$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHIEF-TW/0/AS10085.roa File: AS10085.roa (raw, json) Hash identifier: rdgSHCz+xIGNKbz6l9Fl1EZh7Fwzqjm9VqZcGgYvZw8= Subject key identifier: AC:CB:5D:87:A9:C8:39:30:22:96:65:68:F8:80:2E:B0:9E:5E:4C:FC Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Certificate serial: 7E67074BE1886C2EBB9AD375903D2E5B78FA397B Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS10085.roa Signing time: Mon 05 Oct 2026 06:44:01 +0000 ROA not before: Mon 05 Oct 2026 06:39:01 +0000 ROA not after: Mon 04 Oct 2027 06:44:01 +0000 asID: 10085 IP address blocks: 150.117.104.0/21 maxlen: 24 150.117.112.0/21 maxlen: 24 203.163.194.0/23 maxlen: 24 203.163.196.0/22 maxlen: 24 203.163.202.0/23 maxlen: 24 203.163.204.0/22 maxlen: 24 203.163.208.0/22 maxlen: 24 203.163.214.0/24 maxlen: 24 223.26.88.0/22 maxlen: 24 223.26.92.0/22 maxlen: 24 223.26.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:67:07:4b:e1:88:6c:2e:bb:9a:d3:75:90:3d:2e:5b:78:fa:39:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Validity Not Before: Oct 5 06:39:01 2026 GMT Not After : Oct 4 06:44:01 2027 GMT Subject: CN=ACCB5D87A9C8393022966568F8802EB09E5E4CFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:56:19:76:e9:71:6b:38:d1:9a:17:99:91:de: c8:3f:f9:13:8b:ec:06:d3:3f:ec:30:c7:a1:c9:ac: 7b:74:b6:88:89:6d:25:0b:71:e9:99:b8:c6:dc:4f: 98:2c:b0:7c:7a:29:8c:2c:83:ab:25:35:09:d3:34: 2f:52:77:d7:16:b4:b7:ff:c9:36:99:89:0d:3d:be: 95:7e:d0:1b:18:db:48:9a:29:e5:96:6c:35:fa:4f: 1c:be:c6:cc:d4:b4:ce:53:c9:3e:e6:dc:9d:ed:04: 9d:b0:28:4c:33:5c:22:cf:ac:3c:33:e1:36:ca:73: 79:0d:cd:04:49:65:c4:22:ae:45:86:d8:33:00:66: 91:82:eb:31:b7:cc:dc:2c:a3:ed:50:21:e9:ff:88: 9f:64:be:a8:63:fd:05:7b:41:9d:f5:f3:80:2a:0a: 0d:25:7a:c6:c9:ea:d1:29:b1:f8:a0:2e:d9:d4:a9: 67:a9:f8:79:60:89:28:a6:39:46:42:e0:8e:03:b1: 45:e6:9e:f8:5c:e8:8d:d4:39:2a:95:f9:dd:28:db: a7:c9:10:8b:e1:a2:e0:c4:af:0e:4c:e5:dd:2d:ce: 52:c4:8d:50:e5:a5:17:31:65:44:44:4b:29:48:5d: 0b:d6:b4:ae:01:62:ea:63:9e:1b:eb:05:d4:4b:61: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CB:5D:87:A9:C8:39:30:22:96:65:68:F8:80:2E:B0:9E:5E:4C:FC X509v3 Authority Key Identifier: keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS10085.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.117.104.0-150.117.119.255 203.163.194.0-203.163.199.255 203.163.202.0-203.163.211.255 203.163.214.0/24 223.26.88.0-223.26.103.255 Signature Algorithm: sha256WithRSAEncryption 52:7d:0a:48:f3:5d:ed:e6:c0:b9:6c:51:db:75:8f:ec:c2:c9: ee:e7:9b:5f:c6:70:51:71:4f:f2:e7:50:80:e0:96:67:8d:fe: 07:3a:fc:61:38:26:bd:61:2f:4b:e4:1c:27:fe:d3:77:88:b4: 9d:0c:34:7a:76:c2:21:fb:5e:df:d4:b7:39:30:c0:98:61:1b: 00:c2:29:9e:56:cb:6a:e2:b2:21:cc:29:7c:57:46:d4:8c:c3: 82:2a:06:84:d5:98:85:b8:69:ef:ef:a9:99:12:e4:0b:af:b4: 2e:1a:18:68:97:18:98:72:f9:16:0e:c0:ea:7b:5a:07:85:7b: ee:5b:e7:a4:96:d2:81:87:87:3f:c9:8a:74:3f:07:82:8c:47: 4b:d6:06:2d:7e:fc:f1:38:5e:6a:83:24:97:f3:ce:4f:e1:74: 25:2d:5c:d1:f5:fb:bf:7d:cc:d1:e5:2e:e4:91:fc:8a:91:a8: a2:20:92:04:6f:e5:3a:1c:e6:66:84:bb:d4:de:a2:f3:56:27: ab:34:d5:06:8d:aa:40:06:6a:16:0b:35:48:6b:5b:dd:2b:4c: 9b:e8:24:b7:1e:4c:22:8d:89:7f:1e:61:4a:97:7a:81:d9:a0: 9b:c7:fd:af:95:c2:26:c6:42:16:d6:2f:ea:f1:c4:30:dc:3a: 2d:5d:a6:0e -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUfmcHS+GIbC67mtN1kD0uW3j6OXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz RDFGMDMxNDAeFw0yNjEwMDUwNjM5MDFaFw0yNzEwMDQwNjQ0MDFaMDMxMTAvBgNV BAMTKEFDQ0I1RDg3QTlDODM5MzAyMjk2NjU2OEY4ODAyRUIwOUU1RTRDRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Vhl26XFrONGaF5mR3sg/+ROL 7AbTP+wwx6HJrHt0toiJbSULcemZuMbcT5gssHx6KYwsg6slNQnTNC9Sd9cWtLf/ yTaZiQ09vpV+0BsY20iaKeWWbDX6Txy+xszUtM5TyT7m3J3tBJ2wKEwzXCLPrDwz 4TbKc3kNzQRJZcQirkWG2DMAZpGC6zG3zNwso+1QIen/iJ9kvqhj/QV7QZ3184Aq Cg0lesbJ6tEpsfigLtnUqWep+HlgiSimOUZC4I4DsUXmnvhc6I3UOSqV+d0o26fJ EIvhouDErw5M5d0tzlLEjVDlpRcxZURESylIXQvWtK4BYupjnhvrBdRLYcuTAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUrMtdh6nIOTAilmVo+IAusJ5eTPwwHwYDVR0j BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx QzZENzM1M0QxRjAzMTQuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4Yz cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wL0FTMTAwODUu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVwYIKwYBBQUHAQcBAf8ESDBG MEQEAgABMD4wDAMEA5Z1aAMEA5Z1cDAMAwQBy6PCAwQDy6PAMAwDBAHLo8oDBALL o9ADBADLo9YwDAMEA98aWAMEA98aYDANBgkqhkiG9w0BAQsFAAOCAQEAUn0KSPNd 7ebAuWxR23WP7MLJ7uebX8ZwUXFP8udQgOCWZ43+Bzr8YTgmvWEvS+QcJ/7Td4i0 nQw0enbCIfte39S3OTDAmGEbAMIpnlbLauKyIcwpfFdG1IzDgioGhNWYhbhp7++p mRLkC6+0LhoYaJcYmHL5Fg7A6ntaB4V77lvnpJbSgYeHP8mKdD8HgoxHS9YGLX78 8TheaoMkl/POT+F0JS1c0fX7v33M0eUu5JH8ipGooiCSBG/lOhzmZoS71N6i81Yn qzTVBo2qQAZqFgs1SGtb3StMm+gktx5MIo2Jfx5hSpd6gdmgm8f9r5XCJsZCFtYv 6vHEMNw6LV2mDg== -----END CERTIFICATE-----Generated at Sun Nov 15 22:38:46 2026 by rpki-client