$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/1/AS17716.roa File: AS17716.roa (raw, json) Hash identifier: a/i12ZDZd4PdO/FM3dk8C6At59pShqCqeD+uHBMGx6s= Subject key identifier: E4:36:F8:85:CE:FA:E9:26:93:78:A9:73:B5:0E:F6:AD:08:2E:45:E9 Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 78E3E264F47434BD1D6B33A0DFF1650A357393AB Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/AS17716.roa Signing time: Wed 19 Aug 2026 06:44:01 +0000 ROA not before: Wed 19 Aug 2026 06:39:01 +0000 ROA not after: Wed 18 Aug 2027 06:44:01 +0000 asID: 17716 IP address blocks: 140.112.0.0/16 maxlen: 16 140.122.0.0/16 maxlen: 16 140.124.0.0/16 maxlen: 16 140.129.96.0/20 maxlen: 20 140.129.112.0/22 maxlen: 22 140.131.0.0/16 maxlen: 16 192.83.193.0/24 maxlen: 24 192.192.1.0/24 maxlen: 24 192.192.7.0/24 maxlen: 24 192.192.12.0/24 maxlen: 24 192.192.48.0/21 maxlen: 21 192.192.74.0/23 maxlen: 23 192.192.76.0/23 maxlen: 23 192.192.90.0/23 maxlen: 23 192.192.92.0/23 maxlen: 23 192.192.94.0/24 maxlen: 24 192.192.120.0/22 maxlen: 22 192.192.135.0/24 maxlen: 24 192.192.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e3:e2:64:f4:74:34:bd:1d:6b:33:a0:df:f1:65:0a:35:73:93:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: Aug 19 06:39:01 2026 GMT Not After : Aug 18 06:44:01 2027 GMT Subject: CN=E436F885CEFAE9269378A973B50EF6AD082E45E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c2:0a:5c:e2:86:b1:a4:7e:e9:5b:7b:9f:9e: ee:51:7d:a5:87:a9:bf:25:8f:86:82:66:0a:e6:b0: 6d:3a:be:f4:8c:d5:02:0f:3d:39:32:56:40:03:64: 70:eb:23:09:f8:0a:a1:f7:a8:eb:2c:9f:b4:99:86: c2:b0:4a:dd:c5:ec:c7:a3:86:f5:73:87:c7:2b:db: 1b:a7:27:e9:2b:04:13:06:e8:80:c7:fe:5a:9f:84: bd:91:35:19:19:78:67:e3:ff:f3:b5:71:91:19:ea: a4:d9:1e:f4:fa:94:10:2e:e5:5f:10:fb:ad:e3:98: d5:02:98:7a:db:b3:43:a3:06:dc:05:db:4d:01:ea: 1e:eb:99:d9:1b:30:31:43:31:ad:73:5e:5f:b4:cc: 16:5a:9d:48:c2:fb:5e:23:d5:09:29:65:9b:d0:64: 5d:d0:e7:8d:43:9b:92:5c:de:a2:c9:ed:6e:65:de: 1d:a5:e1:96:fe:ff:59:cf:b6:f9:20:8b:92:4e:06: c5:f9:b3:11:6d:f7:f1:8e:2c:9f:87:4c:6b:94:08: 45:ca:ff:0f:88:17:36:bc:a2:54:31:95:95:ee:ed: d0:2d:c0:1b:f2:8a:f1:3a:a8:81:54:fd:72:9e:fa: 7f:69:0e:80:bf:3a:20:01:dc:9f:fa:15:64:1f:04: 24:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:36:F8:85:CE:FA:E9:26:93:78:A9:73:B5:0E:F6:AD:08:2E:45:E9 X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/AS17716.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.112.0.0/16 140.122.0.0/16 140.124.0.0/16 140.129.96.0-140.129.115.255 140.131.0.0/16 192.83.193.0/24 192.192.1.0/24 192.192.7.0/24 192.192.12.0/24 192.192.48.0/21 192.192.74.0-192.192.77.255 192.192.90.0-192.192.94.255 192.192.120.0/22 192.192.135.0/24 192.192.140.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:bc:27:d4:08:ab:18:ff:15:3d:98:aa:b9:ca:c2:81:35:02: 72:0d:6a:a9:cb:5d:86:97:81:1c:42:01:e4:d9:2b:47:b8:e0: 39:fc:63:71:4f:cd:e9:f0:12:7a:d5:62:59:78:88:94:87:b8: 8b:ca:a2:70:1b:12:a7:8a:c4:d3:9d:2f:a3:14:8f:e4:ea:95: c8:b4:c6:d4:ca:f8:57:56:45:e0:b6:c0:7d:72:87:00:ba:8f: ad:3b:7f:ba:be:49:00:12:15:c5:e5:9d:16:86:b2:63:b7:b7: bd:c6:3d:ec:a5:75:1c:ec:fc:f9:2c:b8:d3:d9:79:92:11:13: 65:50:4e:bd:08:ee:3e:bf:fe:7d:62:f6:92:ff:ac:e4:b4:23: 7e:bd:56:62:93:e9:cc:68:d5:65:ae:56:a8:d0:46:e1:44:ba: 3d:92:2c:84:4a:a1:da:1c:68:10:bf:04:5a:70:8f:23:7e:12: fb:2d:fa:be:5c:80:44:c4:97:a6:dd:2f:9c:f4:73:be:ce:76: 4a:50:0e:f7:f1:5f:64:aa:6e:63:25:bb:82:e6:9f:bc:ed:8a: 3a:1d:a6:88:58:ae:9d:e5:a5:e8:6a:e1:9d:cb:98:0f:5e:bc: ed:48:e6:30:a6:32:f6:1a:6a:99:49:39:59:04:55:ab:de:8d: 80:e8:3e:62 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgIUeOPiZPR0NL0dazOg3/FlCjVzk6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA4MTkwNjM5MDFaFw0yNzA4MTgwNjQ0MDFaMDMxMTAvBgNV BAMTKEU0MzZGODg1Q0VGQUU5MjY5Mzc4QTk3M0I1MEVGNkFEMDgyRTQ1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZwgpc4oaxpH7pW3ufnu5RfaWH qb8lj4aCZgrmsG06vvSM1QIPPTkyVkADZHDrIwn4CqH3qOssn7SZhsKwSt3F7Mej hvVzh8cr2xunJ+krBBMG6IDH/lqfhL2RNRkZeGfj//O1cZEZ6qTZHvT6lBAu5V8Q +63jmNUCmHrbs0OjBtwF200B6h7rmdkbMDFDMa1zXl+0zBZanUjC+14j1QkpZZvQ ZF3Q541Dm5Jc3qLJ7W5l3h2l4Zb+/1nPtvkgi5JOBsX5sxFt9/GOLJ+HTGuUCEXK /w+IFza8olQxlZXu7dAtwBvyivE6qIFU/XKe+n9pDoC/OiAB3J/6FWQfBCQNAgMB AAGjggIbMIICFzAdBgNVHQ4EFgQU5Db4hc766SaTeKlztQ72rQguRekwHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xL0FTMTc3MTYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgYcGCCsGAQUFBwEHAQH/BHgwdjB0BAIA ATBuAwMAjHADAwCMegMDAIx8MAwDBAWMgWADBAKMgXADAwCMgwMEAMBTwQMEAMDA AQMEAMDABwMEAMDADAMEA8DAMDAMAwQBwMBKAwQBwMBMMAwDBAHAwFoDBADAwF4D BALAwHgDBADAwIcDBAHAwIwwDQYJKoZIhvcNAQELBQADggEBAHu8J9QIqxj/FT2Y qrnKwoE1AnINaqnLXYaXgRxCAeTZK0e44Dn8Y3FPzenwEnrVYll4iJSHuIvKonAb EqeKxNOdL6MUj+Tqlci0xtTK+FdWReC2wH1yhwC6j607f7q+SQASFcXlnRaGsmO3 t73GPeyldRzs/PksuNPZeZIRE2VQTr0I7j6//n1i9pL/rOS0I369VmKT6cxo1WWu VqjQRuFEuj2SLIRKodocaBC/BFpwjyN+Evst+r5cgETEl6bdL5z0c77OdkpQDvfx X2SqbmMlu4Lmn7ztijodpohYrp3lpehq4Z3LmA9evO1I5jCmMvYaaplJOVkEVave jYDoPmI= -----END CERTIFICATE-----Generated at Tue Sep 22 22:13:38 2026 by rpki-client