$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a656565653a3a2f34382d3634203d3e203138303430.roa File: 323430323a343365303a656565653a3a2f34382d3634203d3e203138303430.roa (raw, json) Hash identifier: 6oEzbEUbwWVxil5FL4o7ldZcZdzNFDbPy4bkIGRV9mQ= Subject key identifier: 2B:AB:F4:97:FD:EA:36:3C:53:13:54:47:58:D9:F0:F5:B6:F5:BC:8E Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Certificate serial: 78AB699888FE3909857D8BD465BA86F1997BC6B5 Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a656565653a3a2f34382d3634203d3e203138303430.roa Signing time: Mon 11 May 2026 17:59:07 +0000 ROA not before: Mon 11 May 2026 17:54:07 +0000 ROA not after: Mon 10 May 2027 17:59:07 +0000 asID: 18040 IP address blocks: 2402:43e0:eeee::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ab:69:98:88:fe:39:09:85:7d:8b:d4:65:ba:86:f1:99:7b:c6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Validity Not Before: May 11 17:54:07 2026 GMT Not After : May 10 17:59:07 2027 GMT Subject: CN=2BABF497FDEA363C5313544758D9F0F5B6F5BC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:30:ca:35:32:67:60:20:ac:9a:fe:d3:5d:46: 13:99:cb:94:13:4e:25:ee:f7:d8:c9:48:22:07:16: 2a:34:57:2c:61:1d:f7:75:9b:e0:4b:a0:28:9f:7e: 8f:fa:c3:1a:09:55:bb:51:7f:51:82:2a:00:8e:02: 4a:18:a6:f3:2f:2f:de:cb:f5:f4:c3:22:2f:cd:62: 3d:f3:54:9d:37:7d:14:55:53:22:aa:ec:06:1a:e0: ee:b8:7b:f2:a2:11:a1:14:62:e6:c5:a4:0c:0b:d6: 27:dd:ea:ad:79:87:04:51:3a:73:10:bd:88:86:d2: 11:43:0b:41:93:f7:17:4f:6d:ea:b9:2b:f6:86:48: 82:ee:10:60:d4:2b:ee:c0:d9:b8:0c:7f:a2:b9:e5: 70:2e:6c:94:92:c3:3f:db:69:8d:c3:e8:c9:68:57: 5d:24:23:bd:a4:54:40:ba:e3:f7:d5:34:3b:da:d2: 85:fa:ae:88:58:75:35:bf:27:9d:fc:c5:64:b7:67: 9d:46:c6:a4:29:85:ce:4a:e7:bd:31:d7:30:68:3b: 26:a4:f9:89:93:9c:0d:c5:74:89:8b:86:3b:c6:7c: e7:ba:47:a1:6a:83:c2:ac:c7:35:2c:1f:7b:07:4e: 6f:b6:a1:a4:dc:5b:af:80:23:07:bf:72:d5:16:20: 25:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AB:F4:97:FD:EA:36:3C:53:13:54:47:58:D9:F0:F5:B6:F5:BC:8E X509v3 Authority Key Identifier: keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a656565653a3a2f34382d3634203d3e203138303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:43e0:eeee::/48 Signature Algorithm: sha256WithRSAEncryption c1:3f:f7:ed:01:2d:ba:bf:a4:cf:05:73:76:d2:7e:7d:a5:c1: 1f:01:80:b4:12:1e:f4:50:f8:be:8d:74:b3:13:b3:ad:f4:2a: 44:28:68:de:58:7b:b9:9b:eb:36:2d:90:f7:8d:aa:8a:b6:93: 9c:b0:c2:5c:5e:89:b5:00:52:05:c4:64:95:6a:48:64:2f:f6: d5:2b:96:9a:b4:2e:80:26:93:de:7e:b0:0a:54:b6:43:00:40: 5a:3b:99:fe:19:ab:6f:b0:66:1c:a0:8b:fd:e5:97:ae:f7:a5: 9e:17:83:61:56:e7:95:ce:f6:bf:5c:4f:28:56:3c:5b:b5:f3: 30:9d:96:88:5f:41:54:db:af:5c:d6:10:b4:dc:db:58:19:60: 21:53:23:24:fd:76:be:35:c1:f9:76:fb:cf:7c:63:61:8f:a3: 62:b5:39:be:cd:6c:ba:22:92:ad:7e:d2:2d:06:73:4a:51:dc: 5f:c8:4c:6b:70:f7:6d:48:88:39:5b:12:6b:52:7f:0a:0e:58: 44:f6:77:7f:37:7e:06:a7:42:95:7b:5b:cf:77:ac:3a:9e:cd: 80:5a:42:85:72:43:1b:6f:97:e7:8c:97:f6:8f:c4:e0:42:98: 25:68:33:fa:13:7f:16:20:fb:65:b6:cb:b0:89:bd:d9:d9:9d: c7:98:10:a1 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUeKtpmIj+OQmFfYvUZbqG8Zl7xrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY2QjM0MjdDRDQwM0RFNzBEOTdDRERDQUZBMEJEQkMx NjZDM0U3ODAeFw0yNjA1MTExNzU0MDdaFw0yNzA1MTAxNzU5MDdaMDMxMTAvBgNV BAMTKDJCQUJGNDk3RkRFQTM2M0M1MzEzNTQ0NzU4RDlGMEY1QjZGNUJDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+MMo1MmdgIKya/tNdRhOZy5QT TiXu99jJSCIHFio0VyxhHfd1m+BLoCiffo/6wxoJVbtRf1GCKgCOAkoYpvMvL97L 9fTDIi/NYj3zVJ03fRRVUyKq7AYa4O64e/KiEaEUYubFpAwL1ifd6q15hwRROnMQ vYiG0hFDC0GT9xdPbeq5K/aGSILuEGDUK+7A2bgMf6K55XAubJSSwz/baY3D6Mlo V10kI72kVEC64/fVNDva0oX6rohYdTW/J538xWS3Z51GxqQphc5K570x1zBoOyak +YmTnA3FdImLhjvGfOe6R6Fqg8KsxzUsH3sHTm+2oaTcW6+AIwe/ctUWICWZAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUK6v0l/3qNjxTE1RHWNnw9bb1vI4wHwYDVR0j BBgwFoAUD2s0J81APecNl83cr6C9vBZsPngwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMC8wRjZCMzQyN0NENDAzREU3MEQ5N0NERENBRkEwQkRCQzE2NkMzRTc4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzBGNkIzNDI3Q0Q0MDNERTcwRDk3Q0REQ0FG QTBCREJDMTY2QzNFNzguY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuG anJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJORVQvMC8zMjM0MzAz MjNhMzQzMzY1MzAzYTY1NjU2NTY1M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEz ODMwMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQCQ+Du7jANBgkqhkiG9w0BAQsFAAOCAQEAwT/3 7QEtur+kzwVzdtJ+faXBHwGAtBIe9FD4vo10sxOzrfQqRCho3lh7uZvrNi2Q942q iraTnLDCXF6JtQBSBcRklWpIZC/21SuWmrQugCaT3n6wClS2QwBAWjuZ/hmrb7Bm HKCL/eWXrvelnheDYVbnlc72v1xPKFY8W7XzMJ2WiF9BVNuvXNYQtNzbWBlgIVMj JP12vjXB+Xb7z3xjYY+jYrU5vs1suiKSrX7SLQZzSlHcX8hMa3D3bUiIOVsSa1J/ Cg5YRPZ3fzd+BqdClXtbz3esOp7NgFpChXJDG2+X54yX9o/E4EKYJWgz+hN/FiD7 ZbbLsIm92dmdx5gQoQ== -----END CERTIFICATE-----Generated at Wed May 13 21:11:24 2026 by rpki-client