$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a353a3a2f34382d3438203d3e20313331363531.roa File: 323430323a346632303a353a3a2f34382d3438203d3e20313331363531.roa (raw, json) Hash identifier: gTOyl2qPamdQWBEKTlWm+cU4E+HBo9WKdvbZuOZ6iKY= Subject key identifier: 2E:32:5B:08:F4:DC:4E:FF:48:5A:3C:5F:68:AB:A3:51:26:F7:5B:0B Certificate issuer: /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Certificate serial: 21E53DDCE274221DC01E69DAEF045B9E58FD1271 Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a353a3a2f34382d3438203d3e20313331363531.roa Signing time: Thu 02 Jul 2026 12:03:48 +0000 ROA not before: Thu 02 Jul 2026 11:58:48 +0000 ROA not after: Thu 01 Jul 2027 12:03:48 +0000 asID: 131651 IP address blocks: 2402:4f20:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e5:3d:dc:e2:74:22:1d:c0:1e:69:da:ef:04:5b:9e:58:fd:12:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Validity Not Before: Jul 2 11:58:48 2026 GMT Not After : Jul 1 12:03:48 2027 GMT Subject: CN=2E325B08F4DC4EFF485A3C5F68ABA35126F75B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:7d:a5:04:4b:20:28:87:41:06:c1:eb:88: ff:c5:f4:ef:7b:5f:d3:b7:5b:6d:78:2a:b6:e0:e2: f6:f9:83:b1:fd:13:fa:2f:f0:7a:e1:b2:b4:39:54: 55:74:53:be:ec:52:d7:0f:99:8d:8c:38:53:50:e0: ea:e0:1a:fd:09:bb:92:d5:87:a9:8a:a3:5e:c0:6e: 98:e0:36:cc:64:6b:4c:14:8e:ed:65:74:c8:ed:33: a8:e5:02:bb:ad:6d:f2:af:6f:22:09:3f:01:27:16: 41:64:be:6c:cf:79:ff:64:03:7f:c9:ea:be:31:a7: 3e:29:31:c5:a5:43:82:03:ae:b4:18:43:1a:ce:70: 25:9b:41:e1:bd:d6:05:f0:16:bf:64:2f:55:f5:70: 11:c1:3b:7e:5f:3d:4c:d2:78:b7:a2:79:72:6e:76: cb:7f:07:bb:ef:be:3a:d1:07:72:c4:88:69:0d:b0: 3a:f2:0f:37:8d:1d:ea:e4:2f:ca:e1:ce:09:18:1f: 5a:fb:7e:d1:31:4e:51:54:14:4f:81:f1:d0:7d:f8: 05:ba:29:b8:61:0e:4f:52:16:ff:f6:3d:55:92:fe: 55:8e:52:f1:ed:22:1a:f5:39:7a:6e:cc:5f:8f:14: bc:0d:d6:40:06:a1:a4:d3:93:74:64:27:21:10:82: 67:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:32:5B:08:F4:DC:4E:FF:48:5A:3C:5F:68:AB:A3:51:26:F7:5B:0B X509v3 Authority Key Identifier: keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a353a3a2f34382d3438203d3e20313331363531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4f20:5::/48 Signature Algorithm: sha256WithRSAEncryption 28:8c:dd:f1:f7:51:11:f7:c4:a6:e8:5a:2b:ad:5c:59:ef:fb: 12:51:86:c6:ed:bd:25:6b:2c:34:84:02:2d:e2:13:49:53:33: 38:e9:56:9c:8d:6e:2d:38:52:94:a3:21:57:bb:56:c7:5e:5e: 29:30:cd:13:2e:50:56:cd:2b:75:c1:e9:a3:c5:8a:5d:56:09: 61:c9:92:30:19:28:04:ba:ba:e0:fd:95:4c:64:ba:85:7f:7c: 98:69:2d:07:55:3a:50:f6:df:b3:9c:0b:20:b3:3c:ac:dd:d2: bd:32:53:1d:e6:3b:2e:c4:63:37:b8:7e:9b:0e:b2:88:0e:71: d8:b1:ac:2e:0a:b4:42:b8:7a:06:3b:8e:6f:b9:58:d5:7e:7a: 97:ba:ae:a4:72:bf:57:80:27:33:d2:f6:80:86:5d:53:b1:31: 1c:34:a4:82:71:d9:d8:07:0e:4d:2e:1c:ee:0e:91:59:ef:10: 9c:7b:e9:76:21:42:78:b1:af:3e:18:97:aa:b2:8b:f7:7e:65: a2:35:7e:fa:09:f1:0f:65:62:84:a8:fc:82:bf:a0:e6:66:b9: aa:8a:d9:09:8e:0f:db:d4:7b:45:6a:8e:36:c7:ae:51:39:ce: 1e:02:1c:49:57:14:5d:bc:53:af:72:11:58:1d:83:df:11:34: 4e:10:82:6c -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUIeU93OJ0Ih3AHmna7wRbnlj9EnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YyRkEwRTlBOUI3QTM2NEQ0OUEyRUE2MUVGMzg5Njcw OUM0QURBRTAeFw0yNjA3MDIxMTU4NDhaFw0yNzA3MDExMjAzNDhaMDMxMTAvBgNV BAMTKDJFMzI1QjA4RjREQzRFRkY0ODVBM0M1RjY4QUJBMzUxMjZGNzVCMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGO32lBEsgKIdBBsHriP/F9O97 X9O3W214Krbg4vb5g7H9E/ov8HrhsrQ5VFV0U77sUtcPmY2MOFNQ4OrgGv0Ju5LV h6mKo17AbpjgNsxka0wUju1ldMjtM6jlArutbfKvbyIJPwEnFkFkvmzPef9kA3/J 6r4xpz4pMcWlQ4IDrrQYQxrOcCWbQeG91gXwFr9kL1X1cBHBO35fPUzSeLeieXJu dst/B7vvvjrRB3LEiGkNsDryDzeNHerkL8rhzgkYH1r7ftExTlFUFE+B8dB9+AW6 KbhhDk9SFv/2PVWS/lWOUvHtIhr1OXpuzF+PFLwN1kAGoaTTk3RkJyEQgmcRAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQULjJbCPTcTv9IWjxfaKujUSb3WwswHwYDVR0j BBgwFoAUPy+g6am3o2TUmi6mHvOJZwnEra4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MC8zRjJGQTBFOUE5QjdBMzY0RDQ5QTJFQTYxRUYzODk2NzA5QzRBREFFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGMkZBMEU5QTlCN0EzNjRENDlBMkVBNjFFRjM4 OTY3MDlDNEFEQUUuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEFBQcwC4ZjcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8wLzMyMzQzMDMyM2EzNDY2 MzIzMDNhMzUzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzEzNjM1MzEucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkAk8gAAUwDQYJKoZIhvcNAQELBQADggEBACiM3fH3URH3xKboWiut XFnv+xJRhsbtvSVrLDSEAi3iE0lTMzjpVpyNbi04UpSjIVe7VsdeXikwzRMuUFbN K3XB6aPFil1WCWHJkjAZKAS6uuD9lUxkuoV/fJhpLQdVOlD237OcCyCzPKzd0r0y Ux3mOy7EYze4fpsOsogOcdixrC4KtEK4egY7jm+5WNV+epe6rqRyv1eAJzPS9oCG XVOxMRw0pIJx2dgHDk0uHO4OkVnvEJx76XYhQnixrz4Yl6qyi/d+ZaI1fvoJ8Q9l YoSo/IK/oOZmuaqK2QmOD9vUe0VqjjbHrlE5zh4CHElXFF28U69yEVgdg98RNE4Q gmw= -----END CERTIFICATE-----Generated at Fri Jul 24 14:20:37 2026 by rpki-client