$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIEF-TW/0/AS18186.roa File: AS18186.roa (raw, json) Hash identifier: EV9W7YJdN6JfqPHNRPF7dE+tFsoz2qlc/xI6DKTa0Xw= Subject key identifier: 0F:45:3C:F8:C9:64:B2:94:02:69:AA:BF:C9:88:26:11:1C:FD:1B:63 Certificate issuer: /CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Certificate serial: 01F128FDBF40949B3E48F17E253FD8AE0EF4FFE0 Authority key identifier: 33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS18186.roa Signing time: Mon 11 May 2026 17:32:16 +0000 ROA not before: Mon 11 May 2026 17:27:16 +0000 ROA not after: Mon 10 May 2027 17:32:16 +0000 asID: 18186 IP address blocks: 223.26.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f1:28:fd:bf:40:94:9b:3e:48:f1:7e:25:3f:d8:ae:0e:f4:ff:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33CA4B5F4295B6812127AF5761C6D7353D1F0314 Validity Not Before: May 11 17:27:16 2026 GMT Not After : May 10 17:32:16 2027 GMT Subject: CN=0F453CF8C964B2940269AABFC98826111CFD1B63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fd:5e:9c:87:a6:07:85:4b:97:4a:5a:fe:a6: ac:b7:4f:e1:c2:eb:25:54:69:18:05:94:e5:11:5d: 59:13:b0:38:c1:b2:ad:5c:61:21:c7:52:8d:1e:fe: 56:4a:6e:e8:73:82:cc:5b:50:59:53:ea:a5:8d:11: b4:12:ca:a7:08:24:ef:a3:0f:27:64:cd:72:d9:7c: 30:f9:4e:3d:06:99:6a:9d:98:94:0e:0d:f8:22:c5: 30:71:58:32:57:1d:d0:86:36:18:77:69:6b:3a:9c: a8:2d:4d:b3:fc:41:97:54:e1:dc:d3:8c:a5:c5:8e: be:d1:02:c1:20:f3:da:2a:66:fc:e6:ff:b1:89:93: 8b:f1:2a:a4:da:a2:93:2a:19:4b:9d:a9:76:d6:b0: 51:5a:84:31:76:9e:9e:2a:ee:82:55:5c:2e:ff:ba: 92:3f:dc:e3:c0:df:a7:78:6e:3f:8e:c0:fb:e4:75: f0:51:d5:b0:9b:35:77:67:53:a0:85:13:42:ae:7d: 62:67:0e:78:7c:fa:61:e5:f1:0b:c2:26:8e:3b:e2: a6:3e:42:d3:73:0f:e3:e5:5b:aa:ab:22:7b:c1:ea: 8e:bb:8d:7b:ab:ed:13:c0:6e:1b:3e:b5:e4:95:1d: 39:b3:5f:e7:1f:46:a1:2c:4a:30:c3:10:ae:c9:f9: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:45:3C:F8:C9:64:B2:94:02:69:AA:BF:C9:88:26:11:1C:FD:1B:63 X509v3 Authority Key Identifier: keyid:33:CA:4B:5F:42:95:B6:81:21:27:AF:57:61:C6:D7:35:3D:1F:03:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/33CA4B5F4295B6812127AF5761C6D7353D1F0314.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/33CA4B5F4295B6812127AF5761C6D7353D1F0314.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIEF-TW/0/AS18186.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.26.76.0/22 Signature Algorithm: sha256WithRSAEncryption ab:83:80:67:bf:9e:39:8c:a1:6b:a8:62:ea:2c:bf:15:1d:71: b2:68:64:72:a1:13:2a:a0:f9:10:08:02:16:9a:78:8c:6f:3b: cb:04:af:c7:74:c9:33:b2:3c:c8:0a:68:51:14:ed:48:06:25: 56:d6:7f:51:cb:42:fd:75:0a:c5:ef:ca:64:ac:b3:01:0e:c1: aa:32:5b:b5:33:c2:f9:45:3b:15:4b:f4:31:c3:35:23:e3:91: 64:4b:76:30:a7:b4:6d:d2:2f:75:c6:a0:3a:45:a6:1a:ec:e8: 86:ee:4e:25:73:b9:11:f3:50:a8:f2:c8:41:91:df:34:a3:0d: 9e:59:10:6b:22:16:59:2a:37:d8:97:cf:56:1c:33:2e:62:02: 21:a4:f6:46:10:67:c9:a8:aa:1d:f1:a1:26:a2:86:fd:4b:63: 87:fd:6c:c2:ed:82:dc:69:f0:22:6b:f7:bc:69:a9:77:8c:fb: 7a:f1:32:0c:2f:e1:75:e3:7b:5f:bb:d8:f0:0d:22:6e:46:91: 42:f8:9f:f8:44:67:39:b9:4a:a9:53:e3:29:ad:6d:46:bd:16: ee:7c:42:22:8e:93:b8:4e:a5:fd:22:9b:e5:8a:79:e6:07:2c: 9d:68:a8:b2:a0:45:98:9f:92:b0:e3:af:c6:35:d9:46:97:a3: a7:5a:50:df -----BEGIN CERTIFICATE----- MIIErjCCA5agAwIBAgIUAfEo/b9AlJs+SPF+JT/Yrg70/+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzNDQTRCNUY0Mjk1QjY4MTIxMjdBRjU3NjFDNkQ3MzUz RDFGMDMxNDAeFw0yNjA1MTExNzI3MTZaFw0yNzA1MTAxNzMyMTZaMDMxMTAvBgNV BAMTKDBGNDUzQ0Y4Qzk2NEIyOTQwMjY5QUFCRkM5ODgyNjExMUNGRDFCNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/V6ch6YHhUuXSlr+pqy3T+HC 6yVUaRgFlOURXVkTsDjBsq1cYSHHUo0e/lZKbuhzgsxbUFlT6qWNEbQSyqcIJO+j DydkzXLZfDD5Tj0GmWqdmJQODfgixTBxWDJXHdCGNhh3aWs6nKgtTbP8QZdU4dzT jKXFjr7RAsEg89oqZvzm/7GJk4vxKqTaopMqGUudqXbWsFFahDF2np4q7oJVXC7/ upI/3OPA36d4bj+OwPvkdfBR1bCbNXdnU6CFE0KufWJnDnh8+mHl8QvCJo474qY+ QtNzD+PlW6qrInvB6o67jXur7RPAbhs+teSVHTmzX+cfRqEsSjDDEK7J+Rz9AgMB AAGjggG4MIIBtDAdBgNVHQ4EFgQUD0U8+MlkspQCaaq/yYgmERz9G2MwHwYDVR0j BBgwFoAUM8pLX0KVtoEhJ69XYcbXNT0fAxQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJRUYt VFcvMC8zM0NBNEI1RjQyOTVCNjgxMjEyN0FGNTc2MUM2RDczNTNEMUYwMzE0LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzMzQ0E0QjVGNDI5NUI2ODEyMTI3QUY1NzYx QzZENzM1M0QxRjAzMTQuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4Yz cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElFRi1UVy8wL0FTMTgxODYu cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAO MAwEAgABMAYDBALfGkwwDQYJKoZIhvcNAQELBQADggEBAKuDgGe/njmMoWuoYuos vxUdcbJoZHKhEyqg+RAIAhaaeIxvO8sEr8d0yTOyPMgKaFEU7UgGJVbWf1HLQv11 CsXvymSsswEOwaoyW7UzwvlFOxVL9DHDNSPjkWRLdjCntG3SL3XGoDpFphrs6Ibu TiVzuRHzUKjyyEGR3zSjDZ5ZEGsiFlkqN9iXz1YcMy5iAiGk9kYQZ8moqh3xoSai hv1LY4f9bMLtgtxp8CJr97xpqXeM+3rxMgwv4XXje1+72PANIm5GkUL4n/hEZzm5 SqlT4ymtbUa9Fu58QiKOk7hOpf0im+WKeeYHLJ1oqLKgRZifkrDjr8Y12UaXo6da UN8= -----END CERTIFICATE-----Generated at Wed May 13 21:51:26 2026 by rpki-client