$ rpki-client -vvf rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233372e302f32342d3332203d3e203138303430.roa File: 3134342e37392e3233372e302f32342d3332203d3e203138303430.roa (raw, json) Hash identifier: r6p1Am50m6SY4C22THPfAzr++Eba9JH1Hgnd4WmFLsA= Subject key identifier: 66:83:41:31:23:3E:31:1D:EA:5A:31:62:1A:B6:97:B3:5D:49:0D:14 Certificate issuer: /CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Certificate serial: 02F48EF0B86C90D58CD4415487830C0B94149172 Authority key identifier: DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233372e302f32342d3332203d3e203138303430.roa Signing time: Mon 06 Jul 2026 15:23:49 +0000 ROA not before: Mon 06 Jul 2026 15:18:49 +0000 ROA not after: Mon 05 Jul 2027 15:23:49 +0000 asID: 18040 IP address blocks: 144.79.237.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f4:8e:f0:b8:6c:90:d5:8c:d4:41:54:87:83:0c:0b:94:14:91:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C Validity Not Before: Jul 6 15:18:49 2026 GMT Not After : Jul 5 15:23:49 2027 GMT Subject: CN=66834131233E311DEA5A31621AB697B35D490D14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7b:6f:ae:e9:0d:7d:18:d5:a9:e1:6d:d8:5a: 2f:4b:a8:ac:79:fd:42:1b:5d:ad:18:e0:de:8d:6e: d5:8f:29:f3:b3:c9:a4:3e:8b:22:e7:7b:ba:95:14: e2:a3:11:51:af:f1:b2:b1:a1:c0:07:5e:f6:36:7c: 70:ad:f7:c5:15:0d:1b:93:a0:87:47:e8:f5:10:3b: 67:e4:09:f2:88:9d:74:f8:5b:30:8d:fd:e4:36:e9: c0:92:71:17:b2:40:c3:fe:27:73:8d:98:e7:ce:cb: cb:60:01:de:11:28:bd:f8:57:f3:39:e7:79:4a:70: 22:dd:d0:e6:ec:c4:6c:ae:c5:6d:f9:58:84:27:14: 78:1b:b8:05:af:9f:66:89:6e:0e:bc:c0:cc:68:e1: 47:6b:b9:eb:35:b9:7f:15:87:3c:95:8e:ec:56:6e: f9:8c:85:c2:f0:73:62:cb:71:e0:42:21:ed:62:f7: 24:64:06:89:6d:4c:87:7a:72:35:bc:b4:c2:08:c1: a7:de:54:0c:c3:c0:42:cd:be:f9:5d:fa:52:aa:c4: de:dd:cb:0e:09:48:b6:07:24:7f:34:37:98:49:ad: 63:ca:2d:c9:03:25:23:0c:7f:78:f6:b9:5f:7d:45: fa:a4:5c:79:d1:1a:6e:c0:90:47:96:d0:93:79:f3: 40:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:83:41:31:23:3E:31:1D:EA:5A:31:62:1A:B6:97:B3:5D:49:0D:14 X509v3 Authority Key Identifier: keyid:DB:E0:6A:5F:C5:A5:E2:89:AC:EB:48:7B:50:C5:EC:D3:B6:DE:23:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DBE06A5FC5A5E289ACEB487B50C5ECD3B6DE234C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/AOTERNET/1/3134342e37392e3233372e302f32342d3332203d3e203138303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.79.237.0/24 Signature Algorithm: sha256WithRSAEncryption 48:a2:e2:15:eb:68:be:dc:cc:4d:51:29:06:5b:21:2d:62:ff: 47:8f:92:18:25:4a:dc:82:4a:00:bb:65:87:20:1d:74:81:82: 4e:91:f6:37:af:0f:a7:17:f8:f7:b1:a2:da:f0:6f:88:09:5b: a9:a7:b3:66:b3:72:06:66:ab:94:9d:19:39:77:b6:aa:d7:39: 20:e0:7d:cb:7e:5f:d6:25:df:7c:54:bb:38:54:0b:dc:41:23: f9:d3:e6:57:f0:fd:fd:5d:5a:5e:6e:5e:c1:a5:50:c1:34:37: 05:6f:56:db:ca:3b:91:f9:1d:b5:55:8b:0a:ed:ee:01:d6:6d: 9f:70:51:e4:2b:1e:71:8a:85:f8:ad:28:3b:f2:37:91:4d:29: 2e:05:9c:86:e7:ef:71:3b:8b:cb:e0:e9:ea:b1:26:1b:0b:fa: e9:eb:29:33:45:e5:26:3c:93:5a:93:31:34:fe:29:62:de:2b: dc:8b:58:ad:e1:68:c6:65:3e:bc:d3:56:04:e0:7c:06:8e:94: b8:7d:3a:50:48:72:5a:45:64:af:c8:72:3e:ce:a5:ac:f2:dc: 4e:08:d7:8d:71:18:f6:48:7f:1b:37:e7:99:78:33:3b:52:c3: 54:88:46:4c:77:b1:a4:95:d3:b8:6c:36:82:6c:aa:14:e4:82: 34:0b:55:70 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUAvSO8LhskNWM1EFUh4MMC5QUkXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFMDZBNUZDNUE1RTI4OUFDRUI0ODdCNTBDNUVDRDNC NkRFMjM0QzAeFw0yNjA3MDYxNTE4NDlaFw0yNzA3MDUxNTIzNDlaMDMxMTAvBgNV BAMTKDY2ODM0MTMxMjMzRTMxMURFQTVBMzE2MjFBQjY5N0IzNUQ0OTBEMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQe2+u6Q19GNWp4W3YWi9LqKx5 /UIbXa0Y4N6NbtWPKfOzyaQ+iyLne7qVFOKjEVGv8bKxocAHXvY2fHCt98UVDRuT oIdH6PUQO2fkCfKInXT4WzCN/eQ26cCScReyQMP+J3ONmOfOy8tgAd4RKL34V/M5 53lKcCLd0ObsxGyuxW35WIQnFHgbuAWvn2aJbg68wMxo4Udrues1uX8VhzyVjuxW bvmMhcLwc2LLceBCIe1i9yRkBoltTId6cjW8tMIIwafeVAzDwELNvvld+lKqxN7d yw4JSLYHJH80N5hJrWPKLckDJSMMf3j2uV99RfqkXHnRGm7AkEeW0JN580BFAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUZoNBMSM+MR3qWjFiGraXs11JDRQwHwYDVR0j BBgwFoAU2+BqX8Wl4oms60h7UMXs07beI0wwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQU9URVJO RVQvMS9EQkUwNkE1RkM1QTVFMjg5QUNFQjQ4N0I1MEM1RUNEM0I2REUyMzRDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RCRTA2QTVGQzVBNUUyODlBQ0VCNDg3QjUw QzVFQ0QzQjZERTIzNEMuY2VyMH4GCCsGAQUFBwELBHIwcDBuBggrBgEFBQcwC4Zi cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9BT1RFUk5FVC8xLzMxMzQzNDJl MzczOTJlMzIzMzM3MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzODMwMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAJBP7TANBgkqhkiG9w0BAQsFAAOCAQEASKLiFetovtzMTVEpBlsh LWL/R4+SGCVK3IJKALtlhyAddIGCTpH2N68Ppxf497Gi2vBviAlbqaezZrNyBmar lJ0ZOXe2qtc5IOB9y35f1iXffFS7OFQL3EEj+dPmV/D9/V1aXm5ewaVQwTQ3BW9W 28o7kfkdtVWLCu3uAdZtn3BR5CsecYqF+K0oO/I3kU0pLgWchufvcTuLy+Dp6rEm Gwv66espM0XlJjyTWpMxNP4pYt4r3ItYreFoxmU+vNNWBOB8Bo6UuH06UEhyWkVk r8hyPs6lrPLcTgjXjXEY9kh/GzfnmXgzO1LDVIhGTHexpJXTuGw2gmyqFOSCNAtV cA== -----END CERTIFICATE-----Generated at Fri Jul 24 04:34:48 2026 by rpki-client