$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/1/AS9916.roa File: AS9916.roa (raw, json) Hash identifier: VmKEplDioE9dRbG+IqWy+ORyQkpVQi8turUDPKdrc2Q= Subject key identifier: F6:8C:4E:C2:8D:8F:8D:3C:29:D6:C1:F6:3C:F1:08:8E:4F:81:86:C5 Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 479304758CC2FE20098ABEE5231DFBBB4969F0B6 Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/AS9916.roa Signing time: Wed 19 Aug 2026 03:44:03 +0000 ROA not before: Wed 19 Aug 2026 03:39:03 +0000 ROA not after: Wed 18 Aug 2027 03:44:03 +0000 asID: 9916 IP address blocks: 140.113.0.0/16 maxlen: 16 140.126.0.0/16 maxlen: 16 140.129.51.0/24 maxlen: 24 140.129.52.0/22 maxlen: 22 140.129.56.0/21 maxlen: 21 140.129.64.0/20 maxlen: 20 140.129.80.0/24 maxlen: 24 192.83.179.0/24 maxlen: 24 192.83.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:93:04:75:8c:c2:fe:20:09:8a:be:e5:23:1d:fb:bb:49:69:f0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: Aug 19 03:39:03 2026 GMT Not After : Aug 18 03:44:03 2027 GMT Subject: CN=F68C4EC28D8F8D3C29D6C1F63CF1088E4F8186C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:de:8c:ea:e4:f7:e8:0f:97:27:2b:0a:74:17: a0:ff:58:da:db:6c:ff:25:0d:b3:84:f4:9f:1c:d6: ef:92:7b:37:ee:3b:f3:b6:16:de:87:45:72:06:28: 2e:bf:54:39:95:27:67:a7:54:c3:a8:cf:74:cf:c0: 7a:6d:2f:9d:df:a1:ba:3b:22:c5:37:5f:24:3c:9c: c3:0a:4c:ce:ba:03:be:26:15:b7:00:b9:db:77:18: 87:15:91:d5:b1:d1:59:a5:1b:eb:e7:ff:6f:27:99: 14:9c:bf:25:7d:27:ea:37:b4:12:04:27:f8:86:28: 7c:c7:53:0a:71:c2:f9:e6:e7:77:f8:be:53:ee:b6: d5:02:02:af:15:d8:ac:8f:d6:6a:aa:30:93:95:c5: cd:04:49:28:aa:99:a1:35:d8:df:4a:ab:12:39:72: 85:1c:d8:c9:72:61:cf:b2:d9:8c:0e:5d:b2:2b:d8: 37:4d:d3:a1:c0:bd:05:ea:a7:54:16:fc:74:9a:01: f1:90:f3:9d:70:ae:30:63:7a:fa:77:c0:ff:c1:f6: 35:90:d4:a7:06:24:e5:79:8f:3a:eb:8b:25:3a:81: 46:eb:03:bb:11:a3:4b:f5:d2:e3:3d:8d:a4:6b:2a: 1d:a0:b3:0d:a4:91:36:ec:e2:f6:64:6d:e3:85:d5: 73:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8C:4E:C2:8D:8F:8D:3C:29:D6:C1:F6:3C:F1:08:8E:4F:81:86:C5 X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/AS9916.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.113.0.0/16 140.126.0.0/16 140.129.51.0-140.129.80.255 192.83.179.0-192.83.180.255 Signature Algorithm: sha256WithRSAEncryption 17:d9:b8:77:9b:67:4a:1c:3b:a8:f4:29:b4:65:ed:27:0d:c7: c9:8c:e9:8f:d9:ee:08:65:67:7c:79:1c:29:a6:03:87:15:19: d5:37:64:0c:91:c7:57:94:44:af:a8:7d:7f:13:68:d0:54:67: 86:97:64:9b:49:6b:7e:b6:bc:16:fa:8f:b0:54:cb:4b:5c:87: bf:96:eb:cd:e0:d7:c7:90:af:11:7b:09:c7:7f:8e:0d:ee:92: 80:9c:24:f7:88:e2:50:8d:a8:56:1d:06:02:93:84:9f:71:b5: 90:3b:b8:7b:df:eb:74:6f:56:c7:6f:1e:5d:ff:bf:6e:32:14: eb:47:fc:69:3f:81:52:ce:5e:da:43:9b:ad:e7:8e:ec:db:89: 8a:d3:3b:39:75:55:f9:cb:03:d1:0a:50:a7:3e:e6:ee:0a:0d: 34:b5:d4:9c:5e:fc:e2:86:06:b4:d9:d3:fe:33:5b:1a:9a:1a: 11:19:40:a7:f1:16:e4:fd:b6:7b:c8:7e:b8:b3:95:66:df:27: ac:98:17:9d:ec:04:ff:6b:81:d3:38:f3:e2:b1:af:19:4e:58: 9e:4e:27:91:76:62:df:35:c3:c4:1a:e7:7f:96:79:c8:fe:bd: 9f:a7:8a:85:f3:d1:97:9b:aa:7c:8e:16:5d:ea:0a:cb:b8:9d: 5f:4b:4c:1a -----BEGIN CERTIFICATE----- MIIExzCCA6+gAwIBAgIUR5MEdYzC/iAJir7lIx37u0lp8LYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA4MTkwMzM5MDNaFw0yNzA4MTgwMzQ0MDNaMDMxMTAvBgNV BAMTKEY2OEM0RUMyOEQ4RjhEM0MyOUQ2QzFGNjNDRjEwODhFNEY4MTg2QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi3ozq5PfoD5cnKwp0F6D/WNrb bP8lDbOE9J8c1u+SezfuO/O2Ft6HRXIGKC6/VDmVJ2enVMOoz3TPwHptL53fobo7 IsU3XyQ8nMMKTM66A74mFbcAudt3GIcVkdWx0VmlG+vn/28nmRScvyV9J+o3tBIE J/iGKHzHUwpxwvnm53f4vlPuttUCAq8V2KyP1mqqMJOVxc0ESSiqmaE12N9KqxI5 coUc2MlyYc+y2YwOXbIr2DdN06HAvQXqp1QW/HSaAfGQ851wrjBjevp3wP/B9jWQ 1KcGJOV5jzrriyU6gUbrA7sRo0v10uM9jaRrKh2gsw2kkTbs4vZkbeOF1XOtAgMB AAGjggHRMIIBzTAdBgNVHQ4EFgQU9oxOwo2PjTwp1sH2PPEIjk+BhsUwHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMEsGCCsGAQUFBwELBD8wPTA7BggrBgEFBQcwC4YvcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xL0FTOTkxNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEw JgMDAIxxAwMAjH4wDAMEAIyBMwMEAIyBUDAMAwQAwFOzAwQAwFO0MA0GCSqGSIb3 DQEBCwUAA4IBAQAX2bh3m2dKHDuo9Cm0Ze0nDcfJjOmP2e4IZWd8eRwppgOHFRnV N2QMkcdXlESvqH1/E2jQVGeGl2SbSWt+trwW+o+wVMtLXIe/luvN4NfHkK8RewnH f44N7pKAnCT3iOJQjahWHQYCk4SfcbWQO7h73+t0b1bHbx5d/79uMhTrR/xpP4FS zl7aQ5ut547s24mK0zs5dVX5ywPRClCnPubuCg00tdScXvzihga02dP+M1samhoR GUCn8Rbk/bZ7yH64s5Vm3yesmBed7AT/a4HTOPPisa8ZTlieTieRdmLfNcPEGud/ lnnI/r2fp4qF89GXm6p8jhZd6grLuJ1fS0wa -----END CERTIFICATE-----Generated at Tue Sep 22 09:18:38 2026 by rpki-client