$ rpki-client -vvf rpkica.twnic.tw/rpki/TANET/0/AS17712.roa File: AS17712.roa (raw, json) Hash identifier: VbYsDgut+6w19G6fBh7opEe2zCUfFJuIvPm1UL4j9g8= Subject key identifier: DB:39:96:B8:C8:64:12:49:40:AB:E3:86:0F:41:39:6D:D7:05:59:FA Certificate issuer: /CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD Certificate serial: 02B07588DD9F686889376A85B30742716494CEA5 Authority key identifier: 6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/0/AS17712.roa Signing time: Tue 04 Aug 2026 03:04:01 +0000 ROA not before: Tue 04 Aug 2026 02:59:01 +0000 ROA not after: Tue 03 Aug 2027 03:04:01 +0000 asID: 17712 IP address blocks: 120.113.0.0/16 maxlen: 16 120.123.0.0/18 maxlen: 18 163.27.0.0/16 maxlen: 16 163.28.96.0/20 maxlen: 20 203.64.22.0/24 maxlen: 24 203.72.0.0/21 maxlen: 21 203.72.18.0/23 maxlen: 23 203.72.20.0/24 maxlen: 24 210.60.205.0/24 maxlen: 24 210.60.206.0/24 maxlen: 24 210.70.9.0/24 maxlen: 24 210.70.10.0/23 maxlen: 23 210.70.14.0/23 maxlen: 23 210.70.140.0/22 maxlen: 22 210.70.144.0/24 maxlen: 24 210.70.187.0/24 maxlen: 24 210.70.188.0/24 maxlen: 24 210.240.202.0/23 maxlen: 23 210.240.204.0/22 maxlen: 22 210.240.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Aug 2026 00:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b0:75:88:dd:9f:68:68:89:37:6a:85:b3:07:42:71:64:94:ce:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD Validity Not Before: Aug 4 02:59:01 2026 GMT Not After : Aug 3 03:04:01 2027 GMT Subject: CN=DB3996B8C864124940ABE3860F41396DD70559FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c1:e0:6e:b9:83:e6:f4:46:00:66:16:57:12: 87:41:6e:bf:ea:66:97:4f:fa:f0:25:1f:69:3b:b5: 8e:e5:c6:66:fd:e3:40:b3:da:de:cb:c3:c8:b2:02: 24:b6:f5:90:16:9b:8b:05:a2:93:0c:26:fd:74:e3: 0a:c7:5f:1b:92:38:22:af:94:f6:03:e9:98:85:aa: 72:95:be:a8:2f:05:7d:43:90:17:29:9e:ef:49:86: 4b:04:d3:7f:07:47:d4:3f:ea:42:d1:7a:82:bb:b9: d3:c2:ef:a3:d8:c9:2c:22:72:26:d9:c9:6c:c4:b1: 83:92:bb:48:86:03:45:35:cb:f2:f6:be:9b:72:77: a5:17:42:a3:6b:f6:96:e9:30:f8:4a:24:1b:a7:07: aa:fc:8d:6d:9b:7c:b4:75:38:e0:9c:92:83:ad:cd: 39:cd:b5:e7:2f:0d:1f:3d:90:ba:dc:4b:eb:cb:42: de:26:24:ed:b4:87:bb:3b:5b:6e:5d:56:66:d1:91: 0e:17:c6:d8:2e:ec:de:26:4e:6b:1f:62:ea:f6:f6: 68:b1:76:df:00:2b:5a:2c:81:d3:6f:4f:0a:99:eb: a0:4e:a4:90:e6:a0:5c:1e:da:88:14:15:0e:82:5f: 73:80:84:1d:da:00:ad:ee:bc:c1:2a:48:31:7e:5a: 40:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:39:96:B8:C8:64:12:49:40:AB:E3:86:0F:41:39:6D:D7:05:59:FA X509v3 Authority Key Identifier: keyid:6E:9C:32:26:68:2A:EF:A8:D6:7B:8A:C6:08:CC:CF:C8:A0:96:10:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/0/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6E9C3226682AEFA8D67B8AC608CCCFC8A09610CD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/0/AS17712.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.113.0.0/16 120.123.0.0/18 163.27.0.0/16 163.28.96.0/20 203.64.22.0/24 203.72.0.0/21 203.72.18.0-203.72.20.255 210.60.205.0-210.60.206.255 210.70.9.0-210.70.11.255 210.70.14.0/23 210.70.140.0-210.70.144.255 210.70.187.0-210.70.188.255 210.240.202.0-210.240.211.255 Signature Algorithm: sha256WithRSAEncryption b5:2a:5c:36:49:ca:b7:a2:61:91:74:c3:e6:7a:59:64:53:fd: fc:ba:e8:3f:4e:31:e9:7c:c6:22:8b:16:31:b0:b4:7f:df:14: 98:1c:f4:a4:3b:c7:25:ca:06:b4:c8:e1:23:2d:58:e5:47:8f: 29:27:7e:08:29:69:b1:58:f7:10:b7:57:41:33:1e:99:a6:33: f2:8a:d4:f3:e5:61:1b:58:57:a3:95:f2:af:16:e5:87:03:1f: 88:1f:80:bc:fb:e2:28:43:36:05:8e:24:d7:e8:76:77:84:4a: e4:f8:94:e3:87:33:86:f0:3e:6e:aa:3a:2d:61:62:a2:61:13: 5e:11:7b:5c:cc:f5:c5:9a:7d:37:ee:0d:79:6e:71:98:0d:0f: 3b:8e:c5:d2:d0:94:44:b5:c2:98:07:c8:4e:20:78:fd:89:4e: bb:1a:55:b9:4e:4d:b3:46:d7:62:6a:e8:3c:a0:44:c3:9d:e4: 6d:42:22:9e:a4:69:9d:94:d7:c9:98:7c:9e:e6:de:87:21:c6: 7c:a9:1c:ba:7e:cb:7f:af:80:fe:6f:6f:b3:09:9d:1f:b4:be: 28:f7:10:a8:f6:9b:4c:fc:73:01:21:6c:db:d1:2f:02:79:06: 5d:16:51:2f:a7:16:65:49:b8:67:08:95:b6:70:7f:01:42:91: b0:df:0a:54 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUArB1iN2faGiJN2qFswdCcWSUzqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU5QzMyMjY2ODJBRUZBOEQ2N0I4QUM2MDhDQ0NGQzhB MDk2MTBDRDAeFw0yNjA4MDQwMjU5MDFaFw0yNzA4MDMwMzA0MDFaMDMxMTAvBgNV BAMTKERCMzk5NkI4Qzg2NDEyNDk0MEFCRTM4NjBGNDEzOTZERDcwNTU5RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOweBuuYPm9EYAZhZXEodBbr/q ZpdP+vAlH2k7tY7lxmb940Cz2t7Lw8iyAiS29ZAWm4sFopMMJv104wrHXxuSOCKv lPYD6ZiFqnKVvqgvBX1DkBcpnu9JhksE038HR9Q/6kLReoK7udPC76PYySwicibZ yWzEsYOSu0iGA0U1y/L2vptyd6UXQqNr9pbpMPhKJBunB6r8jW2bfLR1OOCckoOt zTnNtecvDR89kLrcS+vLQt4mJO20h7s7W25dVmbRkQ4Xxtgu7N4mTmsfYur29mix dt8AK1osgdNvTwqZ66BOpJDmoFwe2ogUFQ6CX3OAhB3aAK3uvMEqSDF+WkCfAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQU2zmWuMhkEklAq+OGD0E5bdcFWfowHwYDVR0j BBgwFoAUbpwyJmgq76jWe4rGCMzPyKCWEM0wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MC82RTlDMzIyNjY4MkFFRkE4RDY3QjhBQzYwOENDQ0ZDOEEwOTYxMENELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzZFOUMzMjI2NjgyQUVGQThENjdCOEFDNjA4Q0ND RkM4QTA5NjEwQ0QuY2VyMEwGCCsGAQUFBwELBEAwPjA8BggrBgEFBQcwC4YwcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8wL0FTMTc3MTIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgZgGCCsGAQUFBwEHAQH/BIGIMIGFMIGC BAIAATB8AwMAeHEDBAZ4ewADAwCjGwMEBKMcYAMEAMtAFgMEA8tIADAMAwQBy0gS AwQAy0gUMAwDBADSPM0DBADSPM4wDAMEANJGCQMEAtJGCAMEAdJGDjAMAwQC0kaM AwQA0kaQMAwDBADSRrsDBADSRrwwDAMEAdLwygMEAtLw0DANBgkqhkiG9w0BAQsF AAOCAQEAtSpcNknKt6JhkXTD5npZZFP9/LroP04x6XzGIosWMbC0f98UmBz0pDvH JcoGtMjhIy1Y5UePKSd+CClpsVj3ELdXQTMemaYz8orU8+VhG1hXo5XyrxblhwMf iB+AvPviKEM2BY4k1+h2d4RK5PiU44czhvA+bqo6LWFiomETXhF7XMz1xZp9N+4N eW5xmA0PO47F0tCURLXCmAfITiB4/YlOuxpVuU5Ns0bXYmroPKBEw53kbUIinqRp nZTXyZh8nubehyHGfKkcun7Lf6+A/m9vswmdH7S+KPcQqPabTPxzASFs29EvAnkG XRZRL6cWZUm4ZwiVtnB/AUKRsN8KVA== -----END CERTIFICATE-----Generated at Sat Aug 15 06:13:37 2026 by rpki-client