$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/1/3135312e3135382e3232352e302f32342d3234203d3e20323136313338.roa File: 3135312e3135382e3232352e302f32342d3234203d3e20323136313338.roa (raw, json) Hash identifier: Cr5VaLo8fqDJtkOt63np0AgLIpjR+BhgRM5+gMx49a4= Subject key identifier: 86:E8:80:0E:69:54:E9:DF:E8:69:46:C0:5B:CB:D4:A2:3F:86:4B:0D Certificate issuer: /CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Certificate serial: 5171B5ED239E201945A7F7E6C48A954263D6A357 Authority key identifier: BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/1/3135312e3135382e3232352e302f32342d3234203d3e20323136313338.roa Signing time: Tue 23 Jun 2026 08:03:48 +0000 ROA not before: Tue 23 Jun 2026 07:58:48 +0000 ROA not after: Tue 22 Jun 2027 08:03:48 +0000 asID: 216138 IP address blocks: 151.158.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 21:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:71:b5:ed:23:9e:20:19:45:a7:f7:e6:c4:8a:95:42:63:d6:a3:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Validity Not Before: Jun 23 07:58:48 2026 GMT Not After : Jun 22 08:03:48 2027 GMT Subject: CN=86E8800E6954E9DFE86946C05BCBD4A23F864B0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7f:0a:0b:ee:a6:35:1a:ce:f8:95:b8:50:00: 89:7f:2f:8f:be:b8:7d:7c:df:f5:43:da:01:fa:1f: f3:27:bb:78:10:af:09:fd:aa:da:e7:ac:ba:0f:46: ab:19:e1:49:56:a9:e3:fd:e5:05:59:2d:9d:ce:b0: b2:06:d6:30:1d:c0:b1:d7:37:c1:d1:7d:51:c3:93: 3a:8f:ce:22:fe:46:2f:cc:27:90:6e:0f:8e:a5:81: 77:ab:05:3c:30:0c:10:ed:64:ad:4e:51:ec:5a:d1: df:ce:d7:c9:09:72:90:91:6a:47:c2:c9:36:7e:72: 9a:03:0c:42:c8:34:dd:a5:c3:6f:92:c5:f5:c0:ff: 4e:47:98:08:32:b8:e2:c5:4a:a7:93:90:ad:71:b9: fb:51:08:7b:9d:75:04:a7:ce:4e:d1:78:5f:ed:0d: 72:29:f9:dc:53:bb:9c:b6:26:1d:4d:23:95:80:f9: bf:5c:b8:ba:af:4e:2b:c6:55:6f:68:dd:e2:98:50: 50:fa:31:00:b6:e9:1f:a3:b0:10:80:f6:55:35:0f: c2:2a:ee:5a:47:a3:8d:49:8a:e4:ac:b5:cb:04:cb: 5c:65:81:d6:76:72:b1:54:46:5a:48:2a:b0:b3:38: c1:51:59:42:63:64:e1:fe:c7:9e:3f:af:a3:a8:12: 05:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E8:80:0E:69:54:E9:DF:E8:69:46:C0:5B:CB:D4:A2:3F:86:4B:0D X509v3 Authority Key Identifier: keyid:BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/3135312e3135382e3232352e302f32342d3234203d3e20323136313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.225.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:fa:18:57:1a:4c:2f:15:bd:7f:8f:ee:0c:8b:bf:68:2c:42: 73:ce:99:a4:3c:33:3a:5e:2b:77:32:2d:55:8f:71:23:35:9f: bb:a0:22:78:2b:8d:f9:3c:60:3d:5f:8d:d8:41:2b:b3:fd:f2: 54:9a:1b:d9:e5:b4:c7:bd:9f:ab:23:13:ae:96:77:f0:bf:5c: 24:d0:9d:74:01:5e:19:c7:ff:8b:fe:25:49:02:d5:08:3c:70: 0e:98:bf:e3:46:16:82:a3:42:42:6b:b9:37:a1:b8:64:e2:81: 7f:9f:a8:2d:60:47:d7:0d:30:f9:8e:7f:c1:d3:d3:59:03:3c: 74:2f:92:7e:c3:c5:d9:3c:75:b1:b2:1c:61:9d:e7:ae:03:f1: 7f:a8:ed:3b:c8:7c:ee:29:31:bf:23:07:16:50:aa:06:4a:bd: ab:76:a6:8b:ab:26:f8:41:20:2b:e2:2c:0b:f4:85:db:6a:8a: 8b:17:67:8a:96:f3:fb:4f:ea:cf:90:37:fd:83:11:f2:1b:87: 22:52:5d:1b:0d:64:9f:f1:0a:87:83:07:46:22:e0:e1:39:f0: 46:8b:95:93:77:22:de:79:1e:df:f7:33:71:38:18:b8:ed:28: 77:f3:17:5f:ad:d6:4f:e8:9f:9c:a8:89:93:5e:39:02:f9:ab: d6:66:a3:94 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUUXG17SOeIBlFp/fmxIqVQmPWo1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZEQjQwNDk2QTJFMkZEOUI0RTRGOTZCMzU4OTQxM0Ix RjY3QjEwNTAeFw0yNjA2MjMwNzU4NDhaFw0yNzA2MjIwODAzNDhaMDMxMTAvBgNV BAMTKDg2RTg4MDBFNjk1NEU5REZFODY5NDZDMDVCQ0JENEEyM0Y4NjRCMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtfwoL7qY1Gs74lbhQAIl/L4++ uH183/VD2gH6H/Mnu3gQrwn9qtrnrLoPRqsZ4UlWqeP95QVZLZ3OsLIG1jAdwLHX N8HRfVHDkzqPziL+Ri/MJ5BuD46lgXerBTwwDBDtZK1OUexa0d/O18kJcpCRakfC yTZ+cpoDDELINN2lw2+SxfXA/05HmAgyuOLFSqeTkK1xuftRCHuddQSnzk7ReF/t DXIp+dxTu5y2Jh1NI5WA+b9cuLqvTivGVW9o3eKYUFD6MQC26R+jsBCA9lU1D8Iq 7lpHo41JiuSstcsEy1xlgdZ2crFURlpIKrCzOMFRWUJjZOH+x54/r6OoEgURAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUhuiADmlU6d/oaUbAW8vUoj+GSw0wHwYDVR0j BBgwFoAUv9tASWouL9m05PlrNYlBOx9nsQUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MS9CRkRCNDA0OTZBMkUyRkQ5QjRFNEY5NkIzNTg5NDEzQjFGNjdCMTA1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8zL0JGREI0MDQ5NkEyRTJGRDlCNEU0Rjk2QjM1ODk0 MTNCMUY2N0IxMDUuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEFBQcwC4ZjcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8xLzMxMzUzMTJlMzEzNTM4 MmUzMjMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzYzMTMzMzgucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACXnuEwDQYJKoZIhvcNAQELBQADggEBABv6GFcaTC8VvX+P7gyLv2gs QnPOmaQ8MzpeK3cyLVWPcSM1n7ugIngrjfk8YD1fjdhBK7P98lSaG9nltMe9n6sj E66Wd/C/XCTQnXQBXhnH/4v+JUkC1Qg8cA6Yv+NGFoKjQkJruTehuGTigX+fqC1g R9cNMPmOf8HT01kDPHQvkn7Dxdk8dbGyHGGd564D8X+o7TvIfO4pMb8jBxZQqgZK vat2pourJvhBICviLAv0hdtqiosXZ4qW8/tP6s+QN/2DEfIbhyJSXRsNZJ/xCoeD B0Yi4OE58EaLlZN3It55Ht/3M3E4GLjtKHfzF1+t1k/on5yoiZNeOQL5q9Zmo5Q= -----END CERTIFICATE-----Generated at Sun Jul 12 13:15:25 2026 by rpki-client