$ rpki-client -vvvf rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233372e302f32342d3234203d3e20323034383434.roa File: 3136322e342e3233372e302f32342d3234203d3e20323034383434.roa (raw, json) Hash identifier: zY07qsBW6jQWwXSeyJT/a/KdjcX7kqx0lKHP7Wz8JC8= Subject key identifier: 1B:7B:69:FD:01:64:34:77:F1:52:DA:43:C0:AD:04:44:29:7F:E5:21 Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 58212692B5E606FDC25D7FEE0FF2BD08B8E58F98 Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233372e302f32342d3234203d3e20323034383434.roa Signing time: Wed 30 Sep 2026 14:24:02 +0000 ROA not before: Wed 30 Sep 2026 14:19:02 +0000 ROA not after: Wed 29 Sep 2027 14:24:02 +0000 asID: 204844 IP address blocks: 162.4.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 17:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:21:26:92:b5:e6:06:fd:c2:5d:7f:ee:0f:f2:bd:08:b8:e5:8f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Sep 30 14:19:02 2026 GMT Not After : Sep 29 14:24:02 2027 GMT Subject: CN=1B7B69FD01643477F152DA43C0AD0444297FE521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:42:b1:27:30:2f:59:03:bd:44:f2:82:0b:e0: 7f:13:40:e6:e9:ae:d9:e7:53:3a:66:12:e4:50:4a: 91:a8:e2:14:ac:70:93:0f:85:2e:86:b0:4e:06:92: 76:3d:8a:0a:96:c8:a2:f1:b9:48:e3:3a:ab:a2:36: 02:bd:9f:46:16:42:d2:10:0e:f7:28:08:1a:53:16: 95:5a:52:c8:61:a8:0c:2c:0a:f8:76:24:57:ba:d9: 4e:e2:7f:50:b4:b0:ba:95:33:e9:1f:9f:c3:0d:a7: 79:23:00:55:ca:04:f8:cc:bb:d9:d6:8f:fd:21:25: 3a:6a:3f:0c:90:4e:b9:ca:98:ae:2f:ea:e5:23:4d: 69:b8:42:bf:90:2b:3b:49:a5:18:3e:b7:7a:f6:cb: 5c:51:3a:c5:d3:49:30:52:4a:8d:0c:a2:e3:d5:e6: b2:ae:aa:05:05:d3:4d:51:47:90:da:75:08:ec:84: f1:42:ee:f9:74:8d:be:ba:0e:16:91:cb:62:3e:09: 49:6a:0b:b9:bb:a4:13:2b:09:03:09:7c:08:49:ae: fc:16:e7:60:6f:a2:87:cd:d9:9d:21:4b:2a:35:d5: 70:ba:c5:5f:16:08:42:39:a4:71:9c:6a:ed:05:c9: 5b:1a:38:4e:f0:ef:5d:2d:7a:25:94:59:63:45:c7: 4f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7B:69:FD:01:64:34:77:F1:52:DA:43:C0:AD:04:44:29:7F:E5:21 X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233372e302f32342d3234203d3e20323034383434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.237.0/24 Signature Algorithm: sha256WithRSAEncryption 89:68:d8:06:67:f7:86:b0:05:e1:4e:a0:78:6a:46:70:65:71: 59:32:a0:ea:66:39:62:44:d9:dc:d6:cd:74:41:c3:8f:29:51: e3:4b:23:2d:7d:ca:a4:b5:b9:b1:99:29:49:a8:37:21:82:3a: 27:f2:00:5f:0b:41:66:5a:07:85:62:b9:40:7d:c2:12:18:71: 63:24:f7:66:06:fc:11:26:ac:a7:a4:2e:c7:3c:ec:5d:b7:95: a3:a7:85:97:a5:ca:a1:43:46:77:08:03:ec:f9:4a:77:5b:12: 52:22:e6:0e:f6:cf:93:92:d8:09:f3:89:56:77:bc:9b:04:4e: 5b:ab:f8:11:e6:4a:0b:05:75:2b:29:5c:d5:3d:02:0c:ed:c4: 15:ec:7b:d3:6e:47:b3:11:12:e9:9f:a5:18:26:da:0b:be:ae: b2:e1:19:79:ea:f1:0b:71:84:a3:43:87:2a:74:dd:50:cc:84: 0d:e7:10:1f:3e:04:3c:7f:29:f1:6f:4d:02:ec:61:72:9e:18: f8:cb:a9:72:35:43:62:98:c6:53:7a:ae:bf:e8:56:52:c9:bb: 88:ca:6b:82:ed:50:4a:36:a4:ca:7d:a9:6f:87:82:a2:9b:63: 06:59:3b:62:f6:2f:b7:da:cc:20:2e:5e:13:12:33:e5:2b:e8: 0a:ec:db:7f -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUWCEmkrXmBv3CXX/uD/K9CLjlj5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjA5MzAxNDE5MDJaFw0yNzA5MjkxNDI0MDJaMDMxMTAvBgNV BAMTKDFCN0I2OUZEMDE2NDM0NzdGMTUyREE0M0MwQUQwNDQ0Mjk3RkU1MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQrEnMC9ZA71E8oIL4H8TQObp rtnnUzpmEuRQSpGo4hSscJMPhS6GsE4GknY9igqWyKLxuUjjOquiNgK9n0YWQtIQ DvcoCBpTFpVaUshhqAwsCvh2JFe62U7if1C0sLqVM+kfn8MNp3kjAFXKBPjMu9nW j/0hJTpqPwyQTrnKmK4v6uUjTWm4Qr+QKztJpRg+t3r2y1xROsXTSTBSSo0MouPV 5rKuqgUF001RR5DadQjshPFC7vl0jb66DhaRy2I+CUlqC7m7pBMrCQMJfAhJrvwW 52BvoofN2Z0hSyo11XC6xV8WCEI5pHGcau0FyVsaOE7w710teiWUWWNFx08FAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUG3tp/QFkNHfxUtpDwK0ERCl/5SEwHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvMzEzNjMyMmUzNDJl MzIzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzgzNDM0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogTtMA0GCSqGSIb3DQEBCwUAA4IBAQCJaNgGZ/eGsAXhTqB4akZwZXFZ MqDqZjliRNnc1s10QcOPKVHjSyMtfcqktbmxmSlJqDchgjon8gBfC0FmWgeFYrlA fcISGHFjJPdmBvwRJqynpC7HPOxdt5Wjp4WXpcqhQ0Z3CAPs+Up3WxJSIuYO9s+T ktgJ84lWd7ybBE5bq/gR5koLBXUrKVzVPQIM7cQV7HvTbkezERLpn6UYJtoLvq6y 4Rl56vELcYSjQ4cqdN1QzIQN5xAfPgQ8fynxb00C7GFynhj4y6lyNUNimMZTeq6/ 6FZSybuIymuC7VBKNqTKfalvh4Kim2MGWTti9i+32swgLl4TEjPlK+gK7Nt/ -----END CERTIFICATE-----Generated at Thu Nov 5 07:08:13 2026 by rpki-client