$ rpki-client -vvf rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20323136313338.roa File: 3136322e342e3233362e302f32342d3234203d3e20323136313338.roa (raw, json) Hash identifier: KUa2XsqZOPgJ781I73XluMs/ebzGtEQhMS4Dy5L8rXs= Subject key identifier: 9C:2B:25:41:B6:72:F6:FE:5F:E3:74:B0:F7:F5:6B:48:96:E5:76:EC Certificate issuer: /CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Certificate serial: 5D7217127CADBCE747CA520916148A971592ED5E Authority key identifier: 4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject info access: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20323136313338.roa Signing time: Tue 23 Jun 2026 08:23:49 +0000 ROA not before: Tue 23 Jun 2026 08:18:49 +0000 ROA not after: Tue 22 Jun 2027 08:23:49 +0000 asID: 216138 IP address blocks: 162.4.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:35:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:72:17:12:7c:ad:bc:e7:47:ca:52:09:16:14:8a:97:15:92:ed:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DC8A0E80696AD1A2419ACE881334BE812506228 Validity Not Before: Jun 23 08:18:49 2026 GMT Not After : Jun 22 08:23:49 2027 GMT Subject: CN=9C2B2541B672F6FE5FE374B0F7F56B4896E576EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b8:ac:79:f5:21:08:d2:73:3b:6c:36:5d:f4: e6:be:2e:9e:19:a6:d1:d8:85:c3:1b:c7:87:c9:a8: 57:c1:50:44:06:d0:0a:df:d3:47:2f:6b:0a:2a:59: c8:4c:bb:09:74:26:60:14:a4:4b:ae:c2:41:8e:16: 01:84:cf:31:be:d4:9e:07:ed:93:57:07:cd:f4:de: c0:61:c1:d0:f5:01:8c:86:85:1c:19:41:40:d0:de: 18:a3:e9:20:fb:08:bd:2c:70:9c:3a:da:35:fe:87: aa:9f:bc:27:f5:90:a6:e5:91:cc:bd:0f:9a:3f:3b: d4:53:b3:45:25:a7:e4:53:3c:dd:62:1e:7e:27:bf: 52:f5:dd:54:d0:82:61:11:d9:83:81:88:e3:12:34: f3:30:d0:f1:61:2b:04:49:74:c9:5b:fd:d2:f6:2d: 13:a0:08:b3:db:d1:2d:75:cc:00:02:b1:26:a5:ab: 9c:96:71:fc:8b:61:49:37:9e:d4:7a:28:56:a4:ca: 4e:d8:64:b6:57:ba:09:75:fa:a9:bc:30:bf:53:61: 13:bd:76:96:b9:0c:19:42:4f:31:82:26:78:ca:3f: 6a:06:be:82:24:4b:03:22:ae:19:cb:7f:4d:84:09: 37:c8:98:05:a8:45:2b:51:20:c4:e8:23:3a:59:03: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2B:25:41:B6:72:F6:FE:5F:E3:74:B0:F7:F5:6B:48:96:E5:76:EC X509v3 Authority Key Identifier: keyid:4D:C8:A0:E8:06:96:AD:1A:24:19:AC:E8:81:33:4B:E8:12:50:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/4DC8A0E80696AD1A2419ACE881334BE812506228.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/4DC8A0E80696AD1A2419ACE881334BE812506228.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DOWTEK/0/3136322e342e3233362e302f32342d3234203d3e20323136313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.4.236.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:74:9d:e7:24:28:70:44:2b:8e:68:f4:8f:89:a0:14:a6:48: b5:28:ca:30:ac:fa:db:7a:aa:f6:45:f1:97:00:c3:c6:6b:db: 70:55:80:b4:a4:69:69:78:94:ba:f4:dd:ad:9e:e4:59:8c:6d: 30:06:4f:a5:0f:3e:c9:1f:79:a1:0c:aa:11:39:95:6c:81:d4: bd:1f:95:de:95:28:a7:d2:0b:da:f6:be:84:7a:9b:20:c8:8e: 65:6a:c7:72:1c:3a:1f:69:44:d7:1a:6a:95:ba:e2:13:ce:96: e7:48:50:43:19:2e:15:a3:8e:2c:12:39:be:4b:b5:0a:a9:df: 80:d0:68:62:9d:21:14:d7:81:c1:01:af:f6:0c:9b:d4:ef:21: ae:b6:d3:04:24:1a:24:eb:13:1d:5d:55:36:f5:40:7b:27:d7: e9:47:1b:a5:db:08:53:eb:ed:e4:78:17:40:92:fe:44:82:11: a9:a8:40:87:c7:f6:10:32:9e:39:3f:95:ac:df:1d:0d:17:51: 46:30:d1:e5:e9:1e:08:02:ca:77:06:78:b0:b0:3c:c0:95:20: 9f:b7:fe:0b:da:de:ea:2f:df:32:57:72:c7:9e:90:bd:2f:fa: d5:84:2d:80:63:aa:a0:7f:fa:80:3f:8d:45:05:b9:71:f7:9c: e9:50:3e:fd -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgIUXXIXEnytvOdHylIJFhSKlxWS7V4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgx MjUwNjIyODAeFw0yNjA2MjMwODE4NDlaFw0yNzA2MjIwODIzNDlaMDMxMTAvBgNV BAMTKDlDMkIyNTQxQjY3MkY2RkU1RkUzNzRCMEY3RjU2QjQ4OTZFNTc2RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYuKx59SEI0nM7bDZd9Oa+Lp4Z ptHYhcMbx4fJqFfBUEQG0Arf00cvawoqWchMuwl0JmAUpEuuwkGOFgGEzzG+1J4H 7ZNXB8303sBhwdD1AYyGhRwZQUDQ3hij6SD7CL0scJw62jX+h6qfvCf1kKblkcy9 D5o/O9RTs0Ulp+RTPN1iHn4nv1L13VTQgmER2YOBiOMSNPMw0PFhKwRJdMlb/dL2 LROgCLPb0S11zAACsSalq5yWcfyLYUk3ntR6KFakyk7YZLZXugl1+qm8ML9TYRO9 dpa5DBlCTzGCJnjKP2oGvoIkSwMirhnLf02ECTfImAWoRStRIMToIzpZA/LbAgMB AAGjggHjMIIB3zAdBgNVHQ4EFgQUnCslQbZy9v5f43Sw9/VrSJblduwwHwYDVR0j BBgwFoAUTcig6AaWrRokGazogTNL6BJQYigwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVL LzAvNERDOEEwRTgwNjk2QUQxQTI0MTlBQ0U4ODEzMzRCRTgxMjUwNjIyOC5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMC80REM4QTBFODA2OTZBRDFBMjQxOUFDRTg4MTMz NEJFODEyNTA2MjI4LmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9XVEVLLzAvMzEzNjMyMmUzNDJl MzIzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM2MzEzMzM4LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAogTsMA0GCSqGSIb3DQEBCwUAA4IBAQBtdJ3nJChwRCuOaPSPiaAUpki1 KMowrPrbeqr2RfGXAMPGa9twVYC0pGlpeJS69N2tnuRZjG0wBk+lDz7JH3mhDKoR OZVsgdS9H5XelSin0gva9r6EepsgyI5lasdyHDofaUTXGmqVuuITzpbnSFBDGS4V o44sEjm+S7UKqd+A0GhinSEU14HBAa/2DJvU7yGuttMEJBok6xMdXVU29UB7J9fp Rxul2whT6+3keBdAkv5EghGpqECHx/YQMp45P5Ws3x0NF1FGMNHl6R4IAsp3Bniw sDzAlSCft/4L2t7qL98yV3LHnpC9L/rVhC2AY6qgf/qAP41FBblx95zpUD79 -----END CERTIFICATE-----Generated at Fri Jul 24 03:27:22 2026 by rpki-client