$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a373a3a2f34382d3438203d3e20313331363234.roa File: 323430323a346632303a373a3a2f34382d3438203d3e20313331363234.roa (raw, json) Hash identifier: 4Ux61nZxsMvVrX4ijFW8lYSEJLzSwGMHio9lIoYN9PI= Subject key identifier: 41:F0:E6:DA:46:C3:30:07:C5:8C:78:D6:1C:DB:5B:B5:FF:57:CC:D9 Certificate issuer: /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Certificate serial: 0E7E5F89609B807CB28954ABADC11EF9B390AF97 Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a373a3a2f34382d3438203d3e20313331363234.roa Signing time: Sat 18 Jul 2026 01:03:49 +0000 ROA not before: Sat 18 Jul 2026 00:58:49 +0000 ROA not after: Sat 17 Jul 2027 01:03:49 +0000 asID: 131624 IP address blocks: 2402:4f20:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:7e:5f:89:60:9b:80:7c:b2:89:54:ab:ad:c1:1e:f9:b3:90:af:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Validity Not Before: Jul 18 00:58:49 2026 GMT Not After : Jul 17 01:03:49 2027 GMT Subject: CN=41F0E6DA46C33007C58C78D61CDB5BB5FF57CCD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:a9:1c:8c:eb:7e:aa:4c:19:c6:f9:fe:48: 13:31:a6:ef:0f:86:83:04:10:2f:16:cf:71:d0:80: 9d:d3:17:0a:58:8c:6b:4b:76:22:e5:6b:da:7e:0e: 96:57:46:33:24:85:ff:14:7f:0f:5f:37:86:6e:65: fa:50:e5:38:83:51:a4:b5:0a:37:06:0a:40:d4:80: ad:4f:a3:b0:b6:d3:b8:48:71:59:26:50:d4:fd:fe: 1f:4a:78:f3:76:51:ee:73:9c:f9:23:4b:73:d1:9e: 57:01:87:3b:29:e8:d0:97:22:0d:8b:0f:e4:8b:93: b2:33:38:8a:7c:3b:c2:58:29:7f:f2:eb:2a:a2:70: 85:8f:20:e3:54:10:78:f5:30:4c:d2:34:0d:8a:de: 80:62:17:d1:8b:43:c8:73:bd:bb:9d:05:de:dc:7a: 22:4c:b9:64:08:be:f0:3a:d9:ea:a5:7e:d2:a4:22: 59:c0:65:97:b2:1c:16:78:2d:23:a0:a9:df:02:91: 77:5b:a3:05:90:8b:83:90:4b:c6:58:9f:df:cb:c2: 50:07:ca:c1:ca:a7:65:cc:39:d5:87:ac:fe:7b:bf: 10:e7:48:77:2b:66:b7:8a:68:cc:9e:75:b1:e2:50: 13:db:67:c2:9e:29:c1:88:5a:a5:0f:b3:e8:c3:95: 44:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F0:E6:DA:46:C3:30:07:C5:8C:78:D6:1C:DB:5B:B5:FF:57:CC:D9 X509v3 Authority Key Identifier: keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a373a3a2f34382d3438203d3e20313331363234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4f20:7::/48 Signature Algorithm: sha256WithRSAEncryption 94:07:5c:72:5c:eb:41:ce:ad:4a:a7:e3:6b:72:ee:9f:ac:10: e7:9b:55:62:e1:c9:da:6b:7e:a8:dd:aa:6d:63:31:b2:b0:39: 58:58:40:a4:96:ac:01:a5:1d:30:83:36:a3:5e:2a:4e:e9:09: 9f:a5:20:bc:4c:cc:e8:09:ad:0a:6c:28:61:d6:10:6e:58:0f: 73:f6:0e:97:34:8a:de:a2:f1:74:90:3f:22:cd:77:63:62:e3: d5:53:47:88:b4:2b:f1:c3:aa:92:a9:e3:e8:47:6c:21:61:0c: 35:12:34:6d:0c:1c:2e:5f:a1:02:93:91:cf:93:ba:26:18:8c: 88:ae:d9:23:b4:94:3e:43:cb:2f:2d:cc:31:fa:bc:b1:58:3a: 67:4f:11:dd:d9:ee:de:37:4e:46:57:2e:3d:cd:1c:83:f3:70: 0d:cc:ec:73:1e:6a:9f:f7:fe:d5:ef:3d:51:ce:6c:c7:a8:ee: a0:22:77:86:27:51:94:07:d2:8f:44:3d:22:6e:75:e4:44:e3: b4:41:85:45:ab:67:16:44:ab:2a:c5:c1:62:b6:c6:be:12:09: e0:ff:c7:23:7e:d6:33:91:bf:b5:b4:8b:06:31:35:2c:70:47: 1f:9c:10:f8:d5:2a:fc:d5:68:b4:dd:11:7a:83:06:4d:09:62: 4e:b6:01:98 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUDn5fiWCbgHyyiVSrrcEe+bOQr5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YyRkEwRTlBOUI3QTM2NEQ0OUEyRUE2MUVGMzg5Njcw OUM0QURBRTAeFw0yNjA3MTgwMDU4NDlaFw0yNzA3MTcwMTAzNDlaMDMxMTAvBgNV BAMTKDQxRjBFNkRBNDZDMzMwMDdDNThDNzhENjFDREI1QkI1RkY1N0NDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbbqkcjOt+qkwZxvn+SBMxpu8P hoMEEC8Wz3HQgJ3TFwpYjGtLdiLla9p+DpZXRjMkhf8Ufw9fN4ZuZfpQ5TiDUaS1 CjcGCkDUgK1Po7C207hIcVkmUNT9/h9KePN2Ue5znPkjS3PRnlcBhzsp6NCXIg2L D+SLk7IzOIp8O8JYKX/y6yqicIWPIONUEHj1MEzSNA2K3oBiF9GLQ8hzvbudBd7c eiJMuWQIvvA62eqlftKkIlnAZZeyHBZ4LSOgqd8CkXdbowWQi4OQS8ZYn9/LwlAH ysHKp2XMOdWHrP57vxDnSHcrZreKaMyedbHiUBPbZ8KeKcGIWqUPs+jDlUTZAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUQfDm2kbDMAfFjHjWHNtbtf9XzNkwHwYDVR0j BBgwFoAUPy+g6am3o2TUmi6mHvOJZwnEra4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MC8zRjJGQTBFOUE5QjdBMzY0RDQ5QTJFQTYxRUYzODk2NzA5QzRBREFFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGMkZBMEU5QTlCN0EzNjRENDlBMkVBNjFFRjM4 OTY3MDlDNEFEQUUuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEFBQcwC4ZjcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8wLzMyMzQzMDMyM2EzNDY2 MzIzMDNhMzczYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzEzNjMyMzQucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkAk8gAAcwDQYJKoZIhvcNAQELBQADggEBAJQHXHJc60HOrUqn42ty 7p+sEOebVWLhydprfqjdqm1jMbKwOVhYQKSWrAGlHTCDNqNeKk7pCZ+lILxMzOgJ rQpsKGHWEG5YD3P2Dpc0it6i8XSQPyLNd2Ni49VTR4i0K/HDqpKp4+hHbCFhDDUS NG0MHC5foQKTkc+TuiYYjIiu2SO0lD5Dyy8tzDH6vLFYOmdPEd3Z7t43TkZXLj3N HIPzcA3M7HMeap/3/tXvPVHObMeo7qAid4YnUZQH0o9EPSJudeRE47RBhUWrZxZE qyrFwWK2xr4SCeD/xyN+1jORv7W0iwYxNSxwRx+cEPjVKvzVaLTdEXqDBk0JYk62 AZg= -----END CERTIFICATE-----Generated at Fri Jul 24 15:14:47 2026 by rpki-client