$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a3130313a3a2f34382d3438203d3e2039363738.roa File: 323430313a393563303a3130313a3a2f34382d3438203d3e2039363738.roa (raw, json) Hash identifier: 0FEWrUNjLY/F3gseUIYDxYlgFXVH+ROPTSUAvafGyeU= Subject key identifier: C6:76:E8:00:5A:15:EF:16:A9:AD:50:04:A4:2B:B2:70:3E:B1:51:3C Certificate issuer: /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A Certificate serial: 0A0D45CE52F30940F8698F62AE8DFE4AC1DADEBD Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a3130313a3a2f34382d3438203d3e2039363738.roa Signing time: Mon 11 May 2026 17:39:15 +0000 ROA not before: Mon 11 May 2026 17:34:15 +0000 ROA not after: Mon 10 May 2027 17:39:15 +0000 asID: 9678 IP address blocks: 2401:95c0:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:0d:45:ce:52:f3:09:40:f8:69:8f:62:ae:8d:fe:4a:c1:da:de:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A Validity Not Before: May 11 17:34:15 2026 GMT Not After : May 10 17:39:15 2027 GMT Subject: CN=C676E8005A15EF16A9AD5004A42BB2703EB1513C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:63:0b:44:6b:e0:92:1a:56:18:e4:b0:69:de: 44:1f:93:d9:07:1c:6a:ac:b5:b4:c6:c0:95:f1:e0: da:6c:9d:50:5c:0f:3a:ea:b7:07:a8:48:20:38:ce: 53:4f:ff:0d:ac:bd:8a:7d:b4:a1:03:4d:7f:6e:ca: cc:12:6f:47:7a:c1:ae:fa:4e:a1:a9:13:0e:66:70: a4:28:a2:2c:33:78:52:a4:78:a1:bf:d1:97:7c:be: b7:8a:ee:e3:79:10:41:93:82:46:50:68:85:a8:d0: f9:39:80:dd:05:64:a6:85:41:41:da:0e:7c:08:b1: 36:33:69:09:ca:4d:2f:dd:b4:bc:60:4b:6d:af:88: 9a:97:80:2f:64:93:a2:f1:0e:45:52:e9:98:b3:de: 58:8a:ab:72:ce:11:33:a5:df:30:71:9d:e3:72:a5: 66:e5:9d:2c:c6:90:59:f7:2d:34:29:bc:fd:9b:d0: f2:60:67:2c:86:bb:db:a2:a8:9d:74:da:92:ff:54: 06:2f:ae:19:c1:b0:2a:0c:b7:8a:eb:8b:62:2f:7c: 7e:d3:f6:7c:3f:92:d9:07:aa:11:74:b2:42:3a:ad: e2:8f:02:e2:9c:93:46:8d:f9:f4:20:e7:ee:fa:a9: bf:bb:91:63:1b:01:fa:3a:02:e5:80:86:83:90:31: 88:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:76:E8:00:5A:15:EF:16:A9:AD:50:04:A4:2B:B2:70:3E:B1:51:3C X509v3 Authority Key Identifier: keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/323430313a393563303a3130313a3a2f34382d3438203d3e2039363738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:95c0:101::/48 Signature Algorithm: sha256WithRSAEncryption 54:aa:c1:05:dd:d9:ac:e0:61:e9:bc:b8:bd:3a:d0:b6:44:4a: 09:b1:4a:2a:c9:e1:84:6b:2a:81:72:32:01:09:3b:c1:69:1d: d7:d8:19:b7:a5:cf:12:90:46:88:26:75:2e:d1:a6:34:87:05: eb:d6:c5:51:58:ed:38:50:36:f5:8c:bf:66:80:c9:f5:6d:9b: 98:9d:e8:7b:58:61:2a:68:1d:f1:8e:1e:1a:d4:d3:45:2e:91: 21:5c:71:d8:05:a5:dc:4f:60:a1:c9:68:8f:98:be:b3:55:21: ad:2d:cb:16:65:a9:87:23:ee:2b:6c:f6:d1:49:81:cc:de:eb: 75:b7:cb:43:03:9f:63:80:dc:9d:58:4d:b8:c0:d0:56:08:e9: 9c:ae:3c:f3:38:19:8f:1d:20:c4:c8:5e:c4:c7:88:dd:09:a0: 40:51:24:92:8b:80:6e:b5:2b:37:42:ad:f0:78:87:ed:fc:91: 3b:76:92:a8:31:d5:33:33:ef:d6:71:28:a0:a0:86:ae:55:da: ed:ff:39:36:1c:ce:38:61:28:1b:26:0d:5d:53:e2:98:f3:5f: 68:38:74:28:49:a4:a2:17:1e:c3:83:02:a5:b2:06:83:f5:0a: e8:e9:c7:dc:03:75:d2:4e:0a:fe:22:09:bf:aa:e0:af:b7:9c: 10:70:7b:99 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUCg1FzlLzCUD4aY9iro3+SsHa3r0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjBBNkYyMEUzOUU4MTk2MkZEMzc3MEM0QzQ0QzVFMTBE RkQzMkQyQTAeFw0yNjA1MTExNzM0MTVaFw0yNzA1MTAxNzM5MTVaMDMxMTAvBgNV BAMTKEM2NzZFODAwNUExNUVGMTZBOUFENTAwNEE0MkJCMjcwM0VCMTUxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnYwtEa+CSGlYY5LBp3kQfk9kH HGqstbTGwJXx4NpsnVBcDzrqtweoSCA4zlNP/w2svYp9tKEDTX9uyswSb0d6wa76 TqGpEw5mcKQooiwzeFKkeKG/0Zd8vreK7uN5EEGTgkZQaIWo0Pk5gN0FZKaFQUHa DnwIsTYzaQnKTS/dtLxgS22viJqXgC9kk6LxDkVS6Ziz3liKq3LOETOl3zBxneNy pWblnSzGkFn3LTQpvP2b0PJgZyyGu9uiqJ102pL/VAYvrhnBsCoMt4rri2IvfH7T 9nw/ktkHqhF0skI6reKPAuKck0aN+fQg5+76qb+7kWMbAfo6AuWAhoOQMYjZAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUxnboAFoV7xaprVAEpCuycD6xUTwwHwYDVR0j BBgwFoAUYKbyDjnoGWL9N3DExExeEN/TLSowDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSE9TVElO LzAvNjBBNkYyMEUzOUU4MTk2MkZEMzc3MEM0QzQ0QzVFMTBERkQzMkQyQS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS82MEE2RjIwRTM5RTgxOTYyRkQzNzcwQzRDNDRD NUUxMERGRDMyRDJBLmNlcjCBgAYIKwYBBQUHAQsEdDByMHAGCCsGAQUFBzALhmRy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0hPU1RJTi8wLzMyMzQzMDMxM2Ez OTM1NjMzMDNhMzEzMDMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzkzNjM3Mzgu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR MA8EAgACMAkDBwAkAZXAAQEwDQYJKoZIhvcNAQELBQADggEBAFSqwQXd2azgYem8 uL060LZESgmxSirJ4YRrKoFyMgEJO8FpHdfYGbelzxKQRogmdS7RpjSHBevWxVFY 7ThQNvWMv2aAyfVtm5id6HtYYSpoHfGOHhrU00UukSFccdgFpdxPYKHJaI+YvrNV Ia0tyxZlqYcj7its9tFJgcze63W3y0MDn2OA3J1YTbjA0FYI6ZyuPPM4GY8dIMTI XsTHiN0JoEBRJJKLgG61KzdCrfB4h+38kTt2kqgx1TMz79ZxKKCghq5V2u3/OTYc zjhhKBsmDV1T4pjzX2g4dChJpKIXHsODAqWyBoP1Cujpx9wDddJOCv4iCb+q4K+3 nBBwe5k= -----END CERTIFICATE-----Generated at Wed May 13 11:56:01 2026 by rpki-client