$ rpki-client -vvf rpkica.twnic.tw/rpki/DODOLTD/0/323430313a646165303a3a2f33322d3438203d3e203137343133.roa File: 323430313a646165303a3a2f33322d3438203d3e203137343133.roa (raw, json) Hash identifier: b68bWoGxHLV5+EX7YP+9x4UhUEcmWXOG9HkIeVaSI1M= Subject key identifier: FC:50:1D:1E:AC:6D:25:99:79:63:03:4C:4F:A5:CD:EC:92:35:99:C9 Certificate issuer: /CN=6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4 Certificate serial: 5F0E7871E7D99D09D34608658FC1AC010B46306A Authority key identifier: 6E:5C:85:5A:08:B3:87:C6:CB:31:7D:91:D7:D9:A5:0E:A2:B3:5A:D4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DODOLTD/0/323430313a646165303a3a2f33322d3438203d3e203137343133.roa Signing time: Mon 11 May 2026 17:39:19 +0000 ROA not before: Mon 11 May 2026 17:34:19 +0000 ROA not after: Mon 10 May 2027 17:39:19 +0000 asID: 17413 IP address blocks: 2401:dae0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.crl rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0e:78:71:e7:d9:9d:09:d3:46:08:65:8f:c1:ac:01:0b:46:30:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4 Validity Not Before: May 11 17:34:19 2026 GMT Not After : May 10 17:39:19 2027 GMT Subject: CN=FC501D1EAC6D25997963034C4FA5CDEC923599C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b5:f2:79:a1:ed:21:32:1c:7e:0c:5d:43:26: f8:cc:28:69:c0:98:de:fc:52:55:30:33:7a:19:c6: 2c:23:30:7b:91:6d:9c:4b:89:9c:27:f5:de:f6:28: 74:bd:5c:09:a8:20:b1:82:c0:5b:aa:0a:a7:af:5c: 38:bc:ba:ef:49:84:6a:cb:32:ab:4e:bd:3c:28:1e: 84:23:13:d5:82:ac:71:57:af:92:99:29:69:71:5c: 05:e4:a8:59:12:af:50:1b:8b:d0:a0:3c:85:f5:2d: 43:5e:70:57:b7:52:ab:95:d9:87:09:82:f4:71:30: c3:df:45:d0:b3:a9:ac:71:28:98:1f:92:0b:d2:25: c4:6c:01:30:38:13:e7:f8:7d:ca:cf:8c:7e:c3:2f: 82:33:51:45:db:b8:73:00:74:3f:22:94:97:90:82: 87:09:a0:1e:14:e5:b8:a2:df:aa:fc:a3:ef:4e:f8: 89:58:dc:65:59:c3:3b:bc:f0:4f:02:c2:e0:00:f7: 9a:33:25:78:2d:8b:0f:c4:08:12:9c:ed:31:34:8f: a7:b7:79:89:a7:73:12:d3:da:7c:9a:4c:59:b9:0f: cc:80:60:6d:e0:82:76:15:87:7f:b0:64:d4:60:45: 24:ac:95:22:6b:e1:88:4b:73:d3:60:48:3c:55:10: 14:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:50:1D:1E:AC:6D:25:99:79:63:03:4C:4F:A5:CD:EC:92:35:99:C9 X509v3 Authority Key Identifier: keyid:6E:5C:85:5A:08:B3:87:C6:CB:31:7D:91:D7:D9:A5:0E:A2:B3:5A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/0/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E5C855A08B387C6CB317D91D7D9A50EA2B35AD4.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DODOLTD/0/323430313a646165303a3a2f33322d3438203d3e203137343133.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:dae0::/32 Signature Algorithm: sha256WithRSAEncryption 04:8a:42:0a:e3:39:de:b6:f1:a9:88:37:07:c1:33:31:7b:af: 9d:fa:a6:fd:c4:2d:d0:9f:67:db:1f:57:01:ee:2b:bf:47:3e: 00:41:60:77:47:1e:aa:29:9c:da:cb:6a:1b:d5:27:d5:bb:34: 75:04:90:7f:f1:f6:c0:58:fb:72:d8:8d:72:bf:5f:2d:6e:2c: b4:df:eb:a6:6d:f2:ae:9e:20:d3:80:c1:c5:2f:e2:9e:f8:fd: 2b:86:44:d8:c3:43:3a:16:64:a5:be:84:66:f7:89:86:72:23: ee:23:d6:a9:2f:2e:5b:f0:e0:85:48:7d:a4:ce:66:c9:49:13: 0c:1b:e7:17:32:d3:72:43:1f:22:a1:91:35:f9:da:19:81:08: 02:00:e5:f0:07:06:b4:08:b3:dc:a9:9a:32:db:71:7e:f7:da: 2b:1f:3b:76:af:06:79:e6:3c:a0:09:f0:60:91:98:8e:28:68: 3f:d9:6e:bf:e5:e4:52:7a:cc:11:7b:31:cf:96:54:88:fb:94: d6:78:61:52:0a:c9:cc:4f:e9:a1:98:4a:56:e6:13:c0:fe:86: 84:78:40:b4:68:db:0f:2b:9c:65:1f:71:34:60:dd:77:6d:c0: 7c:59:e4:56:a6:cc:23:9b:d7:aa:41:bb:19:40:89:ef:f2:2d: de:e2:12:89 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgIUXw54cefZnQnTRghlj8GsAQtGMGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU1Qzg1NUEwOEIzODdDNkNCMzE3RDkxRDdEOUE1MEVB MkIzNUFENDAeFw0yNjA1MTExNzM0MTlaFw0yNzA1MTAxNzM5MTlaMDMxMTAvBgNV BAMTKEZDNTAxRDFFQUM2RDI1OTk3OTYzMDM0QzRGQTVDREVDOTIzNTk5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHtfJ5oe0hMhx+DF1DJvjMKGnA mN78UlUwM3oZxiwjMHuRbZxLiZwn9d72KHS9XAmoILGCwFuqCqevXDi8uu9JhGrL MqtOvTwoHoQjE9WCrHFXr5KZKWlxXAXkqFkSr1Abi9CgPIX1LUNecFe3UquV2YcJ gvRxMMPfRdCzqaxxKJgfkgvSJcRsATA4E+f4fcrPjH7DL4IzUUXbuHMAdD8ilJeQ gocJoB4U5bii36r8o+9O+IlY3GVZwzu88E8CwuAA95ozJXgtiw/ECBKc7TE0j6e3 eYmncxLT2nyaTFm5D8yAYG3ggnYVh3+wZNRgRSSslSJr4YhLc9NgSDxVEBTnAgMB AAGjggHkMIIB4DAdBgNVHQ4EFgQU/FAdHqxtJZl5YwNMT6XN7JI1mckwHwYDVR0j BBgwFoAUblyFWgizh8bLMX2R19mlDqKzWtQwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9ET0xU RC8wLzZFNUM4NTVBMDhCMzg3QzZDQjMxN0Q5MUQ3RDlBNTBFQTJCMzVBRDQuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNkU1Qzg1NUEwOEIzODdDNkNCMzE3RDkxRDdE OUE1MEVBMkIzNUFENC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9y c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RPRE9MVEQvMC8zMjM0MzAzMTNh NjQ2MTY1MzAzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMTM3MzQzMTMzLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIA AjAHAwUAJAHa4DANBgkqhkiG9w0BAQsFAAOCAQEABIpCCuM53rbxqYg3B8EzMXuv nfqm/cQt0J9n2x9XAe4rv0c+AEFgd0ceqimc2stqG9Un1bs0dQSQf/H2wFj7ctiN cr9fLW4stN/rpm3yrp4g04DBxS/invj9K4ZE2MNDOhZkpb6EZveJhnIj7iPWqS8u W/DghUh9pM5myUkTDBvnFzLTckMfIqGRNfnaGYEIAgDl8AcGtAiz3KmaMttxfvfa Kx87dq8GeeY8oAnwYJGYjihoP9luv+XkUnrMEXsxz5ZUiPuU1nhhUgrJzE/poZhK VuYTwP6GhHhAtGjbDyucZR9xNGDdd23AfFnkVqbMI5vXqkG7GUCJ7/It3uISiQ== -----END CERTIFICATE-----Generated at Wed May 13 09:54:35 2026 by rpki-client