$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233372e302f32342d3234203d3e20313331363531.roa File: 3136322e342e3233372e302f32342d3234203d3e20313331363531.roa (raw, json) Hash identifier: tMr8ixZh2K6SpaPqReDJg4BecbXaqw7Rmztiq3kVMJk= Subject key identifier: AE:E5:C4:86:05:3A:7F:18:D4:FE:0D:B7:F3:86:D5:30:32:00:9E:7F Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 31EBA604C671B5BC7A62D889B71427C4E7E4E788 Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233372e302f32342d3234203d3e20313331363531.roa Signing time: Mon 31 Aug 2026 18:04:00 +0000 ROA not before: Mon 31 Aug 2026 17:59:00 +0000 ROA not after: Mon 30 Aug 2027 18:04:00 +0000 asID: 131651 IP address blocks: 162.4.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 18:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:eb:a6:04:c6:71:b5:bc:7a:62:d8:89:b7:14:27:c4:e7:e4:e7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Aug 31 17:59:00 2026 GMT Not After : Aug 30 18:04:00 2027 GMT Subject: CN=AEE5C486053A7F18D4FE0DB7F386D53032009E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:80:a4:86:ae:4d:92:ab:76:96:28:9f:b6:07: 9a:58:9f:55:dd:74:8d:40:94:91:b7:b3:81:66:79: 12:af:1a:56:25:a4:f5:a8:29:ed:55:f4:ba:ae:b7: a1:e6:2a:1c:a9:e8:c4:91:49:e5:c2:75:38:f9:fb: 47:10:ae:58:73:b5:8f:c3:64:0f:24:6e:47:35:6a: d4:f8:fd:d5:d4:ba:dd:e1:28:ae:4d:51:c6:bc:b4: 16:a1:af:46:8f:53:b2:5a:db:9d:d2:90:d9:9e:e6: f8:70:c8:06:1a:25:53:1d:c0:33:33:bb:20:33:40: b9:1b:a2:aa:e5:a5:26:4b:c3:71:36:40:00:fa:7f: b8:2d:5d:63:eb:dc:15:9b:ad:2b:80:56:92:22:55: 65:93:42:20:04:12:e1:05:bc:b8:bd:2a:28:83:7a: 46:f4:50:22:7d:4a:2b:1f:1b:03:d2:d2:11:0c:06: 4e:6f:76:a3:8d:2f:53:a1:a3:e8:5f:e4:23:98:7a: 83:1a:99:c3:fb:25:c1:20:45:b1:d4:0e:6c:f6:91: e0:37:12:0c:9b:43:47:1b:97:cb:29:53:e0:e2:56: 4a:c2:96:14:60:8f:ee:53:b8:42:3b:2c:e8:60:af: 33:4c:fd:bd:c4:2f:3b:15:63:c2:a1:14:64:3e:30: b1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E5:C4:86:05:3A:7F:18:D4:FE:0D:B7:F3:86:D5:30:32:00:9E:7F X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233372e302f32342d3234203d3e20313331363531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.237.0/24 Signature Algorithm: sha256WithRSAEncryption d1:12:83:2e:7b:5c:9a:59:68:63:0a:1a:b7:5a:8f:78:21:a3: 19:b0:15:17:83:74:b8:3a:7e:bc:92:c0:d6:02:ee:fe:8c:fc: f8:7c:54:06:ae:a6:3c:35:23:e7:de:01:72:f4:43:97:2b:8b: 6c:8f:2d:9e:de:d7:b4:0e:19:96:f0:09:f1:75:ae:9d:1b:a7: ab:c4:da:37:d7:09:a2:aa:e8:fd:30:2b:14:fb:87:96:63:05: 76:11:2c:9b:65:59:ba:9e:dc:41:ea:e2:d2:19:c4:46:83:1a: 00:96:4f:06:f4:ab:68:d5:58:9a:3e:ee:d6:7a:8d:44:55:aa: f2:65:92:d0:4a:c4:d8:28:86:c2:d3:68:31:5a:db:eb:d8:b3: 2c:c7:de:72:8b:c1:49:1d:87:41:80:6e:48:86:34:bd:83:fd: 11:d7:bc:09:b7:f3:86:0f:f9:c8:24:0b:6e:0d:01:01:b5:02: 72:15:02:4c:3b:92:26:08:a7:7b:a9:4c:cf:87:7d:bb:61:f8: ae:bc:bb:2f:3b:60:e4:9b:3e:73:85:3e:70:59:fa:96:b2:85: d5:f8:97:21:5f:29:1e:92:ca:7c:9e:b8:31:36:1c:bf:0f:07: 4d:4b:bb:ee:86:a6:5e:b1:b3:72:04:d7:2e:ae:4d:22:c6:05: 92:d5:81:37 -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUMeumBMZxtbx6YtiJtxQnxOfk54gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjA4MzExNzU5MDBaFw0yNzA4MzAxODA0MDBaMDMxMTAvBgNV BAMTKEFFRTVDNDg2MDUzQTdGMThENEZFMERCN0YzODZENTMwMzIwMDlFN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgKSGrk2Sq3aWKJ+2B5pYn1Xd dI1AlJG3s4FmeRKvGlYlpPWoKe1V9Lqut6HmKhyp6MSRSeXCdTj5+0cQrlhztY/D ZA8kbkc1atT4/dXUut3hKK5NUca8tBahr0aPU7Ja253SkNme5vhwyAYaJVMdwDMz uyAzQLkboqrlpSZLw3E2QAD6f7gtXWPr3BWbrSuAVpIiVWWTQiAEEuEFvLi9KiiD ekb0UCJ9SisfGwPS0hEMBk5vdqONL1Oho+hf5COYeoMamcP7JcEgRbHUDmz2keA3 EgybQ0cbl8spU+DiVkrClhRgj+5TuEI7LOhgrzNM/b3ELzsVY8KhFGQ+MLGxAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUruXEhgU6fxjU/g2384bVMDIAnn8wHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvMzEzNjMyMmUzNDJl MzIzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzMxMzYzNTMxLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogTtMA0GCSqGSIb3DQEBCwUAA4IBAQDREoMue1yaWWhjChq3Wo94IaMZ sBUXg3S4On68ksDWAu7+jPz4fFQGrqY8NSPn3gFy9EOXK4tsjy2e3te0DhmW8Anx da6dG6erxNo31wmiquj9MCsU+4eWYwV2ESybZVm6ntxB6uLSGcRGgxoAlk8G9Kto 1ViaPu7Weo1EVaryZZLQSsTYKIbC02gxWtvr2LMsx95yi8FJHYdBgG5IhjS9g/0R 17wJt/OGD/nIJAtuDQEBtQJyFQJMO5ImCKd7qUzPh327YfiuvLsvO2Dkmz5zhT5w WfqWsoXV+JchXykeksp8nrgxNhy/DwdNS7vuhqZesbNyBNcurk0ixgWS1YE3 -----END CERTIFICATE-----Generated at Sat Sep 19 04:46:33 2026 by rpki-client