$ rpki-client -vvvf rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31312e302f32342d3234203d3e20323032373336.roa File: 3230322e352e31312e302f32342d3234203d3e20323032373336.roa (raw, json) Hash identifier: VH7i1Rmx/vnrLlet6gZkD22nYR0ayb436EnYjZJQzNA= Subject key identifier: A0:00:E2:4C:90:05:14:54:3C:CD:7F:C1:69:25:6A:18:F6:85:5C:E1 Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Certificate serial: 608C11202A0A70E85CF264BAA1440079D49D0320 Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31312e302f32342d3234203d3e20323032373336.roa Signing time: Mon 14 Sep 2026 06:24:03 +0000 ROA not before: Mon 14 Sep 2026 06:19:03 +0000 ROA not after: Mon 13 Sep 2027 06:24:03 +0000 asID: 202736 IP address blocks: 202.5.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 07:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:8c:11:20:2a:0a:70:e8:5c:f2:64:ba:a1:44:00:79:d4:9d:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Validity Not Before: Sep 14 06:19:03 2026 GMT Not After : Sep 13 06:24:03 2027 GMT Subject: CN=A000E24C900514543CCD7FC169256A18F6855CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:98:7f:1b:7a:39:e6:4c:9b:da:7a:5b:26: fa:18:52:ea:57:01:31:fc:e3:13:58:ee:3f:84:56: 99:a8:74:bc:4a:11:35:40:ed:49:8e:18:ee:1a:5c: f2:1f:54:14:8f:e6:44:8d:39:4b:66:b2:bc:05:f1: 6c:f4:df:58:68:44:78:e3:5e:27:e8:75:44:d1:9a: fb:12:c9:df:b6:aa:7a:9a:29:00:7c:52:1e:2f:f5: fe:6c:4a:f4:71:07:f7:26:96:01:b1:81:d3:cd:d0: 36:b9:d0:0d:8d:80:3f:ce:6a:b4:4b:d7:92:2d:55: bc:57:51:0e:d0:4a:10:20:9b:a3:59:8b:21:e4:a7: 8b:c9:42:63:63:91:cb:66:d8:7d:3f:88:0f:b3:0f: 07:42:a9:ec:3b:77:79:4b:d3:94:7e:78:1f:96:1a: 05:1b:9c:56:66:bb:bb:06:6b:11:0b:65:8b:b6:8b: a3:bd:31:a9:7a:45:e4:ae:7c:1d:d0:84:75:a3:3c: e5:d8:d6:26:6d:b5:aa:29:c6:42:56:c9:a4:1b:1a: 4c:4c:bc:9a:71:7f:45:d3:7e:00:8b:02:46:ab:97: 61:7b:9e:a1:23:2c:7a:bb:92:12:a1:c8:9b:db:08: 1d:e9:11:c2:47:02:25:89:ab:06:ee:27:0d:5d:3e: f3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:00:E2:4C:90:05:14:54:3C:CD:7F:C1:69:25:6A:18:F6:85:5C:E1 X509v3 Authority Key Identifier: keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31312e302f32342d3234203d3e20323032373336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.5.11.0/24 Signature Algorithm: sha256WithRSAEncryption 76:5d:7d:4c:0c:b5:61:28:db:cd:40:e9:da:3b:a1:ed:64:5c: 50:51:50:3f:54:57:87:2d:c4:b4:13:c3:36:50:56:a2:09:60: 19:0c:42:72:e4:d4:02:15:bc:b1:a6:4d:b4:e0:a1:37:53:f5: 47:de:6c:56:9b:1e:14:21:09:de:52:66:9d:75:16:6c:9b:7e: e0:58:5a:33:3c:c0:f7:3b:74:d7:35:27:a0:fc:3b:c9:a7:50: 91:a4:13:57:12:a8:e3:a8:7b:9c:c5:d9:2d:84:cb:5c:21:62: 63:97:15:22:9b:73:7d:a8:57:77:b9:20:26:06:bf:fd:f2:e0: c3:72:f9:21:66:5f:ef:5b:a7:0a:02:79:c5:2c:ee:1d:eb:59: cb:e3:e3:64:a5:23:4e:27:93:bf:43:a6:4d:f1:0d:22:e4:f9: f0:a7:03:0d:09:c6:66:61:88:36:1b:9e:8e:1c:1f:59:c7:e5: e4:23:99:a4:47:a3:47:6d:7c:31:a6:27:1f:99:07:f3:4d:72: 93:3d:4a:7c:a7:cc:d9:45:68:74:e3:4d:ee:8f:25:5e:07:36: b5:fa:f4:bb:44:b3:56:e7:6c:b4:c0:c3:89:1d:5c:61:40:57: 27:fd:58:35:fd:c7:59:4e:05:b4:1f:fa:19:da:60:41:17:3b: 8c:92:5c:ae -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUYIwRICoKcOhc8mS6oUQAedSdAyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRE RUQ4OEUxQjAeFw0yNjA5MTQwNjE5MDNaFw0yNzA5MTMwNjI0MDNaMDMxMTAvBgNV BAMTKEEwMDBFMjRDOTAwNTE0NTQzQ0NEN0ZDMTY5MjU2QTE4RjY4NTVDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0S5h/G3o55kyb2npbJvoYUupX ATH84xNY7j+EVpmodLxKETVA7UmOGO4aXPIfVBSP5kSNOUtmsrwF8Wz031hoRHjj XifodUTRmvsSyd+2qnqaKQB8Uh4v9f5sSvRxB/cmlgGxgdPN0Da50A2NgD/OarRL 15ItVbxXUQ7QShAgm6NZiyHkp4vJQmNjkctm2H0/iA+zDwdCqew7d3lL05R+eB+W GgUbnFZmu7sGaxELZYu2i6O9Mal6ReSufB3QhHWjPOXY1iZttaopxkJWyaQbGkxM vJpxf0XTfgCLAkarl2F7nqEjLHq7khKhyJvbCB3pEcJHAiWJqwbuJw1dPvMdAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUoADiTJAFFFQ8zX/BaSVqGPaFXOEwHwYDVR0j BBgwFoAUqziIpOFj4rznbqmG48Py/d7YjhswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tT SU5DLzAvQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BQjM4ODhBNEUxNjNFMkJDRTc2RUE5ODZF M0MzRjJGRERFRDg4RTFCLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuG YXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tTSU5DLzAvMzIzMDMy MmUzNTJlMzEzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMjM3MzMzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMoFCzANBgkqhkiG9w0BAQsFAAOCAQEAdl19TAy1YSjbzUDp2juh 7WRcUFFQP1RXhy3EtBPDNlBWoglgGQxCcuTUAhW8saZNtOChN1P1R95sVpseFCEJ 3lJmnXUWbJt+4FhaMzzA9zt01zUnoPw7yadQkaQTVxKo46h7nMXZLYTLXCFiY5cV IptzfahXd7kgJga//fLgw3L5IWZf71unCgJ5xSzuHetZy+PjZKUjTieTv0OmTfEN IuT58KcDDQnGZmGINhuejhwfWcfl5COZpEejR218MaYnH5kH801ykz1KfKfM2UVo dONN7o8lXgc2tfr0u0SzVudstMDDiR1cYUBXJ/1YNf3HWU4FtB/6GdpgQRc7jJJc rg== -----END CERTIFICATE-----Generated at Sun Sep 20 21:51:50 2026 by rpki-client