$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3230313a3a2f34382d3634203d3e20323136313938.roa File: 323430323a343365303a3230313a3a2f34382d3634203d3e20323136313938.roa (raw, json) Hash identifier: j7P2rYuZrn8hZPV0CeIdB1Ff1unc7rLG1cgPDTKwPHg= Subject key identifier: 28:3B:27:0F:CB:14:5C:D0:AA:F1:B1:18:53:8C:FD:1D:44:A2:1E:57 Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Certificate serial: 49C7696C2C5233173679FA240FB7BA091924CD3B Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3230313a3a2f34382d3634203d3e20323136313938.roa Signing time: Mon 11 May 2026 17:58:12 +0000 ROA not before: Mon 11 May 2026 17:53:12 +0000 ROA not after: Mon 10 May 2027 17:58:12 +0000 asID: 216198 IP address blocks: 2402:43e0:201::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c7:69:6c:2c:52:33:17:36:79:fa:24:0f:b7:ba:09:19:24:cd:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Validity Not Before: May 11 17:53:12 2026 GMT Not After : May 10 17:58:12 2027 GMT Subject: CN=283B270FCB145CD0AAF1B118538CFD1D44A21E57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:34:e6:7e:f0:2b:0b:92:0a:b0:51:1b:18:82: 11:06:b4:b7:45:e2:cf:b1:05:33:12:8f:d5:6c:26: 3a:32:ca:0d:5d:f3:32:1b:34:9c:d3:67:46:16:2f: bf:5f:c0:ca:3c:3c:8d:84:3b:b9:67:62:b7:e7:dd: a0:64:bf:3e:09:0f:47:35:e6:a8:55:47:b8:c3:4b: 33:8d:8a:96:e5:41:f1:bc:ed:ef:af:7e:7f:83:e4: e2:18:54:1f:fa:d7:67:3a:5f:3d:5a:94:f1:93:e0: 11:50:e7:4c:63:be:50:58:99:28:59:95:66:bb:8b: f7:76:4c:e9:00:cf:5d:61:39:4c:6f:13:a1:4c:64: 6f:60:37:b6:94:5d:ec:3f:55:7b:b4:83:e3:7d:e5: 7b:96:5a:33:45:3b:2d:1c:dd:1f:11:d5:a8:d0:e9: 60:da:ad:f2:99:02:5a:9a:c8:68:78:ca:5b:1a:8c: 1a:1d:71:44:13:f9:8b:76:e0:ff:76:0e:11:a3:71: 3d:5b:5d:84:3e:3c:50:a8:9f:2f:ac:3f:34:43:ed: 12:39:54:7f:8b:de:26:be:0e:6f:3d:01:db:f3:d1: ed:ca:68:d5:9e:52:a6:a0:1f:6d:6a:56:12:a6:01: b9:77:e8:bc:47:8b:7f:0c:99:19:30:ad:7c:47:ba: 66:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3B:27:0F:CB:14:5C:D0:AA:F1:B1:18:53:8C:FD:1D:44:A2:1E:57 X509v3 Authority Key Identifier: keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3230313a3a2f34382d3634203d3e20323136313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:43e0:201::/48 Signature Algorithm: sha256WithRSAEncryption 2d:7a:c0:8b:ed:e9:61:15:e7:fa:96:04:81:47:24:b5:31:72: 8b:e9:3c:30:89:eb:fa:be:b9:5d:d2:85:9d:9c:a2:53:e3:e9: 8d:da:70:9a:5d:20:b4:f2:c5:50:fb:b8:77:06:91:da:45:bb: e8:71:98:0a:de:72:93:4e:65:9e:93:a0:43:00:25:bd:46:8c: 91:0a:88:37:8e:a7:04:ec:73:06:34:dd:73:31:e2:fe:1b:02: 4d:42:1e:68:0d:d1:11:7a:94:d6:4a:54:51:99:7e:4d:9e:bc: 6f:af:14:a4:76:d0:0d:40:29:5c:3d:d1:45:d7:4c:10:ee:34: a9:27:01:86:99:9f:07:c6:3b:e0:be:38:c5:af:35:ee:40:90: 0e:21:7d:1e:06:c7:d0:11:f9:fb:51:5c:8c:bb:0f:27:82:ee: 55:da:7c:66:b1:cf:1c:1b:41:44:a3:77:27:24:2e:f6:d8:8f: 05:14:6b:7b:ed:4e:12:3e:52:01:a4:91:04:b6:a5:31:54:70: 3e:ce:24:86:d6:db:80:44:b4:40:32:c0:3e:60:9b:4b:06:07: d0:84:84:e7:09:cc:de:6d:7e:ed:34:5f:d1:25:01:69:0b:43: ea:9d:52:f3:80:76:0d:5e:f7:ff:7a:90:aa:c6:72:e8:cb:20: 57:6e:0c:ba -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgIUScdpbCxSMxc2efokD7e6CRkkzTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY2QjM0MjdDRDQwM0RFNzBEOTdDRERDQUZBMEJEQkMx NjZDM0U3ODAeFw0yNjA1MTExNzUzMTJaFw0yNzA1MTAxNzU4MTJaMDMxMTAvBgNV BAMTKDI4M0IyNzBGQ0IxNDVDRDBBQUYxQjExODUzOENGRDFENDRBMjFFNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENOZ+8CsLkgqwURsYghEGtLdF 4s+xBTMSj9VsJjoyyg1d8zIbNJzTZ0YWL79fwMo8PI2EO7lnYrfn3aBkvz4JD0c1 5qhVR7jDSzONipblQfG87e+vfn+D5OIYVB/612c6Xz1alPGT4BFQ50xjvlBYmShZ lWa7i/d2TOkAz11hOUxvE6FMZG9gN7aUXew/VXu0g+N95XuWWjNFOy0c3R8R1ajQ 6WDarfKZAlqayGh4ylsajBodcUQT+Yt24P92DhGjcT1bXYQ+PFCony+sPzRD7RI5 VH+L3ia+Dm89Advz0e3KaNWeUqagH21qVhKmAbl36LxHi38MmRkwrXxHumabAgMB AAGjggHzMIIB7zAdBgNVHQ4EFgQUKDsnD8sUXNCq8bEYU4z9HUSiHlcwHwYDVR0j BBgwFoAUD2s0J81APecNl83cr6C9vBZsPngwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMC8wRjZCMzQyN0NENDAzREU3MEQ5N0NERENBRkEwQkRCQzE2NkMzRTc4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzBGNkIzNDI3Q0Q0MDNERTcwRDk3Q0REQ0FG QTBCREJDMTY2QzNFNzguY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuG anJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJORVQvMC8zMjM0MzAz MjNhMzQzMzY1MzAzYTMyMzAzMTNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDMyMzEz NjMxMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQCQ+ACATANBgkqhkiG9w0BAQsFAAOCAQEALXrA i+3pYRXn+pYEgUcktTFyi+k8MInr+r65XdKFnZyiU+Ppjdpwml0gtPLFUPu4dwaR 2kW76HGYCt5yk05lnpOgQwAlvUaMkQqIN46nBOxzBjTdczHi/hsCTUIeaA3REXqU 1kpUUZl+TZ68b68UpHbQDUApXD3RRddMEO40qScBhpmfB8Y74L44xa817kCQDiF9 HgbH0BH5+1FcjLsPJ4LuVdp8ZrHPHBtBRKN3JyQu9tiPBRRre+1OEj5SAaSRBLal MVRwPs4khtbbgES0QDLAPmCbSwYH0ISE5wnM3m1+7TRf0SUBaQtD6p1S84B2DV73 /3qQqsZy6MsgV24Mug== -----END CERTIFICATE-----Generated at Tue May 12 21:52:41 2026 by rpki-client