$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/UE6Flyq_0iHkA4hnLqY-wxdbjLM.roa File: UE6Flyq_0iHkA4hnLqY-wxdbjLM.roa (raw, json) Hash identifier: FZoTRblFXgW3hXOPHygPtnsb6UyKSx8ARJbDmM9Nfuo= Subject key identifier: 50:4E:85:97:2A:BF:D2:21:E4:03:88:67:2E:A6:3E:C3:17:5B:8C:B3 Certificate issuer: /CN=4091DB5A6EA03B760F54E090CB909873AE33F649 Certificate serial: 01E7 Authority key identifier: 40:91:DB:5A:6E:A0:3B:76:0F:54:E0:90:CB:90:98:73:AE:33:F6:49 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/QJHbWm6gO3YPVOCQy5CYc64z9kk.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/UE6Flyq_0iHkA4hnLqY-wxdbjLM.roa Signing time: Wed 25 Mar 2026 08:04:58 +0000 ROA not before: Wed 25 Mar 2026 08:04:57 +0000 ROA not after: Wed 30 Dec 2026 15:30:20 +0000 asID: 152612 IP address blocks: 144.79.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/QJHbWm6gO3YPVOCQy5CYc64z9kk.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/QJHbWm6gO3YPVOCQy5CYc64z9kk.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/QJHbWm6gO3YPVOCQy5CYc64z9kk.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4091DB5A6EA03B760F54E090CB909873AE33F649 Validity Not Before: Mar 25 08:04:57 2026 GMT Not After : Dec 30 15:30:20 2026 GMT Subject: CN=504E85972ABFD221E40388672EA63EC3175B8CB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:97:c7:c1:21:5a:11:e9:e0:d1:43:4a:52: ad:44:a4:b9:6e:fb:8e:06:f0:2c:81:d8:74:24:84: 5c:00:21:94:23:a0:eb:d0:be:a6:45:ff:f6:4e:ed: 33:e1:94:a3:35:88:1e:57:0b:8f:6e:b7:5b:6d:ee: 81:b7:a1:a5:24:f2:21:cd:47:b8:6e:4e:0f:77:b6: 63:2a:29:04:e7:2e:f2:4e:96:f8:51:e8:3e:7a:3c: 28:c1:ca:2d:c0:b6:3f:05:34:b4:f2:6b:e8:08:a1: 1e:92:25:98:2e:c7:bf:8d:eb:ec:4e:42:16:f7:84: 3c:21:88:21:79:d3:6d:eb:b4:43:20:d0:73:37:ac: 8d:19:ae:24:db:bf:6c:8e:71:fc:56:44:5d:08:f0: bd:84:17:b0:90:e5:67:e5:39:b9:31:1a:9e:34:6b: 2d:36:d5:01:35:81:b5:82:5c:ff:38:fd:de:b0:0c: 4c:11:07:84:0a:e4:ff:e7:76:04:6e:0c:74:19:08: 15:4f:5a:44:21:31:c2:5e:e9:b0:cc:d3:02:50:a5: df:18:09:d3:79:13:13:9f:0a:2a:73:04:0b:8e:75: f0:2f:f6:72:5f:72:b5:16:75:7d:df:ab:33:d1:ab: e7:da:b7:fc:1a:dd:20:a0:d6:58:87:86:2f:ca:b8: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4E:85:97:2A:BF:D2:21:E4:03:88:67:2E:A6:3E:C3:17:5B:8C:B3 X509v3 Authority Key Identifier: keyid:40:91:DB:5A:6E:A0:3B:76:0F:54:E0:90:CB:90:98:73:AE:33:F6:49 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/QJHbWm6gO3YPVOCQy5CYc64z9kk.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QJHbWm6gO3YPVOCQy5CYc64z9kk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/UE6Flyq_0iHkA4hnLqY-wxdbjLM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 144.79.237.0/24 Signature Algorithm: sha256WithRSAEncryption 45:d7:7f:e0:b8:ba:24:bc:f7:ef:ba:00:d9:0d:40:7e:ae:c4: 7a:6d:90:f9:f2:79:a9:56:63:0b:08:3d:ae:e6:1f:63:0d:59: e4:22:60:7e:62:87:bb:4d:cb:8e:7d:f6:47:2a:57:ef:32:74: f0:2b:77:54:b1:d9:0a:75:53:79:bf:2f:aa:37:13:e2:d4:7c: 3a:2a:63:aa:94:6e:e5:99:14:27:0f:66:e8:ce:38:56:b8:66: 6a:69:55:56:bf:2a:85:f0:1b:53:a6:29:aa:52:99:a8:94:15: 9e:3d:ca:fb:4f:88:d5:2c:ad:70:1b:a6:c5:b7:17:8b:72:f9: 10:07:13:f0:b6:1b:07:a9:17:c3:5f:d9:23:72:aa:12:f5:a3: e3:3b:6a:03:d2:1f:e9:8c:52:f2:a9:fb:30:6f:ab:6f:0e:13: f0:3b:9e:66:51:8f:b6:bb:89:82:85:75:ff:7d:80:e2:4b:1f: 1b:c8:a3:82:b7:19:e3:3a:a0:25:9b:42:d7:e6:94:b3:01:80: 4e:e8:11:ac:a9:67:93:65:41:6e:07:a5:89:4d:1c:6f:f4:77: 4c:d2:26:be:ad:49:b8:7b:34:01:98:3f:c8:12:84:ed:25:7e: aa:0a:bc:f9:33:93:14:a5:6d:18:af:1d:d2:ab:29:c5:f3:2b: 6c:80:5d:77 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICAecwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA5 MURCNUE2RUEwM0I3NjBGNTRFMDkwQ0I5MDk4NzNBRTMzRjY0OTAeFw0yNjAzMjUw ODA0NTdaFw0yNjEyMzAxNTMwMjBaMDMxMTAvBgNVBAMTKDUwNEU4NTk3MkFCRkQy MjFFNDAzODg2NzJFQTYzRUMzMTc1QjhDQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDOm5fHwSFaEeng0UNKUq1EpLlu+44G8CyB2HQkhFwAIZQjoOvQ vqZF//ZO7TPhlKM1iB5XC49ut1tt7oG3oaUk8iHNR7huTg93tmMqKQTnLvJOlvhR 6D56PCjByi3Atj8FNLTya+gIoR6SJZgux7+N6+xOQhb3hDwhiCF5023rtEMg0HM3 rI0ZriTbv2yOcfxWRF0I8L2EF7CQ5WflObkxGp40ay021QE1gbWCXP84/d6wDEwR B4QK5P/ndgRuDHQZCBVPWkQhMcJe6bDM0wJQpd8YCdN5ExOfCipzBAuOdfAv9nJf crUWdX3fqzPRq+fat/wa3SCg1liHhi/KuH9XAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUUE6Flyq/0iHkA4hnLqY+wxdbjLMwHwYDVR0jBBgwFoAUQJHbWm6gO3YPVOCQ y5CYc64z9kkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQU9URVJO RVQvUUpIYldtNmdPM1lQVk9DUXk1Q1ljNjR6OWtrLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9RSkhiV202Z08zWVBWT0NReTVDWWM2NHo5a2suY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BT1RFUk5FVC9VRTZGbHlxXzBpSGtB NGhuTHFZLXd4ZGJqTE0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAkE/tMA0GCSqGSIb3DQEBCwUAA4IBAQBF13/guLokvPfvugDZDUB+rsR6bZD5 8nmpVmMLCD2u5h9jDVnkImB+Yoe7TcuOffZHKlfvMnTwK3dUsdkKdVN5vy+qNxPi 1Hw6KmOqlG7lmRQnD2bozjhWuGZqaVVWvyqF8BtTpimqUpmolBWePcr7T4jVLK1w G6bFtxeLcvkQBxPwthsHqRfDX9kjcqoS9aPjO2oD0h/pjFLyqfswb6tvDhPwO55m UY+2u4mChXX/fYDiSx8byKOCtxnjOqAlm0LX5pSzAYBO6BGsqWeTZUFuB6WJTRxv 9HdM0ia+rUm4ezQBmD/IEoTtJX6qCrz5M5MUpW0Yrx3SqynF8ytsgF13 -----END CERTIFICATE-----Generated at Fri Mar 27 08:07:53 2026 by rpki-client