$ rpki-client -vvvf rpkica.twnic.tw/rpki/TANET/1/AS9264.roa File: AS9264.roa (raw, json) Hash identifier: QLmbG5wa3NxY4bLQDawo02KSEx9V2mKqt+zSToKsIXw= Subject key identifier: F3:C6:23:05:6C:C6:E1:84:AD:A7:04:6D:97:62:3E:C2:BC:65:0E:FF Certificate issuer: /CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Certificate serial: 3BA25A7055245E53A46E12AEE2FEEA0B2450A095 Authority key identifier: B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TANET/1/AS9264.roa Signing time: Tue 22 Sep 2026 06:44:04 +0000 ROA not before: Tue 22 Sep 2026 06:39:04 +0000 ROA not after: Tue 21 Sep 2027 06:44:04 +0000 asID: 9264 IP address blocks: 140.109.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a2:5a:70:55:24:5e:53:a4:6e:12:ae:e2:fe:ea:0b:24:50:a0:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7F1A12A59F9E0244C445D196D33CF5076B3CF6A Validity Not Before: Sep 22 06:39:04 2026 GMT Not After : Sep 21 06:44:04 2027 GMT Subject: CN=F3C623056CC6E184ADA7046D97623EC2BC650EFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ea:28:81:ac:c8:fa:82:bf:23:3c:dd:e7:e5: f9:6a:44:cf:b5:35:10:0c:cb:ee:04:f3:ec:7e:0f: de:2c:38:b3:16:7f:82:bf:89:75:ad:c5:48:9c:a0: 85:8f:1a:b3:ec:f8:63:b6:46:99:25:f7:7c:5a:91: da:b3:00:92:38:e1:3b:48:63:3b:e4:ac:fa:f3:24: a5:44:cb:db:c9:e6:18:d5:b6:76:4b:ad:c8:2c:92: da:27:fd:a5:94:b3:0b:a1:5f:b8:cf:68:24:c4:ae: 68:e9:88:e6:ab:c7:ea:c5:86:33:0c:5b:ab:b9:a6: 4c:75:f4:51:75:e3:94:eb:77:ca:be:a3:60:a6:a6: 46:86:09:ea:51:84:ca:39:2a:49:d9:b3:23:2e:56: 7f:5e:fc:a7:20:82:c1:3c:df:d5:c5:fb:83:54:77: 1e:3c:4c:08:cb:04:86:22:00:85:69:26:43:aa:6c: 7f:f9:08:6e:69:39:2d:c0:cb:af:20:6f:61:ed:91: 53:d4:2a:5c:b3:76:88:78:44:d3:b2:ca:0d:e8:a4: 36:30:c3:08:a7:c2:a1:36:2e:32:85:aa:80:63:d7: 43:bb:c4:d7:10:72:3b:4d:35:2f:89:6e:a9:2c:3b: c5:c1:2b:df:3f:2b:e3:03:74:05:3b:72:d5:c4:eb: 46:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C6:23:05:6C:C6:E1:84:AD:A7:04:6D:97:62:3E:C2:BC:65:0E:FF X509v3 Authority Key Identifier: keyid:B7:F1:A1:2A:59:F9:E0:24:4C:44:5D:19:6D:33:CF:50:76:B3:CF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TANET/1/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/B7F1A12A59F9E0244C445D196D33CF5076B3CF6A.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TANET/1/AS9264.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.109.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6e:b2:7a:ce:a6:93:db:d0:8a:db:58:49:55:4b:10:e0:1c:00: 9b:41:13:e1:a3:78:93:ce:7f:29:3a:93:14:c2:e5:d3:ad:ca: 7f:67:ed:7d:df:0e:96:ed:0b:0d:ac:5f:30:0c:f3:de:05:92: 82:ee:b3:d9:8b:38:b7:f3:45:7c:7f:0c:6c:35:c6:af:f7:2d: 34:d6:f7:5f:de:48:4a:b2:a7:17:2d:90:9e:8c:3b:3b:e5:19: e7:9d:5d:46:19:59:e7:15:ff:39:ad:49:b1:2b:49:97:05:33: 44:be:c7:a1:77:db:5e:78:15:a3:41:ca:1d:38:1a:5b:b4:67: a2:6d:f6:f2:f1:3d:52:a0:63:44:9a:10:75:fc:0d:25:73:76: c3:e0:c6:a1:65:2f:11:86:3e:ed:a5:29:d3:bb:f4:13:84:29: ef:db:bd:e5:f1:41:a6:78:3c:89:4f:8b:81:42:aa:68:de:5d: 59:62:63:1e:ab:a4:67:80:98:07:91:c9:40:03:d6:a5:10:2e: d7:bf:51:0d:ac:bd:fe:3f:26:f4:2f:2d:77:92:11:0c:9e:42: 48:28:f8:79:f5:a3:cd:04:9c:33:28:dd:2a:59:bf:2f:07:21: ca:62:4d:8a:3f:bb:83:e4:5c:e5:f8:d6:fa:32:79:ed:3a:4a: ff:68:52:c6 -----BEGIN CERTIFICATE----- MIIEpjCCA46gAwIBAgIUO6JacFUkXlOkbhKu4v7qCyRQoJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdGMUExMkE1OUY5RTAyNDRDNDQ1RDE5NkQzM0NGNTA3 NkIzQ0Y2QTAeFw0yNjA5MjIwNjM5MDRaFw0yNzA5MjEwNjQ0MDRaMDMxMTAvBgNV BAMTKEYzQzYyMzA1NkNDNkUxODRBREE3MDQ2RDk3NjIzRUMyQkM2NTBFRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU6iiBrMj6gr8jPN3n5flqRM+1 NRAMy+4E8+x+D94sOLMWf4K/iXWtxUicoIWPGrPs+GO2Rpkl93xakdqzAJI44TtI YzvkrPrzJKVEy9vJ5hjVtnZLrcgskton/aWUswuhX7jPaCTErmjpiOarx+rFhjMM W6u5pkx19FF145Trd8q+o2CmpkaGCepRhMo5KknZsyMuVn9e/KcggsE839XF+4NU dx48TAjLBIYiAIVpJkOqbH/5CG5pOS3Ay68gb2HtkVPUKlyzdoh4RNOyyg3opDYw wwinwqE2LjKFqoBj10O7xNcQcjtNNS+JbqksO8XBK98/K+MDdAU7ctXE60YHAgMB AAGjggGwMIIBrDAdBgNVHQ4EFgQU88YjBWzG4YStpwRtl2I+wrxlDv8wHwYDVR0j BBgwFoAUt/GhKln54CRMRF0ZbTPPUHazz2owDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVEFORVQv MS9CN0YxQTEyQTU5RjlFMDI0NEM0NDVEMTk2RDMzQ0Y1MDc2QjNDRjZBLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8wL0I3RjFBMTJBNTlGOUUwMjQ0QzQ0NUQxOTZEMzND RjUwNzZCM0NGNkEuY2VyMEsGCCsGAQUFBwELBD8wPTA7BggrBgEFBQcwC4YvcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UQU5FVC8xL0FTOTI2NC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAIxtMA0GCSqGSIb3DQEBCwUAA4IBAQBusnrOppPb0IrbWElVSxDgHACbQRPh o3iTzn8pOpMUwuXTrcp/Z+193w6W7QsNrF8wDPPeBZKC7rPZizi380V8fwxsNcav 9y001vdf3khKsqcXLZCejDs75RnnnV1GGVnnFf85rUmxK0mXBTNEvsehd9teeBWj QcodOBpbtGeibfby8T1SoGNEmhB1/A0lc3bD4MahZS8Rhj7tpSnTu/QThCnv273l 8UGmeDyJT4uBQqpo3l1ZYmMeq6RngJgHkclAA9alEC7Xv1ENrL3+Pyb0Ly13khEM nkJIKPh59aPNBJwzKN0qWb8vByHKYk2KP7uD5Fzl+Nb6MnntOkr/aFLG -----END CERTIFICATE-----Generated at Wed Sep 23 16:50:38 2026 by rpki-client