$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/1/AS17712.roa File: AS17712.roa (raw, json) Hash identifier: yj06hI79Weqj0lNXdwRX13x+5jtyeGXUVFzjIzWVW0A= Subject key identifier: D4:15:E8:2A:6D:63:B8:8A:E0:82:BA:DC:78:48:AB:70:BB:E1:1D:D3 Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 6B015917E594F4588E3F290B8629F94492AF5AF6 Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/AS17712.roa Signing time: Wed 19 Aug 2026 03:44:02 +0000 ROA not before: Wed 19 Aug 2026 03:39:02 +0000 ROA not after: Wed 18 Aug 2027 03:44:02 +0000 asID: 17712 IP address blocks: 140.123.0.0/16 maxlen: 16 140.125.0.0/16 maxlen: 16 140.130.0.0/16 maxlen: 16 192.192.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:01:59:17:e5:94:f4:58:8e:3f:29:0b:86:29:f9:44:92:af:5a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: Aug 19 03:39:02 2026 GMT Not After : Aug 18 03:44:02 2027 GMT Subject: CN=D415E82A6D63B88AE082BADC7848AB70BBE11DD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:78:67:53:c0:95:6a:88:2f:87:12:fe:91: 6b:ef:18:8b:ea:0f:74:50:10:93:b3:ba:fd:4c:23: b8:b7:6e:73:70:60:96:37:a5:f6:69:4b:b6:00:53: 88:64:d9:7c:2b:39:79:a9:c7:1e:8d:b6:1a:6b:3f: 85:a0:e9:33:cf:fb:c4:31:e0:f7:79:a9:0e:38:ea: 62:13:66:6e:1c:a2:61:5d:1f:9a:b7:d7:b6:00:da: 13:68:8b:bc:e9:ee:02:d7:47:c9:1a:7e:95:06:a8: a5:7a:e8:07:3b:59:05:2b:15:8b:f0:bf:3c:51:72: ba:51:5c:fd:ec:03:73:51:ac:5b:ab:e2:7b:7b:ec: 02:c6:94:07:00:d3:25:d6:cd:67:f0:06:a0:5b:83: fa:e4:2a:7f:f0:d5:31:d7:89:79:8f:b4:a4:2a:c9: 62:77:91:78:b4:df:58:c8:e9:89:12:f7:c1:6c:d9: 7f:73:8c:37:2e:fb:80:7b:67:99:3b:7d:28:1a:ed: 26:3d:ac:7b:77:99:b2:2f:e0:92:e5:c6:2a:e9:56: 2f:43:f2:de:7e:c0:3a:43:b5:95:c8:e9:40:32:86: bf:9a:d1:a8:74:92:94:4e:99:58:8a:e6:2b:60:31: 75:bc:1f:bc:f9:da:c8:a6:95:50:cf:c1:6e:88:c3: 10:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:15:E8:2A:6D:63:B8:8A:E0:82:BA:DC:78:48:AB:70:BB:E1:1D:D3 X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/AS17712.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.123.0.0/16 140.125.0.0/16 140.130.0.0/16 192.192.131.0/24 Signature Algorithm: sha256WithRSAEncryption 25:c7:74:a5:43:44:2b:a0:9a:89:19:c2:73:5a:fd:ea:71:6b: 95:3a:e3:c6:e8:3e:50:99:f3:1a:17:3b:62:e7:26:d6:fa:4f: f8:e3:02:29:8a:d4:ca:82:f5:f8:f3:09:d0:ac:05:a6:fd:02: a6:7f:2c:0c:43:d3:2e:6d:2e:26:31:38:ea:0e:90:7d:8a:40: 80:e0:94:03:5b:25:6c:9a:98:f7:a4:b7:18:21:40:2a:ee:cb: 88:bf:c7:da:91:13:37:11:6c:4e:40:27:67:da:97:7b:7c:aa: e2:5c:65:6f:86:0e:60:72:8d:2e:05:51:a3:04:aa:e9:f4:0e: 63:90:f4:27:f2:ff:0b:92:55:f1:dd:6f:35:5c:f3:c4:7f:94: 33:7e:86:3f:e0:43:28:d3:d8:21:8f:e5:a9:e4:77:d8:d1:dc: 41:dd:bf:0e:8b:c2:73:0f:f3:f9:36:08:0c:02:fe:62:ee:41: a7:c8:90:66:00:63:4e:de:cd:a1:99:eb:0e:7b:a2:ad:97:46: 21:2b:9b:b8:a9:7d:08:39:c9:68:6e:23:55:fa:76:57:34:d8: 51:39:d8:d1:aa:1a:b6:26:23:25:d6:49:3c:5c:0b:28:8a:4b: c2:f1:4d:c0:33:98:e6:a2:4b:0f:e1:f9:5f:6f:fe:ac:4b:01: 64:9c:31:3c -----BEGIN CERTIFICATE----- MIIEtzCCA5+gAwIBAgIUawFZF+WU9FiOPykLhin5RJKvWvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA4MTkwMzM5MDJaFw0yNzA4MTgwMzQ0MDJaMDMxMTAvBgNV BAMTKEQ0MTVFODJBNkQ2M0I4OEFFMDgyQkFEQzc4NDhBQjcwQkJFMTFERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13XhnU8CVaogvhxL+kWvvGIvq D3RQEJOzuv1MI7i3bnNwYJY3pfZpS7YAU4hk2XwrOXmpxx6NthprP4Wg6TPP+8Qx 4Pd5qQ446mITZm4comFdH5q317YA2hNoi7zp7gLXR8kafpUGqKV66Ac7WQUrFYvw vzxRcrpRXP3sA3NRrFur4nt77ALGlAcA0yXWzWfwBqBbg/rkKn/w1THXiXmPtKQq yWJ3kXi031jI6YkS98Fs2X9zjDcu+4B7Z5k7fSga7SY9rHt3mbIv4JLlxirpVi9D 8t5+wDpDtZXI6UAyhr+a0ah0kpROmViK5itgMXW8H7z52simlVDPwW6IwxC/AgMB AAGjggHBMIIBvTAdBgNVHQ4EFgQU1BXoKm1juIrggrrceEircLvhHdMwHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xL0FTMTc3MTIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMBsEAgAB MBUDAwCMewMDAIx9AwMAjIIDBADAwIMwDQYJKoZIhvcNAQELBQADggEBACXHdKVD RCugmokZwnNa/epxa5U648boPlCZ8xoXO2LnJtb6T/jjAimK1MqC9fjzCdCsBab9 AqZ/LAxD0y5tLiYxOOoOkH2KQIDglANbJWyamPektxghQCruy4i/x9qREzcRbE5A J2fal3t8quJcZW+GDmByjS4FUaMEqun0DmOQ9Cfy/wuSVfHdbzVc88R/lDN+hj/g QyjT2CGP5ankd9jR3EHdvw6LwnMP8/k2CAwC/mLuQafIkGYAY07ezaGZ6w57oq2X RiErm7ipfQg5yWhuI1X6dlc02FE52NGqGrYmIyXWSTxcCyiKS8LxTcAzmOaiSw/h +V9v/qxLAWScMTw= -----END CERTIFICATE-----Generated at Tue Sep 22 09:59:58 2026 by rpki-client