$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/AS140079.roa File: AS140079.roa (raw, json) Hash identifier: WQgZ8Cm2P4KoEMGTkGD/G/c6uZqkXiyuAe4JGHQ0o0c= Subject key identifier: C6:F9:46:15:CF:F6:48:9F:A4:37:5F:E6:0E:FA:71:0D:23:C1:A5:69 Certificate issuer: /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Certificate serial: 42C3B40C5296FB865DD5B914AE0EDAC277242586 Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/0/AS140079.roa Signing time: Mon 11 May 2026 17:40:04 +0000 ROA not before: Mon 11 May 2026 17:35:04 +0000 ROA not after: Mon 10 May 2027 17:40:04 +0000 asID: 140079 IP address blocks: 220.229.65.224/28 maxlen: 28 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c3:b4:0c:52:96:fb:86:5d:d5:b9:14:ae:0e:da:c2:77:24:25:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Validity Not Before: May 11 17:35:04 2026 GMT Not After : May 10 17:40:04 2027 GMT Subject: CN=C6F94615CFF6489FA4375FE60EFA710D23C1A569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:24:50:7d:23:ed:9e:44:b4:b3:08:c3:e3:5a: eb:19:f6:18:00:dc:d4:ca:48:39:12:cc:ae:d1:1f: 1c:35:af:54:d6:d3:b6:c8:f4:5a:5c:83:9b:14:df: 79:24:63:42:7d:25:dd:6e:1a:2b:51:0f:7d:90:92: 01:4f:c9:e1:62:69:d4:5d:1a:ff:75:b8:ae:02:f0: 75:b3:80:4e:4a:ae:25:e3:77:f5:90:5a:83:f9:57: a7:2e:30:e6:a3:46:0e:31:4d:66:32:57:28:98:c6: 27:ce:12:0d:f9:19:dd:4d:a1:2e:16:ad:13:d4:ad: 95:c4:10:ff:41:de:d4:b5:39:93:95:03:f6:ff:d7: 49:2a:5d:5d:6d:4c:3e:5a:ec:e2:ac:b8:5a:17:f6: a9:da:bc:a3:9e:87:6b:bc:8b:48:56:c1:34:f3:68: 87:f7:ce:89:b5:a9:77:a0:1c:ad:72:46:0e:ed:7c: 5b:84:04:a9:67:2a:b6:c9:ae:f0:91:fb:71:c7:6c: cd:42:47:2a:eb:69:41:e9:25:ab:07:7b:5e:c2:17: 0f:40:8c:0f:a5:a6:9c:99:8b:3b:b1:d3:f9:54:54: 20:27:0f:30:96:b8:8f:13:0d:ea:f1:a7:8b:61:1e: 33:a2:98:e1:6e:d9:7e:bd:48:34:3e:c9:32:ef:2d: 4f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F9:46:15:CF:F6:48:9F:A4:37:5F:E6:0E:FA:71:0D:23:C1:A5:69 X509v3 Authority Key Identifier: keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/AS140079.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.229.65.224/28 Signature Algorithm: sha256WithRSAEncryption 2c:d2:c4:87:71:bd:c6:00:18:9c:43:7e:eb:50:18:00:b3:07: b5:43:09:32:36:6d:7a:ee:47:3b:13:ac:29:56:3c:35:3a:04: 47:9d:8d:23:de:e2:5a:11:99:4a:1c:c1:ab:0e:05:3b:18:08: b8:5b:67:ba:3e:59:0f:13:cc:c5:4c:ea:f7:fa:50:56:a1:42: d2:a4:ae:ec:be:57:bf:2b:3d:60:00:f6:fa:5d:25:db:ef:05: 5a:4e:8b:68:8c:0f:d9:fd:d8:72:ad:06:96:b2:e2:b2:29:87: 54:15:78:bf:13:9d:f3:ee:e0:00:50:d8:88:7c:e0:46:91:25: 34:2f:44:0c:b2:a2:f0:1e:36:f0:2e:8e:1a:8f:cf:11:0d:04: f5:31:be:e5:8a:87:c3:8f:8f:7e:3f:7c:25:81:51:cb:5f:ca: 12:98:12:7f:10:4c:4e:e7:6e:9f:1e:ae:79:cb:5c:fc:ca:db: 0b:90:4e:28:ef:2a:68:8c:84:8a:e3:97:39:1c:14:9f:df:8c: 99:4c:20:a4:e1:c2:43:82:df:ca:ec:ac:cc:89:cf:99:c7:72: a9:70:aa:38:c8:cc:25:7f:41:f0:2e:c4:45:86:a5:d8:ac:8b: 76:ec:43:14:58:18:01:0d:b5:ef:b8:8b:8d:0a:73:bf:fe:5e: 7c:e5:48:ba -----BEGIN CERTIFICATE----- MIIEqDCCA5CgAwIBAgIUQsO0DFKW+4Zd1bkUrg7awnckJYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdCMkNC NDc0RTdGQjAeFw0yNjA1MTExNzM1MDRaFw0yNzA1MTAxNzQwMDRaMDMxMTAvBgNV BAMTKEM2Rjk0NjE1Q0ZGNjQ4OUZBNDM3NUZFNjBFRkE3MTBEMjNDMUE1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKJFB9I+2eRLSzCMPjWusZ9hgA 3NTKSDkSzK7RHxw1r1TW07bI9Fpcg5sU33kkY0J9Jd1uGitRD32QkgFPyeFiadRd Gv91uK4C8HWzgE5KriXjd/WQWoP5V6cuMOajRg4xTWYyVyiYxifOEg35Gd1NoS4W rRPUrZXEEP9B3tS1OZOVA/b/10kqXV1tTD5a7OKsuFoX9qnavKOeh2u8i0hWwTTz aIf3zom1qXegHK1yRg7tfFuEBKlnKrbJrvCR+3HHbM1CRyrraUHpJasHe17CFw9A jA+lppyZizux0/lUVCAnDzCWuI8TDerxp4thHjOimOFu2X69SDQ+yTLvLU8fAgMB AAGjggGyMIIBrjAdBgNVHQ4EFgQUxvlGFc/2SJ+kN1/mDvpxDSPBpWkwHwYDVR0j BBgwFoAUzPhfmhJOsxX6b1obOCN7LLR05/swDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8w L0NDRjg1RjlBMTI0RUIzMTVGQTZGNUExQjM4MjM3QjJDQjQ3NEU3RkIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdC MkNCNDc0RTdGQi5jZXIwTAYIKwYBBQUHAQsEQDA+MDwGCCsGAQUFBzALhjByc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMC9BUzE0MDA3OS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEw BwMFBNzlQeAwDQYJKoZIhvcNAQELBQADggEBACzSxIdxvcYAGJxDfutQGACzB7VD CTI2bXruRzsTrClWPDU6BEedjSPe4loRmUocwasOBTsYCLhbZ7o+WQ8TzMVM6vf6 UFahQtKkruy+V78rPWAA9vpdJdvvBVpOi2iMD9n92HKtBpay4rIph1QVeL8TnfPu 4ABQ2Ih84EaRJTQvRAyyovAeNvAujhqPzxENBPUxvuWKh8OPj34/fCWBUctfyhKY En8QTE7nbp8ernnLXPzK2wuQTijvKmiMhIrjlzkcFJ/fjJlMIKThwkOC38rsrMyJ z5nHcqlwqjjIzCV/QfAuxEWGpdisi3bsQxRYGAENte+4i40Kc7/+XnzlSLo= -----END CERTIFICATE-----Generated at Tue May 12 22:53:31 2026 by rpki-client