d4:cb:b2:18:da: a6:d6:36:80:9b:35:9c:ac:90:0d:be:c1:7f:00:01:ea:7c:7d: 0c:49:47:87:3f:36:f2:db:32:be:a2:ed:c4:2a:52:28:f7:90: 6a:47:81:94:b6:f8:85:dd:00:dd:d9:f5:a9:7d:12:3c:15:5d: 93:c2:20:fa:52:54:63:ea:63:5e:7a:b0:94:a4:9e:5b:06:3c: f6:57:eb:93:83:62:27:f8:41:8c:11:f6:0a:af:14:7a:8d:ed: ed:06:eb:94:b8:1b:4c:8f:94:3b:70:3f:c7:60:cf:39:9d:cc: 5d:39:3c:0a:5e:aa:c7:96:c0:e0:ff:42:0f:8a:f9:d7:1e:e5: 04:7e:a0:8a -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUEJHz1OOejUZaIZvXDbCJa8V07u4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjA5MzAxNDE5MDFaFw0yNzA5MjkxNDI0MDFaMDMxMTAvBgNV BAMTKDhBMkE5NzFGNUJCNUZGRUQyRUU2RDgzNTgyM0I2NTg0QzRGQjUwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWTlarSNu6p+WfUKXXQ3znd7q +yRumXAaTd1CxBwEQQk6G/DBD2j3DfTIKalyg4GYDhQhI8hL9ioGowRbLKlXBAPF 0BkDwxvxMqH81JyFtn4XXztufvEZNNpIWfLJoanyIJZABGIvLNRg747h52Pkw4yY s1q9e3Q1Ta17BzbkUtronDtsTFhp4cWGeJ/FQ2HhSxdGkdaOsw66V8ZLG9f7vW32 Dkdo1TsyRZpr+uhVitns/iuu9Hc1y6+WtW6srkgjxurajeBZ9DC6Fb1deI9ZjEVh xsFSfngCnEHhy0lZrGtYtJfWFVZFjkGuDWUx5nD+U1YzrdYTTvV1QgrrOpWtAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUiiqXH1u1/+0u5tg1gjtlhMT7UPIwHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvMzEzNjMyMmUzNDJl MzIzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM2MzQzMzMyLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogTtMA0GCSqGSIb3DQEBCwUAA4IBAQA5wh6DTnPHxVJ46BPN6xHKrzp5 Z4VUGGrpUeEItqLza0l7VgPxfxi5mDwh0W+2PYKzdLM1bYRjBeXIblsfjVPsNJ1T TItdQXvMFX3QEP4yD1TMIPpHpAqx1X3nHja9DTjdlE9XOhcEBgiHTD1n2GZAjg7M FVEz/npZ1MuyGNqm1jaAmzWcrJANvsF/AAHqfH0MSUeHPzby2zK+ou3EKlIo95Bq R4GUtviF3QDd2fWpfRI8FV2TwiD6UlRj6mNeerCUpJ5bBjz2V+uTg2In+EGMEfYK rxR6je3tBuuUuBtMj5Q7cD/HYM85ncxdOTwKXqrHlsDg/0IPivnXHuUEfqCK -----END CERTIFICATE-----Generated at Thu Nov 5 05:22:46 2026 by rpki-client