$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3230333a3a2f34382d3634203d3e20323136313938.roa File: 323430323a343365303a3230333a3a2f34382d3634203d3e20323136313938.roa (raw, json) Hash identifier: S+iU7Frc3x1pLknr/q2r++M9QmfBtQENR4FkrWH2pOA= Subject key identifier: 5A:39:CA:D7:D2:B9:EB:C3:E1:BE:77:95:70:C9:C6:75:12:79:25:EF Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Certificate serial: 407629F9EDB45F75FA330C84ECE7B810DC8A4884 Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3230333a3a2f34382d3634203d3e20323136313938.roa Signing time: Sun 16 Aug 2026 05:04:00 +0000 ROA not before: Sun 16 Aug 2026 04:59:00 +0000 ROA not after: Sun 15 Aug 2027 05:04:00 +0000 asID: 216198 IP address blocks: 2402:43e0:203::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 10:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:76:29:f9:ed:b4:5f:75:fa:33:0c:84:ec:e7:b8:10:dc:8a:48:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Validity Not Before: Aug 16 04:59:00 2026 GMT Not After : Aug 15 05:04:00 2027 GMT Subject: CN=5A39CAD7D2B9EBC3E1BE779570C9C675127925EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:4a:8d:31:7a:0b:68:16:72:b5:a2:00:32: 36:1b:45:fc:15:18:cf:c9:84:4a:bd:16:d5:a7:4a: 57:f4:9b:6d:0c:ae:b4:5f:63:a0:ac:82:92:90:34: 34:98:61:30:8b:7c:c1:43:5d:cd:8b:02:24:ec:66: a9:57:59:b2:0e:23:42:ee:d3:19:a1:3f:30:63:64: f4:26:7d:a5:b3:c8:48:48:28:61:75:34:bd:c6:23: d1:9a:dc:d8:9c:12:db:10:56:e3:07:1f:cd:94:ef: ca:2f:af:3d:58:b9:6f:74:93:7b:bc:2c:e6:b3:0b: bc:8a:51:5e:c5:0f:99:48:a6:f3:24:18:a4:d9:b2: d7:ba:9e:63:03:e2:58:1b:44:69:54:0c:31:ef:89: df:eb:ee:f5:46:7a:ce:17:46:85:f0:6f:85:e0:43: 59:33:a9:2a:c6:9b:63:ac:ce:5f:e2:9c:0d:a6:a3: b9:dd:ea:9f:1a:4b:47:69:35:b6:b1:21:ee:0b:25: b4:59:a8:7f:71:ce:1e:1f:65:ce:a3:c4:aa:e0:09: 17:bc:65:a7:c2:c1:26:7a:e8:23:87:cb:df:08:69: f5:54:c1:57:8f:be:6b:e8:b3:aa:51:c8:0a:dc:4e: 50:3f:dd:d3:83:67:73:ce:2d:e0:6e:3c:c0:e4:2e: 69:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:39:CA:D7:D2:B9:EB:C3:E1:BE:77:95:70:C9:C6:75:12:79:25:EF X509v3 Authority Key Identifier: keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3230333a3a2f34382d3634203d3e20323136313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:43e0:203::/48 Signature Algorithm: sha256WithRSAEncryption 0d:60:8f:a7:19:ec:d5:99:51:6f:c3:41:49:fc:e8:2d:b0:2e: b8:2e:80:bc:d0:57:cf:7a:1d:4b:57:76:6f:06:b2:72:41:74: 20:f5:a3:0e:19:93:64:b0:ed:2b:8c:96:c0:2f:fd:5b:f6:c3: 91:78:0b:1b:55:bd:a5:b0:13:58:8e:fb:64:35:f6:c4:0d:6e: 5e:35:7d:8d:06:38:35:db:ed:ff:03:d0:00:a5:3e:96:da:68: 58:3e:5d:a1:2e:c8:69:1c:68:bf:e1:9b:dc:fd:ab:5b:fc:8f: d6:97:ec:f6:16:ef:a0:6a:eb:24:95:8f:61:6c:3d:27:71:63: 37:3c:f5:15:91:67:61:fc:37:76:a6:c1:20:52:3a:ed:97:e0: 5a:f4:04:b6:60:1f:a1:1d:1b:fa:7d:b7:c1:ae:c0:d0:d5:b9: 9b:6c:9e:a4:f6:6e:5b:d4:8c:b0:26:14:0c:3b:6a:22:d9:12: d7:5c:d5:39:da:cc:53:50:df:cd:99:3f:2b:93:ef:71:e6:9e: bd:ab:32:b3:e0:74:07:39:85:f2:9b:ca:ba:1b:88:49:db:31: fd:f0:f1:78:ba:7c:69:d9:c0:d6:51:53:4c:75:89:f1:97:9a: aa:32:b8:54:69:58:9b:0f:7e:9e:bb:f2:46:8d:9d:9a:fd:a8: 87:6e:08:19 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUQHYp+e20X3X6MwyE7Oe4ENyKSIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY2QjM0MjdDRDQwM0RFNzBEOTdDRERDQUZBMEJEQkMx NjZDM0U3ODAeFw0yNjA4MTYwNDU5MDBaFw0yNzA4MTUwNTA0MDBaMDMxMTAvBgNV BAMTKDVBMzlDQUQ3RDJCOUVCQzNFMUJFNzc5NTcwQzlDNjc1MTI3OTI1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRHkqNMXoLaBZytaIAMjYbRfwV GM/JhEq9FtWnSlf0m20MrrRfY6CsgpKQNDSYYTCLfMFDXc2LAiTsZqlXWbIOI0Lu 0xmhPzBjZPQmfaWzyEhIKGF1NL3GI9Ga3NicEtsQVuMHH82U78ovrz1YuW90k3u8 LOazC7yKUV7FD5lIpvMkGKTZste6nmMD4lgbRGlUDDHvid/r7vVGes4XRoXwb4Xg Q1kzqSrGm2Oszl/inA2mo7nd6p8aS0dpNbaxIe4LJbRZqH9xzh4fZc6jxKrgCRe8 ZafCwSZ66COHy98IafVUwVePvmvos6pRyArcTlA/3dODZ3POLeBuPMDkLmlDAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUWjnK19K568PhvneVcMnGdRJ5Je8wHwYDVR0j BBgwFoAUD2s0J81APecNl83cr6C9vBZsPngwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMC8wRjZCMzQyN0NENDAzREU3MEQ5N0NERENBRkEwQkRCQzE2NkMzRTc4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzBGNkIzNDI3Q0Q0MDNERTcwRDk3Q0REQ0FG QTBCREJDMTY2QzNFNzguY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuG anJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJORVQvMC8zMjM0MzAz MjNhMzQzMzY1MzAzYTMyMzAzMzNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDMyMzEz NjMxMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQCQ+ACAzANBgkqhkiG9w0BAQsFAAOCAQEADWCP pxns1ZlRb8NBSfzoLbAuuC6AvNBXz3odS1d2bwayckF0IPWjDhmTZLDtK4yWwC/9 W/bDkXgLG1W9pbATWI77ZDX2xA1uXjV9jQY4Ndvt/wPQAKU+ltpoWD5doS7IaRxo v+Gb3P2rW/yP1pfs9hbvoGrrJJWPYWw9J3FjNzz1FZFnYfw3dqbBIFI67ZfgWvQE tmAfoR0b+n23wa7A0NW5m2yepPZuW9SMsCYUDDtqItkS11zVOdrMU1DfzZk/K5Pv ceaevasys+B0BzmF8pvKuhuISdsx/fDxeLp8adnA1lFTTHWJ8ZeaqjK4VGlYmw9+ nrvyRo2dmv2oh24IGQ== -----END CERTIFICATE-----Generated at Sat Sep 5 03:13:42 2026 by rpki-client