$ rpki-client -vvf rpkica.twnic.tw/rpki/BRICKSINC/0/323430303a633965303a3a2f33322d3438203d3e20313331363537.roa File: 323430303a633965303a3a2f33322d3438203d3e20313331363537.roa (raw, json) Hash identifier: upFELCP3DHkRWuwf+Xm0sVZKdOzGkDLBh+WiG2O5joQ= Subject key identifier: 37:DC:93:9D:19:C4:C7:D1:90:89:E9:E3:7F:E0:4F:1A:F1:16:0A:56 Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Certificate serial: 6152B8599CBA8671F999701DE55E6F108BC1C6F7 Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/323430303a633965303a3a2f33322d3438203d3e20313331363537.roa Signing time: Mon 11 May 2026 17:26:51 +0000 ROA not before: Mon 11 May 2026 17:21:51 +0000 ROA not after: Mon 10 May 2027 17:26:51 +0000 asID: 131657 IP address blocks: 2400:c9e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:52:b8:59:9c:ba:86:71:f9:99:70:1d:e5:5e:6f:10:8b:c1:c6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Validity Not Before: May 11 17:21:51 2026 GMT Not After : May 10 17:26:51 2027 GMT Subject: CN=37DC939D19C4C7D19089E9E37FE04F1AF1160A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7b:a9:fd:a0:7d:b9:90:9a:58:9a:bb:e8:da: 3a:c4:d6:0c:5d:cb:b1:1e:7f:bd:87:55:cf:2c:ec: 29:d7:b5:d6:d4:a9:49:01:a3:d2:aa:96:5d:92:d5: d7:e1:98:80:35:c1:29:ca:1d:6b:f3:a5:bf:9a:c3: f2:2e:a2:92:86:9a:89:fc:22:2f:ae:05:75:28:b5: b2:38:58:ae:2a:c0:74:c9:5b:ff:30:c1:57:d7:35: 9f:48:2d:60:6e:30:87:96:10:b8:f2:8f:80:ae:7d: ba:46:96:35:b2:5d:01:ef:77:5c:c3:d3:e2:61:ae: 30:d6:f2:70:39:d4:39:de:de:33:26:e4:b8:1c:00: f2:54:a4:40:d6:f0:eb:39:8f:88:81:e7:f2:51:ee: 0c:1e:53:68:7a:92:99:df:33:84:00:c3:9c:9a:f2: a8:81:61:a0:12:d2:a8:90:b0:09:5e:e4:8d:e5:c8: 58:70:21:69:b3:45:82:70:b2:e1:9c:ca:a4:ee:7b: f4:03:91:73:2c:c8:00:99:fb:00:4b:ec:e6:4f:b2: b6:63:c6:88:73:9c:bf:cd:80:e3:5f:b5:b0:4d:0c: fa:3f:0b:78:4c:f1:72:f9:c7:8f:fd:88:92:18:b9: 24:80:3d:5d:36:88:cf:83:1d:34:20:34:1d:85:5b: bd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DC:93:9D:19:C4:C7:D1:90:89:E9:E3:7F:E0:4F:1A:F1:16:0A:56 X509v3 Authority Key Identifier: keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/323430303a633965303a3a2f33322d3438203d3e20313331363537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:c9e0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:49:a4:7f:f7:82:53:9d:c1:5e:1c:ef:07:b8:ba:a1:e4:e3: 0f:4c:ce:3e:46:b9:5d:31:3b:26:43:e9:c3:ef:e4:88:39:1d: 23:70:f1:da:7c:ec:90:6c:62:e0:a2:62:90:97:04:d5:82:a1: 25:5c:a6:83:84:8b:77:dc:d1:11:8b:0d:5e:ab:81:e9:e5:4c: f5:ee:78:67:24:2a:25:eb:cb:5c:0b:28:95:0f:63:4e:d1:38: 1b:e6:2f:45:f7:9a:34:87:70:1d:9a:5d:7e:96:40:77:e8:e0: 7a:1f:34:09:36:f6:0d:cf:0e:5b:5f:1d:a3:51:39:07:f9:90: 44:fe:96:2c:2c:6e:a3:55:e2:e0:8d:e8:5c:28:58:e5:a8:7e: 1b:87:c5:eb:7d:e0:71:63:a9:c4:78:52:e1:06:10:c3:9a:76: 91:66:c1:d4:3f:a5:32:fe:5c:7a:50:b3:16:27:27:d3:f9:cf: 56:84:27:03:ee:dd:29:9d:19:7d:c8:05:4c:2b:17:c7:50:01: f8:52:32:27:e7:c6:8f:6a:53:ad:22:84:03:84:7e:17:66:f1: 04:c7:41:35:3f:25:f3:27:53:00:15:b0:eb:93:c2:09:b3:bc: 47:ca:b5:66:93:bd:8a:71:d6:83:95:0f:76:8f:3a:7a:a6:4b: f3:66:e1:53 -----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIUYVK4WZy6hnH5mXAd5V5vEIvBxvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRE RUQ4OEUxQjAeFw0yNjA1MTExNzIxNTFaFw0yNzA1MTAxNzI2NTFaMDMxMTAvBgNV BAMTKDM3REM5MzlEMTlDNEM3RDE5MDg5RTlFMzdGRTA0RjFBRjExNjBBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCde6n9oH25kJpYmrvo2jrE1gxd y7Eef72HVc8s7CnXtdbUqUkBo9Kqll2S1dfhmIA1wSnKHWvzpb+aw/IuopKGmon8 Ii+uBXUotbI4WK4qwHTJW/8wwVfXNZ9ILWBuMIeWELjyj4CufbpGljWyXQHvd1zD 0+JhrjDW8nA51Dne3jMm5LgcAPJUpEDW8Os5j4iB5/JR7gweU2h6kpnfM4QAw5ya 8qiBYaAS0qiQsAle5I3lyFhwIWmzRYJwsuGcyqTue/QDkXMsyACZ+wBL7OZPsrZj xohznL/NgONftbBNDPo/C3hM8XL5x4/9iJIYuSSAPV02iM+DHTQgNB2FW73PAgMB AAGjggHqMIIB5jAdBgNVHQ4EFgQUN9yTnRnEx9GQienjf+BPGvEWClYwHwYDVR0j BBgwFoAUqziIpOFj4rznbqmG48Py/d7YjhswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tT SU5DLzAvQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BQjM4ODhBNEUxNjNFMkJDRTc2RUE5ODZF M0MzRjJGRERFRDg4RTFCLmNlcjB/BggrBgEFBQcBCwRzMHEwbwYIKwYBBQUHMAuG Y3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tTSU5DLzAvMzIzNDMw MzAzYTYzMzk2NTMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzEzMzMxMzYzNTM3 LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw DzANBAIAAjAHAwUAJADJ4DANBgkqhkiG9w0BAQsFAAOCAQEAKkmkf/eCU53BXhzv B7i6oeTjD0zOPka5XTE7JkPpw+/kiDkdI3Dx2nzskGxi4KJikJcE1YKhJVymg4SL d9zREYsNXquB6eVM9e54ZyQqJevLXAsolQ9jTtE4G+YvRfeaNIdwHZpdfpZAd+jg eh80CTb2Dc8OW18do1E5B/mQRP6WLCxuo1Xi4I3oXChY5ah+G4fF633gcWOpxHhS 4QYQw5p2kWbB1D+lMv5celCzFicn0/nPVoQnA+7dKZ0ZfcgFTCsXx1AB+FIyJ+fG j2pTrSKEA4R+F2bxBMdBNT8l8ydTABWw65PCCbO8R8q1ZpO9inHWg5UPdo86eqZL 82bhUw== -----END CERTIFICATE-----Generated at Wed May 13 21:12:25 2026 by rpki-client