$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/75BUNGYflWCU142Bkdk5P_QHLYA.roa File: 75BUNGYflWCU142Bkdk5P_QHLYA.roa (raw, json) Hash identifier: RUI8S3IOWd19YXj63XfLpI71EN6yN275I7+bZFLLJjI= Subject key identifier: EF:90:54:34:66:1F:95:60:94:D7:8D:81:91:D9:39:3F:F4:07:2D:80 Certificate issuer: /CN=4091DB5A6EA03B760F54E090CB909873AE33F649 Certificate serial: 014B Authority key identifier: 40:91:DB:5A:6E:A0:3B:76:0F:54:E0:90:CB:90:98:73:AE:33:F6:49 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QJHbWm6gO3YPVOCQy5CYc64z9kk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/75BUNGYflWCU142Bkdk5P_QHLYA.roa Signing time: Tue 03 Mar 2026 15:56:30 +0000 ROA not before: Tue 03 Mar 2026 15:56:30 +0000 ROA not after: Wed 30 Dec 2026 15:30:20 +0000 asID: 18040 IP address blocks: 144.79.236.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/QJHbWm6gO3YPVOCQy5CYc64z9kk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/QJHbWm6gO3YPVOCQy5CYc64z9kk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/QJHbWm6gO3YPVOCQy5CYc64z9kk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4091DB5A6EA03B760F54E090CB909873AE33F649 Validity Not Before: Mar 3 15:56:30 2026 GMT Not After : Dec 30 15:30:20 2026 GMT Subject: CN=EF905434661F956094D78D8191D9393FF4072D80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:7c:1a:99:de:5c:4f:88:92:80:24:79:37: ae:5c:13:f4:15:ca:e9:16:30:fe:96:1b:92:8c:ca: 6b:07:8e:a6:45:f7:0c:d1:41:49:be:09:e7:22:a9: 42:b5:d2:e3:b5:53:54:4e:cd:84:03:74:22:3f:5e: 2c:4c:74:54:e3:76:af:d1:78:8a:29:e5:66:4e:aa: 86:5c:82:e7:06:a4:58:ab:1c:da:6d:6b:c5:43:36: 64:b0:43:aa:05:11:25:fe:10:63:6d:82:04:54:02: 2d:01:d6:d3:f4:38:52:03:7b:83:c6:ae:fb:45:77: c5:5c:64:52:a4:80:ae:2b:cb:e1:22:30:62:71:37: 7d:97:7d:c1:6a:82:dd:7e:91:c1:26:ce:c5:8f:93: 1f:c1:10:fe:2d:70:50:ee:da:40:f6:d2:45:f0:32: 16:0c:b3:91:08:be:3a:3b:af:33:5d:9a:d4:e8:62: f3:5c:09:39:9b:73:8e:14:b1:f4:0c:42:dc:ed:0f: 0a:b4:3b:41:e8:65:0c:b5:c0:dd:3d:4b:69:b6:18: 3b:1c:e4:e8:46:7b:31:c4:c0:34:58:18:26:d0:ab: 38:d9:bd:c6:32:43:05:ec:4e:cc:7b:39:fd:37:0f: 15:ba:89:f7:24:72:21:ad:21:d9:cb:09:4d:df:6e: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:90:54:34:66:1F:95:60:94:D7:8D:81:91:D9:39:3F:F4:07:2D:80 X509v3 Authority Key Identifier: keyid:40:91:DB:5A:6E:A0:3B:76:0F:54:E0:90:CB:90:98:73:AE:33:F6:49 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/QJHbWm6gO3YPVOCQy5CYc64z9kk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QJHbWm6gO3YPVOCQy5CYc64z9kk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/75BUNGYflWCU142Bkdk5P_QHLYA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 144.79.236.0/24 Signature Algorithm: sha256WithRSAEncryption 46:30:33:c0:63:74:0e:2b:04:3d:a7:5b:5c:49:b3:b7:e5:76: d8:df:f1:df:68:39:bc:c8:46:5a:7b:9c:94:a2:f6:ff:ff:6c: b9:7f:88:b0:d1:67:a7:aa:bb:a1:77:82:2b:50:79:3d:da:ac: 60:05:f7:36:a2:de:dc:39:f6:56:b1:18:28:82:dd:68:0f:5a: 75:10:70:9a:dc:7b:a7:2a:b2:98:42:95:96:52:cf:af:ff:3d: cc:3b:fc:3b:d1:2d:4c:01:88:19:fc:35:ef:a3:32:0a:69:7b: 42:93:90:d2:2c:fc:e5:51:8d:a1:0c:12:25:42:a3:fe:c2:41: 78:9e:4c:d7:ae:9f:31:a3:bf:ca:13:94:32:41:a1:bf:87:6d: a7:fb:73:a2:98:b5:0a:da:03:9a:c7:37:77:7b:9f:c3:cc:a3: b7:0f:99:f9:88:b4:13:bd:8e:42:1d:0e:69:c9:e1:43:41:27: ec:99:45:a2:6c:92:68:ce:e4:1c:91:d1:a1:b6:bf:a7:79:6e: 99:fb:6b:00:81:53:90:89:20:fa:2e:8d:f7:2d:b3:cb:4d:ec: 94:5f:d0:dc:c5:80:26:9e:5d:5d:ef:4d:69:32:d2:96:b7:0a: 03:91:f0:31:3f:e4:c0:89:ee:41:7a:88:45:44:fb:c1:e6:5f: a4:9a:c0:36 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAUswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA5 MURCNUE2RUEwM0I3NjBGNTRFMDkwQ0I5MDk4NzNBRTMzRjY0OTAeFw0yNjAzMDMx NTU2MzBaFw0yNjEyMzAxNTMwMjBaMDMxMTAvBgNVBAMTKEVGOTA1NDM0NjYxRjk1 NjA5NEQ3OEQ4MTkxRDkzOTNGRjQwNzJEODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkp3wamd5cT4iSgCR5N65cE/QVyukWMP6WG5KMymsHjqZF9wzR QUm+CeciqUK10uO1U1ROzYQDdCI/XixMdFTjdq/ReIop5WZOqoZcgucGpFirHNpt a8VDNmSwQ6oFESX+EGNtggRUAi0B1tP0OFIDe4PGrvtFd8VcZFKkgK4ry+EiMGJx N32XfcFqgt1+kcEmzsWPkx/BEP4tcFDu2kD20kXwMhYMs5EIvjo7rzNdmtToYvNc CTmbc44UsfQMQtztDwq0O0HoZQy1wN09S2m2GDsc5OhGezHEwDRYGCbQqzjZvcYy QwXsTsx7Of03DxW6ifckciGtIdnLCU3fbpJ5AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQU75BUNGYflWCU142Bkdk5P/QHLYAwHwYDVR0jBBgwFoAUQJHbWm6gO3YPVOCQ y5CYc64z9kkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQU9URVJO RVQvUUpIYldtNmdPM1lQVk9DUXk1Q1ljNjR6OWtrLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9RSkhiV202Z08zWVBWT0NReTVDWWM2NHo5a2suY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BT1RFUk5FVC83NUJVTkdZZmxXQ1Ux NDJCa2RrNVBfUUhMWUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAkE/sMA0GCSqGSIb3DQEBCwUAA4IBAQBGMDPAY3QOKwQ9p1tcSbO35XbY3/Hf aDm8yEZae5yUovb//2y5f4iw0Wenqruhd4IrUHk92qxgBfc2ot7cOfZWsRgogt1o D1p1EHCa3HunKrKYQpWWUs+v/z3MO/w70S1MAYgZ/DXvozIKaXtCk5DSLPzlUY2h DBIlQqP+wkF4nkzXrp8xo7/KE5QyQaG/h22n+3OimLUK2gOaxzd3e5/DzKO3D5n5 iLQTvY5CHQ5pyeFDQSfsmUWibJJozuQckdGhtr+neW6Z+2sAgVOQiSD6Lo33LbPL TeyUX9DcxYAmnl1d701pMtKWtwoDkfAxP+TAie5BeohFRPvB5l+kmsA2 -----END CERTIFICATE-----Generated at Sat Mar 7 23:58:40 2026 by rpki-client