$ rpki-client -vvf rpkica.twnic.tw/rpki/FET/0/AS22787.roa File: AS22787.roa (raw, json) Hash identifier: VUbSGazcGTcucPhizMbOyCoMALleK0c8ipJJWzpgI7M= Subject key identifier: BF:BF:1C:31:39:F8:DE:CA:26:6C:18:A1:E3:21:32:60:D5:B2:EC:57 Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Certificate serial: 23CA4DB800EBC1393000F9026D0A83ACF83AB6D4 Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/AS22787.roa Signing time: Mon 11 May 2026 17:36:15 +0000 ROA not before: Mon 11 May 2026 17:31:15 +0000 ROA not after: Mon 10 May 2027 17:36:15 +0000 asID: 22787 IP address blocks: 210.58.89.0/24 maxlen: 24 210.58.90.0/23 maxlen: 24 210.58.90.0/24 maxlen: 24 210.58.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ca:4d:b8:00:eb:c1:39:30:00:f9:02:6d:0a:83:ac:f8:3a:b6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Validity Not Before: May 11 17:31:15 2026 GMT Not After : May 10 17:36:15 2027 GMT Subject: CN=BFBF1C3139F8DECA266C18A1E3213260D5B2EC57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1d:1a:38:91:af:e5:0a:b4:ce:2c:a1:19:eb: 37:fe:78:7d:88:e5:d0:ff:d3:79:4b:74:1b:ad:5e: c2:05:cb:bf:6c:1f:5b:4a:67:b4:fb:86:b5:b3:d1: 27:a2:b6:b5:a6:e6:a8:a2:93:e2:62:df:4e:80:c9: 15:37:60:17:82:e9:f3:87:23:57:2f:d8:42:0d:16: 2c:b8:0c:72:08:1b:e4:aa:33:53:0a:35:94:50:64: 72:54:bc:db:e6:b8:49:54:77:b0:e6:78:4a:83:9b: 40:01:00:39:df:2e:9a:ef:17:fc:cc:9d:c4:b7:ee: da:13:29:a3:74:a6:f3:07:02:96:c2:3a:ce:29:cb: a8:76:a0:98:5a:d7:aa:39:78:6b:ce:fc:cc:47:4a: c5:a9:57:e2:06:1e:10:25:42:41:b4:92:08:b9:7d: 5e:1e:35:72:29:2f:02:d0:56:41:47:93:c0:68:12: 9f:b9:70:d1:66:23:ef:4e:39:25:44:8b:0c:f6:6c: 8b:33:58:e6:5f:5d:2f:b9:25:ff:c0:f4:41:0a:c6: 07:72:3b:72:32:41:e1:1f:e6:b2:88:af:ab:86:92: 33:d2:24:90:02:2c:66:0b:7e:07:30:e2:cd:45:8b: 7b:59:27:c6:91:93:73:4d:63:c8:db:2d:e5:59:3e: 5d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BF:1C:31:39:F8:DE:CA:26:6C:18:A1:E3:21:32:60:D5:B2:EC:57 X509v3 Authority Key Identifier: keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS22787.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.58.89.0-210.58.91.255 Signature Algorithm: sha256WithRSAEncryption 43:59:e0:1e:07:57:4f:20:c7:10:f1:5a:d5:70:da:96:5f:d7: 38:f6:e4:df:c9:2f:18:5b:ca:71:7a:8c:3a:aa:26:96:d0:d7: d5:a6:c7:b8:d2:5c:fb:a2:be:b6:b4:6f:f8:0e:8a:3c:d6:a9: ab:c1:0c:3a:6b:ee:d6:3e:7c:7e:0e:62:7e:75:d9:c7:f4:41: 32:0c:a3:12:2d:48:1e:81:62:90:9d:23:19:f7:2b:97:92:26: 31:07:62:48:cf:3c:e1:09:e8:8d:cd:7e:56:05:d3:7d:9a:69: 94:df:5a:79:bd:57:cf:77:d4:42:6f:29:d8:5c:b3:53:82:14: 55:57:b2:95:9d:5f:cc:af:c2:22:00:d5:2b:14:ae:7e:89:72: ba:eb:ef:78:7d:0b:0e:78:49:77:20:08:48:bb:e5:39:80:37: 40:8d:ad:64:e0:fb:96:19:6f:af:e2:7f:19:ef:e4:f1:17:6c: f0:24:91:8f:33:80:3d:58:b6:19:a4:50:66:f2:a3:0c:d6:e6: 35:44:f7:3e:f5:dd:48:20:68:2f:64:35:03:c5:2b:54:5c:66: a9:13:8d:76:c0:5e:48:59:87:2c:ad:27:b9:e9:76:0e:62:f4: 34:6d:8e:f1:cb:19:70:71:6d:b8:2c:09:11:1d:89:61:ed:43: 2e:77:3b:cd -----BEGIN CERTIFICATE----- MIIErDCCA5SgAwIBAgIUI8pNuADrwTkwAPkCbQqDrPg6ttQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4 NDI0NkQxMDAeFw0yNjA1MTExNzMxMTVaFw0yNzA1MTAxNzM2MTVaMDMxMTAvBgNV BAMTKEJGQkYxQzMxMzlGOERFQ0EyNjZDMThBMUUzMjEzMjYwRDVCMkVDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiHRo4ka/lCrTOLKEZ6zf+eH2I 5dD/03lLdButXsIFy79sH1tKZ7T7hrWz0SeitrWm5qiik+Ji306AyRU3YBeC6fOH I1cv2EINFiy4DHIIG+SqM1MKNZRQZHJUvNvmuElUd7DmeEqDm0ABADnfLprvF/zM ncS37toTKaN0pvMHApbCOs4py6h2oJha16o5eGvO/MxHSsWpV+IGHhAlQkG0kgi5 fV4eNXIpLwLQVkFHk8BoEp+5cNFmI+9OOSVEiwz2bIszWOZfXS+5Jf/A9EEKxgdy O3IyQeEf5rKIr6uGkjPSJJACLGYLfgcw4s1Fi3tZJ8aRk3NNY8jbLeVZPl3XAgMB AAGjggG2MIIBsjAdBgNVHQ4EFgQUv78cMTn43sombBih4yEyYNWy7FcwHwYDVR0j BBgwFoAUcfog/Cac6YBbLGflmzV6poQkbRAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAv NzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4NDI0NkQxMC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MUZBMjBGQzI2OUNFOTgwNUIyQzY3RTU5QjM1N0FB Njg0MjQ2RDEwLmNlcjBKBggrBgEFBQcBCwQ+MDwwOgYIKwYBBQUHMAuGLnJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAvQVMyMjc4Ny5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAM AwQA0jpZAwQC0jpYMA0GCSqGSIb3DQEBCwUAA4IBAQBDWeAeB1dPIMcQ8VrVcNqW X9c49uTfyS8YW8pxeow6qiaW0NfVpse40lz7or62tG/4Doo81qmrwQw6a+7WPnx+ DmJ+ddnH9EEyDKMSLUgegWKQnSMZ9yuXkiYxB2JIzzzhCeiNzX5WBdN9mmmU31p5 vVfPd9RCbynYXLNTghRVV7KVnV/Mr8IiANUrFK5+iXK66+94fQsOeEl3IAhIu+U5 gDdAja1k4PuWGW+v4n8Z7+TxF2zwJJGPM4A9WLYZpFBm8qMM1uY1RPc+9d1IIGgv ZDUDxStUXGapE412wF5IWYcsrSe56XYOYvQ0bY7xyxlwcW24LAkRHYlh7UMudzvN -----END CERTIFICATE-----Generated at Wed May 13 21:50:43 2026 by rpki-client