$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/1/3135312e3135382e3232342e302f32342d3234203d3e20313331363330.roa File: 3135312e3135382e3232342e302f32342d3234203d3e20313331363330.roa (raw, json) Hash identifier: fymSuw1iXX46oyRWIBNdhz3f/dOlk8VWLwtxbZEtRW8= Subject key identifier: 4C:3F:FB:67:45:16:52:31:04:23:0B:2D:D5:A9:58:E3:1A:F7:B3:A7 Certificate issuer: /CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Certificate serial: 3CB4897AC6338C047105672BC03F0BB0A5ECB822 Authority key identifier: BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/1/3135312e3135382e3232342e302f32342d3234203d3e20313331363330.roa Signing time: Mon 11 May 2026 17:58:59 +0000 ROA not before: Mon 11 May 2026 17:53:59 +0000 ROA not after: Mon 10 May 2027 17:58:59 +0000 asID: 131630 IP address blocks: 151.158.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b4:89:7a:c6:33:8c:04:71:05:67:2b:c0:3f:0b:b0:a5:ec:b8:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Validity Not Before: May 11 17:53:59 2026 GMT Not After : May 10 17:58:59 2027 GMT Subject: CN=4C3FFB674516523104230B2DD5A958E31AF7B3A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:ec:08:b6:de:1a:71:84:d5:92:f8:a4:87: 53:4f:38:3d:e2:db:3b:ec:e8:df:22:34:37:de:d0: c0:a6:d7:2d:e6:65:67:e8:52:d7:e9:98:ef:ef:96: 62:fc:ba:c0:3c:cc:69:35:a0:93:3b:af:0f:8a:1a: 32:a4:8a:db:da:4d:e0:ea:75:f1:c2:d8:84:9e:c8: b8:8c:42:00:a2:ad:d5:02:6e:46:dc:b8:e8:33:3e: d6:e8:e0:0d:9f:45:51:b2:6c:0c:42:94:45:1a:35: 32:e3:c2:35:06:8a:22:ae:bd:da:12:3f:f0:cb:21: 2e:9b:4f:45:34:af:61:8a:2a:99:a1:f2:91:6e:fb: 33:13:ad:fc:c5:cf:ed:f8:e5:33:22:d7:67:e0:bf: 9b:96:84:bb:8a:e5:8d:ac:4d:9d:98:13:31:e6:03: da:7a:44:cb:99:44:d7:8d:19:29:7d:2e:21:51:61: bd:aa:4d:a5:0c:59:15:b7:92:5c:72:4f:a4:5f:b9: 4e:d9:50:32:7d:57:37:14:a1:d9:99:19:c6:7f:46: 69:ac:47:b4:75:f8:70:62:97:0a:fb:2a:af:6e:98: 15:b5:b9:f1:97:e7:9f:a0:cf:6d:00:05:92:8e:07: 93:2f:c6:0e:5d:80:14:33:e5:43:cf:80:55:3b:d4: 77:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:3F:FB:67:45:16:52:31:04:23:0B:2D:D5:A9:58:E3:1A:F7:B3:A7 X509v3 Authority Key Identifier: keyid:BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/3135312e3135382e3232342e302f32342d3234203d3e20313331363330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.224.0/24 Signature Algorithm: sha256WithRSAEncryption 77:38:f6:bb:cf:7b:ed:96:35:ea:9a:0a:4e:d4:5b:0e:63:62: 58:e5:5c:ba:c2:c6:72:b9:84:78:aa:61:97:06:27:66:8f:9c: 60:4e:b8:e3:05:3d:a4:3e:ba:59:e4:1e:be:e6:e5:53:e8:1a: a6:fc:7d:33:89:69:7d:02:95:b0:72:1c:67:f0:13:d1:55:47: f5:b1:63:d8:22:a9:47:a6:53:c0:a9:9d:1f:45:2b:c4:ab:0e: 07:99:f8:f3:0c:07:df:77:d4:68:8a:87:17:d7:99:ac:01:fa: 1a:89:3e:38:f0:3a:05:c5:23:d2:fc:a9:10:94:f8:f9:99:49: 15:da:12:10:ee:12:5d:7d:c6:eb:15:21:72:f6:c9:38:84:59: 59:fe:76:22:b9:12:53:76:9e:b8:b4:f5:62:03:26:5c:3c:39: c6:9d:47:f9:07:f5:09:69:e4:09:a8:46:de:0f:8f:6e:8c:0f: 79:50:72:38:2d:54:09:31:f6:f1:57:fe:ee:15:fd:ae:37:64: 97:f6:51:ee:d2:51:09:47:86:13:83:57:d5:93:fe:40:16:89: 31:64:75:e3:b6:bc:75:7b:b0:d1:ec:32:a2:ce:7c:69:ef:36: a5:4e:8c:85:ef:0b:44:63:1e:51:d1:a9:ad:f1:1a:2f:63:a4: 3c:bb:56:b4 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUPLSJesYzjARxBWcrwD8LsKXsuCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZEQjQwNDk2QTJFMkZEOUI0RTRGOTZCMzU4OTQxM0Ix RjY3QjEwNTAeFw0yNjA1MTExNzUzNTlaFw0yNzA1MTAxNzU4NTlaMDMxMTAvBgNV BAMTKDRDM0ZGQjY3NDUxNjUyMzEwNDIzMEIyREQ1QTk1OEUzMUFGN0IzQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/sOwItt4acYTVkvikh1NPOD3i 2zvs6N8iNDfe0MCm1y3mZWfoUtfpmO/vlmL8usA8zGk1oJM7rw+KGjKkitvaTeDq dfHC2ISeyLiMQgCirdUCbkbcuOgzPtbo4A2fRVGybAxClEUaNTLjwjUGiiKuvdoS P/DLIS6bT0U0r2GKKpmh8pFu+zMTrfzFz+345TMi12fgv5uWhLuK5Y2sTZ2YEzHm A9p6RMuZRNeNGSl9LiFRYb2qTaUMWRW3klxyT6RfuU7ZUDJ9VzcUodmZGcZ/Rmms R7R1+HBilwr7Kq9umBW1ufGX55+gz20ABZKOB5Mvxg5dgBQz5UPPgFU71HeJAgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUTD/7Z0UWUjEEIwst1alY4xr3s6cwHwYDVR0j BBgwFoAUv9tASWouL9m05PlrNYlBOx9nsQUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MS9CRkRCNDA0OTZBMkUyRkQ5QjRFNEY5NkIzNTg5NDEzQjFGNjdCMTA1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8zL0JGREI0MDQ5NkEyRTJGRDlCNEU0Rjk2QjM1ODk0 MTNCMUY2N0IxMDUuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEFBQcwC4ZjcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8xLzMxMzUzMTJlMzEzNTM4 MmUzMjMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNjMzMzAucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACXnuAwDQYJKoZIhvcNAQELBQADggEBAHc49rvPe+2WNeqaCk7UWw5j YljlXLrCxnK5hHiqYZcGJ2aPnGBOuOMFPaQ+ulnkHr7m5VPoGqb8fTOJaX0ClbBy HGfwE9FVR/WxY9giqUemU8CpnR9FK8SrDgeZ+PMMB9931GiKhxfXmawB+hqJPjjw OgXFI9L8qRCU+PmZSRXaEhDuEl19xusVIXL2yTiEWVn+diK5ElN2nri09WIDJlw8 OcadR/kH9Qlp5AmoRt4Pj26MD3lQcjgtVAkx9vFX/u4V/a43ZJf2Ue7SUQlHhhOD V9WT/kAWiTFkdeO2vHV7sNHsMqLOfGnvNqVOjIXvC0RjHlHRqa3xGi9jpDy7VrQ= -----END CERTIFICATE-----Generated at Wed May 13 05:55:22 2026 by rpki-client