$ rpki-client -vvf rpkica.twnic.tw/rpki/FET/0/AS18049.roa File: AS18049.roa (raw, json) Hash identifier: VTzBNlYvXDyfJiVQZgGNH+eNFriQwK3apLK6UhrlqWQ= Subject key identifier: D0:38:3C:9C:2A:EA:1C:CA:89:BA:F0:0C:AC:76:43:CA:5F:23:38:65 Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Certificate serial: 445801438A0ADEC7B5C4625F7D12807B9353D52C Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/AS18049.roa Signing time: Mon 11 May 2026 17:38:32 +0000 ROA not before: Mon 11 May 2026 17:33:32 +0000 ROA not after: Mon 10 May 2027 17:38:32 +0000 asID: 18049 IP address blocks: 60.244.136.0/21 maxlen: 24 60.244.172.0/22 maxlen: 24 60.244.176.0/22 maxlen: 24 218.34.106.0/23 maxlen: 24 218.34.108.0/22 maxlen: 24 218.34.112.0/20 maxlen: 24 218.34.128.0/21 maxlen: 24 218.34.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:58:01:43:8a:0a:de:c7:b5:c4:62:5f:7d:12:80:7b:93:53:d5:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Validity Not Before: May 11 17:33:32 2026 GMT Not After : May 10 17:38:32 2027 GMT Subject: CN=D0383C9C2AEA1CCA89BAF00CAC7643CA5F233865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b7:76:68:42:aa:a7:7d:80:a8:14:8d:40:5a: 75:9c:f7:b4:12:40:63:76:7d:37:f8:b1:2f:c9:68: a3:eb:16:de:85:7d:b0:49:b1:ca:04:9f:66:4a:d3: 2a:82:9e:46:ef:01:ed:b4:04:d7:a7:94:98:6e:09: 7c:2f:f3:03:f8:02:0b:2a:b8:85:f9:9e:8b:09:d2: f6:04:ff:43:f8:dc:06:07:1b:61:ac:c4:85:64:2e: a3:00:63:f5:43:9b:b8:b2:f1:2d:39:6f:5c:41:df: 55:69:21:a6:40:87:b2:2e:2b:62:0f:2c:a2:54:72: 93:d5:d8:6b:41:9c:33:ea:aa:82:fe:a6:a2:74:d3: 23:b3:e2:5e:82:36:29:15:72:2c:4d:1a:d0:c0:e0: f4:48:74:ef:16:54:42:73:66:d9:d6:15:3d:80:66: 1e:b9:e5:c1:61:50:36:7c:46:63:63:37:40:be:c8: e6:b6:ee:b4:1e:bf:38:f4:b2:1e:2d:de:92:e8:81: 76:e5:11:ec:ae:0a:aa:92:cd:65:01:5f:de:5c:2d: cd:64:fd:46:88:9b:64:01:33:f2:38:da:85:24:1c: bd:e7:6a:4d:91:56:0b:c1:3f:64:c5:2d:a4:b5:74: 8c:c0:7d:49:59:bf:c0:89:ce:8b:a1:4b:ae:35:7b: 42:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:38:3C:9C:2A:EA:1C:CA:89:BA:F0:0C:AC:76:43:CA:5F:23:38:65 X509v3 Authority Key Identifier: keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS18049.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 60.244.136.0/21 60.244.172.0-60.244.179.255 218.34.106.0-218.34.137.255 Signature Algorithm: sha256WithRSAEncryption 53:e3:5a:23:cf:c3:00:88:f6:cc:08:a7:21:14:86:00:41:34: 11:da:bb:e9:22:8e:c0:92:d1:07:89:1c:ef:ad:ee:db:60:22: 97:e1:51:1f:60:b2:b6:94:04:1b:a6:81:af:06:58:c9:b2:52: 99:3a:c1:4d:d3:cd:13:23:4d:57:8f:95:73:65:f4:f5:c6:f0: cd:ef:27:de:7e:c7:3a:5c:20:0f:7f:bb:e8:4f:5a:3f:67:77: 14:8a:36:60:d9:74:3a:df:da:0d:65:7f:d9:48:7f:dd:01:fa: a2:26:99:04:19:7b:37:ab:c9:1a:7f:5a:b1:43:14:73:19:06: 25:93:60:46:e7:b0:71:86:19:d0:8b:07:2b:fd:a8:69:35:0c: 79:41:47:5b:03:02:f8:51:30:fd:f7:ef:da:59:a4:01:07:85: 68:9f:42:9d:7d:b5:2b:46:6e:a7:8d:b0:f6:f7:34:96:2e:25: 07:61:74:5f:5c:50:61:27:df:fb:44:d6:9d:a0:d3:5e:42:78: 18:7a:5e:41:32:7c:4e:96:d3:8a:85:1f:87:66:62:27:f5:fa: 58:ce:6a:d0:72:a9:bd:29:28:db:3a:53:4a:9b:3d:0e:cf:47: 29:0b:54:3b:44:2f:98:73:0b:9f:5a:ea:ce:45:a1:19:73:91: f4:52:c9:b6 -----BEGIN CERTIFICATE----- MIIEwDCCA6igAwIBAgIURFgBQ4oK3se1xGJffRKAe5NT1SwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4 NDI0NkQxMDAeFw0yNjA1MTExNzMzMzJaFw0yNzA1MTAxNzM4MzJaMDMxMTAvBgNV BAMTKEQwMzgzQzlDMkFFQTFDQ0E4OUJBRjAwQ0FDNzY0M0NBNUYyMzM4NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpt3ZoQqqnfYCoFI1AWnWc97QS QGN2fTf4sS/JaKPrFt6FfbBJscoEn2ZK0yqCnkbvAe20BNenlJhuCXwv8wP4Agsq uIX5nosJ0vYE/0P43AYHG2GsxIVkLqMAY/VDm7iy8S05b1xB31VpIaZAh7IuK2IP LKJUcpPV2GtBnDPqqoL+pqJ00yOz4l6CNikVcixNGtDA4PRIdO8WVEJzZtnWFT2A Zh655cFhUDZ8RmNjN0C+yOa27rQevzj0sh4t3pLogXblEeyuCqqSzWUBX95cLc1k /UaIm2QBM/I42oUkHL3nak2RVgvBP2TFLaS1dIzAfUlZv8CJzouhS641e0JFAgMB AAGjggHKMIIBxjAdBgNVHQ4EFgQU0Dg8nCrqHMqJuvAMrHZDyl8jOGUwHwYDVR0j BBgwFoAUcfog/Cac6YBbLGflmzV6poQkbRAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAv NzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4NDI0NkQxMC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MUZBMjBGQzI2OUNFOTgwNUIyQzY3RTU5QjM1N0FB Njg0MjQ2RDEwLmNlcjBKBggrBgEFBQcBCwQ+MDwwOgYIKwYBBQUHMAuGLnJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAvQVMxODA0OS5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA7BggrBgEFBQcBBwEB/wQsMCowKAQCAAEwIgME Azz0iDAMAwQCPPSsAwQCPPSwMAwDBAHaImoDBAHaIogwDQYJKoZIhvcNAQELBQAD ggEBAFPjWiPPwwCI9swIpyEUhgBBNBHau+kijsCS0QeJHO+t7ttgIpfhUR9gsraU BBumga8GWMmyUpk6wU3TzRMjTVePlXNl9PXG8M3vJ95+xzpcIA9/u+hPWj9ndxSK NmDZdDrf2g1lf9lIf90B+qImmQQZezeryRp/WrFDFHMZBiWTYEbnsHGGGdCLByv9 qGk1DHlBR1sDAvhRMP3379pZpAEHhWifQp19tStGbqeNsPb3NJYuJQdhdF9cUGEn 3/tE1p2g015CeBh6XkEyfE6W04qFH4dmYif1+ljOatByqb0pKNs6U0qbPQ7PRykL VDtEL5hzC59a6s5FoRlzkfRSybY= -----END CERTIFICATE-----Generated at Wed May 13 21:51:13 2026 by rpki-client