$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233372e302f32342d3234203d3e203138303430.roa File: 3134342e37392e3233372e302f32342d3234203d3e203138303430.roa (raw, json) Hash identifier: YiNfhn2rfnFW/2M2Ag4d3OUBywy0FERwAc5K7Q8vyfc= Subject key identifier: 07:77:87:58:31:86:D1:28:B9:A4:59:1F:4F:A6:9A:33:8E:BB:25:1C Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Certificate serial: 44B3BBAEA953F0832BE4B434C693A9F322EFE988 Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233372e302f32342d3234203d3e203138303430.roa Signing time: Mon 06 Jul 2026 15:23:50 +0000 ROA not before: Mon 06 Jul 2026 15:18:50 +0000 ROA not after: Mon 05 Jul 2027 15:23:50 +0000 asID: 18040 IP address blocks: 144.79.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:b3:bb:ae:a9:53:f0:83:2b:e4:b4:34:c6:93:a9:f3:22:ef:e9:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Validity Not Before: Jul 6 15:18:50 2026 GMT Not After : Jul 5 15:23:50 2027 GMT Subject: CN=077787583186D128B9A4591F4FA69A338EBB251C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a7:85:c3:b0:3c:02:da:b6:6d:2b:d0:a2:b4: 90:a9:21:c5:e1:87:a8:c5:c0:ae:7c:99:1f:de:a2: e0:d1:e2:15:c6:8d:d0:ad:72:a0:f0:4b:4d:31:9b: 12:50:de:92:4b:d2:ee:8b:43:d8:55:6f:0c:d6:13: 31:e6:47:5e:4e:cf:32:84:45:a9:1f:6d:92:37:95: 71:5c:7f:1c:f7:21:03:80:ad:c1:13:be:79:15:db: e8:bf:7b:ff:a0:8f:51:95:00:a9:58:6b:80:b7:fa: e8:21:be:f9:f3:52:92:bb:13:1c:c3:c7:12:bc:9d: 17:fb:b2:7e:b1:39:98:67:e5:f2:75:96:38:cd:46: 35:d9:ca:30:4c:c8:a5:6b:92:43:83:3b:33:a6:45: de:fc:43:ae:98:ef:df:a1:31:ea:a8:91:74:c2:67: fc:f4:0f:aa:9c:54:98:27:3b:37:0d:4a:bb:3b:f5: c3:09:4b:3d:22:b0:61:bc:01:a3:83:dd:9c:9c:55: 63:a5:80:08:53:09:19:ab:f8:a6:8f:30:1b:fb:19: 77:4e:48:ff:47:fe:d5:05:fb:f5:26:76:da:20:11: 71:d9:f0:31:49:a9:5c:6f:09:80:5a:e9:88:5c:4d: 2e:10:ca:6c:8f:31:7a:40:74:20:fc:b5:04:e3:a5: f5:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:77:87:58:31:86:D1:28:B9:A4:59:1F:4F:A6:9A:33:8E:BB:25:1C X509v3 Authority Key Identifier: keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233372e302f32342d3234203d3e203138303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.237.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:9b:59:ef:e1:2b:9d:33:d5:52:d2:dd:05:5d:b7:2d:6d:bc: 1d:88:7a:08:76:42:b7:49:f6:89:06:e7:45:1f:de:7a:ed:8f: 57:8d:c8:43:ba:d4:d8:7a:5a:3c:3e:70:ed:da:e4:fa:c3:51: ab:1a:65:5e:09:02:ce:f9:4b:1e:63:77:8b:b4:7b:e6:61:a2: 8b:48:b7:57:27:5e:eb:fc:45:ba:ed:72:30:3d:bc:0d:26:a3: 47:0e:8a:61:d3:11:13:78:17:ad:a8:0d:be:b6:58:33:f9:19: 46:0b:a4:24:3b:55:3f:d5:26:3d:eb:7d:7a:83:77:49:37:b7: cc:ee:09:89:50:b3:03:3b:ac:d9:1a:0b:90:e5:b8:8b:1f:59: 2a:fe:5f:23:43:ec:0e:a8:bf:83:e1:a9:c4:58:ad:ee:96:80: 8f:63:cd:38:35:b8:08:c3:69:2a:72:0e:67:c1:98:23:9b:4a: 4a:83:3b:12:cd:8e:1e:6c:6d:6a:db:50:e1:1d:48:24:24:57: fa:7f:44:34:54:68:87:da:d5:cc:44:84:62:7b:10:4c:c2:02: d5:17:bf:b6:23:9c:73:54:87:05:60:c8:dd:2f:df:af:6e:e2: 9a:4a:18:91:cb:e3:43:0d:ef:2d:78:5e:0a:dc:fa:2f:34:1a: 25:c9:a7:4b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIURLO7rqlT8IMr5LQ0xpOp8yLv6YgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0ODdCNTBDNUVDRDNC NkRFMjM0QzAeFw0yNjA3MDYxNTE4NTBaFw0yNzA3MDUxNTIzNTBaMDMxMTAvBgNV BAMTKDA3Nzc4NzU4MzE4NkQxMjhCOUE0NTkxRjRGQTY5QTMzOEVCQjI1MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTp4XDsDwC2rZtK9CitJCpIcXh h6jFwK58mR/eouDR4hXGjdCtcqDwS00xmxJQ3pJL0u6LQ9hVbwzWEzHmR15OzzKE RakfbZI3lXFcfxz3IQOArcETvnkV2+i/e/+gj1GVAKlYa4C3+ughvvnzUpK7ExzD xxK8nRf7sn6xOZhn5fJ1ljjNRjXZyjBMyKVrkkODOzOmRd78Q66Y79+hMeqokXTC Z/z0D6qcVJgnOzcNSrs79cMJSz0isGG8AaOD3ZycVWOlgAhTCRmr+KaPMBv7GXdO SP9H/tUF+/UmdtogEXHZ8DFJqVxvCYBa6YhcTS4QymyPMXpAdCD8tQTjpfVDAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUB3eHWDGG0Si5pFkfT6aaM467JRwwHwYDVR0j BBgwFoAU2+BqX8Wl4oms60h7UMXs07beI0wwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMS9EQkUwNkE1RkM1QTVFMjg5QUNFQjQ4N0I1MEM1RUNEM0I2REUyMzRDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUw QzVFQ0QzQjZERTIzNEMuY2VyMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4Zi cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8xLzMxMzQzNDJl MzczOTJlMzIzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMwMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBP7TANBgkqhkiG9w0BAQsFAAOCAQEAb5tZ7+ErnTPVUtLdBV23 LW28HYh6CHZCt0n2iQbnRR/eeu2PV43IQ7rU2HpaPD5w7drk+sNRqxplXgkCzvlL HmN3i7R75mGii0i3Vyde6/xFuu1yMD28DSajRw6KYdMRE3gXragNvrZYM/kZRguk JDtVP9UmPet9eoN3STe3zO4JiVCzAzus2RoLkOW4ix9ZKv5fI0PsDqi/g+GpxFit 7paAj2PNODW4CMNpKnIOZ8GYI5tKSoM7Es2OHmxtattQ4R1IJCRX+n9ENFRoh9rV zESEYnsQTMIC1Re/tiOcc1SHBWDI3S/fr27imkoYkcvjQw3vLXheCtz6LzQaJcmn Sw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:28:07 2026 by rpki-client