$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a313a3a2f34382d3438203d3e20313331363330.roa File: 323430323a346632303a313a3a2f34382d3438203d3e20313331363330.roa (raw, json) Hash identifier: Oh96VvwrLrCqa8vzhQmqU/GuluZDVdXi8dtZT8NxrMk= Subject key identifier: 3A:AE:DB:35:C2:1B:02:53:17:1F:D9:25:D4:90:6D:F1:EC:FC:D8:8D Certificate issuer: /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Certificate serial: 177DC54FA39806FED11184DB4825F5105FB189F1 Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a313a3a2f34382d3438203d3e20313331363330.roa Signing time: Mon 11 May 2026 17:58:23 +0000 ROA not before: Mon 11 May 2026 17:53:23 +0000 ROA not after: Mon 10 May 2027 17:58:23 +0000 asID: 131630 IP address blocks: 2402:4f20:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7d:c5:4f:a3:98:06:fe:d1:11:84:db:48:25:f5:10:5f:b1:89:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Validity Not Before: May 11 17:53:23 2026 GMT Not After : May 10 17:58:23 2027 GMT Subject: CN=3AAEDB35C21B0253171FD925D4906DF1ECFCD88D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:38:67:22:2c:3b:ca:4c:ca:a9:0e:88:30: 71:29:54:12:27:8d:b4:59:96:59:90:fa:aa:9d:62: 35:10:a9:fe:8e:70:ea:c7:4f:b7:fd:44:7a:71:4b: b7:f3:19:1f:ec:5c:a4:c3:6d:7f:a1:ab:cd:d0:9b: 5c:2e:c3:67:31:05:d2:a7:a0:b0:4c:38:c0:0f:e4: 96:25:83:58:ea:f4:9b:da:4e:10:1d:46:75:02:f2: c0:80:99:17:9d:b7:6e:c2:39:b5:12:c9:c7:73:77: 4c:bb:f3:89:20:ea:58:66:10:f0:a5:18:81:40:ca: a6:b3:8f:b1:38:a5:c5:78:d2:e9:e8:4e:89:70:b5: f4:37:a3:8a:2d:3a:b0:c5:00:8e:44:7e:e3:5d:3d: 4b:3d:67:ec:a2:80:b3:b4:58:a1:3b:41:95:e9:72: f2:c3:39:69:6a:d1:8e:7c:96:2b:12:c7:bb:69:8c: fe:90:c0:77:7f:b5:9d:41:25:70:ff:35:d8:90:d5: 75:4e:76:cb:75:0f:aa:dc:6f:9d:1c:4f:71:4c:02: 22:07:c2:d6:d6:3d:f8:a2:80:3d:f2:65:7a:33:58: d7:0b:ee:b2:9a:d4:6f:b3:34:2e:94:2d:46:c0:ce: 22:90:56:50:28:d3:92:40:6b:d5:37:6a:0d:c8:5b: f8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AE:DB:35:C2:1B:02:53:17:1F:D9:25:D4:90:6D:F1:EC:FC:D8:8D X509v3 Authority Key Identifier: keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a313a3a2f34382d3438203d3e20313331363330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4f20:1::/48 Signature Algorithm: sha256WithRSAEncryption 0a:f1:ef:a3:d0:11:ed:d1:16:08:92:21:8e:87:4d:eb:eb:23: f0:f1:3e:29:9e:b2:49:f3:17:05:bf:31:d6:26:ac:c4:3b:5c: ea:97:53:0f:2b:16:9b:14:92:fe:a4:d5:00:ce:08:bd:90:23: 77:85:04:8b:e9:ae:36:ae:b6:49:1c:0b:32:3c:d1:7b:3b:c8: 8f:a6:81:89:58:c9:38:88:3e:dc:39:51:10:0f:b8:ba:06:84: 1f:94:24:28:c4:56:5b:14:40:1c:87:01:67:91:d5:72:52:05: fb:ea:96:f6:fb:e2:4b:e6:80:a1:b7:75:f9:26:b0:ca:af:a2: 88:53:18:28:31:64:be:83:b1:4b:0c:5c:5b:0f:f4:82:a0:27: c4:94:4e:71:98:82:3f:4b:d6:2a:73:84:b7:f8:c2:97:97:c7: 4e:04:f5:d4:ee:e6:de:7a:fa:c9:6e:be:07:88:1a:3e:33:5d: 4e:0a:36:57:5a:72:25:c8:ec:8a:eb:b1:ea:5a:43:96:49:b5: 35:63:5c:7f:a5:b1:c5:d8:db:c9:ed:1c:fb:23:71:90:5c:44: f0:71:04:58:2a:18:80:5d:dd:8b:05:e3:b8:e0:01:48:0c:dd: 0e:20:bf:99:19:18:fd:87:24:0a:cc:9c:33:98:fe:25:f4:b0: 6a:40:51:a8 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUF33FT6OYBv7REYTbSCX1EF+xifEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YyRkEwRTlBOUI3QTM2NEQ0OUEyRUE2MUVGMzg5Njcw OUM0QURBRTAeFw0yNjA1MTExNzUzMjNaFw0yNzA1MTAxNzU4MjNaMDMxMTAvBgNV BAMTKDNBQUVEQjM1QzIxQjAyNTMxNzFGRDkyNUQ0OTA2REYxRUNGQ0Q4OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aDhnIiw7ykzKqQ6IMHEpVBIn jbRZllmQ+qqdYjUQqf6OcOrHT7f9RHpxS7fzGR/sXKTDbX+hq83Qm1wuw2cxBdKn oLBMOMAP5JYlg1jq9JvaThAdRnUC8sCAmRedt27CObUSycdzd0y784kg6lhmEPCl GIFAyqazj7E4pcV40unoTolwtfQ3o4otOrDFAI5EfuNdPUs9Z+yigLO0WKE7QZXp cvLDOWlq0Y58lisSx7tpjP6QwHd/tZ1BJXD/NdiQ1XVOdst1D6rcb50cT3FMAiIH wtbWPfiigD3yZXozWNcL7rKa1G+zNC6ULUbAziKQVlAo05JAa9U3ag3IW/glAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUOq7bNcIbAlMXH9kl1JBt8ez82I0wHwYDVR0j BBgwFoAUPy+g6am3o2TUmi6mHvOJZwnEra4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MC8zRjJGQTBFOUE5QjdBMzY0RDQ5QTJFQTYxRUYzODk2NzA5QzRBREFFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGMkZBMEU5QTlCN0EzNjRENDlBMkVBNjFFRjM4 OTY3MDlDNEFEQUUuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEFBQcwC4ZjcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8wLzMyMzQzMDMyM2EzNDY2 MzIzMDNhMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzEzNjMzMzAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkAk8gAAEwDQYJKoZIhvcNAQELBQADggEBAArx76PQEe3RFgiSIY6H TevrI/DxPimesknzFwW/MdYmrMQ7XOqXUw8rFpsUkv6k1QDOCL2QI3eFBIvprjau tkkcCzI80Xs7yI+mgYlYyTiIPtw5URAPuLoGhB+UJCjEVlsUQByHAWeR1XJSBfvq lvb74kvmgKG3dfkmsMqvoohTGCgxZL6DsUsMXFsP9IKgJ8SUTnGYgj9L1ipzhLf4 wpeXx04E9dTu5t56+sluvgeIGj4zXU4KNldaciXI7IrrsepaQ5ZJtTVjXH+lscXY 28ntHPsjcZBcRPBxBFgqGIBd3YsF47jgAUgM3Q4gv5kZGP2HJArMnDOY/iX0sGpA Uag= -----END CERTIFICATE-----Generated at Wed May 13 21:12:39 2026 by rpki-client