$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3a2f34342d3438203d3e203138303430.roa File: 323430323a343365303a3a2f34342d3438203d3e203138303430.roa (raw, json) Hash identifier: HLcVT5kUZhLvP/tOPNWlz6SlLrHZ0S1z1+6DTRLbPqE= Subject key identifier: E6:45:C6:76:10:00:E9:F3:D9:6D:62:9F:DD:2F:F9:5C:AE:4C:82:F1 Certificate issuer: /CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Certificate serial: 5F44EBF257FCE58977360124B164EF110F25B9D3 Authority key identifier: 0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3a2f34342d3438203d3e203138303430.roa Signing time: Mon 11 May 2026 17:58:42 +0000 ROA not before: Mon 11 May 2026 17:53:42 +0000 ROA not after: Mon 10 May 2027 17:58:42 +0000 asID: 18040 IP address blocks: 2402:43e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:44:eb:f2:57:fc:e5:89:77:36:01:24:b1:64:ef:11:0f:25:b9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78 Validity Not Before: May 11 17:53:42 2026 GMT Not After : May 10 17:58:42 2027 GMT Subject: CN=E645C6761000E9F3D96D629FDD2FF95CAE4C82F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bc:57:91:30:58:8f:5e:1d:18:b7:e6:8a:a1: a2:cf:66:95:1c:74:f3:3f:09:23:bd:94:43:0b:b3: 86:07:df:82:5e:d7:c6:e8:2b:b0:7b:a4:14:52:2b: 30:68:5d:99:ff:29:cc:90:f8:97:ea:d5:e8:91:67: 1e:4a:36:26:4e:7b:49:db:d9:fd:70:8e:cc:0e:aa: b2:20:4b:98:23:c0:98:7e:88:fb:74:d5:8b:9b:82: 6c:d7:06:e8:a0:a6:86:c4:94:ea:95:0f:8a:64:7f: 99:cd:5c:b6:80:47:d9:98:8b:04:92:5b:d0:c4:4c: 33:74:24:21:e6:08:52:a6:da:1b:90:23:ee:17:56: f7:be:e9:2e:9e:21:8d:f7:f9:43:26:00:fc:2c:62: 2f:5f:e9:ad:a1:8c:bb:b4:eb:d9:5e:9e:d8:25:3f: 49:0f:88:6a:a8:84:1a:6d:ab:e0:19:fa:08:df:27: e5:b0:39:d6:89:c8:22:f8:9e:8f:45:1b:26:40:e9: 44:ce:e2:10:b0:94:49:13:c9:50:81:b0:74:fd:df: 7d:fb:c8:c0:71:47:41:64:5c:b8:a0:b9:9f:15:02: c5:b1:f6:a2:bf:6d:ed:89:97:2c:3e:38:ba:57:15: 6b:86:b0:c6:32:2e:41:12:9e:43:11:06:2e:f1:98: 11:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:45:C6:76:10:00:E9:F3:D9:6D:62:9F:DD:2F:F9:5C:AE:4C:82:F1 X509v3 Authority Key Identifier: keyid:0F:6B:34:27:CD:40:3D:E7:0D:97:CD:DC:AF:A0:BD:BC:16:6C:3E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0F6B3427CD403DE70D97CDDCAFA0BDBC166C3E78.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/0/323430323a343365303a3a2f34342d3438203d3e203138303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:43e0::/44 Signature Algorithm: sha256WithRSAEncryption 0e:19:ab:57:ad:fe:3f:0a:97:a1:d3:17:6b:ee:03:fe:60:7c: d5:03:cf:ad:05:cd:80:e1:0c:a5:b3:d5:48:20:c4:f0:6c:fb: 7c:93:a2:ec:41:df:29:ab:38:09:da:f8:c2:94:29:80:71:54: 4e:cd:b5:c7:44:b8:48:56:7a:2e:dd:cb:07:00:a1:d3:44:d0: c8:9b:74:e3:ed:74:a6:1b:29:f6:3e:27:27:f1:ab:3e:ea:7f: ca:75:43:d2:75:e1:22:e9:9f:06:97:b7:2e:19:08:db:6b:b7: 6f:ef:15:3e:98:8f:bb:c2:b5:0d:37:24:75:d3:d9:a6:4a:82: 2a:96:d5:db:62:40:a2:96:2b:a9:15:7c:c0:83:96:4f:c6:25: f0:30:61:89:1c:8c:55:79:61:53:05:53:25:0d:b9:08:ec:f4: 4e:df:08:29:29:b7:0b:73:21:5d:2d:43:fe:bd:8b:89:6a:7b: f7:5b:c0:c2:45:72:85:cf:96:20:a7:49:da:e0:ae:89:1d:ef: f8:2e:da:cf:94:ab:3e:80:a4:9f:ac:fd:31:4a:82:52:cf:97: 2e:fb:d9:da:7f:2b:44:80:1c:92:25:e6:4c:dd:bc:3e:e2:eb: d3:2e:de:80:fb:d4:75:04:40:c3:c8:ca:02:e5:43:6b:c1:dc: 74:9c:ee:45 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUX0Tr8lf85Yl3NgEksWTvEQ8ludMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY2QjM0MjdDRDQwM0RFNzBEOTdDRERDQUZBMEJEQkMx NjZDM0U3ODAeFw0yNjA1MTExNzUzNDJaFw0yNzA1MTAxNzU4NDJaMDMxMTAvBgNV BAMTKEU2NDVDNjc2MTAwMEU5RjNEOTZENjI5RkREMkZGOTVDQUU0QzgyRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOvFeRMFiPXh0Yt+aKoaLPZpUc dPM/CSO9lEMLs4YH34Je18boK7B7pBRSKzBoXZn/KcyQ+Jfq1eiRZx5KNiZOe0nb 2f1wjswOqrIgS5gjwJh+iPt01YubgmzXBuigpobElOqVD4pkf5nNXLaAR9mYiwSS W9DETDN0JCHmCFKm2huQI+4XVve+6S6eIY33+UMmAPwsYi9f6a2hjLu069lentgl P0kPiGqohBptq+AZ+gjfJ+WwOdaJyCL4no9FGyZA6UTO4hCwlEkTyVCBsHT93337 yMBxR0FkXLiguZ8VAsWx9qK/be2Jlyw+OLpXFWuGsMYyLkESnkMRBi7xmBGvAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQU5kXGdhAA6fPZbWKf3S/5XK5MgvEwHwYDVR0j BBgwFoAUD2s0J81APecNl83cr6C9vBZsPngwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMC8wRjZCMzQyN0NENDAzREU3MEQ5N0NERENBRkEwQkRCQzE2NkMzRTc4LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzBGNkIzNDI3Q0Q0MDNERTcwRDk3Q0REQ0FG QTBCREJDMTY2QzNFNzguY2VyMHwGCCsGAQUFBwELBHAwbjBsBggrBgEFBQcwC4Zg cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8wLzMyMzQzMDMy M2EzNDMzNjUzMDNhM2EyZjM0MzQyZDM0MzgyMDNkM2UyMDMxMzgzMDM0MzAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwQkAkPgAAAwDQYJKoZIhvcNAQELBQADggEBAA4Zq1et/j8Kl6HTF2vu A/5gfNUDz60FzYDhDKWz1UggxPBs+3yTouxB3ymrOAna+MKUKYBxVE7NtcdEuEhW ei7dywcAodNE0MibdOPtdKYbKfY+Jyfxqz7qf8p1Q9J14SLpnwaXty4ZCNtrt2/v FT6Yj7vCtQ03JHXT2aZKgiqW1dtiQKKWK6kVfMCDlk/GJfAwYYkcjFV5YVMFUyUN uQjs9E7fCCkptwtzIV0tQ/69i4lqe/dbwMJFcoXPliCnSdrgrokd7/gu2s+Uqz6A pJ+s/TFKglLPly772dp/K0SAHJIl5kzdvD7i69Mu3oD71HUEQMPIygLlQ2vB3HSc 7kU= -----END CERTIFICATE-----Generated at Tue May 12 23:46:00 2026 by rpki-client