$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/0/AS10126.roa File: AS10126.roa (raw, json) Hash identifier: bP/t3+nQhCUerSSr2OTx6tNc9u+q7YyVB9Tt2xSSv68= Subject key identifier: 04:92:43:F4:1D:68:45:50:D8:F9:16:01:15:16:1B:BF:CD:90:F7:22 Certificate issuer: /CN=6276AF5AEFB216534D76803A45D67CADC23447BD Certificate serial: 2B0898BAC184CEF1AE2F1E12B79F6D2848FEA8A4 Authority key identifier: 62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/0/AS10126.roa Signing time: Mon 11 May 2026 16:34:06 +0000 ROA not before: Mon 11 May 2026 16:29:06 +0000 ROA not after: Mon 10 May 2027 16:34:06 +0000 asID: 10126 IP address blocks: 114.30.32.0/20 maxlen: 24 175.111.192.0/18 maxlen: 24 203.160.240.0/20 maxlen: 24 220.128.56.0/21 maxlen: 24 220.128.64.0/20 maxlen: 24 220.128.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:08:98:ba:c1:84:ce:f1:ae:2f:1e:12:b7:9f:6d:28:48:fe:a8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6276AF5AEFB216534D76803A45D67CADC23447BD Validity Not Before: May 11 16:29:06 2026 GMT Not After : May 10 16:34:06 2027 GMT Subject: CN=049243F41D684550D8F9160115161BBFCD90F722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e1:9d:d5:1a:79:54:52:a9:98:9b:e3:d2:21: 59:cf:aa:76:c8:99:80:30:66:1c:2b:fd:09:a7:4b: 5d:ec:dd:96:eb:61:f1:5f:e5:63:86:4e:4e:bc:2c: 08:4f:05:29:a8:29:cb:5c:fd:f7:3d:b2:c0:2a:b1: bd:5f:70:8c:0c:3f:34:2e:83:f8:8d:2e:74:7e:14: 72:ff:0a:b4:9b:11:70:ae:e0:8b:c9:3c:90:7a:7a: 86:c4:9c:00:17:61:88:df:8e:1a:eb:d8:9b:8d:45: 60:98:8e:cb:92:f2:5e:61:b4:29:f8:dd:90:10:4b: ec:82:44:f8:57:7a:b8:11:bb:62:c4:58:1c:3c:0e: 4d:38:e0:84:b0:c7:49:fb:45:b6:9c:31:f9:89:6c: 66:86:aa:97:01:0a:1d:01:6f:70:d8:99:06:ac:91: ad:f8:01:30:7d:39:a1:e8:df:8c:5d:d0:03:2d:b9: 1c:90:85:28:f7:54:8b:b7:92:0b:c9:f2:04:a5:ab: e0:88:46:59:ed:41:82:51:79:42:ba:b6:df:bb:75: e3:83:b9:df:10:7c:bd:ff:01:71:12:fe:d1:3b:e8: 91:49:65:a6:d3:04:ca:8e:b4:ab:3c:9a:33:03:c5: f5:45:4e:cf:12:2b:4a:49:ed:50:7f:43:84:75:dc: 82:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:92:43:F4:1D:68:45:50:D8:F9:16:01:15:16:1B:BF:CD:90:F7:22 X509v3 Authority Key Identifier: keyid:62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/0/AS10126.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.30.32.0/20 175.111.192.0/18 203.160.240.0/20 220.128.56.0-220.128.95.255 Signature Algorithm: sha256WithRSAEncryption be:07:87:7f:7c:01:35:10:2d:ce:5f:31:c5:6a:ac:b2:90:ec: 5a:78:e4:44:20:bb:63:c4:f3:6a:92:66:e2:ad:2a:64:e7:5e: 18:1c:c6:69:b9:8f:18:61:ad:70:20:ed:6f:15:fe:07:e5:ef: b8:a2:99:0f:0b:05:a4:dc:dc:7c:2e:dd:15:b8:07:9c:10:fd: 16:49:e9:ae:eb:82:e4:dd:65:e5:5f:25:80:f5:4a:83:81:f5: 7b:4c:49:db:3f:53:e3:f6:ac:93:d7:ba:b6:0b:a2:fa:98:78: eb:8c:8a:f1:5e:65:8a:9e:ac:f1:d3:91:65:56:02:88:51:63: cd:dc:b8:8d:4b:4c:8e:b6:db:e3:5f:4d:cc:d1:0d:62:be:68: db:54:11:ed:0e:a6:39:0e:17:c6:21:1c:0a:2d:e9:1f:2b:e1: 99:cc:f5:1a:c8:f3:39:f6:0c:53:cc:fc:a5:8a:69:fb:d6:56: 46:fa:c5:b4:32:26:a2:18:a4:33:e9:8d:18:f3:4e:87:83:c3: 57:04:5d:d1:32:11:dc:20:9e:7f:4c:51:37:d8:1f:07:75:58: f2:54:b8:c1:71:ba:12:09:34:f0:ce:87:9e:ac:40:e1:93:44: 95:35:87:98:68:02:8e:c1:17:86:63:93:58:02:71:f7:1b:4e: e6:ae:6d:d3 -----BEGIN CERTIFICATE----- MIIEwjCCA6qgAwIBAgIUKwiYusGEzvGuLx4St59tKEj+qKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI3NkFGNUFFRkIyMTY1MzRENzY4MDNBNDVENjdDQURD MjM0NDdCRDAeFw0yNjA1MTExNjI5MDZaFw0yNzA1MTAxNjM0MDZaMDMxMTAvBgNV BAMTKDA0OTI0M0Y0MUQ2ODQ1NTBEOEY5MTYwMTE1MTYxQkJGQ0Q5MEY3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl4Z3VGnlUUqmYm+PSIVnPqnbI mYAwZhwr/QmnS13s3ZbrYfFf5WOGTk68LAhPBSmoKctc/fc9ssAqsb1fcIwMPzQu g/iNLnR+FHL/CrSbEXCu4IvJPJB6eobEnAAXYYjfjhrr2JuNRWCYjsuS8l5htCn4 3ZAQS+yCRPhXergRu2LEWBw8Dk044ISwx0n7RbacMfmJbGaGqpcBCh0Bb3DYmQas ka34ATB9OaHo34xd0AMtuRyQhSj3VIu3kgvJ8gSlq+CIRlntQYJReUK6tt+7deOD ud8QfL3/AXES/tE76JFJZabTBMqOtKs8mjMDxfVFTs8SK0pJ7VB/Q4R13IJhAgMB AAGjggHMMIIByDAdBgNVHQ4EFgQUBJJD9B1oRVDY+RYBFRYbv82Q9yIwHwYDVR0j BBgwFoAUYnavWu+yFlNNdoA6RdZ8rcI0R70wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv MC82Mjc2QUY1QUVGQjIxNjUzNEQ3NjgwM0E0NUQ2N0NBREMyMzQ0N0JELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzYyNzZBRjVBRUZCMjE2NTM0RDc2ODAzQTQ1RDY3 Q0FEQzIzNDQ3QkQuY2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8wL0FTMTAxMjYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOQYIKwYBBQUHAQcBAf8EKjAoMCYEAgAB MCADBARyHiADBAavb8ADBATLoPAwDAMEA9yAOAMEBdyAQDANBgkqhkiG9w0BAQsF AAOCAQEAvgeHf3wBNRAtzl8xxWqsspDsWnjkRCC7Y8TzapJm4q0qZOdeGBzGabmP GGGtcCDtbxX+B+XvuKKZDwsFpNzcfC7dFbgHnBD9FknpruuC5N1l5V8lgPVKg4H1 e0xJ2z9T4/ask9e6tgui+ph464yK8V5lip6s8dORZVYCiFFjzdy4jUtMjrbb419N zNENYr5o21QR7Q6mOQ4XxiEcCi3pHyvhmcz1GsjzOfYMU8z8pYpp+9ZWRvrFtDIm ohikM+mNGPNOh4PDVwRd0TIR3CCef0xRN9gfB3VY8lS4wXG6Egk08M6HnqxA4ZNE lTWHmGgCjsEXhmOTWAJx9xtO5q5t0w== -----END CERTIFICATE-----Generated at Wed May 13 21:51:07 2026 by rpki-client