$ rpki-client -vvvf rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31302e302f32342d3234203d3e20313937353337.roa File: 3230322e352e31302e302f32342d3234203d3e20313937353337.roa (raw, json) Hash identifier: uvBAHIGsfVOPKEPiUlrDJflai1mxkNu/0gJ+oj7/pBE= Subject key identifier: 9F:72:2F:9D:21:73:0D:73:98:E0:A5:EF:BD:FC:02:4F:B0:E1:2F:9C Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Certificate serial: 6B4DFC4902997DC3EA27DDDC11D24DEF4A273711 Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31302e302f32342d3234203d3e20313937353337.roa Signing time: Mon 14 Sep 2026 06:24:03 +0000 ROA not before: Mon 14 Sep 2026 06:19:03 +0000 ROA not after: Mon 13 Sep 2027 06:24:03 +0000 asID: 197537 IP address blocks: 202.5.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 08:58:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:4d:fc:49:02:99:7d:c3:ea:27:dd:dc:11:d2:4d:ef:4a:27:37:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Validity Not Before: Sep 14 06:19:03 2026 GMT Not After : Sep 13 06:24:03 2027 GMT Subject: CN=9F722F9D21730D7398E0A5EFBDFC024FB0E12F9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1d:2b:ab:ce:41:d1:b4:0f:67:9a:cc:fa:eb: 2a:76:00:77:03:08:df:73:9d:fc:03:2b:95:93:49: e7:4a:50:8f:34:14:2a:b7:65:14:8b:c0:a9:a0:41: 6c:39:94:f2:c9:73:e5:4e:cd:0e:1e:a1:4c:14:57: 7e:d8:3a:9c:8b:f3:e6:3e:df:65:79:db:b8:6e:f2: aa:db:54:5b:c3:53:95:d1:cc:48:14:03:67:67:57: 0a:72:c9:5a:3d:0f:4a:8d:67:34:39:40:5e:0f:69: 09:26:24:db:87:44:a3:5a:ae:21:77:c7:6b:af:c0: 08:d3:97:de:19:7e:a5:00:36:bb:8a:c6:bc:9a:d1: ef:ea:51:2b:5e:10:f7:bb:7a:04:9a:8c:49:46:53: 48:98:6a:80:41:cb:ee:80:10:8d:9c:7c:c3:be:74: 2b:9f:22:cb:70:8e:10:02:af:07:73:77:17:48:e8: 97:f3:a3:00:e5:80:49:67:58:d9:88:bd:62:0f:a1: 2a:c4:70:ec:26:1d:25:13:e2:ca:1e:e5:ca:e5:4c: 10:92:7d:f6:24:08:23:54:e1:e6:1e:d9:62:b7:63: bc:28:7e:be:d3:cc:40:75:2c:2c:80:4a:b8:99:8b: be:c0:5f:2c:c1:b8:b4:7c:05:08:7b:3a:41:6f:20: ad:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:72:2F:9D:21:73:0D:73:98:E0:A5:EF:BD:FC:02:4F:B0:E1:2F:9C X509v3 Authority Key Identifier: keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31302e302f32342d3234203d3e20313937353337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.5.10.0/24 Signature Algorithm: sha256WithRSAEncryption a0:63:f0:8f:c7:ac:81:e5:4f:40:22:f3:e2:82:1d:8e:df:d1: bb:85:cc:a7:67:36:6b:d1:39:a5:09:97:0e:50:e7:55:d2:8e: 7e:9d:81:aa:1d:36:d4:bc:64:11:7c:e4:4c:75:e0:f3:66:c2: 7f:71:99:73:63:bc:85:13:ab:37:3f:8c:f5:92:e0:c7:47:03: ae:d6:c0:a1:8f:95:25:32:16:26:0c:65:95:28:0a:2e:1e:62: 1b:c1:25:bd:19:83:7d:13:07:29:1c:a1:83:e3:12:43:b8:fe: 3a:80:0f:d5:dd:ea:4d:bd:59:2c:bf:30:fc:73:95:2c:f8:91: 96:3a:33:2c:8d:d9:cc:66:d4:c7:2b:8e:b1:7f:d7:32:c7:00: 67:b3:3a:ea:b6:97:57:08:e9:72:a5:d3:15:1b:52:6b:ac:b8: 6e:86:cc:36:d7:b7:b2:a7:2b:d1:36:b3:f4:14:71:64:1a:41: 7b:0d:12:d1:9e:f1:bd:95:ce:14:21:91:26:66:61:c4:4b:a3: f8:eb:47:5b:ed:7a:0a:05:10:e3:ff:3a:96:4e:e7:22:aa:38: 41:48:e9:5c:cd:91:fe:0d:79:8b:6b:cd:62:4c:48:5d:99:89: 58:5d:6a:84:7d:24:1a:84:5d:35:ae:10:50:d5:0b:3f:ca:11: e1:27:8c:ec -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUa038SQKZfcPqJ93cEdJN70onNxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRE RUQ4OEUxQjAeFw0yNjA5MTQwNjE5MDNaFw0yNzA5MTMwNjI0MDNaMDMxMTAvBgNV BAMTKDlGNzIyRjlEMjE3MzBENzM5OEUwQTVFRkJERkMwMjRGQjBFMTJGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXHSurzkHRtA9nmsz66yp2AHcD CN9znfwDK5WTSedKUI80FCq3ZRSLwKmgQWw5lPLJc+VOzQ4eoUwUV37YOpyL8+Y+ 32V527hu8qrbVFvDU5XRzEgUA2dnVwpyyVo9D0qNZzQ5QF4PaQkmJNuHRKNariF3 x2uvwAjTl94ZfqUANruKxrya0e/qUSteEPe7egSajElGU0iYaoBBy+6AEI2cfMO+ dCufIstwjhACrwdzdxdI6JfzowDlgElnWNmIvWIPoSrEcOwmHSUT4soe5crlTBCS ffYkCCNU4eYe2WK3Y7wofr7TzEB1LCyASriZi77AXyzBuLR8BQh7OkFvIK2ZAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUn3IvnSFzDXOY4KXvvfwCT7DhL5wwHwYDVR0j BBgwFoAUqziIpOFj4rznbqmG48Py/d7YjhswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tT SU5DLzAvQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BQjM4ODhBNEUxNjNFMkJDRTc2RUE5ODZF M0MzRjJGRERFRDg4RTFCLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuG YXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tTSU5DLzAvMzIzMDMy MmUzNTJlMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzNzM1MzMzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMoFCjANBgkqhkiG9w0BAQsFAAOCAQEAoGPwj8esgeVPQCLz4oId jt/Ru4XMp2c2a9E5pQmXDlDnVdKOfp2Bqh021LxkEXzkTHXg82bCf3GZc2O8hROr Nz+M9ZLgx0cDrtbAoY+VJTIWJgxllSgKLh5iG8ElvRmDfRMHKRyhg+MSQ7j+OoAP 1d3qTb1ZLL8w/HOVLPiRljozLI3ZzGbUxyuOsX/XMscAZ7M66raXVwjpcqXTFRtS a6y4bobMNte3sqcr0Taz9BRxZBpBew0S0Z7xvZXOFCGRJmZhxEuj+OtHW+16CgUQ 4/86lk7nIqo4QUjpXM2R/g15i2vNYkxIXZmJWF1qhH0kGoRdNa4QUNULP8oR4SeM 7A== -----END CERTIFICATE-----Generated at Mon Sep 21 02:27:15 2026 by rpki-client