$ rpki-client -vvvf rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233362e302f32332d3234203d3e203138303430.roa File: 3134342e37392e3233362e302f32332d3234203d3e203138303430.roa (raw, json) Hash identifier: swWMMhQXlSR0PFV4e85I459ba4C8/nyQkI/jb0Kgt70= Subject key identifier: 77:8E:C1:CA:79:00:9A:9C:75:B6:3A:A7:E6:3D:CE:2D:80:DF:23:D1 Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Certificate serial: 1B4748754D2260A86911D6022734D23EA67B9A22 Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233362e302f32332d3234203d3e203138303430.roa Signing time: Fri 25 Sep 2026 12:04:01 +0000 ROA not before: Fri 25 Sep 2026 11:59:01 +0000 ROA not after: Fri 24 Sep 2027 12:04:01 +0000 asID: 18040 IP address blocks: 144.79.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 01:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:47:48:75:4d:22:60:a8:69:11:d6:02:27:34:d2:3e:a6:7b:9a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Validity Not Before: Sep 25 11:59:01 2026 GMT Not After : Sep 24 12:04:01 2027 GMT Subject: CN=778EC1CA79009A9C75B63AA7E63DCE2D80DF23D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:50:15:64:e8:99:01:42:c9:a7:ee:73:f9:44: ff:26:a0:9c:f3:c5:b0:31:f8:24:c0:5f:05:50:4d: 0d:f1:49:36:f5:ac:fd:56:94:e0:35:a0:01:8b:57: ff:4b:b8:6f:55:bd:c3:11:52:03:82:75:ec:27:b8: 66:28:12:60:9e:a6:12:53:82:04:5e:58:f7:c4:1d: cb:dc:16:2a:55:41:7a:8d:38:52:aa:2c:44:5d:55: 80:1e:63:63:d5:c0:76:d9:99:80:dd:b5:77:06:d1: 5d:e6:dc:9e:73:a5:e3:bc:cb:15:55:b3:2b:be:55: 89:be:97:81:75:cb:1f:ba:99:d4:bc:2d:fc:5a:bb: d8:d6:54:39:49:a6:f5:a8:34:3d:75:2a:1e:ff:14: 4a:e4:3c:9a:22:5b:91:dc:c2:65:95:11:da:62:a2: 23:66:32:70:0b:93:66:5d:44:65:cc:f0:07:5f:d6: 23:08:dd:b8:0d:67:7d:17:9e:03:42:5a:9d:d4:90: 01:f3:b7:0d:12:63:c7:6d:c1:7e:74:2e:03:29:39: 60:ea:d3:5e:c8:2e:4c:bb:ee:d5:c5:79:a8:d4:00: bc:8c:d4:cb:d6:c7:72:96:8e:00:f7:5f:6e:42:66: 42:cb:d9:d0:40:f9:0f:ed:94:94:cb:49:1c:5e:79: 8a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8E:C1:CA:79:00:9A:9C:75:B6:3A:A7:E6:3D:CE:2D:80:DF:23:D1 X509v3 Authority Key Identifier: keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233362e302f32332d3234203d3e203138303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.236.0/23 Signature Algorithm: sha256WithRSAEncryption 01:ce:53:28:2c:80:e1:b6:9b:37:85:d6:f9:98:9f:31:5c:9c: 30:ac:08:10:13:73:73:1a:05:d6:ce:da:85:33:87:e7:07:55: cc:ad:43:06:ac:ac:e6:c2:7d:89:6d:c2:50:af:83:61:1d:87: 62:f3:7b:06:f4:84:39:e8:a4:74:f2:9d:e0:af:b3:e8:1d:ac: 77:95:0c:43:ac:b9:56:68:5c:8c:2e:40:08:41:5e:e8:3f:31: e0:bf:dc:c1:f9:0c:db:71:19:29:61:9b:f5:b9:5d:33:3d:ed: 8d:bd:ca:b3:89:ff:a9:27:8e:7c:d5:16:04:c7:8f:e6:8c:f5: a5:a7:d2:a2:67:d2:21:47:5a:54:96:c7:44:e6:a4:f8:96:ad: 36:a0:72:49:0e:04:cc:02:75:0d:de:30:f9:ac:8c:e5:61:eb: 75:86:dd:82:cf:a5:fd:b7:3a:50:72:70:60:af:1c:43:7a:99: 8a:03:ea:87:4b:7d:d3:f7:79:13:e6:16:02:2b:63:a9:3e:95: 98:ab:48:cc:3f:3f:bb:b9:86:a2:42:98:7e:5f:f8:a0:da:a2: 65:6f:cb:16:35:98:4c:6e:98:5d:c7:91:13:d9:0f:f1:02:aa: 62:a2:b9:9c:10:b0:79:a1:0e:80:91:ed:f8:e5:d8:2b:c4:67: 8a:f2:27:24 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUG0dIdU0iYKhpEdYCJzTSPqZ7miIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0ODdCNTBDNUVDRDNC NkRFMjM0QzAeFw0yNjA5MjUxMTU5MDFaFw0yNzA5MjQxMjA0MDFaMDMxMTAvBgNV BAMTKDc3OEVDMUNBNzkwMDlBOUM3NUI2M0FBN0U2M0RDRTJEODBERjIzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiUBVk6JkBQsmn7nP5RP8moJzz xbAx+CTAXwVQTQ3xSTb1rP1WlOA1oAGLV/9LuG9VvcMRUgOCdewnuGYoEmCephJT ggReWPfEHcvcFipVQXqNOFKqLERdVYAeY2PVwHbZmYDdtXcG0V3m3J5zpeO8yxVV syu+VYm+l4F1yx+6mdS8Lfxau9jWVDlJpvWoND11Kh7/FErkPJoiW5HcwmWVEdpi oiNmMnALk2ZdRGXM8Adf1iMI3bgNZ30XngNCWp3UkAHztw0SY8dtwX50LgMpOWDq 017ILky77tXFeajUALyM1MvWx3KWjgD3X25CZkLL2dBA+Q/tlJTLSRxeeYqPAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUd47BynkAmpx1tjqn5j3OLYDfI9EwHwYDVR0j BBgwFoAU2+BqX8Wl4oms60h7UMXs07beI0wwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMS9EQkUwNkE1RkM1QTVFMjg5QUNFQjQ4N0I1MEM1RUNEM0I2REUyMzRDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUw QzVFQ0QzQjZERTIzNEMuY2VyMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4Zi cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8xLzMxMzQzNDJl MzczOTJlMzIzMzM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzEzODMwMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAZBP7DANBgkqhkiG9w0BAQsFAAOCAQEAAc5TKCyA4babN4XW+Zif MVycMKwIEBNzcxoF1s7ahTOH5wdVzK1DBqys5sJ9iW3CUK+DYR2HYvN7BvSEOeik dPKd4K+z6B2sd5UMQ6y5VmhcjC5ACEFe6D8x4L/cwfkM23EZKWGb9bldMz3tjb3K s4n/qSeOfNUWBMeP5oz1pafSomfSIUdaVJbHROak+JatNqBySQ4EzAJ1Dd4w+ayM 5WHrdYbdgs+l/bc6UHJwYK8cQ3qZigPqh0t90/d5E+YWAitjqT6VmKtIzD8/u7mG okKYfl/4oNqiZW/LFjWYTG6YXceRE9kP8QKqYqK5nBCweaEOgJHt+OXYK8RnivIn JA== -----END CERTIFICATE-----Generated at Sun Sep 27 07:34:06 2026 by rpki-client