$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/1/AS18177.roa File: AS18177.roa (raw, json) Hash identifier: JXd4kw1h0DUqkVz+WM6nOf/irwZe99z7YhtvoDc+f38= Subject key identifier: 4A:17:B5:ED:45:00:D3:EB:B5:51:86:0B:6E:8D:90:E9:3B:69:4D:EC Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 24D80EB8CDDC13C48C4AB921876435984724450C Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/AS18177.roa Signing time: Wed 19 Aug 2026 03:44:02 +0000 ROA not before: Wed 19 Aug 2026 03:39:02 +0000 ROA not after: Wed 18 Aug 2027 03:44:02 +0000 asID: 18177 IP address blocks: 140.116.0.0/16 maxlen: 16 140.133.0.0/20 maxlen: 20 192.83.182.0/23 maxlen: 23 192.192.3.0/24 maxlen: 24 192.192.45.0/24 maxlen: 24 192.192.108.0/22 maxlen: 22 192.192.112.0/24 maxlen: 24 192.192.133.0/24 maxlen: 24 192.192.162.0/24 maxlen: 24 192.192.197.0/24 maxlen: 24 192.192.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d8:0e:b8:cd:dc:13:c4:8c:4a:b9:21:87:64:35:98:47:24:45:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: Aug 19 03:39:02 2026 GMT Not After : Aug 18 03:44:02 2027 GMT Subject: CN=4A17B5ED4500D3EBB551860B6E8D90E93B694DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:2d:ae:ed:59:9a:66:ac:33:d9:67:93:8b: db:00:b0:f7:95:1f:0c:c8:21:c9:e6:66:48:da:64: 6a:30:bc:27:20:21:f0:67:ce:90:68:79:07:bc:b5: 45:2c:1f:4e:23:fc:91:47:43:09:63:99:34:9a:95: 9f:34:1c:d0:71:1c:70:59:4c:b7:bb:8a:f9:44:16: d8:87:0d:79:97:20:02:58:d9:5c:ae:c3:2f:13:ac: 24:42:4d:cb:fc:ed:23:53:94:59:5c:33:a7:3c:69: c9:c4:a8:46:04:cd:ea:be:f5:1b:e2:f0:82:13:2e: 2f:75:b2:bf:36:99:64:10:c0:30:85:a5:27:5b:04: 4b:d4:9f:ff:96:02:fb:47:75:86:f1:b3:71:df:da: de:60:36:5c:39:1e:e0:9a:bc:5b:b3:04:65:d4:0d: 18:c9:c5:e0:00:6f:8e:f2:05:75:eb:74:81:a3:1f: 4d:0d:bb:e5:87:96:58:c2:87:21:03:e9:58:11:c4: ba:51:3f:08:5e:75:3d:f6:1b:8b:cf:f3:aa:f6:91: 36:36:bd:16:69:58:77:a1:1e:3f:8d:b8:34:b0:92: 1a:89:d8:dc:66:bb:28:ac:28:b6:96:c1:0b:6c:07: f9:c9:5d:92:12:18:a1:af:6b:34:4f:76:28:b2:28: 03:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:17:B5:ED:45:00:D3:EB:B5:51:86:0B:6E:8D:90:E9:3B:69:4D:EC X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/AS18177.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.116.0.0/16 140.133.0.0/20 192.83.182.0/23 192.192.3.0/24 192.192.45.0/24 192.192.108.0-192.192.112.255 192.192.133.0/24 192.192.162.0/24 192.192.197.0-192.192.199.255 Signature Algorithm: sha256WithRSAEncryption 7c:18:0d:95:1f:1e:9e:87:43:ad:be:99:f8:f2:4b:27:d1:b6: e8:9d:b9:6b:9c:49:8d:b0:9c:e2:92:9b:e5:a0:1e:ef:72:a5: a1:5d:0c:db:38:b8:32:10:2b:66:2d:85:d3:85:be:ac:f8:c5: 6a:c6:f6:ee:8d:73:58:59:fb:df:8d:a1:05:c2:2e:4b:f3:41: 91:90:dd:62:8c:09:44:67:32:0f:67:51:99:6f:9b:ac:82:63: 78:b2:a0:1b:ea:86:8c:8d:df:61:48:fd:5e:fb:73:30:c8:40: cb:82:a0:86:e6:ad:24:06:f5:f2:2b:8e:ea:e3:75:d6:fa:d1: 39:a2:3c:63:06:d6:71:7d:b2:1f:1f:40:ff:40:7e:6e:8a:0a: 6b:16:95:8b:ac:f7:8b:52:42:79:fd:cb:77:43:1b:bb:df:39: 70:c2:50:d6:a2:68:e8:43:58:5a:c6:8c:52:ae:7c:d4:9e:e0: 16:d0:be:74:58:3e:ec:c8:3d:07:75:a2:67:47:98:13:77:91: a8:10:53:d9:29:39:fd:2c:c6:57:76:03:fd:5c:28:6b:d3:33: 2d:6e:00:bf:23:64:e7:0b:eb:d7:e5:27:2d:4a:71:67:bc:05: 27:0e:bd:64:02:e5:ce:fe:bd:e9:c1:83:5f:80:86:0d:38:ac: b8:0a:0a:fa -----BEGIN CERTIFICATE----- MIIE5zCCA8+gAwIBAgIUJNgOuM3cE8SMSrkhh2Q1mEckRQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA4MTkwMzM5MDJaFw0yNzA4MTgwMzQ0MDJaMDMxMTAvBgNV BAMTKDRBMTdCNUVENDUwMEQzRUJCNTUxODYwQjZFOEQ5MEU5M0I2OTRERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2C2u7VmaZqwz2WeTi9sAsPeV HwzIIcnmZkjaZGowvCcgIfBnzpBoeQe8tUUsH04j/JFHQwljmTSalZ80HNBxHHBZ TLe7ivlEFtiHDXmXIAJY2Vyuwy8TrCRCTcv87SNTlFlcM6c8acnEqEYEzeq+9Rvi 8IITLi91sr82mWQQwDCFpSdbBEvUn/+WAvtHdYbxs3Hf2t5gNlw5HuCavFuzBGXU DRjJxeAAb47yBXXrdIGjH00Nu+WHlljChyED6VgRxLpRPwhedT32G4vP86r2kTY2 vRZpWHehHj+NuDSwkhqJ2NxmuyisKLaWwQtsB/nJXZISGKGvazRPdiiyKANzAgMB AAGjggHxMIIB7TAdBgNVHQ4EFgQUShe17UUA0+u1UYYLbo2Q6TtpTewwHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xL0FTMTgxNzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwXgYIKwYBBQUHAQcBAf8ETzBNMEsEAgAB MEUDAwCMdAMEBIyFAAMEAcBTtgMEAMDAAwMEAMDALTAMAwQCwMBsAwQAwMBwAwQA wMCFAwQAwMCiMAwDBADAwMUDBAPAwMAwDQYJKoZIhvcNAQELBQADggEBAHwYDZUf Hp6HQ62+mfjySyfRtuiduWucSY2wnOKSm+WgHu9ypaFdDNs4uDIQK2YthdOFvqz4 xWrG9u6Nc1hZ+9+NoQXCLkvzQZGQ3WKMCURnMg9nUZlvm6yCY3iyoBvqhoyN32FI /V77czDIQMuCoIbmrSQG9fIrjurjddb60TmiPGMG1nF9sh8fQP9Afm6KCmsWlYus 94tSQnn9y3dDG7vfOXDCUNaiaOhDWFrGjFKufNSe4BbQvnRYPuzIPQd1omdHmBN3 kagQU9kpOf0sxld2A/1cKGvTMy1uAL8jZOcL69flJy1KcWe8BScOvWQC5c7+venB g1+Ahg04rLgKCvo= -----END CERTIFICATE-----Generated at Tue Sep 22 09:18:39 2026 by rpki-client