$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/1/3135312e3135382e3232352e302f32342d3234203d3e20313937353337.roa File: 3135312e3135382e3232352e302f32342d3234203d3e20313937353337.roa (raw, json) Hash identifier: OONjtGbImgqa0kIYiLjUQ1P3dRaZmeZTmlX9Ya86T08= Subject key identifier: CA:72:7D:88:A3:38:0D:8E:58:60:5B:C8:74:EC:63:F5:71:D3:6B:28 Certificate issuer: /CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Certificate serial: 39C075EA23D501DD2FF1E3B2E93F920ED4354A28 Authority key identifier: BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/1/3135312e3135382e3232352e302f32342d3234203d3e20313937353337.roa Signing time: Mon 11 May 2026 17:58:56 +0000 ROA not before: Mon 11 May 2026 17:53:56 +0000 ROA not after: Mon 10 May 2027 17:58:56 +0000 asID: 197537 IP address blocks: 151.158.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c0:75:ea:23:d5:01:dd:2f:f1:e3:b2:e9:3f:92:0e:d4:35:4a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Validity Not Before: May 11 17:53:56 2026 GMT Not After : May 10 17:58:56 2027 GMT Subject: CN=CA727D88A3380D8E58605BC874EC63F571D36B28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:11:5d:40:e7:40:5c:1a:dd:1c:8b:9b:25:a2: 68:1f:9e:cc:3f:9d:c0:a6:b7:97:dd:9d:a9:df:d9: 98:22:06:9c:a3:f8:3d:f4:31:95:37:c0:dd:4f:b7: 81:59:e7:16:2b:93:d3:19:df:d0:a0:3c:ee:66:e5: fb:55:fa:0e:e6:b4:89:4d:54:d6:38:8a:f1:78:79: f1:dd:3c:d3:b2:98:b3:21:9f:3c:c8:2b:0d:8a:e7: 6b:b1:46:cc:bd:e7:3d:6c:ef:33:41:b4:ba:b8:88: ab:bd:f9:f8:08:e4:07:26:2c:a2:16:02:3a:50:6e: d9:aa:81:c5:7d:e8:7e:22:bc:07:ab:1e:25:d7:1c: 21:ba:b9:28:dc:b0:ea:43:40:72:2c:2f:ee:76:14: 8d:e9:6d:f8:bc:66:73:6f:b2:73:9f:f4:b3:f8:55: 19:9b:30:9b:5a:53:f3:50:13:eb:e7:f9:26:63:56: bf:fa:6d:30:b9:33:a3:b9:ef:c2:bd:93:7d:59:e3: b3:e9:7a:ae:77:e1:47:49:e9:66:ee:87:2e:aa:2a: 6d:00:47:3e:e0:25:da:1a:87:4d:11:6d:5b:e3:c4: 02:a6:56:fe:d7:f8:9d:15:9e:6c:71:15:c2:0c:90: 5a:74:72:77:17:04:b7:48:15:13:fd:74:09:ec:65: 58:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:72:7D:88:A3:38:0D:8E:58:60:5B:C8:74:EC:63:F5:71:D3:6B:28 X509v3 Authority Key Identifier: keyid:BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/3135312e3135382e3232352e302f32342d3234203d3e20313937353337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.225.0/24 Signature Algorithm: sha256WithRSAEncryption 02:f0:52:ea:fd:48:e2:ba:f5:dd:59:a6:76:05:e3:e2:f0:86: 86:7f:3b:ec:46:59:0c:fa:8b:db:2b:e9:eb:6e:eb:c5:25:8a: c6:20:60:ff:1c:7e:70:ae:80:67:51:be:33:57:54:0d:39:42: d7:79:81:f0:0b:d7:72:5c:26:7f:4d:f2:0f:ba:09:61:b8:30: 9e:85:4e:8c:2e:b9:75:9d:64:ca:9c:6a:b4:70:9d:04:a4:26: ed:c7:5f:77:47:5e:49:90:a6:0b:85:ea:c4:47:b3:7a:85:bd: bc:02:43:47:5c:7f:d5:2a:2f:18:f3:6e:d5:92:bd:18:24:21: a6:76:f9:09:8d:68:8e:c4:30:79:b2:f6:94:11:1f:81:9c:05: 0b:ea:56:01:0d:a0:09:62:37:1e:ec:eb:73:78:5a:97:d6:16: 01:5f:68:d3:89:ba:26:67:b0:14:fc:12:cd:de:c1:27:4b:f6: ac:87:44:b3:a0:8d:48:1c:fa:10:21:c9:76:f7:02:a1:be:1d: bf:cc:25:52:c2:a4:93:8f:8d:51:44:5c:85:d2:47:5f:ae:e5: be:0f:f3:d9:7c:00:5a:54:6b:56:85:67:af:b1:d6:4d:23:39: a2:9b:a0:4b:32:06:07:9d:56:5c:85:ef:c2:2f:13:8a:1d:11: 0b:b2:d6:cd -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIUOcB16iPVAd0v8eOy6T+SDtQ1SigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZEQjQwNDk2QTJFMkZEOUI0RTRGOTZCMzU4OTQxM0Ix RjY3QjEwNTAeFw0yNjA1MTExNzUzNTZaFw0yNzA1MTAxNzU4NTZaMDMxMTAvBgNV BAMTKENBNzI3RDg4QTMzODBEOEU1ODYwNUJDODc0RUM2M0Y1NzFEMzZCMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoEV1A50BcGt0ci5slomgfnsw/ ncCmt5fdnanf2ZgiBpyj+D30MZU3wN1Pt4FZ5xYrk9MZ39CgPO5m5ftV+g7mtIlN VNY4ivF4efHdPNOymLMhnzzIKw2K52uxRsy95z1s7zNBtLq4iKu9+fgI5AcmLKIW AjpQbtmqgcV96H4ivAerHiXXHCG6uSjcsOpDQHIsL+52FI3pbfi8ZnNvsnOf9LP4 VRmbMJtaU/NQE+vn+SZjVr/6bTC5M6O578K9k31Z47Ppeq534UdJ6Wbuhy6qKm0A Rz7gJdoah00RbVvjxAKmVv7X+J0VnmxxFcIMkFp0cncXBLdIFRP9dAnsZVi9AgMB AAGjggHlMIIB4TAdBgNVHQ4EFgQUynJ9iKM4DY5YYFvIdOxj9XHTaygwHwYDVR0j BBgwFoAUv9tASWouL9m05PlrNYlBOx9nsQUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MS9CRkRCNDA0OTZBMkUyRkQ5QjRFNEY5NkIzNTg5NDEzQjFGNjdCMTA1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8zL0JGREI0MDQ5NkEyRTJGRDlCNEU0Rjk2QjM1ODk0 MTNCMUY2N0IxMDUuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEFBQcwC4ZjcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8xLzMxMzUzMTJlMzEzNTM4 MmUzMjMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzczNTMzMzcucm9h MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACXnuEwDQYJKoZIhvcNAQELBQADggEBAALwUur9SOK69d1ZpnYF4+Lw hoZ/O+xGWQz6i9sr6etu68UlisYgYP8cfnCugGdRvjNXVA05Qtd5gfAL13JcJn9N 8g+6CWG4MJ6FTowuuXWdZMqcarRwnQSkJu3HX3dHXkmQpguF6sRHs3qFvbwCQ0dc f9UqLxjzbtWSvRgkIaZ2+QmNaI7EMHmy9pQRH4GcBQvqVgENoAliNx7s63N4WpfW FgFfaNOJuiZnsBT8Es3ewSdL9qyHRLOgjUgc+hAhyXb3AqG+Hb/MJVLCpJOPjVFE XIXSR1+u5b4P89l8AFpUa1aFZ6+x1k0jOaKboEsyBgedVlyF78IvE4odEQuy1s0= -----END CERTIFICATE-----Generated at Wed May 13 13:57:21 2026 by rpki-client