$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/1/AS18420.roa File: AS18420.roa (raw, json) Hash identifier: PXf9Qhwo15Y5emliO+pnlr0GJR0383jI4wLPlz9cZTg= Subject key identifier: 91:CB:D2:EF:7C:34:3E:9D:73:45:E5:48:36:28:22:E1:18:16:9B:E6 Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 1656AF517A36EAC7D28D6E5F84BD77E903706F9B Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/AS18420.roa Signing time: Wed 19 Aug 2026 03:44:03 +0000 ROA not before: Wed 19 Aug 2026 03:39:03 +0000 ROA not after: Wed 18 Aug 2027 03:44:03 +0000 asID: 18420 IP address blocks: 140.115.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:56:af:51:7a:36:ea:c7:d2:8d:6e:5f:84:bd:77:e9:03:70:6f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: Aug 19 03:39:03 2026 GMT Not After : Aug 18 03:44:03 2027 GMT Subject: CN=91CBD2EF7C343E9D7345E548362822E118169BE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a1:c0:a8:c2:ac:fe:ca:ff:61:1c:93:dd:1b: 37:cc:11:71:80:e2:fe:9a:65:fd:27:ad:6d:7b:24: 3f:3c:94:80:22:0f:ce:b3:97:c7:aa:4c:bf:63:2f: c7:b2:f9:f9:35:91:73:2e:3c:78:90:8c:83:93:3c: 92:31:10:2c:4f:92:d9:eb:46:03:af:9b:e2:02:c1: 82:89:9c:c4:bf:eb:1b:1d:14:c6:29:f6:a9:e5:53: 9c:62:bf:d1:29:02:56:9e:e9:ab:f8:14:30:8e:fb: 82:eb:a0:a3:02:47:57:e8:37:f0:98:36:30:f2:13: e5:7b:8b:e5:61:28:77:8b:bf:cf:6d:d2:ba:43:b2: 2d:f8:79:be:10:a1:5c:4f:df:79:21:f8:d9:46:00: 18:9f:d9:29:dc:3a:09:c7:5d:2c:25:76:53:b4:3f: 55:d5:86:98:2b:80:10:70:eb:ae:72:bd:0b:27:32: 7d:54:48:d7:3a:87:3d:27:c9:25:80:45:5a:38:3b: 94:7b:93:ed:be:54:41:87:c6:1f:b4:ca:db:04:bd: 44:9c:87:cc:89:68:bb:d3:04:bf:20:0e:3c:4e:23: aa:82:5b:f6:ed:ab:e8:45:d4:bd:8e:6d:d5:ad:e8: 8e:33:28:0d:d1:6a:8f:a2:34:ff:08:e4:8a:a3:72: 90:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CB:D2:EF:7C:34:3E:9D:73:45:E5:48:36:28:22:E1:18:16:9B:E6 X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/AS18420.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.115.0.0/16 Signature Algorithm: sha256WithRSAEncryption 45:28:d0:0a:cc:ec:b0:d8:60:59:84:43:2c:52:3b:a7:7d:be: a0:e9:5b:0a:f3:6d:16:fd:87:f5:50:cc:83:f7:4e:96:a4:88: a2:74:8e:96:a2:c0:93:a4:27:42:d4:30:dd:c6:a8:21:b7:4c: 69:a4:28:8f:74:80:a2:43:fb:50:61:60:67:43:2f:34:0f:eb: f9:b0:d2:6f:13:6c:57:bd:92:2d:d5:bb:aa:c7:9e:81:4c:e2: 4c:28:46:8b:90:0d:72:c6:0f:25:c4:a7:89:7f:ad:e4:97:04: 1c:58:1f:e7:62:a4:f4:0c:0e:da:35:e7:15:5c:09:39:e3:0c: 3d:fa:a7:0b:b3:43:75:f3:0e:05:53:b1:55:b1:74:03:7f:35: 22:71:13:d4:c6:8d:c3:18:45:f9:b4:01:ad:62:45:fb:ff:d9: 73:f3:8b:50:fd:87:1a:79:ef:43:7d:c1:10:0b:23:20:bf:f4: 9d:94:13:11:a2:ad:52:cc:4d:ad:55:cf:a7:89:47:02:e4:70: 81:bd:12:59:bd:da:12:4b:b3:d1:8b:d4:c0:77:e5:b7:af:c4: f3:01:70:92:0d:36:d5:d9:90:d6:e2:55:53:80:11:0d:1b:ef: d4:62:75:12:a6:da:55:89:e4:33:e6:e9:31:f5:19:ca:b8:5b: 01:1e:f2:20 -----BEGIN CERTIFICATE----- MIIEpzCCA4+gAwIBAgIUFlavUXo26sfSjW5fhL136QNwb5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA4MTkwMzM5MDNaFw0yNzA4MTgwMzQ0MDNaMDMxMTAvBgNV BAMTKDkxQ0JEMkVGN0MzNDNFOUQ3MzQ1RTU0ODM2MjgyMkUxMTgxNjlCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRocCowqz+yv9hHJPdGzfMEXGA 4v6aZf0nrW17JD88lIAiD86zl8eqTL9jL8ey+fk1kXMuPHiQjIOTPJIxECxPktnr RgOvm+ICwYKJnMS/6xsdFMYp9qnlU5xiv9EpAlae6av4FDCO+4LroKMCR1foN/CY NjDyE+V7i+VhKHeLv89t0rpDsi34eb4QoVxP33kh+NlGABif2SncOgnHXSwldlO0 P1XVhpgrgBBw665yvQsnMn1USNc6hz0nySWARVo4O5R7k+2+VEGHxh+0ytsEvUSc h8yJaLvTBL8gDjxOI6qCW/btq+hF1L2ObdWt6I4zKA3Rao+iNP8I5IqjcpDBAgMB AAGjggGxMIIBrTAdBgNVHQ4EFgQUkcvS73w0Pp1zReVINigi4RgWm+YwHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xL0FTMTg0MjAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCMczANBgkqhkiG9w0BAQsFAAOCAQEARSjQCszssNhgWYRDLFI7p32+oOlb CvNtFv2H9VDMg/dOlqSIonSOlqLAk6QnQtQw3caoIbdMaaQoj3SAokP7UGFgZ0Mv NA/r+bDSbxNsV72SLdW7qseegUziTChGi5ANcsYPJcSniX+t5JcEHFgf52Kk9AwO 2jXnFVwJOeMMPfqnC7NDdfMOBVOxVbF0A381InET1MaNwxhF+bQBrWJF+//Zc/OL UP2HGnnvQ33BEAsjIL/0nZQTEaKtUsxNrVXPp4lHAuRwgb0SWb3aEkuz0YvUwHfl t6/E8wFwkg021dmQ1uJVU4ARDRvv1GJ1EqbaVYnkM+bpMfUZyrhbAR7yIA== -----END CERTIFICATE-----Generated at Tue Sep 22 22:13:38 2026 by rpki-client