$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a3830383a3a2f34382d3438203d3e2039363738.roa File: 323430313a393563303a3830383a3a2f34382d3438203d3e2039363738.roa (raw, json) Hash identifier: LElF+wGt3liBgKlL8jsB3e1yEkuDOG6KHD56zZD0m1c= Subject key identifier: 70:34:FD:74:B9:63:A7:8E:9E:3D:FC:2F:EF:C9:75:1B:FF:4F:12:7D Certificate issuer: /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A Certificate serial: 39E34C80702C7C267F12230E036DDA397FEBA961 Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a3830383a3a2f34382d3438203d3e2039363738.roa Signing time: Mon 11 May 2026 17:39:14 +0000 ROA not before: Mon 11 May 2026 17:34:14 +0000 ROA not after: Mon 10 May 2027 17:39:14 +0000 asID: 9678 IP address blocks: 2401:95c0:808::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e3:4c:80:70:2c:7c:26:7f:12:23:0e:03:6d:da:39:7f:eb:a9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A Validity Not Before: May 11 17:34:14 2026 GMT Not After : May 10 17:39:14 2027 GMT Subject: CN=7034FD74B963A78E9E3DFC2FEFC9751BFF4F127D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:c6:7e:d8:b5:09:01:05:e2:6c:72:81:3f: 78:60:6d:84:17:49:3d:e3:40:5c:d0:1f:26:ec:13: e2:0b:a5:b0:8b:31:54:8a:8c:d2:61:5c:ca:4f:ee: ab:e4:6c:98:31:e6:fa:3c:7e:e6:72:23:32:6c:cf: b1:05:2f:a6:9b:50:71:f5:b9:d7:24:a2:7d:72:57: 8e:fe:1e:c6:56:09:cb:d0:97:8d:c3:dd:3d:23:93: 25:34:b2:51:61:29:7d:f6:b6:14:c0:7a:5d:89:8d: 7f:27:3c:bd:d5:6b:87:8b:11:0a:4c:21:37:73:64: 06:04:cf:ea:79:f3:a4:32:0f:d9:c3:2f:45:03:b9: da:14:83:c9:25:91:af:32:9d:60:b9:e6:fb:c5:fa: fc:70:67:c3:fd:7a:b9:86:07:e1:fa:40:33:ff:70: d9:24:cc:8e:80:ef:65:59:67:7a:6a:0c:f1:b9:05: 66:3f:35:33:c3:92:80:fa:63:e4:22:24:79:ce:b5: 1f:b2:80:d9:6e:c6:b9:73:ad:b9:fe:9b:23:79:7b: 0c:5c:1a:86:e4:ad:8e:6e:34:6e:72:c2:5d:7d:27: d9:c4:68:41:0d:44:d9:b1:09:f8:73:7c:af:1c:57: b4:b8:12:74:d2:42:de:e5:16:ab:dd:97:19:7c:f3: 0c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:34:FD:74:B9:63:A7:8E:9E:3D:FC:2F:EF:C9:75:1B:FF:4F:12:7D X509v3 Authority Key Identifier: keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a3830383a3a2f34382d3438203d3e2039363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:95c0:808::/48 Signature Algorithm: sha256WithRSAEncryption 57:06:7a:3d:76:90:b4:09:89:0b:de:6f:63:19:33:fc:8d:15: 72:48:d1:1c:88:6f:d8:54:d6:ac:34:9b:fb:ca:74:21:f4:c3: 21:8c:7a:1e:e7:9b:4b:57:cb:41:aa:98:85:ba:81:d4:5f:a1: 97:d3:87:c5:8c:9e:fb:e0:17:d4:09:e6:7b:1d:ce:14:0f:cd: e2:b7:d2:e3:ca:b8:c0:78:a9:52:ca:f3:4d:12:1b:48:29:7a: 36:78:76:05:60:95:aa:99:67:16:5d:b7:d5:62:29:b5:14:6b: f3:8f:c9:34:fe:50:bd:9c:ca:b7:f7:9b:34:24:42:b1:54:ce: f6:44:fd:92:21:05:16:b4:8d:69:14:50:14:3d:7e:8b:cc:de: c2:43:dd:60:b8:e1:20:43:a4:43:87:05:bb:aa:1c:eb:17:33: 30:1a:84:fb:37:25:8c:b7:b9:ed:dc:f4:cc:36:9c:52:5b:86: e1:1e:b1:a9:64:12:35:dc:d4:c9:41:50:ce:63:70:61:66:f0: 83:80:c8:25:9b:a8:5e:00:dc:37:1e:b4:24:4c:d6:75:66:3b: 55:a3:2a:37:0e:0d:5f:ea:81:b2:e6:6b:20:92:56:7e:f4:51: 51:cd:95:8f:86:ea:27:18:19:3a:b9:d2:47:57:10:f7:d5:a2: 99:80:1f:a8 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUOeNMgHAsfCZ/EiMOA23aOX/rqWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBNkYyMEUzOUU4MTk2MkZEMzc3MEM0QzQ0QzVFMTBE RkQzMkQyQTAeFw0yNjA1MTExNzM0MTRaFw0yNzA1MTAxNzM5MTRaMDMxMTAvBgNV BAMTKDcwMzRGRDc0Qjk2M0E3OEU5RTNERkMyRkVGQzk3NTFCRkY0RjEyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0WcZ+2LUJAQXibHKBP3hgbYQX ST3jQFzQHybsE+ILpbCLMVSKjNJhXMpP7qvkbJgx5vo8fuZyIzJsz7EFL6abUHH1 udckon1yV47+HsZWCcvQl43D3T0jkyU0slFhKX32thTAel2JjX8nPL3Va4eLEQpM ITdzZAYEz+p586QyD9nDL0UDudoUg8klka8ynWC55vvF+vxwZ8P9ermGB+H6QDP/ cNkkzI6A72VZZ3pqDPG5BWY/NTPDkoD6Y+QiJHnOtR+ygNluxrlzrbn+myN5ewxc GobkrY5uNG5ywl19J9nEaEENRNmxCfhzfK8cV7S4EnTSQt7lFqvdlxl88wxhAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUcDT9dLljp46ePfwv78l1G/9PEn0wHwYDVR0j BBgwFoAUYKbyDjnoGWL9N3DExExeEN/TLSowDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO LzAvNjBBNkYyMEUzOUU4MTk2MkZEMzc3MEM0QzQ0QzVFMTBERkQzMkQyQS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS82MEE2RjIwRTM5RTgxOTYyRkQzNzcwQzRDNDRD NUUxMERGRDMyRDJBLmNlcjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUFBzALhmRy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0hPU1RJTi8wLzMyMzQzMDMxM2Ez OTM1NjMzMDNhMzgzMDM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzkzNjM3Mzgu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAkAZXACAgwDQYJKoZIhvcNAQELBQADggEBAFcGej12kLQJiQve b2MZM/yNFXJI0RyIb9hU1qw0m/vKdCH0wyGMeh7nm0tXy0GqmIW6gdRfoZfTh8WM nvvgF9QJ5nsdzhQPzeK30uPKuMB4qVLK800SG0gpejZ4dgVglaqZZxZdt9ViKbUU a/OPyTT+UL2cyrf3mzQkQrFUzvZE/ZIhBRa0jWkUUBQ9fovM3sJD3WC44SBDpEOH BbuqHOsXMzAahPs3JYy3ue3c9Mw2nFJbhuEesalkEjXc1MlBUM5jcGFm8IOAyCWb qF4A3DcetCRM1nVmO1WjKjcODV/qgbLmayCSVn70UVHNlY+G6icYGTq50kdXEPfV opmAH6g= -----END CERTIFICATE-----Generated at Wed May 13 21:17:51 2026 by rpki-client