$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/0/323430323a373165303a3130303a3a2f34382d3438203d3e20323034363737.roa File: 323430323a373165303a3130303a3a2f34382d3438203d3e20323034363737.roa (raw, json) Hash identifier: vsm9UGN6tHY0aNAGBXgIpoDTNmnsxdu9OsGwN4Md6uM= Subject key identifier: 0A:16:6D:1C:FD:75:F7:FC:F8:7A:A6:82:9C:C8:66:96:CD:8E:CE:36 Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE Certificate serial: 0AAC1AF02A70D7E9F8D9A30FBF5E48B7138C9D98 Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/323430323a373165303a3130303a3a2f34382d3438203d3e20323034363737.roa Signing time: Mon 14 Sep 2026 08:04:01 +0000 ROA not before: Mon 14 Sep 2026 07:59:01 +0000 ROA not after: Mon 13 Sep 2027 08:04:01 +0000 asID: 204677 IP address blocks: 2402:71e0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ac:1a:f0:2a:70:d7:e9:f8:d9:a3:0f:bf:5e:48:b7:13:8c:9d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE Validity Not Before: Sep 14 07:59:01 2026 GMT Not After : Sep 13 08:04:01 2027 GMT Subject: CN=0A166D1CFD75F7FCF87AA6829CC86696CD8ECE36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:c3:8d:9a:a0:b0:75:a0:dd:b7:28:3d:d4: 53:c0:de:b9:5d:89:54:99:e8:76:89:9e:d7:62:d4: 59:e4:8b:62:b2:3d:d5:8a:21:dd:2a:d3:bb:bb:fe: 09:3d:1e:bd:72:cb:4b:d3:a5:2d:1e:ec:3f:86:cb: cb:6f:b2:e3:ed:f1:cd:49:7c:b4:5a:4f:a5:8f:d5: 85:81:58:fb:61:2c:d7:dc:cf:40:91:cf:aa:a3:f1: 4b:82:a8:53:17:7a:bd:ae:0d:4e:1d:de:eb:45:56: 5e:3b:60:eb:77:51:3f:0b:fc:44:8d:01:88:48:ec: 33:dc:a1:99:96:a9:5c:85:c6:4e:17:60:90:75:51: 49:01:1a:62:c9:64:50:83:da:29:b0:ea:cc:28:37: f1:c5:82:24:c0:3d:53:6a:93:e1:6a:66:93:9f:f8: 40:4d:7e:81:68:51:ef:aa:7e:a6:3b:34:4c:5f:68: 6b:7a:ee:ac:84:3e:5b:c1:f9:c9:5e:59:f2:33:92: bd:88:3d:6a:f0:8c:b9:30:4b:0e:68:f5:89:d8:43: db:3d:8c:4f:1a:f3:a2:16:9c:cd:2b:58:86:71:ab: a1:1e:d2:63:2e:61:cf:dd:40:d4:f8:85:2e:d2:1a: 36:86:0d:9e:70:7f:41:46:ac:3b:a9:da:26:33:29: 44:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:16:6D:1C:FD:75:F7:FC:F8:7A:A6:82:9C:C8:66:96:CD:8E:CE:36 X509v3 Authority Key Identifier: keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/323430323a373165303a3130303a3a2f34382d3438203d3e20323034363737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:71e0:100::/48 Signature Algorithm: sha256WithRSAEncryption 1a:51:31:5a:45:cb:15:3d:d3:82:58:00:0a:0f:af:d4:f9:50: 6c:c0:c7:99:4c:b0:2e:12:e5:83:79:8f:b1:bc:05:8e:70:16: f4:af:26:e3:d6:e2:2c:e4:5f:a5:45:bc:06:fd:7d:10:d3:bc: 9a:b3:bc:eb:34:27:cb:24:66:da:3e:bd:90:47:a1:0c:23:e5: a2:9f:e8:a0:d3:8f:84:fb:df:ac:0f:6c:19:88:68:3d:85:bd: d0:50:e5:47:b8:f3:d2:8d:7f:b9:85:9e:17:bd:8f:b5:0e:54: a1:aa:3e:e4:ce:e7:6d:5f:0a:17:c4:3d:0c:6b:0a:b6:39:57: cd:a4:d6:64:b0:87:84:2e:76:21:2e:95:77:1a:0f:a3:aa:57: ea:12:da:7b:03:f8:c9:cf:94:5d:f8:33:55:16:50:25:56:68: 37:19:75:d6:76:e8:c5:85:92:b1:c0:32:5e:5a:46:5d:ea:41: 2a:b3:6d:07:73:83:36:26:6a:2e:c8:ae:2f:34:4d:f3:bd:0f: d2:38:c4:70:eb:16:d9:96:f8:f9:4b:ea:3a:7c:bc:a6:70:1b: 9f:a6:9d:96:e4:c1:12:98:28:7d:59:a5:ff:e2:e1:95:78:67: e5:58:16:e0:b7:99:43:e7:ea:64:d1:5f:a7:94:67:0a:b5:41: 37:39:4b:a8 -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIUCqwa8Cpw1+n42aMPv15ItxOMnZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1QzQ5OUZE MTQ0RkVBRTAeFw0yNjA5MTQwNzU5MDFaFw0yNzA5MTMwODA0MDFaMDMxMTAvBgNV BAMTKDBBMTY2RDFDRkQ3NUY3RkNGODdBQTY4MjlDQzg2Njk2Q0Q4RUNFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9W8ONmqCwdaDdtyg91FPA3rld iVSZ6HaJntdi1Fnki2KyPdWKId0q07u7/gk9Hr1yy0vTpS0e7D+Gy8tvsuPt8c1J fLRaT6WP1YWBWPthLNfcz0CRz6qj8UuCqFMXer2uDU4d3utFVl47YOt3UT8L/ESN AYhI7DPcoZmWqVyFxk4XYJB1UUkBGmLJZFCD2imw6swoN/HFgiTAPVNqk+FqZpOf +EBNfoFoUe+qfqY7NExfaGt67qyEPlvB+cleWfIzkr2IPWrwjLkwSw5o9YnYQ9s9 jE8a86IWnM0rWIZxq6Ee0mMuYc/dQNT4hS7SGjaGDZ5wf0FGrDup2iYzKUQPAgMB AAGjggHxMIIB7TAdBgNVHQ4EFgQUChZtHP119/z4eqaCnMhmls2OzjYwHwYDVR0j BBgwFoAUzhG91E9md2YkxNm+FFxJn9FE/q4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U Vy8wL0NFMTFCREQ0NEY2Njc3NjYyNEM0RDlCRTE0NUM0OTlGRDE0NEZFQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1 QzQ5OUZEMTQ0RkVBRS5jZXIwgYUGCCsGAQUFBwELBHkwdzB1BggrBgEFBQcwC4Zp cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TRENMLVRXLzAvMzIzNDMwMzIz YTM3MzE2NTMwM2EzMTMwMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzQz NjM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAnHgAQAwDQYJKoZIhvcNAQELBQADggEBABpRMVpF yxU904JYAAoPr9T5UGzAx5lMsC4S5YN5j7G8BY5wFvSvJuPW4izkX6VFvAb9fRDT vJqzvOs0J8skZto+vZBHoQwj5aKf6KDTj4T736wPbBmIaD2FvdBQ5Ue489KNf7mF nhe9j7UOVKGqPuTO521fChfEPQxrCrY5V82k1mSwh4QudiEulXcaD6OqV+oS2nsD +MnPlF34M1UWUCVWaDcZddZ26MWFkrHAMl5aRl3qQSqzbQdzgzYmai7Iri80TfO9 D9I4xHDrFtmW+PlL6jp8vKZwG5+mnZbkwRKYKH1Zpf/i4ZV4Z+VYFuC3mUPn6mTR X6eUZwq1QTc5S6g= -----END CERTIFICATE-----Generated at Mon Sep 21 19:16:14 2026 by rpki-client