$ rpki-client -vvvf rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a3a2f33322d3438203d3e20313331363330.roa File: 323430323a346632303a3a2f33322d3438203d3e20313331363330.roa (raw, json) Hash identifier: TVGWBWDdhLgnattlZSijWCrGGQSr7IgN1nuRhy+sPvc= Subject key identifier: AF:51:EE:29:E0:D1:A8:44:80:F8:78:BB:BA:40:48:55:0A:91:EA:B2 Certificate issuer: /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Certificate serial: 31095102F8D1195375B133F559637807CF279458 Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a3a2f33322d3438203d3e20313331363330.roa Signing time: Sat 17 Oct 2026 03:24:00 +0000 ROA not before: Sat 17 Oct 2026 03:19:00 +0000 ROA not after: Sat 16 Oct 2027 03:24:00 +0000 asID: 131630 IP address blocks: 2402:4f20::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 15:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:09:51:02:f8:d1:19:53:75:b1:33:f5:59:63:78:07:cf:27:94:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Validity Not Before: Oct 17 03:19:00 2026 GMT Not After : Oct 16 03:24:00 2027 GMT Subject: CN=AF51EE29E0D1A84480F878BBBA4048550A91EAB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:ef:05:53:00:ed:39:c2:dc:1e:9c:44:bf: 70:f0:6c:75:d1:6f:45:04:a1:83:3a:24:51:5b:4b: 2b:21:3c:fb:13:d1:c4:e5:12:0b:80:36:1f:ef:78: e4:70:72:68:16:c5:61:6a:57:d9:ff:7f:28:d0:3d: 55:fd:13:63:3f:46:f4:4f:5a:d9:cb:35:5a:a1:8d: fe:fa:42:83:71:4b:5b:53:92:20:cf:e1:53:46:55: 8a:36:41:33:0a:f9:de:78:12:51:7f:4c:3e:82:62: 71:a6:d3:fe:7a:02:27:bc:1f:67:9a:4a:9e:7a:a0: 3a:0d:dd:8d:96:75:70:c5:52:e5:91:5f:a3:11:b4: 98:1d:86:d3:1a:e0:73:e9:a7:66:6e:ac:08:70:af: 7c:bd:06:84:de:6d:e8:e8:b4:82:7c:00:ad:a4:ff: ba:ac:56:7b:16:69:ee:15:3a:5e:92:f4:91:ad:da: 43:c7:ba:17:a5:bb:1b:ae:70:6b:89:03:ba:34:cc: 66:f2:fc:30:ca:ef:12:64:0b:25:71:92:61:c8:a7: f8:39:a3:c5:cf:95:18:6a:a8:15:18:05:fc:66:12: 4a:4d:ab:b1:06:ba:be:33:ac:d6:01:39:a1:da:c8: fe:de:ed:25:f6:b4:87:8c:cb:95:a2:fa:0f:5e:3b: a8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:51:EE:29:E0:D1:A8:44:80:F8:78:BB:BA:40:48:55:0A:91:EA:B2 X509v3 Authority Key Identifier: keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a3a2f33322d3438203d3e20313331363330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4f20::/32 Signature Algorithm: sha256WithRSAEncryption 3e:3b:10:15:a1:e7:3e:af:49:f7:3a:92:91:d4:b6:18:05:9a: 40:55:60:ed:b2:f4:68:7b:cf:8e:c8:be:2d:cf:c6:1d:87:f7: 8d:15:17:04:97:2d:19:3d:c4:0f:55:0c:08:34:ea:83:f0:7c: bf:27:e3:ca:0a:7e:78:66:4a:3e:ef:72:e2:b7:42:1d:e2:7b: 81:5c:f9:80:65:82:bd:d9:7e:a3:40:5b:a3:77:5f:81:39:4b: 12:85:c0:41:8b:10:eb:65:b4:03:44:0e:91:8c:43:c7:12:5c: 99:a7:9d:9b:c6:dc:ca:aa:50:68:98:71:93:43:08:c9:c6:c7: 00:a2:ba:41:dc:b4:96:5a:31:e9:7b:d2:68:18:8a:fa:ae:00: 3d:ee:bc:96:3f:93:65:36:c9:9b:e9:45:6e:11:fb:11:d7:31: 83:24:90:53:4e:ab:f8:26:75:1c:c6:8a:ca:ce:35:5e:bb:d0: 70:e2:c7:c6:02:52:cc:0b:ab:f8:21:89:8f:de:87:13:ee:92: b2:50:ca:8c:28:f5:a8:28:25:59:38:51:62:c1:a6:ba:b2:a3: c2:a1:20:fe:65:52:dd:a5:f2:18:d0:98:57:2a:8c:18:72:a5: 6b:c3:42:ec:f2:c3:c3:8c:8b:88:6c:35:60:a2:a6:72:b9:25: 11:06:e2:31 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIUMQlRAvjRGVN1sTP1WWN4B88nlFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YyRkEwRTlBOUI3QTM2NEQ0OUEyRUE2MUVGMzg5Njcw OUM0QURBRTAeFw0yNjEwMTcwMzE5MDBaFw0yNzEwMTYwMzI0MDBaMDMxMTAvBgNV BAMTKEFGNTFFRTI5RTBEMUE4NDQ4MEY4NzhCQkJBNDA0ODU1MEE5MUVBQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNf+8FUwDtOcLcHpxEv3DwbHXR b0UEoYM6JFFbSyshPPsT0cTlEguANh/veORwcmgWxWFqV9n/fyjQPVX9E2M/RvRP WtnLNVqhjf76QoNxS1tTkiDP4VNGVYo2QTMK+d54ElF/TD6CYnGm0/56Aie8H2ea Sp56oDoN3Y2WdXDFUuWRX6MRtJgdhtMa4HPpp2ZurAhwr3y9BoTebejotIJ8AK2k /7qsVnsWae4VOl6S9JGt2kPHuheluxuucGuJA7o0zGby/DDK7xJkCyVxkmHIp/g5 o8XPlRhqqBUYBfxmEkpNq7EGur4zrNYBOaHayP7e7SX2tIeMy5Wi+g9eO6gpAgMB AAGjggHiMIIB3jAdBgNVHQ4EFgQUr1HuKeDRqESA+Hi7ukBIVQqR6rIwHwYDVR0j BBgwFoAUPy+g6am3o2TUmi6mHvOJZwnEra4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MC8zRjJGQTBFOUE5QjdBMzY0RDQ5QTJFQTYxRUYzODk2NzA5QzRBREFFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGMkZBMEU5QTlCN0EzNjRENDlBMkVBNjFFRjM4 OTY3MDlDNEFEQUUuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8wLzMyMzQzMDMyM2EzNDY2 MzIzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzMzMTM2MzMzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQCTyAwDQYJKoZIhvcNAQELBQADggEBAD47EBWh5z6vSfc6kpHUthgFmkBV YO2y9Gh7z47Ivi3Pxh2H940VFwSXLRk9xA9VDAg06oPwfL8n48oKfnhmSj7vcuK3 Qh3ie4Fc+YBlgr3ZfqNAW6N3X4E5SxKFwEGLEOtltANEDpGMQ8cSXJmnnZvG3Mqq UGiYcZNDCMnGxwCiukHctJZaMel70mgYivquAD3uvJY/k2U2yZvpRW4R+xHXMYMk kFNOq/gmdRzGisrONV670HDix8YCUswLq/ghiY/ehxPukrJQyowo9agoJVk4UWLB prqyo8KhIP5lUt2l8hjQmFcqjBhypWvDQuzyw8OMi4hsNWCipnK5JREG4jE= -----END CERTIFICATE-----Generated at Thu Nov 5 19:54:54 2026 by rpki-client