$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20323032373336.roa File: 3136322e342e3233362e302f32342d3234203d3e20323032373336.roa (raw, json) Hash identifier: rqIFLfCYjTacr84/afinxLOCwaaiUV1aCFWFsa89OVU= Subject key identifier: E3:20:2B:EE:2C:B5:F9:C5:EF:2D:41:38:0E:89:5D:C9:69:F8:1D:13 Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 3393339AEE2E1FB9F599BDD4B2F7BBA51894F9E8 Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20323032373336.roa Signing time: Thu 27 Aug 2026 17:24:05 +0000 ROA not before: Thu 27 Aug 2026 17:19:05 +0000 ROA not after: Thu 26 Aug 2027 17:24:05 +0000 asID: 202736 IP address blocks: 162.4.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 18:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:93:33:9a:ee:2e:1f:b9:f5:99:bd:d4:b2:f7:bb:a5:18:94:f9:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Aug 27 17:19:05 2026 GMT Not After : Aug 26 17:24:05 2027 GMT Subject: CN=E3202BEE2CB5F9C5EF2D41380E895DC969F81D13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1e:53:e9:3d:2c:eb:61:30:10:b7:f9:92:6b: 33:31:fd:cf:69:48:cd:57:0a:f8:b5:2a:88:ea:6a: a5:d6:67:a8:39:d3:97:79:2b:61:7a:86:44:8f:b3: 33:14:0e:ff:c3:28:9d:9a:78:ef:8b:a7:ed:3d:48: 43:13:eb:1c:47:f4:e6:9d:42:38:07:ac:40:94:1f: 7f:7f:d0:47:0f:b6:0a:da:72:2a:97:61:df:63:d0: f4:c5:61:5f:a5:e5:73:be:e9:3c:60:60:43:cb:17: 23:05:b2:5e:fb:01:e5:64:89:f4:0a:b5:8e:0a:77: 0a:82:ac:95:8d:41:49:a2:ae:5d:00:ef:9d:8d:73: dc:e8:a8:fe:90:03:2b:fc:01:c0:4d:98:3f:98:06: 52:84:76:ec:da:21:c7:a1:53:8c:1f:ab:dd:f9:9a: 10:3a:2f:6a:86:5c:e1:82:44:43:b5:97:c8:e4:60: 47:bc:fc:70:1d:ba:4a:68:02:78:ff:48:d7:49:0a: a0:d4:05:58:11:43:50:b3:d7:86:7a:e3:3f:cc:16: 2d:67:6f:05:19:0b:d8:46:55:05:97:b7:1f:b2:bc: b5:4f:40:b1:6b:82:38:bd:de:8f:dd:44:48:0c:e8: 24:86:06:4a:e4:27:73:6e:d8:22:db:41:37:ad:95: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:20:2B:EE:2C:B5:F9:C5:EF:2D:41:38:0E:89:5D:C9:69:F8:1D:13 X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20323032373336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.236.0/24 Signature Algorithm: sha256WithRSAEncryption 24:f5:88:35:f6:f7:09:5a:8d:58:81:b9:08:fd:2f:26:a8:e4: 62:a1:90:ca:3d:65:d8:42:6b:3c:90:9c:1a:2e:9a:84:f1:fd: 86:eb:a2:80:27:68:40:d3:f1:d4:77:34:4d:8c:5f:36:a3:e1: e2:b8:08:ff:b9:84:0b:4b:3b:ce:8b:d3:91:fe:c0:7c:b7:d0: c2:e0:7a:67:95:83:e0:71:61:e3:f5:c1:2b:19:02:b3:1c:4f: c7:16:16:f6:60:cd:a3:a6:58:62:45:be:80:16:d8:cc:f2:af: 8a:37:1a:f2:ed:14:ea:62:08:3b:5f:7c:8a:72:42:c4:89:10: c7:06:bc:43:db:f0:fb:23:6d:17:2b:0d:3b:f4:99:e5:81:22: 22:20:0c:83:5e:8c:3b:a2:85:eb:1e:20:88:5f:3c:f7:56:ce: ef:7d:07:10:9d:ce:5e:15:0d:4d:b8:b2:ce:ae:cf:ef:4c:dd: 45:b4:f5:99:60:ff:ff:88:7f:27:6f:d5:b0:37:65:34:ca:fe: 09:60:d2:0f:b0:f7:a1:9e:0c:32:7f:c9:fa:05:98:52:f5:30: 57:51:ad:f5:f5:46:51:51:40:6a:d7:29:fa:87:91:8b:86:6c: df:b2:9a:83:03:bb:44:e3:6d:e4:73:0d:8d:b3:f3:cc:51:42: 21:54:d6:d2 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUM5Mzmu4uH7n1mb3Usve7pRiU+egwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjA4MjcxNzE5MDVaFw0yNzA4MjYxNzI0MDVaMDMxMTAvBgNV BAMTKEUzMjAyQkVFMkNCNUY5QzVFRjJENDEzODBFODk1REM5NjlGODFEMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYHlPpPSzrYTAQt/mSazMx/c9p SM1XCvi1KojqaqXWZ6g505d5K2F6hkSPszMUDv/DKJ2aeO+Lp+09SEMT6xxH9Oad QjgHrECUH39/0EcPtgraciqXYd9j0PTFYV+l5XO+6TxgYEPLFyMFsl77AeVkifQK tY4KdwqCrJWNQUmirl0A752Nc9zoqP6QAyv8AcBNmD+YBlKEduzaIcehU4wfq935 mhA6L2qGXOGCREO1l8jkYEe8/HAdukpoAnj/SNdJCqDUBVgRQ1Cz14Z64z/MFi1n bwUZC9hGVQWXtx+yvLVPQLFrgji93o/dREgM6CSGBkrkJ3Nu2CLbQTetlTR7AgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQU4yAr7iy1+cXvLUE4DoldyWn4HRMwHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvMzEzNjMyMmUzNDJl MzIzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMyMzczMzM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogTsMA0GCSqGSIb3DQEBCwUAA4IBAQAk9Yg19vcJWo1YgbkI/S8mqORi oZDKPWXYQms8kJwaLpqE8f2G66KAJ2hA0/HUdzRNjF82o+HiuAj/uYQLSzvOi9OR /sB8t9DC4HpnlYPgcWHj9cErGQKzHE/HFhb2YM2jplhiRb6AFtjM8q+KNxry7RTq Ygg7X3yKckLEiRDHBrxD2/D7I20XKw079JnlgSIiIAyDXow7ooXrHiCIXzz3Vs7v fQcQnc5eFQ1NuLLOrs/vTN1FtPWZYP//iH8nb9WwN2U0yv4JYNIPsPehngwyf8n6 BZhS9TBXUa319UZRUUBq1yn6h5GLhmzfspqDA7tE423kcw2Ns/PMUUIhVNbS -----END CERTIFICATE-----Generated at Sat Sep 19 04:47:41 2026 by rpki-client