$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a363a3a2f34382d3438203d3e20323035353932.roa File: 323430323a346632303a363a3a2f34382d3438203d3e20323035353932.roa (raw, json) Hash identifier: ptVCjWef1VrczYe3KBp66zk/XGoVyy13oHfgHoxhpdc= Subject key identifier: 8E:E7:48:C4:64:49:34:32:98:C4:61:E9:A7:D2:1F:8C:85:47:B1:95 Certificate issuer: /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Certificate serial: 270562B3CA56BACF1E1AA3EF8C56C0D6FE9363F3 Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a363a3a2f34382d3438203d3e20323035353932.roa Signing time: Fri 03 Jul 2026 17:23:49 +0000 ROA not before: Fri 03 Jul 2026 17:18:49 +0000 ROA not after: Fri 02 Jul 2027 17:23:49 +0000 asID: 205592 IP address blocks: 2402:4f20:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:05:62:b3:ca:56:ba:cf:1e:1a:a3:ef:8c:56:c0:d6:fe:93:63:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Validity Not Before: Jul 3 17:18:49 2026 GMT Not After : Jul 2 17:23:49 2027 GMT Subject: CN=8EE748C46449343298C461E9A7D21F8C8547B195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:37:88:cc:22:8b:5e:25:da:72:80:c2:fd:e4: 55:bd:ba:1b:0f:7c:00:44:e3:bd:d5:93:f2:bd:07: 6d:09:35:2e:42:41:85:23:72:60:d8:f9:00:73:22: 63:19:d6:b8:57:f5:73:7c:7e:e1:9b:90:09:c7:89: 48:49:a4:06:2a:b7:94:2d:11:2c:db:f2:be:86:5c: 6c:ec:05:27:df:ff:ba:00:d7:05:26:fb:bd:9a:07: 3a:e1:75:28:27:59:f4:6e:32:74:d5:7f:f2:03:ed: 41:d5:71:c3:ad:b7:bf:b1:1f:3c:95:aa:8c:23:20: c6:c6:34:ae:c3:46:86:6d:11:50:70:29:12:9a:33: 66:a7:af:46:7e:c0:48:b0:c6:c5:fa:6e:6f:6d:c6: 87:44:76:90:a3:08:dd:8b:cb:f7:19:d8:fb:e1:c5: df:6a:ec:cf:31:e2:97:3a:ee:01:d2:ec:10:cd:e3: cb:15:f6:fc:5a:90:09:2b:31:24:19:39:dc:88:be: dc:2c:31:62:a0:e8:86:bc:87:d0:7e:55:9b:34:11: 5c:ed:ab:2c:9b:ad:c9:4e:13:6c:f2:79:84:7b:5a: 97:1b:a0:f8:4e:03:eb:87:95:1d:33:88:4e:b3:8b: 19:9f:26:80:2b:5a:4b:23:9f:ef:da:f7:0d:b3:d5: 1d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E7:48:C4:64:49:34:32:98:C4:61:E9:A7:D2:1F:8C:85:47:B1:95 X509v3 Authority Key Identifier: keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a363a3a2f34382d3438203d3e20323035353932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4f20:6::/48 Signature Algorithm: sha256WithRSAEncryption 52:d2:4d:ff:db:7d:31:e5:a1:6f:97:8c:3c:e1:3d:11:16:d8: 05:2b:b5:f5:9f:98:7c:dd:b8:fc:fc:ad:9f:dd:2c:7b:5e:1b: 9e:73:e4:df:b7:56:a2:94:21:48:1f:0d:e0:86:83:cc:24:52: eb:90:ce:e5:ff:b3:8d:db:bc:ee:14:e2:60:e1:a1:fe:11:49: 1a:5f:09:e5:b7:57:d3:cb:fa:d7:2a:7c:cb:68:1c:f8:81:97: ea:ec:4e:52:4f:8a:3c:02:cc:02:19:f5:b3:74:b2:24:2f:31: 6f:3a:7e:86:d1:d9:5e:4f:0a:c6:a1:e6:0e:d5:95:b0:52:60: 5c:0e:56:c8:77:72:6a:20:5a:b2:40:62:77:9a:4f:c0:41:bf: ff:71:12:2b:de:21:69:fa:45:91:9d:0e:f8:41:cc:b8:ac:44: 28:31:87:47:6e:ce:c5:4a:11:ac:68:6f:e0:e2:4b:5a:1d:9a: e0:3a:71:17:72:fb:7a:e4:16:ab:9c:9e:ce:5a:e0:38:bd:11: a8:5b:d6:e7:a1:6d:db:eb:59:f3:78:ec:29:98:58:2b:2d:bc: 89:20:c7:9f:11:28:b6:b9:dd:0f:9e:62:ca:4a:7a:e4:c0:7b: 01:16:b3:ef:34:1c:34:be:7f:7b:9d:16:2e:27:a5:be:c2:d7: 0b:1f:5c:b4 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUJwVis8pWus8eGqPvjFbA1v6TY/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YyRkEwRTlBOUI3QTM2NEQ0OUEyRUE2MUVGMzg5Njcw OUM0QURBRTAeFw0yNjA3MDMxNzE4NDlaFw0yNzA3MDIxNzIzNDlaMDMxMTAvBgNV BAMTKDhFRTc0OEM0NjQ0OTM0MzI5OEM0NjFFOUE3RDIxRjhDODU0N0IxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKN4jMIoteJdpygML95FW9uhsP fABE473Vk/K9B20JNS5CQYUjcmDY+QBzImMZ1rhX9XN8fuGbkAnHiUhJpAYqt5Qt ESzb8r6GXGzsBSff/7oA1wUm+72aBzrhdSgnWfRuMnTVf/ID7UHVccOtt7+xHzyV qowjIMbGNK7DRoZtEVBwKRKaM2anr0Z+wEiwxsX6bm9txodEdpCjCN2Ly/cZ2Pvh xd9q7M8x4pc67gHS7BDN48sV9vxakAkrMSQZOdyIvtwsMWKg6Ia8h9B+VZs0EVzt qyybrclOE2zyeYR7WpcboPhOA+uHlR0ziE6zixmfJoArWksjn+/a9w2z1R33AgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUjudIxGRJNDKYxGHpp9IfjIVHsZUwHwYDVR0j BBgwFoAUPy+g6am3o2TUmi6mHvOJZwnEra4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MC8zRjJGQTBFOUE5QjdBMzY0RDQ5QTJFQTYxRUYzODk2NzA5QzRBREFFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGMkZBMEU5QTlCN0EzNjRENDlBMkVBNjFFRjM4 OTY3MDlDNEFEQUUuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEFBQcwC4ZjcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8wLzMyMzQzMDMyM2EzNDY2 MzIzMDNhMzYzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzUzNTM5MzIucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkAk8gAAYwDQYJKoZIhvcNAQELBQADggEBAFLSTf/bfTHloW+XjDzh PREW2AUrtfWfmHzduPz8rZ/dLHteG55z5N+3VqKUIUgfDeCGg8wkUuuQzuX/s43b vO4U4mDhof4RSRpfCeW3V9PL+tcqfMtoHPiBl+rsTlJPijwCzAIZ9bN0siQvMW86 fobR2V5PCsah5g7VlbBSYFwOVsh3cmogWrJAYneaT8BBv/9xEiveIWn6RZGdDvhB zLisRCgxh0duzsVKEaxob+DiS1odmuA6cRdy+3rkFqucns5a4Di9Eahb1uehbdvr WfN47CmYWCstvIkgx58RKLa53Q+eYspKeuTAewEWs+80HDS+f3udFi4npb7C1wsf XLQ= -----END CERTIFICATE-----Generated at Fri Jul 24 12:56:35 2026 by rpki-client