$ rpki-client -vvvf rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31312e302f32342d3234203d3e20313937353337.roa File: 3230322e352e31312e302f32342d3234203d3e20313937353337.roa (raw, json) Hash identifier: /asmOvtxTVfejsQzCQN9JAzbwce/1zKDLT1mSL+cbv8= Subject key identifier: 0A:16:FB:C6:DF:06:DA:BC:65:74:25:51:4A:DC:10:02:41:40:1B:47 Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Certificate serial: 265DAB03B3DC5333900576E220E5CA3F31C6CA35 Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31312e302f32342d3234203d3e20313937353337.roa Signing time: Mon 14 Sep 2026 06:24:02 +0000 ROA not before: Mon 14 Sep 2026 06:19:02 +0000 ROA not after: Mon 13 Sep 2027 06:24:02 +0000 asID: 197537 IP address blocks: 202.5.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 06:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5d:ab:03:b3:dc:53:33:90:05:76:e2:20:e5:ca:3f:31:c6:ca:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Validity Not Before: Sep 14 06:19:02 2026 GMT Not After : Sep 13 06:24:02 2027 GMT Subject: CN=0A16FBC6DF06DABC657425514ADC100241401B47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:56:3b:1f:9d:1d:18:d7:f5:0b:12:5d:9d: 5a:77:a0:8e:f3:dc:05:3c:8a:5e:2f:76:8f:3c:d2: 3c:b3:ac:a1:57:d6:e4:97:4d:c0:7a:77:b1:56:fa: 37:a2:6b:2a:48:ec:04:9a:53:a3:04:86:ca:a5:ba: c1:bf:39:8f:9c:24:37:e1:96:61:11:46:29:0c:d2: 17:c1:0e:eb:43:75:75:9c:92:90:cd:af:b2:93:62: 13:fa:27:2f:53:e0:ea:46:c9:f6:c6:a1:e7:12:cc: e6:62:3b:de:9f:c0:36:d6:1a:a9:2e:13:1b:a3:a4: 03:95:30:76:25:f8:2e:fa:3c:b8:fd:31:2b:04:7f: 7a:a2:52:51:42:a9:8c:d4:d0:ba:7b:d1:96:7f:53: 38:1c:1d:bc:e0:81:81:c6:c4:eb:2b:24:60:79:bc: 3a:c8:f3:f6:62:1a:61:e4:f9:45:08:90:6e:80:cd: e0:3f:d3:c5:1b:19:97:01:94:a8:56:2e:ea:3c:7f: e5:20:00:d1:4a:f5:62:42:fa:86:02:e7:de:ea:48: b0:32:45:90:c0:01:b1:35:0c:4e:4a:c5:08:9c:e1: f8:87:71:7d:51:8d:aa:ed:16:8f:fc:b8:4f:cb:f8: 8e:b9:d6:08:ef:64:78:81:27:1d:7a:3f:05:49:90: a2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:16:FB:C6:DF:06:DA:BC:65:74:25:51:4A:DC:10:02:41:40:1B:47 X509v3 Authority Key Identifier: keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31312e302f32342d3234203d3e20313937353337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.5.11.0/24 Signature Algorithm: sha256WithRSAEncryption 62:b8:b1:20:04:68:9a:74:b6:b3:85:fd:ac:e3:db:4f:e2:09: 36:64:ba:cb:1a:10:56:2c:d5:6e:2d:78:32:3e:64:8a:b2:55: 96:a7:e2:77:7d:5c:cf:c2:50:40:af:2f:2b:5b:a8:fd:88:9d: bc:66:c1:ac:4f:e6:e6:3c:b1:2f:03:ee:b8:fd:02:e5:3c:17: fd:cc:64:f7:94:0d:55:e1:de:41:b6:f3:66:ce:aa:cf:f8:7a: a0:f5:b9:b0:65:06:4a:9a:77:f9:be:e7:61:33:db:f4:26:a2: 4f:e2:fa:50:37:a1:d9:81:e9:fb:80:f7:50:d8:10:30:27:e1: cb:68:4d:7a:09:09:c6:63:bb:dd:d9:70:26:19:c2:2c:34:8e: b2:45:fd:83:8a:bf:11:a2:eb:24:12:50:75:06:0e:26:68:9f: 64:66:17:4a:8c:ea:3e:1a:41:24:19:a6:f3:12:65:41:8b:23: a8:16:cd:0a:c4:82:f8:3b:37:ed:1c:68:bf:55:b5:81:74:ce: 84:c1:ad:39:59:9d:a0:ad:ce:ad:00:5f:2b:d3:5c:cf:62:7d: ec:56:67:eb:c3:82:ac:fd:d8:8d:71:32:5a:2a:58:9d:4a:14: 33:31:ae:84:03:4d:b6:66:c6:41:97:79:0c:c0:57:20:cf:a2: 1b:58:28:64 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUJl2rA7PcUzOQBXbiIOXKPzHGyjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRE RUQ4OEUxQjAeFw0yNjA5MTQwNjE5MDJaFw0yNzA5MTMwNjI0MDJaMDMxMTAvBgNV BAMTKDBBMTZGQkM2REYwNkRBQkM2NTc0MjU1MTRBREMxMDAyNDE0MDFCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dVY7H50dGNf1CxJdnVp3oI7z 3AU8il4vdo880jyzrKFX1uSXTcB6d7FW+jeiaypI7ASaU6MEhsqlusG/OY+cJDfh lmERRikM0hfBDutDdXWckpDNr7KTYhP6Jy9T4OpGyfbGoecSzOZiO96fwDbWGqku ExujpAOVMHYl+C76PLj9MSsEf3qiUlFCqYzU0Lp70ZZ/UzgcHbzggYHGxOsrJGB5 vDrI8/ZiGmHk+UUIkG6AzeA/08UbGZcBlKhWLuo8f+UgANFK9WJC+oYC597qSLAy RZDAAbE1DE5KxQic4fiHcX1RjartFo/8uE/L+I651gjvZHiBJx16PwVJkKLVAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUChb7xt8G2rxldCVRStwQAkFAG0cwHwYDVR0j BBgwFoAUqziIpOFj4rznbqmG48Py/d7YjhswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tT SU5DLzAvQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BQjM4ODhBNEUxNjNFMkJDRTc2RUE5ODZF M0MzRjJGRERFRDg4RTFCLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuG YXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tTSU5DLzAvMzIzMDMy MmUzNTJlMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzNzM1MzMzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMoFCzANBgkqhkiG9w0BAQsFAAOCAQEAYrixIARomnS2s4X9rOPb T+IJNmS6yxoQVizVbi14Mj5kirJVlqfid31cz8JQQK8vK1uo/YidvGbBrE/m5jyx LwPuuP0C5TwX/cxk95QNVeHeQbbzZs6qz/h6oPW5sGUGSpp3+b7nYTPb9CaiT+L6 UDeh2YHp+4D3UNgQMCfhy2hNegkJxmO73dlwJhnCLDSOskX9g4q/EaLrJBJQdQYO JmifZGYXSozqPhpBJBmm8xJlQYsjqBbNCsSC+Ds37Rxov1W1gXTOhMGtOVmdoK3O rQBfK9Ncz2J97FZn68OCrP3YjXEyWipYnUoUMzGuhANNtmbGQZd5DMBXIM+iG1go ZA== -----END CERTIFICATE-----Generated at Wed Sep 23 10:19:17 2026 by rpki-client