$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LAZCO/Ra0L6udvSwDXP1V7qelnfXRirI4.roa File: Ra0L6udvSwDXP1V7qelnfXRirI4.roa (raw, json) Hash identifier: w5I0taoY/8Sfi8/8DgzCehHrZJwECkB2rlozlasrkj0= Subject key identifier: 45:AD:0B:EA:E7:6F:4B:00:D7:3F:55:7B:A9:E9:67:7D:74:62:AC:8E Certificate issuer: /CN=3BE896CFF2C01697848450DAB7F21A1E14A4F086 Certificate serial: 13 Authority key identifier: 3B:E8:96:CF:F2:C0:16:97:84:84:50:DA:B7:F2:1A:1E:14:A4:F0:86 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-iWz_LAFpeEhFDat_IaHhSk8IY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/Ra0L6udvSwDXP1V7qelnfXRirI4.roa Signing time: Wed 04 Mar 2026 07:45:20 +0000 ROA not before: Wed 04 Mar 2026 07:45:20 +0000 ROA not after: Wed 24 Feb 2027 15:30:19 +0000 asID: 131630 IP address blocks: 2402:4f20:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/O-iWz_LAFpeEhFDat_IaHhSk8IY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 13:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BE896CFF2C01697848450DAB7F21A1E14A4F086 Validity Not Before: Mar 4 07:45:20 2026 GMT Not After : Feb 24 15:30:19 2027 GMT Subject: CN=45AD0BEAE76F4B00D73F557BA9E9677D7462AC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:fe:a7:d4:c2:8b:6f:a1:55:de:f2:61:15: 2c:28:cb:13:e4:1b:94:f6:3c:03:cf:0c:71:5e:5c: 9a:3a:77:49:e1:e6:39:7f:d3:81:39:e7:52:9f:e3: 79:f2:19:ce:c9:36:04:de:0f:a7:6d:78:7e:fd:fa: 3e:1c:1a:bf:8a:b8:36:fd:ac:49:be:25:9c:c9:9d: d0:7a:f1:63:59:28:71:04:82:98:c8:66:ea:df:9a: 92:2e:02:dd:ea:0f:16:63:7e:39:69:2d:d9:93:fa: 80:18:50:8e:d3:c3:2b:cf:cf:3b:24:71:c4:62:c2: 6a:a4:d6:e0:eb:20:f8:e7:1d:37:5c:46:40:12:5d: 0d:0d:3c:3f:5c:a4:f6:54:c1:68:62:32:b3:8d:ac: f0:78:2a:a3:32:34:7f:5f:81:43:82:3b:05:c7:44: cd:cb:50:b2:18:7d:81:03:3a:e6:df:2a:a2:38:28: ae:f8:34:26:5d:82:2d:db:7c:c7:7c:2d:b4:1c:09: 52:dd:2c:c1:1f:eb:44:01:9c:a7:89:ea:0c:50:d3: 49:0b:e7:c5:b6:d7:4c:d5:bf:8b:45:0f:1a:ff:1a: f8:7a:32:93:3d:55:ab:d8:08:7a:56:25:08:0c:58: f1:de:7a:06:93:3a:e0:54:e1:cf:25:f8:84:1b:2a: 95:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AD:0B:EA:E7:6F:4B:00:D7:3F:55:7B:A9:E9:67:7D:74:62:AC:8E X509v3 Authority Key Identifier: keyid:3B:E8:96:CF:F2:C0:16:97:84:84:50:DA:B7:F2:1A:1E:14:A4:F0:86 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/O-iWz_LAFpeEhFDat_IaHhSk8IY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-iWz_LAFpeEhFDat_IaHhSk8IY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/Ra0L6udvSwDXP1V7qelnfXRirI4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:4f20:5::/48 Signature Algorithm: sha256WithRSAEncryption 27:c2:0a:f2:b7:82:26:ad:6a:c7:6b:65:88:74:dc:51:40:09: b6:53:8b:05:41:0c:53:59:4f:8f:8f:bc:13:f3:7f:83:c8:47: c7:1a:aa:1b:d7:a6:54:d8:85:18:c8:83:40:a4:46:50:03:41: e4:81:11:8c:ec:66:9b:1c:62:58:93:80:9d:e7:a5:3a:f5:63: f6:e5:a8:14:d8:ea:29:99:46:cf:5e:46:66:90:7a:72:d5:e0: 48:2c:6d:49:2a:df:17:b9:dc:cf:fe:2e:cb:6e:b1:f2:d6:79: db:a0:ba:91:d5:99:d6:0d:67:3f:f5:be:96:da:d0:5a:db:f5: 5f:c8:b5:e0:27:37:3d:f4:9f:ab:51:f0:24:d6:5b:c4:91:9a: e1:53:00:8b:7c:c5:6b:2f:58:84:59:2c:a9:4c:a6:ab:f6:d5: 50:d5:15:4c:43:38:20:2d:bb:fd:b7:6d:e9:37:8a:42:19:0f: 0f:14:69:92:c9:3b:a4:a5:cd:4f:e9:fd:18:da:29:94:22:c1: 53:9e:cc:bb:bb:3a:2e:62:fe:b8:46:4b:3b:7b:2a:0a:83:27: 43:4f:d1:18:7a:27:d3:68:a0:e5:ad:e6:73:24:e0:7d:a8:fc: 3b:f9:38:cd:0c:7e:9c:0c:1f:9a:1c:da:4f:5c:04:4d:79:d7: 4c:2c:40:4a -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQkU4 OTZDRkYyQzAxNjk3ODQ4NDUwREFCN0YyMUExRTE0QTRGMDg2MB4XDTI2MDMwNDA3 NDUyMFoXDTI3MDIyNDE1MzAxOVowMzExMC8GA1UEAxMoNDVBRDBCRUFFNzZGNEIw MEQ3M0Y1NTdCQTlFOTY3N0Q3NDYyQUM4RTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALIy/qfUwotvoVXe8mEVLCjLE+QblPY8A88McV5cmjp3SeHmOX/T gTnnUp/jefIZzsk2BN4Pp214fv36Phwav4q4Nv2sSb4lnMmd0HrxY1kocQSCmMhm 6t+aki4C3eoPFmN+OWkt2ZP6gBhQjtPDK8/POyRxxGLCaqTW4Osg+OcdN1xGQBJd DQ08P1yk9lTBaGIys42s8HgqozI0f1+BQ4I7BcdEzctQshh9gQM65t8qojgorvg0 Jl2CLdt8x3wttBwJUt0swR/rRAGcp4nqDFDTSQvnxbbXTNW/i0UPGv8a+Hoykz1V q9gIelYlCAxY8d56BpM64FThzyX4hBsqlRUCAwEAAaOCAe8wggHrMB0GA1UdDgQW BBRFrQvq529LANc/VXup6Wd9dGKsjjAfBgNVHSMEGDAWgBQ76JbP8sAWl4SEUNq3 8hoeFKTwhjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO oEyGSnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MQVpDTy9P LWlXel9MQUZwZUVoRkRhdF9JYUhoU2s4SVkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB L08taVd6X0xBRnBlRWhGRGF0X0lhSGhTazhJWS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0xBWkNPL1JhMEw2dWR2U3dEWFAxVjdxZWxu ZlhSaXJJNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9y cmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAk8g AAUwDQYJKoZIhvcNAQELBQADggEBACfCCvK3giatasdrZYh03FFACbZTiwVBDFNZ T4+PvBPzf4PIR8caqhvXplTYhRjIg0CkRlADQeSBEYzsZpscYliTgJ3npTr1Y/bl qBTY6imZRs9eRmaQenLV4EgsbUkq3xe53M/+LstusfLWedugupHVmdYNZz/1vpba 0Frb9V/IteAnNz30n6tR8CTWW8SRmuFTAIt8xWsvWIRZLKlMpqv21VDVFUxDOCAt u/23bek3ikIZDw8UaZLJO6SlzU/p/RjaKZQiwVOezLu7Oi5i/rhGSzt7KgqDJ0NP 0Rh6J9NooOWt5nMk4H2o/Dv5OM0MfpwMH5oc2k9cBE1510wsQEo= -----END CERTIFICATE-----Generated at Sat Mar 7 11:14:10 2026 by rpki-client