$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/1/AS17711.roa File: AS17711.roa (raw, json) Hash identifier: m0HPSs1Iwy9qB3mv37WVtid5LeyQRcfLwoUhzXI5emM= Subject key identifier: 27:29:EC:B9:A2:95:E0:B6:B7:08:96:7A:1F:E4:3C:22:1C:79:FE:60 Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 3E7350C1EE6CDFB73819871F8E04D609DD5D6980 Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/AS17711.roa Signing time: Wed 19 Aug 2026 03:44:01 +0000 ROA not before: Wed 19 Aug 2026 03:39:01 +0000 ROA not after: Wed 18 Aug 2027 03:44:01 +0000 asID: 17711 IP address blocks: 134.208.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:73:50:c1:ee:6c:df:b7:38:19:87:1f:8e:04:d6:09:dd:5d:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: Aug 19 03:39:01 2026 GMT Not After : Aug 18 03:44:01 2027 GMT Subject: CN=2729ECB9A295E0B6B708967A1FE43C221C79FE60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:b7:78:88:c1:65:ac:e8:de:83:7e:d2:8f: 94:c8:86:10:3a:46:af:b8:4f:75:10:61:01:d2:a1: df:9d:75:61:e8:eb:fc:62:bb:6e:44:a8:a1:41:81: 21:01:39:e1:8d:b5:fa:b1:dd:ad:19:ce:8b:47:c7: 86:25:02:7b:0d:be:72:15:0e:2d:56:eb:c2:1a:0b: bf:37:ce:50:58:92:10:16:37:5b:ed:c5:17:20:3d: d2:f5:e9:bc:4e:08:ca:8e:02:a8:55:99:48:78:b0: 73:6d:65:7a:3c:a7:26:45:dc:31:40:de:12:1c:1d: 83:19:e9:43:b6:84:9d:93:e4:93:5c:49:d3:49:dd: 11:93:72:80:bf:74:eb:d7:58:42:af:9d:4f:7b:c2: d1:0f:89:0a:43:7b:74:46:05:6a:cd:2c:b6:c2:96: 40:ec:c8:0f:44:ce:bc:0d:2a:0d:8e:51:60:c8:96: 79:18:55:9f:7a:b9:42:93:20:cf:6f:b9:52:54:4a: 46:b4:84:d1:7c:26:7c:d0:b0:06:5f:89:89:2f:9e: 27:72:19:65:32:11:2a:2e:fe:39:f6:6e:d8:da:cf: c3:b9:43:e6:15:11:9c:fa:66:93:77:38:0d:7b:7d: f0:54:8c:65:8d:d5:25:1b:53:aa:12:04:9c:b6:86: 10:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:29:EC:B9:A2:95:E0:B6:B7:08:96:7A:1F:E4:3C:22:1C:79:FE:60 X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/AS17711.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.208.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:3e:e4:e2:20:8a:bd:7f:3a:eb:f5:99:6a:8c:79:5e:71:8d: f3:54:cd:2f:80:9c:ef:5d:7d:f5:6f:a7:0d:fe:40:21:a6:a9: d1:ab:66:d7:fa:5e:23:49:a7:17:4d:69:96:06:21:f1:8a:c3: 68:1b:be:00:2d:2f:11:4b:9f:80:57:31:dc:1f:20:12:f2:ba: b7:83:f6:af:3a:1e:a0:8c:dd:10:30:30:3d:86:79:48:89:c3: 35:21:8a:14:d9:80:60:39:21:10:e8:4a:4a:24:0a:1b:fa:91: ec:2f:9c:7b:2c:0d:ae:65:77:ed:5e:e6:85:cf:38:a6:ce:4a: 4f:b4:0e:40:29:fd:5f:7b:91:1b:d5:57:13:d8:d0:da:56:bc: 48:e3:a6:f7:70:a5:96:38:52:61:35:af:88:69:d1:ca:85:0b: 04:02:3f:40:f4:51:7a:8e:cf:18:fb:e2:70:e5:2e:ab:16:20: cf:98:ca:96:23:78:8f:6c:0f:d1:3e:52:9a:47:6b:5f:31:1b: f9:c2:6b:87:8b:d7:44:8e:54:a3:2c:f7:c3:f1:bb:fc:9e:6a: 68:2a:20:73:9a:29:c6:69:9d:06:33:52:a8:2e:be:5e:42:9f: 72:76:16:4b:09:d9:c2:86:11:e5:39:86:08:d0:a1:ed:e5:40: 80:32:b1:e4 -----BEGIN CERTIFICATE----- MIIEpzCCA4+gAwIBAgIUPnNQwe5s37c4GYcfjgTWCd1daYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA4MTkwMzM5MDFaFw0yNzA4MTgwMzQ0MDFaMDMxMTAvBgNV BAMTKDI3MjlFQ0I5QTI5NUUwQjZCNzA4OTY3QTFGRTQzQzIyMUM3OUZFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/fLd4iMFlrOjeg37Sj5TIhhA6 Rq+4T3UQYQHSod+ddWHo6/xiu25EqKFBgSEBOeGNtfqx3a0ZzotHx4YlAnsNvnIV Di1W68IaC783zlBYkhAWN1vtxRcgPdL16bxOCMqOAqhVmUh4sHNtZXo8pyZF3DFA 3hIcHYMZ6UO2hJ2T5JNcSdNJ3RGTcoC/dOvXWEKvnU97wtEPiQpDe3RGBWrNLLbC lkDsyA9EzrwNKg2OUWDIlnkYVZ96uUKTIM9vuVJUSka0hNF8JnzQsAZfiYkvnidy GWUyESou/jn2btjaz8O5Q+YVEZz6ZpN3OA17ffBUjGWN1SUbU6oSBJy2hhANAgMB AAGjggGxMIIBrTAdBgNVHQ4EFgQUJynsuaKV4La3CJZ6H+Q8Ihx5/mAwHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xL0FTMTc3MTEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCG0DANBgkqhkiG9w0BAQsFAAOCAQEAET7k4iCKvX866/WZaox5XnGN81TN L4Cc71199W+nDf5AIaap0atm1/peI0mnF01plgYh8YrDaBu+AC0vEUufgFcx3B8g EvK6t4P2rzoeoIzdEDAwPYZ5SInDNSGKFNmAYDkhEOhKSiQKG/qR7C+ceywNrmV3 7V7mhc84ps5KT7QOQCn9X3uRG9VXE9jQ2la8SOOm93ClljhSYTWviGnRyoULBAI/ QPRReo7PGPvicOUuqxYgz5jKliN4j2wP0T5SmkdrXzEb+cJrh4vXRI5Uoyz3w/G7 /J5qaCogc5opxmmdBjNSqC6+XkKfcnYWSwnZwoYR5TmGCNCh7eVAgDKx5A== -----END CERTIFICATE-----Generated at Tue Sep 22 09:18:40 2026 by rpki-client