$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/AS18419.roa File: AS18419.roa (raw, json) Hash identifier: hT4armiSj71OZsLPFaFbsBU4VgdeP0hnmGBnvyxlOHk= Subject key identifier: 0B:96:4D:76:2A:E0:B6:AE:7D:C9:66:BE:09:21:94:8E:EE:46:53:39 Certificate issuer: /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Certificate serial: 103C101941E51D060E09B362D3E983CAA0B01D4C Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/0/AS18419.roa Signing time: Mon 11 May 2026 16:33:21 +0000 ROA not before: Mon 11 May 2026 16:28:21 +0000 ROA not after: Mon 10 May 2027 16:33:21 +0000 asID: 18419 IP address blocks: 106.105.24.0/21 maxlen: 24 106.105.184.0/21 maxlen: 24 210.244.84.0/22 maxlen: 24 210.244.88.0/22 maxlen: 24 210.244.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:3c:10:19:41:e5:1d:06:0e:09:b3:62:d3:e9:83:ca:a0:b0:1d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Validity Not Before: May 11 16:28:21 2026 GMT Not After : May 10 16:33:21 2027 GMT Subject: CN=0B964D762AE0B6AE7DC966BE0921948EEE465339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:d7:58:13:8d:e9:3b:f1:97:bd:5f:ef:fa: cc:55:7b:78:88:5a:e0:15:75:4b:72:52:33:c1:69: 19:2f:3a:b5:2d:3b:b5:4e:68:9b:8b:b0:22:9c:f4: c6:57:79:09:73:ab:7d:35:e1:c0:ca:a1:d7:1d:b3: 89:fb:24:ed:64:fb:f0:fe:1b:e7:cf:ef:87:01:87: a5:45:7a:05:28:5b:84:0c:07:05:7a:27:d8:a2:95: cd:7a:b4:96:11:26:96:6b:ad:67:8f:28:23:b4:1a: 8b:12:16:88:bf:9c:d9:b4:34:aa:5a:d0:b5:5f:16: 72:d9:da:ee:0d:98:29:92:30:1d:a7:04:a6:e6:96: 3a:e3:32:03:e3:84:78:96:55:e8:5a:40:b9:75:73: 6f:54:b3:67:f9:e0:d3:2a:c0:4e:b9:47:44:88:74: 68:e1:b5:57:d2:96:a4:72:9f:4c:54:e2:2e:52:98: 79:2b:53:e7:2f:00:67:e0:25:70:3c:f1:06:cd:e6: 3d:a5:c9:0e:8a:66:d2:70:94:72:8e:b8:ab:93:25: cd:2f:b6:7a:5b:94:96:54:6d:51:e2:2b:d8:66:ec: 83:5d:3d:19:bb:d2:d9:42:b6:b2:3e:e3:9c:b3:66: 9d:2a:ae:ed:23:a9:fe:a2:4f:ad:5a:49:78:3f:31: 11:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:96:4D:76:2A:E0:B6:AE:7D:C9:66:BE:09:21:94:8E:EE:46:53:39 X509v3 Authority Key Identifier: keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/AS18419.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.105.24.0/21 106.105.184.0/21 210.244.84.0-210.244.91.255 210.244.97.0/24 Signature Algorithm: sha256WithRSAEncryption 47:e6:fb:23:af:dd:c2:ac:c7:05:8e:75:be:42:62:ea:e1:c0: aa:83:72:fd:ed:de:a8:f9:3a:9b:36:69:b3:a0:8d:40:54:a9: 1d:31:f4:e5:68:cf:bc:c6:59:a3:2c:6f:75:c7:84:58:80:4d: 86:c3:15:f2:38:0f:50:37:9b:4b:c6:d8:11:49:b3:7c:c9:c9: f0:ff:19:d1:67:6a:8a:ff:0f:33:78:21:33:76:63:74:31:6e: 28:3b:0e:df:8f:de:0c:5d:70:1a:48:7f:ed:b8:9b:46:f9:ad: a8:b7:68:3e:48:1e:27:97:f6:b9:9a:b7:66:21:92:be:37:25: d2:ba:7f:e8:27:19:e8:4f:fa:aa:e2:f3:83:52:cd:26:f4:c4: 9f:6b:62:fc:16:c6:00:39:90:a0:44:1c:86:c6:b1:fd:38:0c: 51:2c:49:cc:8f:73:ac:d5:fc:6e:39:a8:13:5f:8d:3e:2f:e6: 8b:fc:97:be:1f:6d:cd:c9:c5:3e:96:85:3c:89:94:37:7f:83: fb:b6:f2:a5:f1:b0:46:9b:8f:7f:80:b5:0d:b5:32:ee:59:de: 89:ff:2f:6d:d7:12:6f:ff:f3:87:3d:2d:99:f7:3e:f2:28:37: 5a:7d:05:6e:0f:6a:7c:e8:9c:ac:b7:35:c0:4e:c7:a8:01:39: c7:0d:46:52 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIUEDwQGUHlHQYOCbNi0+mDyqCwHUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdCMkNC NDc0RTdGQjAeFw0yNjA1MTExNjI4MjFaFw0yNzA1MTAxNjMzMjFaMDMxMTAvBgNV BAMTKDBCOTY0RDc2MkFFMEI2QUU3REM5NjZCRTA5MjE5NDhFRUU0NjUzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRddYE43pO/GXvV/v+sxVe3iI WuAVdUtyUjPBaRkvOrUtO7VOaJuLsCKc9MZXeQlzq3014cDKodcds4n7JO1k+/D+ G+fP74cBh6VFegUoW4QMBwV6J9iilc16tJYRJpZrrWePKCO0GosSFoi/nNm0NKpa 0LVfFnLZ2u4NmCmSMB2nBKbmljrjMgPjhHiWVehaQLl1c29Us2f54NMqwE65R0SI dGjhtVfSlqRyn0xU4i5SmHkrU+cvAGfgJXA88QbN5j2lyQ6KZtJwlHKOuKuTJc0v tnpblJZUbVHiK9hm7INdPRm70tlCtrI+45yzZp0qru0jqf6iT61aSXg/MREbAgMB AAGjggHKMIIBxjAdBgNVHQ4EFgQUC5ZNdirgtq59yWa+CSGUju5GUzkwHwYDVR0j BBgwFoAUzPhfmhJOsxX6b1obOCN7LLR05/swDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8w L0NDRjg1RjlBMTI0RUIzMTVGQTZGNUExQjM4MjM3QjJDQjQ3NEU3RkIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdC MkNCNDc0RTdGQi5jZXIwSwYIKwYBBQUHAQsEPzA9MDsGCCsGAQUFBzALhi9yc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMC9BUzE4NDE5LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAg AwQDamkYAwQDamm4MAwDBALS9FQDBALS9FgDBADS9GEwDQYJKoZIhvcNAQELBQAD ggEBAEfm+yOv3cKsxwWOdb5CYurhwKqDcv3t3qj5Ops2abOgjUBUqR0x9OVoz7zG WaMsb3XHhFiATYbDFfI4D1A3m0vG2BFJs3zJyfD/GdFnaor/DzN4ITN2Y3Qxbig7 Dt+P3gxdcBpIf+24m0b5rai3aD5IHieX9rmat2Yhkr43JdK6f+gnGehP+qri84NS zSb0xJ9rYvwWxgA5kKBEHIbGsf04DFEsScyPc6zV/G45qBNfjT4v5ov8l74fbc3J xT6WhTyJlDd/g/u28qXxsEabj3+AtQ21Mu5Z3on/L23XEm//84c9LZn3PvIoN1p9 BW4PanzonKy3NcBOx6gBOccNRlI= -----END CERTIFICATE-----Generated at Tue May 12 22:53:31 2026 by rpki-client