$ rpki-client -vvf rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31302e302f32332d3332203d3e20313331363537.roa File: 3230322e352e31302e302f32332d3332203d3e20313331363537.roa (raw, json) Hash identifier: zCUned2k9nVUaWCk/pD8/VUXQUBPTJnpl6eX7zZ2e9s= Subject key identifier: 32:72:D2:F7:89:F4:07:35:34:4F:55:6E:CC:C0:58:E5:27:E3:C8:A7 Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Certificate serial: 7A346AE28C38374B6369232D54BA0EB4C9CA9709 Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31302e302f32332d3332203d3e20313331363537.roa Signing time: Mon 11 May 2026 17:56:12 +0000 ROA not before: Mon 11 May 2026 17:51:12 +0000 ROA not after: Mon 10 May 2027 17:56:12 +0000 asID: 131657 IP address blocks: 202.5.10.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:34:6a:e2:8c:38:37:4b:63:69:23:2d:54:ba:0e:b4:c9:ca:97:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Validity Not Before: May 11 17:51:12 2026 GMT Not After : May 10 17:56:12 2027 GMT Subject: CN=3272D2F789F40735344F556ECCC058E527E3C8A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:71:20:16:62:b1:78:90:e3:80:58:1b:ba:41: 25:72:9b:ab:a0:22:1c:75:05:74:1f:7e:ac:e5:d9: 0f:3d:80:1f:1c:73:cf:50:7b:89:4f:df:2d:0b:55: 5d:8d:de:99:48:20:85:55:c2:82:37:f8:b6:72:41: 38:8e:fc:77:ba:b9:33:4f:b0:83:c6:d0:76:81:17: 09:33:d4:6c:12:d0:74:10:d4:c4:08:cd:72:92:06: 1c:cb:40:78:95:e3:ad:ba:46:c3:ad:cf:37:cd:ca: ba:c0:93:f0:e2:65:65:47:05:2c:3e:0b:3b:8f:10: 61:06:c7:46:84:64:04:9c:a0:a4:b8:30:45:c5:6c: 46:55:b3:cb:bd:51:21:ab:d4:c4:c9:5f:dd:0c:e9: fd:d5:87:2d:4a:88:97:42:7f:56:2b:41:ed:24:39: 7a:35:a3:1d:28:c8:72:7a:83:9b:6c:e1:a4:60:21: 1a:b5:7c:7b:23:41:62:7d:58:d0:21:e9:2b:44:3b: f6:64:5b:28:13:0e:d7:e8:87:fe:8d:27:90:02:10: 7e:0b:86:9d:4c:b6:c8:cd:35:d3:19:ab:9c:78:87: d1:24:28:b7:79:62:13:dd:39:bf:88:e7:69:4b:c5: 32:98:ae:a9:4d:30:b1:2e:54:58:f9:67:83:b6:87: ba:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:72:D2:F7:89:F4:07:35:34:4F:55:6E:CC:C0:58:E5:27:E3:C8:A7 X509v3 Authority Key Identifier: keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/3230322e352e31302e302f32332d3332203d3e20313331363537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.5.10.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:82:0f:5e:16:ab:96:56:c5:54:29:7e:eb:41:4f:b9:2b:12: 1d:aa:f0:a9:c2:cc:89:60:ae:ad:4b:28:26:02:72:7e:6d:1f: b2:b9:b0:8d:91:cd:d7:2e:09:94:a8:a2:e8:3f:f0:74:c7:b0: 21:57:65:a7:76:d1:e6:0c:fd:55:5f:58:9c:e0:1e:98:ab:72: 80:fb:57:42:9b:39:a3:33:8a:c4:19:81:a9:19:17:6b:2f:78: d2:6a:e9:9b:3f:a0:46:11:56:65:c1:c0:5f:22:fb:64:83:2d: 74:1e:25:2d:47:7a:57:96:00:ac:5f:0d:3c:6b:a3:e6:c7:20: 08:f2:de:bd:7d:cf:cc:0a:a1:59:b1:35:7e:f8:56:8b:5c:f4: ed:98:a8:cd:43:13:3b:f0:71:c9:21:fd:ac:4e:d4:91:3b:43: 22:1f:fc:18:9c:38:3c:cd:ae:0f:d5:6a:87:06:a1:c1:8d:a1: e3:81:13:d8:7c:c3:3f:bd:95:85:90:92:75:fd:40:22:fe:d4: fd:a7:59:3b:98:a7:39:c4:23:e9:03:10:85:96:53:24:e0:b8: 30:00:0b:34:97:50:9c:6f:a7:33:57:b3:2b:f3:b3:4e:3a:b5: 7a:f8:bb:b5:e8:58:04:b5:32:45:fe:10:37:63:92:25:36:4c: 9d:94:c1:1b -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUejRq4ow4N0tjaSMtVLoOtMnKlwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRE RUQ4OEUxQjAeFw0yNjA1MTExNzUxMTJaFw0yNzA1MTAxNzU2MTJaMDMxMTAvBgNV BAMTKDMyNzJEMkY3ODlGNDA3MzUzNDRGNTU2RUNDQzA1OEU1MjdFM0M4QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCacSAWYrF4kOOAWBu6QSVym6ug Ihx1BXQffqzl2Q89gB8cc89Qe4lP3y0LVV2N3plIIIVVwoI3+LZyQTiO/He6uTNP sIPG0HaBFwkz1GwS0HQQ1MQIzXKSBhzLQHiV4626RsOtzzfNyrrAk/DiZWVHBSw+ CzuPEGEGx0aEZAScoKS4MEXFbEZVs8u9USGr1MTJX90M6f3Vhy1KiJdCf1YrQe0k OXo1ox0oyHJ6g5ts4aRgIRq1fHsjQWJ9WNAh6StEO/ZkWygTDtfoh/6NJ5ACEH4L hp1MtsjNNdMZq5x4h9EkKLd5YhPdOb+I52lLxTKYrqlNMLEuVFj5Z4O2h7qfAgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQUMnLS94n0BzU0T1VuzMBY5SfjyKcwHwYDVR0j BBgwFoAUqziIpOFj4rznbqmG48Py/d7YjhswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tT SU5DLzAvQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BQjM4ODhBNEUxNjNFMkJDRTc2RUE5ODZF M0MzRjJGRERFRDg4RTFCLmNlcjB9BggrBgEFBQcBCwRxMG8wbQYIKwYBBQUHMAuG YXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tTSU5DLzAvMzIzMDMy MmUzNTJlMzEzMDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDMxMzMzMTM2MzUzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAcoFCjANBgkqhkiG9w0BAQsFAAOCAQEAeoIPXharllbFVCl+60FP uSsSHarwqcLMiWCurUsoJgJyfm0fsrmwjZHN1y4JlKii6D/wdMewIVdlp3bR5gz9 VV9YnOAemKtygPtXQps5ozOKxBmBqRkXay940mrpmz+gRhFWZcHAXyL7ZIMtdB4l LUd6V5YArF8NPGuj5scgCPLevX3PzAqhWbE1fvhWi1z07ZiozUMTO/BxySH9rE7U kTtDIh/8GJw4PM2uD9VqhwahwY2h44ET2HzDP72VhZCSdf1AIv7U/adZO5inOcQj 6QMQhZZTJOC4MAALNJdQnG+nM1ezK/OzTjq1evi7tehYBLUyRf4QN2OSJTZMnZTB Gw== -----END CERTIFICATE-----Generated at Wed May 13 21:11:59 2026 by rpki-client