$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a31303a3a2f34342d3634203d3e20313532363132.roa File: 323430323a343365303a31303a3a2f34342d3634203d3e20313532363132.roa (raw, json) Hash identifier: lDz21sk+HjJvsKfvooG9B77bRHOXmfNNesRAHR9pwbs= Subject key identifier: 92:E9:B4:86:3F:B6:25:C2:EE:69:13:0A:E8:B3:F6:60:81:36:56:EB Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Certificate serial: 759CDE287DBD6613EE106E30F10C8E87923E700A Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a31303a3a2f34342d3634203d3e20313532363132.roa Signing time: Mon 11 May 2026 17:58:42 +0000 ROA not before: Mon 11 May 2026 17:53:42 +0000 ROA not after: Mon 10 May 2027 17:58:42 +0000 asID: 152612 IP address blocks: 2402:43e0:10::/44 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:9c:de:28:7d:bd:66:13:ee:10:6e:30:f1:0c:8e:87:92:3e:70:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Validity Not Before: May 11 17:53:42 2026 GMT Not After : May 10 17:58:42 2027 GMT Subject: CN=92E9B4863FB625C2EE69130AE8B3F660813656EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:52:94:b4:44:0d:13:3e:1a:cb:eb:06:69: 37:b3:1c:63:52:f2:ed:3d:c7:55:7d:67:51:5c:6a: b9:59:45:ef:15:a9:fb:45:84:fe:8d:5a:d0:2d:3b: 59:a1:74:da:0f:f9:07:43:b4:bc:2e:e1:8b:97:43: 7f:ff:75:46:e2:e5:c8:a3:39:84:ca:0d:19:fb:c3: 69:6c:93:3d:b7:48:a8:88:18:1d:7c:2a:42:9c:6d: d3:d1:13:7d:6d:d6:b9:b5:03:f9:12:52:95:92:29: 74:92:37:95:08:5d:19:c2:cb:6d:f3:97:2e:d0:f9: a1:2c:c5:66:12:33:3e:a6:22:9a:4d:5f:d8:c7:ff: b0:02:83:bd:c7:22:ca:de:ff:9c:76:8c:4c:95:1a: fa:50:a8:0f:af:dc:ec:ba:9b:af:8c:dc:3a:e8:9f: b9:42:74:a8:9d:69:54:ac:a2:7a:f4:99:67:f8:42: 61:dd:18:81:57:03:ed:1a:94:8d:15:1f:14:3a:55: 43:af:4d:eb:02:3b:d1:8d:9d:88:60:0a:87:45:3e: 1e:07:55:b2:f8:27:9e:f4:e8:cb:ed:b3:51:e8:17: 8c:9b:a2:98:fb:ad:4f:1f:01:fd:3c:f4:a5:24:ba: d8:b8:9f:19:b1:f5:ed:78:b3:5f:f6:f4:e9:2f:df: 45:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E9:B4:86:3F:B6:25:C2:EE:69:13:0A:E8:B3:F6:60:81:36:56:EB X509v3 Authority Key Identifier: keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a31303a3a2f34342d3634203d3e20313532363132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:43e0:10::/44 Signature Algorithm: sha256WithRSAEncryption b2:01:b2:73:35:16:d4:ff:fd:5e:c2:b5:64:af:8e:f9:3f:5b: 71:c2:dc:f6:f9:3f:c1:f8:91:41:35:f3:4a:a4:4e:0c:eb:fa: 26:51:bb:4f:ca:23:64:ef:b5:9d:de:ef:cf:0c:4e:1c:a8:24: cc:c2:5b:22:c7:34:fc:bc:fc:34:89:fe:aa:18:4d:e1:24:47: f1:07:cd:ad:5e:b0:92:e3:45:69:92:ab:79:da:21:51:d1:22: 06:16:59:0d:ab:52:5e:bc:d1:e1:66:4b:ac:45:02:b0:52:0f: 7e:b9:43:ca:f2:90:48:60:2d:6d:35:f3:c7:a4:78:cc:b2:d7: 7e:17:56:05:f9:f3:3c:11:0b:83:5a:c8:90:f3:59:9f:28:a0: 76:c4:cc:e2:03:bd:02:ae:cf:b3:87:5b:03:1a:35:c5:9f:45: ab:52:5e:b5:92:40:a9:a4:2a:8a:3c:b1:2c:e6:cb:4b:87:1c: 92:2f:e4:a0:1d:6c:7e:91:ce:c8:e2:fd:0f:28:08:c6:b8:dc: 6f:82:ed:22:f0:e6:8b:94:c4:2d:cc:23:cd:d7:58:9d:27:68: 98:07:f0:4c:db:f6:57:61:00:ed:63:cc:5b:e8:6f:5a:1a:05: 10:a7:e0:b2:be:9b:79:96:5d:4d:c9:64:33:76:d0:bd:21:45: 37:73:de:f2 -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIUdZzeKH29ZhPuEG4w8QyOh5I+cAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY2QjM0MjdDRDQwM0RFNzBEOTdDRERDQUZBMEJEQkMx NjZDM0U3ODAeFw0yNjA1MTExNzUzNDJaFw0yNzA1MTAxNzU4NDJaMDMxMTAvBgNV BAMTKDkyRTlCNDg2M0ZCNjI1QzJFRTY5MTMwQUU4QjNGNjYwODEzNjU2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrf1KUtEQNEz4ay+sGaTezHGNS 8u09x1V9Z1FcarlZRe8VqftFhP6NWtAtO1mhdNoP+QdDtLwu4YuXQ3//dUbi5cij OYTKDRn7w2lskz23SKiIGB18KkKcbdPRE31t1rm1A/kSUpWSKXSSN5UIXRnCy23z ly7Q+aEsxWYSMz6mIppNX9jH/7ACg73HIsre/5x2jEyVGvpQqA+v3Oy6m6+M3Dro n7lCdKidaVSsonr0mWf4QmHdGIFXA+0alI0VHxQ6VUOvTesCO9GNnYhgCodFPh4H VbL4J5706Mvts1HoF4ybopj7rU8fAf089KUkuti4nxmx9e14s1/29Okv30WbAgMB AAGjggHxMIIB7TAdBgNVHQ4EFgQUkum0hj+2JcLuaRMK6LP2YIE2VuswHwYDVR0j BBgwFoAUD2s0J81APecNl83cr6C9vBZsPngwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMC8wRjZCMzQyN0NENDAzREU3MEQ5N0NERENBRkEwQkRCQzE2NkMzRTc4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzBGNkIzNDI3Q0Q0MDNERTcwRDk3Q0REQ0FG QTBCREJDMTY2QzNFNzguY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYIKwYBBQUHMAuG aHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJORVQvMC8zMjM0MzAz MjNhMzQzMzY1MzAzYTMxMzAzYTNhMmYzNDM0MmQzNjM0MjAzZDNlMjAzMTM1MzIz NjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwQkAkPgABAwDQYJKoZIhvcNAQELBQADggEBALIBsnM1 FtT//V7CtWSvjvk/W3HC3Pb5P8H4kUE180qkTgzr+iZRu0/KI2TvtZ3e788MThyo JMzCWyLHNPy8/DSJ/qoYTeEkR/EHza1esJLjRWmSq3naIVHRIgYWWQ2rUl680eFm S6xFArBSD365Q8rykEhgLW0188ekeMyy134XVgX58zwRC4NayJDzWZ8ooHbEzOID vQKuz7OHWwMaNcWfRatSXrWSQKmkKoo8sSzmy0uHHJIv5KAdbH6Rzsji/Q8oCMa4 3G+C7SLw5ouUxC3MI83XWJ0naJgH8Ezb9ldhAO1jzFvob1oaBRCn4LK+m3mWXU3J ZDN20L0hRTdz3vI= -----END CERTIFICATE-----Generated at Wed May 13 21:51:41 2026 by rpki-client