$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LAZCO/NQU0pAKssuJOBCwSQVQOoXK4O5w.roa File: NQU0pAKssuJOBCwSQVQOoXK4O5w.roa (raw, json) Hash identifier: NwabWRN2eLMl2+XcmwshBr7FOAgGwc4On1Tomt6cJwc= Subject key identifier: 35:05:34:A4:02:AC:B2:E2:4E:04:2C:12:41:54:0E:A1:72:B8:3B:9C Certificate issuer: /CN=3BE896CFF2C01697848450DAB7F21A1E14A4F086 Certificate serial: 07 Authority key identifier: 3B:E8:96:CF:F2:C0:16:97:84:84:50:DA:B7:F2:1A:1E:14:A4:F0:86 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-iWz_LAFpeEhFDat_IaHhSk8IY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/NQU0pAKssuJOBCwSQVQOoXK4O5w.roa Signing time: Wed 04 Mar 2026 06:43:03 +0000 ROA not before: Wed 04 Mar 2026 06:43:03 +0000 ROA not after: Wed 24 Feb 2027 15:30:19 +0000 asID: 131630 IP address blocks: 2402:4f20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-iWz_LAFpeEhFDat_IaHhSk8IY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 13:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE896CFF2C01697848450DAB7F21A1E14A4F086 Validity Not Before: Mar 4 06:43:03 2026 GMT Not After : Feb 24 15:30:19 2027 GMT Subject: CN=350534A402ACB2E24E042C1241540EA172B83B9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cd:36:49:c6:f1:12:f2:6e:f1:99:20:97:a9: b6:a4:2c:77:8d:6f:8d:97:c9:ce:5f:66:97:06:2f: 1a:3d:de:fa:e6:98:61:ac:5e:10:6c:a1:8d:72:b5: 82:5f:17:37:fb:d3:d9:ca:b6:13:3b:48:ef:a2:7b: 4a:2d:b5:0c:9a:39:42:6e:d8:25:a9:73:b2:1b:5e: 41:ae:98:88:c1:9a:22:92:2f:4d:1f:10:19:9b:c8: 63:4e:0f:27:d1:48:5a:0d:31:d9:dc:7c:48:f1:97: 08:a7:61:ab:df:29:c2:07:5a:f0:13:bc:63:05:91: f8:23:19:eb:43:e9:17:6e:4f:59:e9:71:28:48:29: dc:f2:73:a8:db:e8:30:ac:c1:d5:a6:4a:94:09:2b: 11:d3:8d:7e:37:5f:c1:73:76:67:66:79:a3:9c:65: 28:ec:fc:aa:0a:0d:3a:aa:6f:03:d5:ce:1c:30:e8: f6:38:28:64:0d:4c:9f:d7:30:39:48:15:b7:48:7c: a4:7a:41:6f:08:0e:0d:a7:c2:0a:3a:ee:e8:42:9e: 7c:75:b4:08:5e:8e:22:1f:b7:53:ab:91:46:ef:d5: 3a:2a:29:79:61:49:ed:fa:f7:e3:a2:ab:d9:f4:71: 8d:58:4a:ae:cb:7b:f2:f6:76:93:6d:df:f5:82:78: d1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:05:34:A4:02:AC:B2:E2:4E:04:2C:12:41:54:0E:A1:72:B8:3B:9C X509v3 Authority Key Identifier: keyid:3B:E8:96:CF:F2:C0:16:97:84:84:50:DA:B7:F2:1A:1E:14:A4:F0:86 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-iWz_LAFpeEhFDat_IaHhSk8IY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/NQU0pAKssuJOBCwSQVQOoXK4O5w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:4f20::/32 Signature Algorithm: sha256WithRSAEncryption 2c:20:55:e7:ae:1c:32:2c:fa:e4:f0:a6:f3:60:e3:81:89:58: af:5b:43:3d:e1:74:09:a6:05:74:61:88:aa:7f:61:d8:df:63: 3d:96:4d:cc:ee:fa:bd:5b:35:cf:e9:92:36:e8:99:ff:3f:cf: cf:ad:f3:78:a9:12:de:01:cb:53:99:b9:3a:73:c2:fd:d4:24: 11:ea:e6:64:b0:7d:55:2e:20:15:10:de:a6:65:dc:39:64:42: 83:eb:fb:e2:17:50:30:9b:be:c0:53:87:a9:a5:59:4b:20:95: 85:a0:8d:27:40:b9:a7:7b:c3:e6:cb:95:13:57:fb:c9:86:94: 22:f9:b2:93:da:cb:62:9e:2f:15:e8:9c:5c:ad:77:6d:5b:b2: 3e:f3:6a:4b:80:f7:62:8e:e8:a4:7e:13:92:55:b1:b0:64:d8: 12:8f:be:cb:88:38:47:e4:45:20:db:5a:2f:4b:e9:18:cd:8f: 2f:ce:c9:3f:fc:87:01:a7:10:79:80:6b:69:4b:fe:90:88:67: 4f:d1:0e:83:5a:19:33:0a:2d:19:da:e7:a1:24:75:9e:4e:0f: 5f:6a:13:b8:09:5d:52:ee:f7:ae:f1:e1:f4:ba:4b:dd:5a:d7: 33:5e:bd:bd:10:8d:b7:15:c8:39:99:97:ab:6e:1b:fb:18:93: ae:fc:3d:cc -----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQkU4 OTZDRkYyQzAxNjk3ODQ4NDUwREFCN0YyMUExRTE0QTRGMDg2MB4XDTI2MDMwNDA2 NDMwM1oXDTI3MDIyNDE1MzAxOVowMzExMC8GA1UEAxMoMzUwNTM0QTQwMkFDQjJF MjRFMDQyQzEyNDE1NDBFQTE3MkI4M0I5QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAO3NNknG8RLybvGZIJeptqQsd41vjZfJzl9mlwYvGj3e+uaYYaxe EGyhjXK1gl8XN/vT2cq2EztI76J7Si21DJo5Qm7YJalzshteQa6YiMGaIpIvTR8Q GZvIY04PJ9FIWg0x2dx8SPGXCKdhq98pwgda8BO8YwWR+CMZ60PpF25PWelxKEgp 3PJzqNvoMKzB1aZKlAkrEdONfjdfwXN2Z2Z5o5xlKOz8qgoNOqpvA9XOHDDo9jgo ZA1Mn9cwOUgVt0h8pHpBbwgODafCCjru6EKefHW0CF6OIh+3U6uRRu/VOiopeWFJ 7fr346Kr2fRxjVhKrst78vZ2k23f9YJ40csCAwEAAaOCAe0wggHpMB0GA1UdDgQW BBQ1BTSkAqyy4k4ELBJBVA6hcrg7nDAfBgNVHSMEGDAWgBQ76JbP8sAWl4SEUNq3 8hoeFKTwhjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MQVpDTy9P LWlXel9MQUZwZUVoRkRhdF9JYUhoU2s4SVkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L08taVd6X0xBRnBlRWhGRGF0X0lhSGhTazhJWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0xBWkNPL05RVTBwQUtzc3VKT0JDd1NRVlFP b1hLNE81dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9y cmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAk8g MA0GCSqGSIb3DQEBCwUAA4IBAQAsIFXnrhwyLPrk8KbzYOOBiVivW0M94XQJpgV0 YYiqf2HY32M9lk3M7vq9WzXP6ZI26Jn/P8/PrfN4qRLeActTmbk6c8L91CQR6uZk sH1VLiAVEN6mZdw5ZEKD6/viF1Awm77AU4eppVlLIJWFoI0nQLmne8Pmy5UTV/vJ hpQi+bKT2stini8V6JxcrXdtW7I+82pLgPdijuikfhOSVbGwZNgSj77LiDhH5EUg 21ovS+kYzY8vzsk//IcBpxB5gGtpS/6QiGdP0Q6DWhkzCi0Z2uehJHWeTg9fahO4 CV1S7veu8eH0ukvdWtczXr29EI23Fcg5mZerbhv7GJOu/D3M -----END CERTIFICATE-----Generated at Sat Mar 7 11:21:13 2026 by rpki-client