$ rpki-client -vvvf rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31302e302f32342d3234203d3e20323032373336.roa File: 3230322e352e31302e302f32342d3234203d3e20323032373336.roa (raw, json) Hash identifier: QJ5gRwlwOk90NIqbTeKQ9YIL40s99qTaJ8zlmXypSM4= Subject key identifier: B0:09:65:4E:42:4B:9D:54:AD:43:51:FF:78:CE:88:E9:C1:35:26:09 Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Certificate serial: 2D5DB3CC85C935EF246442B2A65F15D6DF54C9DB Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31302e302f32342d3234203d3e20323032373336.roa Signing time: Mon 14 Sep 2026 06:24:01 +0000 ROA not before: Mon 14 Sep 2026 06:19:01 +0000 ROA not after: Mon 13 Sep 2027 06:24:01 +0000 asID: 202736 IP address blocks: 202.5.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5d:b3:cc:85:c9:35:ef:24:64:42:b2:a6:5f:15:d6:df:54:c9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Validity Not Before: Sep 14 06:19:01 2026 GMT Not After : Sep 13 06:24:01 2027 GMT Subject: CN=B009654E424B9D54AD4351FF78CE88E9C1352609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:82:aa:89:fc:cc:b3:12:0f:7b:54:42:c2:5b: 90:11:1f:10:20:b0:4b:14:d6:4f:d7:13:4d:ca:d0: 43:cd:0d:90:81:5d:f5:44:ec:c7:9f:d9:01:f6:5b: 4c:63:2d:98:de:7a:0d:37:30:62:88:98:59:0c:e5: 10:5b:7f:19:58:62:68:ab:6c:b0:39:f0:ce:1c:a0: 7f:4e:a9:cd:3b:0f:a4:b6:7f:c6:f8:92:c5:32:b8: 02:b9:58:a4:8d:be:e0:d8:c9:a6:bf:76:42:77:5e: 12:74:9e:85:7f:83:43:16:c2:d3:47:6b:27:6a:ea: d8:63:91:7b:85:b9:19:2b:10:a9:05:fe:60:19:0f: 5c:5d:d5:51:07:dc:0e:66:0b:cc:e2:3f:c2:db:3d: 81:4f:6f:31:79:aa:1f:88:62:3d:5a:c4:b6:1d:f2: a9:7d:34:a9:6d:86:84:e0:de:8c:6e:6e:f0:b9:1b: cf:4f:1a:75:d1:17:e0:08:ba:87:1f:e5:a8:b1:b8: 34:48:d7:2c:c5:22:9a:f8:b0:16:55:c8:41:67:c5: ec:03:b4:ae:ab:24:2d:2f:34:1b:99:4f:7f:5a:c0: 8e:3f:49:f4:43:c9:14:65:7e:16:e7:a8:53:56:ad: 96:ff:0e:c8:7f:66:50:97:e4:8c:c7:cf:1e:1a:48: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:09:65:4E:42:4B:9D:54:AD:43:51:FF:78:CE:88:E9:C1:35:26:09 X509v3 Authority Key Identifier: keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31302e302f32342d3234203d3e20323032373336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.5.10.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:9b:69:fa:4b:d1:8a:5b:5c:6a:c0:43:8a:a7:d7:20:95:e7: d0:eb:a6:e5:bc:a6:dd:93:fe:15:6a:4d:f7:b4:dc:d1:1c:40: 7f:3b:f4:1b:17:d4:8d:65:70:48:f9:90:01:7b:4c:73:38:49: 10:64:55:75:2e:31:88:73:cf:29:a6:4a:4a:40:89:0e:62:da: 4c:cf:51:96:2e:32:c4:4f:7d:bd:7b:8f:50:6e:14:19:bb:11: 45:0e:a8:d9:61:78:7c:61:73:23:b1:46:a3:c5:03:f4:78:da: fc:ad:8d:3a:f9:55:64:c3:d0:06:7b:d5:3b:9f:9d:88:41:3f: 93:b7:e1:72:63:19:04:b7:ca:c4:f7:60:9c:61:0c:e4:4d:11: ca:34:c1:f8:c1:48:a9:fc:39:f8:c0:ed:0a:bb:18:06:ca:da: 62:ee:4c:56:9e:36:a1:fa:f5:a6:3f:93:9c:ee:78:a7:62:bb: 42:3d:c0:23:b8:43:54:5d:87:e6:eb:1c:73:e9:d2:9d:29:b0: 95:38:a0:a6:21:bd:fc:5f:64:81:5c:32:36:55:0e:0f:c5:e5: 9f:e2:7a:df:c8:15:51:25:d5:19:b8:fd:38:6c:02:44:e8:12: 15:1d:7d:3c:a6:1b:5d:52:e5:b6:cf:9a:20:d8:8c:a2:f6:6a: 3d:9f:81:4f -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIULV2zzIXJNe8kZEKypl8V1t9UydswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRE RUQ4OEUxQjAeFw0yNjA5MTQwNjE5MDFaFw0yNzA5MTMwNjI0MDFaMDMxMTAvBgNV BAMTKEIwMDk2NTRFNDI0QjlENTRBRDQzNTFGRjc4Q0U4OEU5QzEzNTI2MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQgqqJ/MyzEg97VELCW5ARHxAg sEsU1k/XE03K0EPNDZCBXfVE7Mef2QH2W0xjLZjeeg03MGKImFkM5RBbfxlYYmir bLA58M4coH9Oqc07D6S2f8b4ksUyuAK5WKSNvuDYyaa/dkJ3XhJ0noV/g0MWwtNH aydq6thjkXuFuRkrEKkF/mAZD1xd1VEH3A5mC8ziP8LbPYFPbzF5qh+IYj1axLYd 8ql9NKlthoTg3oxubvC5G89PGnXRF+AIuocf5aixuDRI1yzFIpr4sBZVyEFnxewD tK6rJC0vNBuZT39awI4/SfRDyRRlfhbnqFNWrZb/Dsh/ZlCX5IzHzx4aSOMDAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUsAllTkJLnVStQ1H/eM6I6cE1JgkwHwYDVR0j BBgwFoAUqziIpOFj4rznbqmG48Py/d7YjhswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tT SU5DLzAvQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BQjM4ODhBNEUxNjNFMkJDRTc2RUE5ODZF M0MzRjJGRERFRDg4RTFCLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuG YXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tTSU5DLzAvMzIzMDMy MmUzNTJlMzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMjM3MzMzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMoFCjANBgkqhkiG9w0BAQsFAAOCAQEAO5tp+kvRiltcasBDiqfX IJXn0Oum5bym3ZP+FWpN97Tc0RxAfzv0GxfUjWVwSPmQAXtMczhJEGRVdS4xiHPP KaZKSkCJDmLaTM9Rli4yxE99vXuPUG4UGbsRRQ6o2WF4fGFzI7FGo8UD9Hja/K2N OvlVZMPQBnvVO5+diEE/k7fhcmMZBLfKxPdgnGEM5E0RyjTB+MFIqfw5+MDtCrsY BsraYu5MVp42ofr1pj+TnO54p2K7Qj3AI7hDVF2H5uscc+nSnSmwlTigpiG9/F9k gVwyNlUOD8Xln+J638gVUSXVGbj9OGwCROgSFR19PKYbXVLlts+aINiMovZqPZ+B Tw== -----END CERTIFICATE-----Generated at Mon Sep 21 12:38:54 2026 by rpki-client