$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/QlJRPkwzvFSkzFyqNqAHw2qpp8o.roa File: QlJRPkwzvFSkzFyqNqAHw2qpp8o.roa (raw, json) Hash identifier: sLB/lAuXpVWxEYttjxjEfkV/SwqGJLAlO66H053YWyQ= Subject key identifier: 42:52:51:3E:4C:33:BC:54:A4:CC:5C:AA:36:A0:07:C3:6A:A9:A7:CA Certificate issuer: /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C Certificate serial: 0200 Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/QlJRPkwzvFSkzFyqNqAHw2qpp8o.roa Signing time: Wed 25 Mar 2026 08:08:43 +0000 ROA not before: Wed 25 Mar 2026 08:08:43 +0000 ROA not after: Wed 30 Dec 2026 15:30:20 +0000 asID: 18040 IP address blocks: 2402:43e0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 06:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C Validity Not Before: Mar 25 08:08:43 2026 GMT Not After : Dec 30 15:30:20 2026 GMT Subject: CN=4252513E4C33BC54A4CC5CAA36A007C36AA9A7CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:a6:e7:59:1e:15:b5:ab:19:43:16:c6:86: b5:1a:6a:41:2a:c6:07:5a:77:5d:2d:cd:68:6a:24: 15:f9:14:24:10:52:52:a0:51:7e:2c:dd:e8:8d:86: cb:8d:31:db:ef:b7:f1:09:00:38:45:fa:10:e2:1e: 88:6d:59:40:a3:dd:2e:83:78:13:75:cd:77:68:d5: 17:1d:66:d9:a5:3c:8a:f0:fa:2d:73:ae:b4:35:2e: 8d:a7:08:19:7c:89:bb:01:ce:c0:88:6e:2b:59:f6: fa:be:06:79:67:c8:84:3c:0f:1c:84:38:13:a1:cd: d7:b2:ff:b2:17:9f:be:52:3f:2b:a8:7d:df:03:35: dd:23:c8:c8:e1:13:c6:78:4d:b5:d8:70:a1:a4:c2: 13:45:d1:83:5f:5e:4b:c4:d6:c5:03:bc:5f:95:2d: 3f:62:66:92:5f:de:53:2c:56:b5:4a:aa:24:3c:7c: cb:83:91:2a:52:cb:2f:d0:0e:2f:3d:a9:66:96:a9: 2f:48:35:60:fb:1c:d7:52:b3:67:ba:bb:83:dc:9d: 11:6c:d3:ee:f8:12:be:14:59:b4:2c:26:1a:20:cb: af:b8:f8:7e:62:c4:bd:24:0c:09:e3:19:e4:f2:80: df:20:e7:6e:c4:b4:a1:ad:4a:a3:59:96:45:0e:5e: 55:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:52:51:3E:4C:33:BC:54:A4:CC:5C:AA:36:A0:07:C3:6A:A9:A7:CA X509v3 Authority Key Identifier: keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/QlJRPkwzvFSkzFyqNqAHw2qpp8o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2402:43e0::/44 Signature Algorithm: sha256WithRSAEncryption 85:6d:81:8d:c5:b9:a2:69:e9:eb:90:c5:e2:cd:2f:c3:c0:a7: af:7a:40:b1:72:ab:46:2d:1d:c7:c6:f1:48:ae:78:a1:e5:3f: 75:6e:b4:d5:23:68:bd:5b:ad:fa:56:b6:49:9e:02:ef:05:a6: 57:69:ad:2a:f5:2b:8f:60:4b:6e:90:86:84:32:9f:1f:d6:5c: 34:d0:fa:4f:9f:bc:ef:fc:4c:44:8d:1f:c4:af:57:a5:37:ea: 03:53:ca:53:ab:77:8a:32:88:7c:5a:ff:a8:27:81:07:cc:29: a5:93:b1:b1:bc:81:82:71:e3:bd:32:7b:e5:16:02:a4:26:0e: 74:19:f6:70:2d:6f:10:58:fd:07:89:2a:d8:f8:5b:c7:39:d1: 65:42:93:64:d9:45:e7:0b:43:cf:8d:59:5c:6b:0e:c4:83:6f: d0:c5:81:54:7e:10:25:3d:66:04:82:b6:32:87:a5:e4:5e:93: cb:ae:ca:84:38:65:f4:21:34:30:5b:4e:6d:11:ea:06:24:3f: 9a:8c:67:89:dc:9d:d7:eb:5a:e1:66:a4:a4:9e:2d:94:f4:96: d2:b0:b5:7f:e8:3f:9d:b3:ac:2a:0d:15:89:d2:1b:4e:c2:9e: 04:44:24:00:2a:42:3f:ea:62:ce:88:d6:72:24:c3:27:3c:eb: 84:76:ef:4e -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkM3 NTJDQTU5RUI4RUFFRjIzRDIyNURDNjdBQTA4NTIwMUYxRjc5QzAeFw0yNjAzMjUw ODA4NDNaFw0yNjEyMzAxNTMwMjBaMDMxMTAvBgNVBAMTKDQyNTI1MTNFNEMzM0JD NTRBNENDNUNBQTM2QTAwN0MzNkFBOUE3Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDfKbnWR4VtasZQxbGhrUaakEqxgdad10tzWhqJBX5FCQQUlKg UX4s3eiNhsuNMdvvt/EJADhF+hDiHohtWUCj3S6DeBN1zXdo1RcdZtmlPIrw+i1z rrQ1Lo2nCBl8ibsBzsCIbitZ9vq+BnlnyIQ8DxyEOBOhzdey/7IXn75SPyuofd8D Nd0jyMjhE8Z4TbXYcKGkwhNF0YNfXkvE1sUDvF+VLT9iZpJf3lMsVrVKqiQ8fMuD kSpSyy/QDi89qWaWqS9INWD7HNdSs2e6u4PcnRFs0+74Er4UWbQsJhogy6+4+H5i xL0kDAnjGeTygN8g527EtKGtSqNZlkUOXlWLAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUQlJRPkwzvFSkzFyqNqAHw2qpp8owHwYDVR0jBBgwFoAU/HUspZ646u8j0iXc Z6oIUgHx95wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQU9URVJO RVQvX0hVc3BaNjQ2dThqMGlYY1o2b0lVZ0h4OTV3LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9fSFVzcFo2NDZ1OGowaVhjWjZvSVVnSHg5NXcuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BT1RFUk5FVC9RbEpSUGt3enZGU2t6 RnlxTnFBSHcycXBwOG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcEJAJD4AAAMA0GCSqGSIb3DQEBCwUAA4IBAQCFbYGNxbmiaenrkMXizS/DwKev ekCxcqtGLR3HxvFIrnih5T91brTVI2i9W636VrZJngLvBaZXaa0q9SuPYEtukIaE Mp8f1lw00PpPn7zv/ExEjR/Er1elN+oDU8pTq3eKMoh8Wv+oJ4EHzCmlk7GxvIGC ceO9MnvlFgKkJg50GfZwLW8QWP0HiSrY+FvHOdFlQpNk2UXnC0PPjVlcaw7Eg2/Q xYFUfhAlPWYEgrYyh6XkXpPLrsqEOGX0ITQwW05tEeoGJD+ajGeJ3J3X61rhZqSk ni2U9JbSsLV/6D+ds6wqDRWJ0htOwp4ERCQAKkI/6mLOiNZyJMMnPOuEdu9O -----END CERTIFICATE-----Generated at Fri Mar 27 05:17:28 2026 by rpki-client