$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a383a3a2f34382d3438203d3e20313331363130.roa File: 323430323a346632303a383a3a2f34382d3438203d3e20313331363130.roa (raw, json) Hash identifier: CBTn+HH/6j9S9GFATKmXd9Vsb0PObXQaoSSI5gbsuCM= Subject key identifier: 05:19:04:D1:7C:B9:0C:96:1A:53:3D:E4:02:ED:2C:83:84:F7:14:EA Certificate issuer: /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Certificate serial: 5BC6C90723C831CF3D7DFF2C744F57F7A11F9EEA Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a383a3a2f34382d3438203d3e20313331363130.roa Signing time: Fri 24 Jul 2026 02:44:01 +0000 ROA not before: Fri 24 Jul 2026 02:39:01 +0000 ROA not after: Fri 23 Jul 2027 02:44:01 +0000 asID: 131610 IP address blocks: 2402:4f20:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c6:c9:07:23:c8:31:cf:3d:7d:ff:2c:74:4f:57:f7:a1:1f:9e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Validity Not Before: Jul 24 02:39:01 2026 GMT Not After : Jul 23 02:44:01 2027 GMT Subject: CN=051904D17CB90C961A533DE402ED2C8384F714EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:08:75:37:b6:d0:c3:0d:56:68:0b:8e:7b:ee: 8d:48:73:4f:db:3f:54:78:32:7a:2a:ef:01:4d:dc: 7c:e8:7b:fa:7b:b3:41:45:0c:00:06:b0:15:72:8e: bc:17:fd:de:32:50:fd:11:a6:26:b4:f0:2b:8b:7a: e5:5f:f6:fe:de:ca:fe:d9:22:5a:31:ac:e5:9f:cd: d7:c3:b7:3d:c2:85:d0:33:f7:90:88:a3:c3:f6:8a: 3b:6a:f5:90:a0:c2:24:2f:b7:66:27:ac:be:23:cc: 35:42:10:61:bb:ae:eb:4f:30:8f:3f:44:38:1a:44: 52:38:8c:e6:b9:de:20:a8:e0:7d:5a:40:7b:89:43: 73:76:18:0f:e8:5d:be:01:67:fa:9f:46:08:52:6c: 55:4b:bd:5d:9c:55:87:d3:0b:61:9f:c5:41:ca:c3: 61:4f:90:fa:07:28:26:da:86:78:03:f1:c7:7b:0e: 78:c6:8b:1a:8a:f6:bc:b8:ca:0c:f5:c3:c7:a8:12: f0:79:86:36:98:bc:33:34:d2:94:3d:40:47:00:26: a2:79:b9:a6:60:4a:a5:4a:8e:a7:61:65:3b:3d:dc: 3e:0b:2c:9d:cf:da:3e:48:f0:16:71:d8:70:75:a6: e6:7d:c4:cc:92:cc:71:75:8f:76:fa:e8:f3:ff:e3: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:19:04:D1:7C:B9:0C:96:1A:53:3D:E4:02:ED:2C:83:84:F7:14:EA X509v3 Authority Key Identifier: keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/323430323a346632303a383a3a2f34382d3438203d3e20313331363130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:4f20:8::/48 Signature Algorithm: sha256WithRSAEncryption d5:99:7e:b2:e9:da:c2:3a:59:b8:32:d0:86:20:f6:b4:e1:d2: 51:e3:31:dd:74:05:e7:12:d1:97:13:9a:39:64:dd:4f:fa:90: 13:5d:1a:00:19:a2:7d:46:88:8e:ed:7a:f2:5c:a0:2b:64:27: 7b:f9:74:1b:b9:11:b5:b0:64:32:ac:e1:02:95:d9:2d:df:d1: 90:4d:8e:35:fb:b9:ef:a0:79:3e:77:61:b9:b3:63:30:af:61: cf:71:12:ba:50:89:d1:15:40:f8:30:89:d7:e9:66:c4:d0:6e: c3:22:93:87:6e:1d:2c:83:b1:4b:db:ad:da:e2:eb:a6:a6:75: ba:1d:7a:dc:f7:33:fe:05:0a:70:8f:ff:dc:bf:cd:96:ac:68: 73:13:4f:75:4d:9a:95:4b:a5:a6:58:5e:be:6a:93:63:a5:e7: 72:46:e3:77:f2:25:42:1b:37:49:c2:4d:d1:a0:51:cf:75:2c: 62:81:cd:8f:8d:f9:fd:57:6c:14:8e:85:fe:d9:6f:62:22:0d: 7d:82:6d:7b:77:fa:12:18:56:f6:83:a0:e3:44:91:65:58:19: df:c2:85:97:fc:f4:ba:d8:18:ba:45:24:c2:2d:31:b0:c6:9e: c7:9e:69:22:f4:9f:1c:d1:42:d2:9a:c7:1a:4a:fd:dc:eb:7b: 0a:b8:72:10 -----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIUW8bJByPIMc89ff8sdE9X96EfnuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YyRkEwRTlBOUI3QTM2NEQ0OUEyRUE2MUVGMzg5Njcw OUM0QURBRTAeFw0yNjA3MjQwMjM5MDFaFw0yNzA3MjMwMjQ0MDFaMDMxMTAvBgNV BAMTKDA1MTkwNEQxN0NCOTBDOTYxQTUzM0RFNDAyRUQyQzgzODRGNzE0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtCHU3ttDDDVZoC4577o1Ic0/b P1R4Mnoq7wFN3Hzoe/p7s0FFDAAGsBVyjrwX/d4yUP0Rpia08CuLeuVf9v7eyv7Z IloxrOWfzdfDtz3ChdAz95CIo8P2ijtq9ZCgwiQvt2YnrL4jzDVCEGG7rutPMI8/ RDgaRFI4jOa53iCo4H1aQHuJQ3N2GA/oXb4BZ/qfRghSbFVLvV2cVYfTC2GfxUHK w2FPkPoHKCbahngD8cd7DnjGixqK9ry4ygz1w8eoEvB5hjaYvDM00pQ9QEcAJqJ5 uaZgSqVKjqdhZTs93D4LLJ3P2j5I8BZx2HB1puZ9xMySzHF1j3b66PP/41FJAgMB AAGjggHoMIIB5DAdBgNVHQ4EFgQUBRkE0Xy5DJYaUz3kAu0sg4T3FOowHwYDVR0j BBgwFoAUPy+g6am3o2TUmi6mHvOJZwnEra4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MC8zRjJGQTBFOUE5QjdBMzY0RDQ5QTJFQTYxRUYzODk2NzA5QzRBREFFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGMkZBMEU5QTlCN0EzNjRENDlBMkVBNjFFRjM4 OTY3MDlDNEFEQUUuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEFBQcwC4ZjcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8wLzMyMzQzMDMyM2EzNDY2 MzIzMDNhMzgzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTMzMzEzNjMxMzAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E AgACMAkDBwAkAk8gAAgwDQYJKoZIhvcNAQELBQADggEBANWZfrLp2sI6Wbgy0IYg 9rTh0lHjMd10BecS0ZcTmjlk3U/6kBNdGgAZon1GiI7tevJcoCtkJ3v5dBu5EbWw ZDKs4QKV2S3f0ZBNjjX7ue+geT53YbmzYzCvYc9xErpQidEVQPgwidfpZsTQbsMi k4duHSyDsUvbrdri66amdbodetz3M/4FCnCP/9y/zZasaHMTT3VNmpVLpaZYXr5q k2Ol53JG43fyJUIbN0nCTdGgUc91LGKBzY+N+f1XbBSOhf7Zb2IiDX2CbXt3+hIY VvaDoONEkWVYGd/ChZf89LrYGLpFJMItMbDGnseeaSL0nxzRQtKaxxpK/dzrewq4 chA= -----END CERTIFICATE-----Generated at Fri Jul 24 13:32:45 2026 by rpki-client