$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233362e302f32342d3234203d3e203138303430.roa File: 3134342e37392e3233362e302f32342d3234203d3e203138303430.roa (raw, json) Hash identifier: ZudjpagHov1aZlrdTbsVSXtYt3YeCsmSW4h5XCZ/uzs= Subject key identifier: A8:2A:2F:13:4E:A3:C4:92:69:B3:2F:CB:8D:AB:FC:54:A5:24:0F:1F Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Certificate serial: 0F0195487D3E46C92D1733A0CAE49459E9F90141 Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233362e302f32342d3234203d3e203138303430.roa Signing time: Sat 20 Jun 2026 11:43:49 +0000 ROA not before: Sat 20 Jun 2026 11:38:49 +0000 ROA not after: Sat 19 Jun 2027 11:43:49 +0000 asID: 18040 IP address blocks: 144.79.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 11:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:01:95:48:7d:3e:46:c9:2d:17:33:a0:ca:e4:94:59:e9:f9:01:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Validity Not Before: Jun 20 11:38:49 2026 GMT Not After : Jun 19 11:43:49 2027 GMT Subject: CN=A82A2F134EA3C49269B32FCB8DABFC54A5240F1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:b5:1e:77:ad:9c:3b:15:25:e8:d2:b9:30: 4e:a0:f8:eb:bc:5b:cf:3f:d1:8a:dc:11:73:65:fc: 76:b6:82:3e:5e:c6:34:fd:36:d4:ab:ef:35:a3:d6: df:a3:73:c2:15:84:50:df:e7:44:69:ad:07:58:ae: c6:9a:38:37:e8:97:53:a8:91:06:54:ff:b5:a3:5a: 10:8d:98:b6:4b:2a:d3:40:07:50:6f:dc:f6:11:f1: 16:66:27:d1:ef:5c:91:cd:73:e4:0a:66:89:43:0f: 49:f2:c3:c1:60:cc:ea:49:6d:e9:b5:31:71:7c:25: 11:3f:32:2a:15:35:22:8b:51:5a:f5:1b:09:72:58: ef:93:5b:3d:dd:a7:12:76:45:47:a1:80:8a:72:42: 52:ec:ea:f2:10:bc:87:63:38:2b:00:2b:57:07:de: 6f:8a:91:03:d9:8a:91:1a:58:48:e0:14:98:b3:1a: 05:37:04:0b:aa:b1:42:9d:36:f1:6d:da:ef:d4:03: 07:8f:b5:d4:1a:3d:ee:22:86:4f:02:97:04:db:ce: 03:7d:62:bf:ee:e2:ce:ac:fa:fc:a1:29:06:1f:c7: 3d:93:65:d0:17:66:42:f1:44:09:92:18:bc:f2:c5: 55:07:4e:ee:28:11:37:4e:92:fd:53:4f:1a:cf:e4: a4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2A:2F:13:4E:A3:C4:92:69:B3:2F:CB:8D:AB:FC:54:A5:24:0F:1F X509v3 Authority Key Identifier: keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233362e302f32342d3234203d3e203138303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.236.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:d0:18:7c:e6:e8:5e:68:d7:19:f8:0d:aa:d1:69:57:55:88: 61:fc:cf:f3:a6:b4:2d:0c:db:d1:4a:37:f2:32:cf:c9:3b:93: 2d:f8:dd:d5:e3:e7:09:5d:43:22:5c:6c:9d:b6:b0:dd:8e:f4: 0e:83:21:d0:a9:2f:a4:1f:e6:d2:14:45:9c:f2:e1:75:8a:33: cf:2b:e5:57:40:fa:2f:b0:3e:1b:da:6a:3a:21:b5:59:23:92: fc:d0:78:58:36:f7:01:35:bf:f9:a2:e9:37:d2:75:b0:fb:15: ed:12:19:bc:aa:17:59:91:1b:f3:e1:62:3c:ef:75:0d:51:7f: fd:f1:1f:2d:d3:a8:c7:ed:17:bf:eb:74:ef:1c:16:0a:cc:d4: 04:c4:28:54:46:7b:4b:8b:43:9f:ba:21:a6:7e:4d:5a:9b:be: 7e:21:8d:ec:c2:42:00:64:ef:0c:ac:0c:47:d1:c1:de:f2:ff: ba:dc:84:33:a5:53:ef:96:ed:a7:a3:0e:58:d0:21:3e:10:fa: a2:df:be:ea:cc:01:7e:dd:c5:14:63:ef:1f:93:85:c6:12:82: 9a:6e:50:cb:3b:48:dd:21:3a:bc:c8:33:2c:f9:de:ac:f3:ab: d0:b9:62:31:9f:82:2d:7b:7c:04:14:ac:a8:7b:88:4a:91:19: fb:0d:83:0f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUDwGVSH0+RsktFzOgyuSUWen5AUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0ODdCNTBDNUVDRDNC NkRFMjM0QzAeFw0yNjA2MjAxMTM4NDlaFw0yNzA2MTkxMTQzNDlaMDMxMTAvBgNV BAMTKEE4MkEyRjEzNEVBM0M0OTI2OUIzMkZDQjhEQUJGQzU0QTUyNDBGMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHd7Ued62cOxUl6NK5ME6g+Ou8 W88/0YrcEXNl/Ha2gj5exjT9NtSr7zWj1t+jc8IVhFDf50RprQdYrsaaODfol1Oo kQZU/7WjWhCNmLZLKtNAB1Bv3PYR8RZmJ9HvXJHNc+QKZolDD0nyw8FgzOpJbem1 MXF8JRE/MioVNSKLUVr1GwlyWO+TWz3dpxJ2RUehgIpyQlLs6vIQvIdjOCsAK1cH 3m+KkQPZipEaWEjgFJizGgU3BAuqsUKdNvFt2u/UAwePtdQaPe4ihk8ClwTbzgN9 Yr/u4s6s+vyhKQYfxz2TZdAXZkLxRAmSGLzyxVUHTu4oETdOkv1TTxrP5KRFAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUqCovE06jxJJpsy/Ljav8VKUkDx8wHwYDVR0j BBgwFoAU2+BqX8Wl4oms60h7UMXs07beI0wwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMS9EQkUwNkE1RkM1QTVFMjg5QUNFQjQ4N0I1MEM1RUNEM0I2REUyMzRDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUw QzVFQ0QzQjZERTIzNEMuY2VyMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4Zi cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8xLzMxMzQzNDJl MzczOTJlMzIzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMwMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBP7DANBgkqhkiG9w0BAQsFAAOCAQEAP9AYfOboXmjXGfgNqtFp V1WIYfzP86a0LQzb0Uo38jLPyTuTLfjd1ePnCV1DIlxsnbaw3Y70DoMh0KkvpB/m 0hRFnPLhdYozzyvlV0D6L7A+G9pqOiG1WSOS/NB4WDb3ATW/+aLpN9J1sPsV7RIZ vKoXWZEb8+FiPO91DVF//fEfLdOox+0Xv+t07xwWCszUBMQoVEZ7S4tDn7ohpn5N Wpu+fiGN7MJCAGTvDKwMR9HB3vL/utyEM6VT75btp6MOWNAhPhD6ot++6swBft3F FGPvH5OFxhKCmm5QyztI3SE6vMgzLPnerPOr0LliMZ+CLXt8BBSsqHuISpEZ+w2D Dw== -----END CERTIFICATE-----Generated at Tue Jun 30 14:13:16 2026 by rpki-client