$ rpki-client -vvvf rpkica.twnic.tw/rpki/SDCL-TW/0/323430323a373165303a3a2f33322d3438203d3e20313334383233.roa File: 323430323a373165303a3a2f33322d3438203d3e20313334383233.roa (raw, json) Hash identifier: Ezk288EMxD5xtLGFhHQ06ty+ECxin6l3nT7k5oesNiA= Subject key identifier: F3:8B:66:BE:8D:01:72:3F:05:3B:1B:78:68:C4:80:01:73:6A:C7:50 Certificate issuer: /CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE Certificate serial: 35AE5D0DBFB334AF10021292968FA5B358B59718 Authority key identifier: CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/323430323a373165303a3a2f33322d3438203d3e20313334383233.roa Signing time: Wed 26 Aug 2026 03:44:00 +0000 ROA not before: Wed 26 Aug 2026 03:39:00 +0000 ROA not after: Wed 25 Aug 2027 03:44:00 +0000 asID: 134823 IP address blocks: 2402:71e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 12:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ae:5d:0d:bf:b3:34:af:10:02:12:92:96:8f:a5:b3:58:b5:97:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE11BDD44F66776624C4D9BE145C499FD144FEAE Validity Not Before: Aug 26 03:39:00 2026 GMT Not After : Aug 25 03:44:00 2027 GMT Subject: CN=F38B66BE8D01723F053B1B7868C48001736AC750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0f:b5:dd:75:6e:f4:ec:99:7d:66:4b:f9:59: 8c:be:05:64:33:77:ed:4c:51:fa:34:69:ad:5a:76: ee:97:18:fb:e4:2e:44:ce:02:d3:ef:75:7a:32:35: da:e0:c6:45:5b:03:bf:c5:f9:9a:83:90:8f:f9:09: de:74:1a:19:24:2e:0e:98:02:8e:74:69:45:a1:c4: 9f:70:95:26:b8:8d:19:76:7e:37:8f:9c:d8:08:45: d0:ba:e9:b1:3f:a1:de:18:40:59:43:09:0d:b9:74: a5:98:fd:d4:eb:02:17:a2:ce:d0:15:2c:dd:e0:85: 0b:04:1b:45:e0:e5:c8:33:98:76:d4:66:c8:ab:9d: 95:4c:5d:d6:aa:0e:a5:80:ff:1c:36:b0:c8:da:3e: 7f:aa:92:69:28:aa:de:b1:11:93:a7:26:c6:f3:7b: f5:a0:2b:33:1c:02:fc:d7:00:66:a0:e1:9d:94:55: 94:b5:99:34:76:6e:3d:b1:bf:c7:13:d6:50:19:7d: bf:64:2e:e9:69:41:38:4f:64:46:e8:9c:b7:4e:f0: 31:ae:c6:5b:b2:4a:2b:8b:f1:13:a9:66:1d:d5:1d: 1d:37:97:07:91:68:97:b6:2d:7b:46:c1:a3:19:c7: be:18:72:5d:30:05:8e:9f:d2:5c:73:cb:36:ce:a2: 54:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8B:66:BE:8D:01:72:3F:05:3B:1B:78:68:C4:80:01:73:6A:C7:50 X509v3 Authority Key Identifier: keyid:CE:11:BD:D4:4F:66:77:66:24:C4:D9:BE:14:5C:49:9F:D1:44:FE:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/CE11BDD44F66776624C4D9BE145C499FD144FEAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CE11BDD44F66776624C4D9BE145C499FD144FEAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SDCL-TW/0/323430323a373165303a3a2f33322d3438203d3e20313334383233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:71e0::/32 Signature Algorithm: sha256WithRSAEncryption 9e:f8:87:5a:19:5b:09:8a:3a:db:40:b1:b7:d3:5d:a4:c7:ad: 30:79:4d:23:99:27:b7:66:d2:87:27:b3:6f:56:b5:5b:70:30: 7a:1b:3e:3e:2e:89:c1:93:76:4e:14:08:e2:6c:db:65:2f:52: b7:e9:6f:8d:4b:15:5f:d0:53:fa:cc:99:76:a0:04:39:62:7f: 7f:43:22:30:7f:32:15:61:be:e5:6c:01:67:e8:89:1d:04:88: f8:92:e2:df:f0:7a:29:51:21:2a:b3:82:c2:6e:b5:6c:c2:e0: 50:91:54:e9:42:ce:1c:b8:f3:46:63:a3:a4:ab:de:e1:fd:63: 57:c1:1d:6c:16:70:6d:78:c8:c0:f2:f7:c3:1a:7e:01:67:a2: 8a:0b:29:e5:e6:a0:29:66:49:05:cf:be:7c:de:b0:dc:48:f2: bd:ff:b8:2c:e3:cb:f8:88:5b:cf:8e:1e:07:22:64:61:5a:4e: 74:34:a8:28:95:35:25:05:88:f9:9c:09:b3:b9:f5:7a:5f:e4: 22:f7:7e:3d:d3:5e:79:5b:9f:45:1b:dc:ec:7b:a0:2b:f4:65: 23:b2:67:e8:78:e9:84:ea:d1:20:7d:97:85:c5:7f:d2:6e:2b: e4:58:b8:84:d3:96:cd:eb:fd:81:1a:c9:15:cd:cd:cc:39:45: 04:fa:b2:52 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUNa5dDb+zNK8QAhKSlo+ls1i1lxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1QzQ5OUZE MTQ0RkVBRTAeFw0yNjA4MjYwMzM5MDBaFw0yNzA4MjUwMzQ0MDBaMDMxMTAvBgNV BAMTKEYzOEI2NkJFOEQwMTcyM0YwNTNCMUI3ODY4QzQ4MDAxNzM2QUM3NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoD7XddW707Jl9Zkv5WYy+BWQz d+1MUfo0aa1adu6XGPvkLkTOAtPvdXoyNdrgxkVbA7/F+ZqDkI/5Cd50GhkkLg6Y Ao50aUWhxJ9wlSa4jRl2fjePnNgIRdC66bE/od4YQFlDCQ25dKWY/dTrAheiztAV LN3ghQsEG0Xg5cgzmHbUZsirnZVMXdaqDqWA/xw2sMjaPn+qkmkoqt6xEZOnJsbz e/WgKzMcAvzXAGag4Z2UVZS1mTR2bj2xv8cT1lAZfb9kLulpQThPZEbonLdO8DGu xluySiuL8ROpZh3VHR03lweRaJe2LXtGwaMZx74Ycl0wBY6f0lxzyzbOolTbAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQU84tmvo0Bcj8FOxt4aMSAAXNqx1AwHwYDVR0j BBgwFoAUzhG91E9md2YkxNm+FFxJn9FE/q4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0RDTC1U Vy8wL0NFMTFCREQ0NEY2Njc3NjYyNEM0RDlCRTE0NUM0OTlGRDE0NEZFQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvQ0UxMUJERDQ0RjY2Nzc2NjI0QzREOUJFMTQ1 QzQ5OUZEMTQ0RkVBRS5jZXIwfQYIKwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NEQ0wtVFcvMC8zMjM0MzAzMjNh MzczMTY1MzAzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMTMzMzQzODMyMzMucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQAkAnHgMA0GCSqGSIb3DQEBCwUAA4IBAQCe+IdaGVsJijrbQLG3012k x60weU0jmSe3ZtKHJ7NvVrVbcDB6Gz4+LonBk3ZOFAjibNtlL1K36W+NSxVf0FP6 zJl2oAQ5Yn9/QyIwfzIVYb7lbAFn6IkdBIj4kuLf8HopUSEqs4LCbrVswuBQkVTp Qs4cuPNGY6Okq97h/WNXwR1sFnBteMjA8vfDGn4BZ6KKCynl5qApZkkFz7583rDc SPK9/7gs48v4iFvPjh4HImRhWk50NKgolTUlBYj5nAmzufV6X+Qi93490155W59F G9zse6Ar9GUjsmfoeOmE6tEgfZeFxX/SbivkWLiE05bN6/2BGskVzc3MOUUE+rJS -----END CERTIFICATE-----Generated at Thu Sep 10 02:47:50 2026 by rpki-client