$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/0/AS18043.roa File: AS18043.roa (raw, json) Hash identifier: OceWabkHHIz4lY5kEFm9O1gY+H0mxDs8NOB+5bDRraU= Subject key identifier: 62:42:69:29:E5:77:9E:F3:6A:5A:C0:4E:AA:DB:D5:DC:6D:D6:64:33 Certificate issuer: /CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD Certificate serial: 1678086C22CACDBEABF1D19948B91377794F5832 Authority key identifier: 6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/0/AS18043.roa Signing time: Mon 21 Sep 2026 03:44:08 +0000 ROA not before: Mon 21 Sep 2026 03:39:08 +0000 ROA not after: Mon 20 Sep 2027 03:44:08 +0000 asID: 18043 IP address blocks: 120.104.0.0/19 maxlen: 24 120.104.32.0/21 maxlen: 24 120.104.64.0/19 maxlen: 24 120.104.96.0/20 maxlen: 24 163.19.104.0/21 maxlen: 24 163.19.112.0/20 maxlen: 24 163.19.128.0/20 maxlen: 24 163.19.144.0/21 maxlen: 24 163.28.69.0/24 maxlen: 24 2001:288:4200::/39 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:78:08:6c:22:ca:cd:be:ab:f1:d1:99:48:b9:13:77:79:4f:58:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD Validity Not Before: Sep 21 03:39:08 2026 GMT Not After : Sep 20 03:44:08 2027 GMT Subject: CN=62426929E5779EF36A5AC04EAADBD5DC6DD66433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b2:43:e0:51:a6:40:fe:5b:57:78:e9:7f:63: 71:ef:be:7f:f8:c3:07:91:9d:7c:98:18:0b:3e:65: 99:6f:c5:35:84:0a:c2:b7:a9:3b:e4:f0:ea:30:30: 02:c6:c3:51:09:7f:30:fb:a0:5f:fc:be:f4:f4:98: f8:c2:ce:c0:ae:c2:3f:51:1d:2d:47:61:9e:cb:53: e5:57:f2:b9:c2:fb:d9:cf:aa:eb:e5:eb:47:39:8b: 25:a0:f2:92:e8:06:79:6e:7a:1a:db:c2:d0:82:6c: f3:94:da:43:09:85:80:31:fa:98:e0:45:4a:0b:b7: 4f:87:12:9a:dd:9e:0e:34:49:dc:8b:ab:19:fb:2e: 43:f5:49:52:bf:24:13:59:4e:36:77:1e:4c:68:0c: fa:1f:00:b8:1f:6f:c7:67:77:cb:82:c5:58:9a:90: 86:0c:a7:37:1d:55:55:70:7c:33:5c:79:c6:5f:23: d7:14:aa:8e:88:39:fa:5c:9f:cd:0b:00:50:a7:14: 0a:91:07:9e:5c:47:f8:ab:b1:2e:a9:c2:78:ca:6a: 1c:b0:5f:88:2f:b3:aa:38:a8:76:82:e8:84:dc:15: 66:87:d3:7f:cf:a8:70:9b:5c:95:22:61:5c:03:6f: 7b:28:a9:b0:bd:3a:3f:05:2f:f0:6b:af:22:3d:5b: a6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:42:69:29:E5:77:9E:F3:6A:5A:C0:4E:AA:DB:D5:DC:6D:D6:64:33 X509v3 Authority Key Identifier: keyid:6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/0/AS18043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.104.0.0-120.104.39.255 120.104.64.0-120.104.111.255 163.19.104.0-163.19.151.255 163.28.69.0/24 IPv6: 2001:288:4200::/39 Signature Algorithm: sha256WithRSAEncryption 8d:84:8b:f2:44:cf:bd:52:7c:0a:7d:70:1e:4d:a6:8e:d3:4c: 9e:e2:3e:dd:72:a7:3c:20:41:d1:c1:60:e4:bc:73:ac:9a:59: 1a:ce:98:e6:2a:4e:d2:69:fc:2b:d6:69:9b:b8:5f:9c:e8:d6: a5:11:99:a4:c8:2d:8b:b3:43:23:6d:b9:62:66:3d:cc:1a:12: f7:26:54:0d:59:fa:fa:99:f1:e1:4f:18:04:86:8f:e4:03:26: bc:3b:a0:b2:2b:54:0c:80:93:6b:95:ad:b9:7f:72:7b:c6:f8: 8f:6e:4e:ab:10:20:03:30:4e:ef:b3:5c:8a:8e:bd:8d:a9:0b: c2:81:46:a4:8f:28:10:99:77:fd:f1:3e:86:9e:1f:53:34:e7: 74:53:d1:ee:ba:48:ab:48:44:a9:3b:bb:57:ca:bf:d5:f9:e6: fa:92:7f:be:d2:fa:ab:82:73:f4:bc:d6:87:3d:a9:f7:e9:98: b5:5f:8c:f7:f4:81:8f:f2:ab:b1:59:39:ee:85:1a:72:2c:18: e5:5a:38:e7:d8:76:65:52:41:6a:70:49:f6:97:fa:78:59:d8: d3:ba:d2:cc:c5:d6:63:71:e9:d1:83:3d:de:e6:69:be:2c:b1: 41:0d:76:ed:22:f6:c6:a3:b6:c5:af:d0:31:19:9b:90:d9:39: 6b:84:6d:a0 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUFngIbCLKzb6r8dGZSLkTd3lPWDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU5QzMyMjY2ODJBRUZBOEQ2N0I4QUM2MDhDQ0NGQzhB MDk2MTBDRDAeFw0yNjA5MjEwMzM5MDhaFw0yNzA5MjAwMzQ0MDhaMDMxMTAvBgNV BAMTKDYyNDI2OTI5RTU3NzlFRjM2QTVBQzA0RUFBREJENURDNkRENjY0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQskPgUaZA/ltXeOl/Y3Hvvn/4 wweRnXyYGAs+ZZlvxTWECsK3qTvk8OowMALGw1EJfzD7oF/8vvT0mPjCzsCuwj9R HS1HYZ7LU+VX8rnC+9nPquvl60c5iyWg8pLoBnluehrbwtCCbPOU2kMJhYAx+pjg RUoLt0+HEprdng40SdyLqxn7LkP1SVK/JBNZTjZ3HkxoDPofALgfb8dnd8uCxVia kIYMpzcdVVVwfDNcecZfI9cUqo6IOfpcn80LAFCnFAqRB55cR/irsS6pwnjKahyw X4gvs6o4qHaC6ITcFWaH03/PqHCbXJUiYVwDb3soqbC9Oj8FL/BrryI9W6YFAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUYkJpKeV3nvNqWsBOqtvV3G3WZDMwHwYDVR0j BBgwFoAUbpwyJmgq76jWe4rGCMzPyKCWEM0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MC82RTlDMzIyNjY4MkFFRkE4RDY3QjhBQzYwOENDQ0ZDOEEwOTYxMENELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzZFOUMzMjI2NjgyQUVGQThENjdCOEFDNjA4Q0ND RkM4QTA5NjEwQ0QuY2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8wL0FTMTgwNDMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUHAQcBAf8ESTBHMDUEAgAB MC8wCwMDA3hoAwQDeGggMAwDBAZ4aEADBAR4aGAwDAMEA6MTaAMEA6MTkAMEAKMc RTAOBAIAAjAIAwYBIAECiEIwDQYJKoZIhvcNAQELBQADggEBAI2Ei/JEz71SfAp9 cB5Npo7TTJ7iPt1ypzwgQdHBYOS8c6yaWRrOmOYqTtJp/CvWaZu4X5zo1qURmaTI LYuzQyNtuWJmPcwaEvcmVA1Z+vqZ8eFPGASGj+QDJrw7oLIrVAyAk2uVrbl/cnvG +I9uTqsQIAMwTu+zXIqOvY2pC8KBRqSPKBCZd/3xPoaeH1M053RT0e66SKtIRKk7 u1fKv9X55vqSf77S+quCc/S81oc9qffpmLVfjPf0gY/yq7FZOe6FGnIsGOVaOOfY dmVSQWpwSfaX+nhZ2NO60szF1mNx6dGDPd7mab4ssUENdu0i9sajtsWv0DEZm5DZ OWuEbaA= -----END CERTIFICATE-----Generated at Tue Sep 22 04:30:36 2026 by rpki-client