$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233372e302f32342d3234203d3e20313532363132.roa File: 3134342e37392e3233372e302f32342d3234203d3e20313532363132.roa (raw, json) Hash identifier: aqUYGYZZ4SIzEA/BLO0DH4FickVrqbLzNS8KzmVfkyA= Subject key identifier: AA:A2:31:7E:11:2C:EE:25:4F:A2:47:EA:BA:C9:49:BB:47:17:2B:22 Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Certificate serial: 0C8140B69D4E643906E5C2084B52F7D9ECBDE89E Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233372e302f32342d3234203d3e20313532363132.roa Signing time: Mon 11 May 2026 17:58:41 +0000 ROA not before: Mon 11 May 2026 17:53:41 +0000 ROA not after: Mon 10 May 2027 17:58:41 +0000 asID: 152612 IP address blocks: 144.79.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 01:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:81:40:b6:9d:4e:64:39:06:e5:c2:08:4b:52:f7:d9:ec:bd:e8:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Validity Not Before: May 11 17:53:41 2026 GMT Not After : May 10 17:58:41 2027 GMT Subject: CN=AAA2317E112CEE254FA247EABAC949BB47172B22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:e8:32:bf:eb:0b:3d:3c:09:f4:d6:cf:1e: 36:d5:ff:e4:1c:6a:40:d6:eb:73:29:70:1c:90:29: 02:b8:09:5d:54:a8:bb:06:13:4a:c9:6b:a0:96:37: da:e0:23:17:ce:64:2f:56:80:4c:48:b0:e7:5b:c2: c4:c1:51:c1:f9:be:4a:d6:ed:bb:36:8e:45:d0:d3: 2c:a1:c2:4f:43:56:70:85:0f:e6:37:c8:6e:9f:dc: ea:3a:ad:cd:94:79:1f:a6:71:a4:34:9a:6d:30:52: d4:7e:a9:30:6a:20:56:d3:1a:6c:75:5d:a1:dc:c3: 97:c8:5b:57:3c:08:3f:b3:49:db:ac:d8:e1:7a:f1: c5:3d:2a:f3:71:f4:f6:1f:8c:38:d8:2c:d6:47:63: ea:ba:d9:70:76:d3:36:4b:7a:7d:7a:dc:81:04:0c: b5:a0:a7:4b:91:e8:ad:4c:0d:ec:3d:a2:6b:85:6b: 89:a9:17:08:d2:1d:ba:de:d7:19:1f:9d:12:ea:5b: 4c:25:f7:c3:70:d7:9b:e4:07:df:5c:8b:b2:53:9c: d6:c2:a1:4c:1b:13:b7:d8:0d:68:7b:5e:68:56:55: af:b7:78:f8:3b:e3:aa:83:eb:5f:29:91:c6:20:a3: 70:41:44:55:e6:c4:54:dc:02:57:26:4f:7a:c6:fb: db:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A2:31:7E:11:2C:EE:25:4F:A2:47:EA:BA:C9:49:BB:47:17:2B:22 X509v3 Authority Key Identifier: keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233372e302f32342d3234203d3e20313532363132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.237.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:48:a1:b1:7a:0b:fa:e3:d6:24:ea:19:9e:5d:b6:9b:ca:84: 9e:c0:5f:38:02:54:f4:79:b9:fd:3b:a7:3f:75:c3:9d:a5:87: d9:95:db:4d:a5:dd:44:e2:48:10:dc:1c:a5:f7:64:a0:12:72: e3:8c:17:42:e2:e8:3f:8c:b8:85:5d:f9:b8:61:4b:9f:37:23: 51:37:b9:cd:06:4c:cd:38:ad:7a:59:07:72:b9:5f:11:d8:97: ef:8d:3c:07:12:72:a6:9e:a7:18:8e:b6:62:d5:ce:9d:9a:f2: 49:b1:06:23:8e:80:ec:c0:86:6a:a1:29:fb:91:66:80:aa:f6: fc:a6:f1:42:d4:3e:27:b5:1c:4d:15:d9:1a:5c:4d:ed:30:03: 43:e9:5d:04:16:14:c4:37:a6:57:de:4b:ba:fe:f9:98:5d:5d: 52:b7:38:f0:83:d0:58:05:5f:ed:86:8d:98:ec:46:b7:67:f2: 0c:6a:9f:8c:bc:89:9c:e2:25:55:2b:35:b4:9e:8b:ab:dd:9b: 4c:13:7a:e3:24:a4:9b:23:32:42:8d:e2:47:8d:c0:d8:a5:f5: ef:9c:f8:21:59:ee:aa:0b:41:3f:14:97:5b:c6:e3:72:01:64: 5f:91:fd:a8:1c:82:93:f9:20:86:8e:85:0d:dc:48:4c:1a:a1: ac:8b:cd:c4 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUDIFAtp1OZDkG5cIIS1L32ey96J4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0ODdCNTBDNUVDRDNC NkRFMjM0QzAeFw0yNjA1MTExNzUzNDFaFw0yNzA1MTAxNzU4NDFaMDMxMTAvBgNV BAMTKEFBQTIzMTdFMTEyQ0VFMjU0RkEyNDdFQUJBQzk0OUJCNDcxNzJCMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2ugyv+sLPTwJ9NbPHjbV/+Qc akDW63MpcByQKQK4CV1UqLsGE0rJa6CWN9rgIxfOZC9WgExIsOdbwsTBUcH5vkrW 7bs2jkXQ0yyhwk9DVnCFD+Y3yG6f3Oo6rc2UeR+mcaQ0mm0wUtR+qTBqIFbTGmx1 XaHcw5fIW1c8CD+zSdus2OF68cU9KvNx9PYfjDjYLNZHY+q62XB20zZLen163IEE DLWgp0uR6K1MDew9omuFa4mpFwjSHbre1xkfnRLqW0wl98Nw15vkB99ci7JTnNbC oUwbE7fYDWh7XmhWVa+3ePg746qD618pkcYgo3BBRFXmxFTcAlcmT3rG+9ulAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUqqIxfhEs7iVPokfquslJu0cXKyIwHwYDVR0j BBgwFoAU2+BqX8Wl4oms60h7UMXs07beI0wwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMS9EQkUwNkE1RkM1QTVFMjg5QUNFQjQ4N0I1MEM1RUNEM0I2REUyMzRDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUw QzVFQ0QzQjZERTIzNEMuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuG ZHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJORVQvMS8zMTM0MzQy ZTM3MzkyZTMyMzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMjM2MzEz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJBP7TANBgkqhkiG9w0BAQsFAAOCAQEALkihsXoL+uPWJOoZ nl22m8qEnsBfOAJU9Hm5/TunP3XDnaWH2ZXbTaXdROJIENwcpfdkoBJy44wXQuLo P4y4hV35uGFLnzcjUTe5zQZMzTitelkHcrlfEdiX7408BxJypp6nGI62YtXOnZry SbEGI46A7MCGaqEp+5FmgKr2/KbxQtQ+J7UcTRXZGlxN7TADQ+ldBBYUxDemV95L uv75mF1dUrc48IPQWAVf7YaNmOxGt2fyDGqfjLyJnOIlVSs1tJ6Lq92bTBN64ySk myMyQo3iR43A2KX175z4IVnuqgtBPxSXW8bjcgFkX5H9qByCk/kgho6FDdxITBqh rIvNxA== -----END CERTIFICATE-----Generated at Wed May 13 00:44:42 2026 by rpki-client