$ rpki-client -vvf rpkica.twnic.tw/rpki/TUNGHO/0/AS18429.roa File: AS18429.roa (raw, json) Hash identifier: 10aEph6hwAmBvlaQZuwUN+fmyRec189ldPt52qQhj9A= Subject key identifier: 35:7B:CD:43:ED:9E:B3:68:23:FC:1B:84:FA:AA:11:16:F6:C2:6B:99 Certificate issuer: /CN=4E6E4905B4391CAA73778F5FBBAEAAB686551FA7 Certificate serial: 1199A82B6F19D5B6D16F10BCCC3DEE22B3F556EF Authority key identifier: 4E:6E:49:05:B4:39:1C:AA:73:77:8F:5F:BB:AE:AA:B6:86:55:1F:A7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TUNGHO/0/AS18429.roa Signing time: Mon 11 May 2026 17:36:08 +0000 ROA not before: Mon 11 May 2026 17:31:08 +0000 ROA not after: Mon 10 May 2027 17:36:08 +0000 asID: 18429 IP address blocks: 118.232.196.64/26 maxlen: 26 118.232.199.0/24 maxlen: 24 118.232.199.0/26 maxlen: 26 118.232.199.64/27 maxlen: 27 118.232.200.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.crl rsync://rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:99:a8:2b:6f:19:d5:b6:d1:6f:10:bc:cc:3d:ee:22:b3:f5:56:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E6E4905B4391CAA73778F5FBBAEAAB686551FA7 Validity Not Before: May 11 17:31:08 2026 GMT Not After : May 10 17:36:08 2027 GMT Subject: CN=357BCD43ED9EB36823FC1B84FAAA1116F6C26B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:f7:17:69:6c:9e:f7:9d:fd:14:a1:5c:25: a9:7a:c1:c6:bf:43:14:7d:ec:66:e5:cb:22:b1:cd: 55:08:43:5f:fc:fd:bc:a1:69:fa:de:88:e1:5e:50: 45:84:c1:3b:96:a5:2a:19:88:fc:c2:ee:b2:49:36: 5e:ec:bc:fb:4a:da:3f:f3:65:66:68:37:69:aa:a7: f3:f2:f6:0f:18:95:4c:bf:88:8e:6d:ee:d4:f5:f2: 9b:a1:1a:df:12:b2:e1:be:17:64:28:51:a6:e3:c7: d1:dc:89:d3:66:49:c7:1c:91:28:0b:b3:d8:93:df: ee:8c:91:e6:06:a7:5b:db:78:c1:cc:cc:e7:01:97: 01:39:03:74:c9:32:fb:eb:e7:9e:ea:bc:64:d9:50: 39:56:16:a2:f2:b0:e4:de:b2:d2:35:0d:32:df:ea: 7d:40:9e:c5:fa:91:3d:06:8d:18:c2:41:39:05:da: bb:0a:5d:cb:ed:16:7a:97:21:b6:48:07:20:e4:22: 1a:7b:46:8e:95:3b:20:d5:a8:7f:d4:96:3f:7b:35: 80:24:8f:2c:bf:b3:96:79:d4:26:34:41:6d:11:60: 35:5c:24:c8:93:a5:cd:63:6c:2d:b8:90:28:48:d4: df:2e:98:dd:fa:29:4a:41:d7:91:85:09:9c:47:3e: 8d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7B:CD:43:ED:9E:B3:68:23:FC:1B:84:FA:AA:11:16:F6:C2:6B:99 X509v3 Authority Key Identifier: keyid:4E:6E:49:05:B4:39:1C:AA:73:77:8F:5F:BB:AE:AA:B6:86:55:1F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TUNGHO/0/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4E6E4905B4391CAA73778F5FBBAEAAB686551FA7.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TUNGHO/0/AS18429.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.232.196.64/26 118.232.199.0-118.232.200.127 Signature Algorithm: sha256WithRSAEncryption 55:fc:63:ab:02:6c:0e:4e:06:e7:2b:2b:aa:db:b7:c6:a7:89: 06:fe:0a:f9:1a:08:2b:35:98:36:16:7a:af:ed:4f:5f:f7:6d: 46:62:4f:e3:b1:e7:5d:2d:06:9c:76:8a:84:4f:99:02:1a:5a: f4:98:df:c3:eb:ba:48:a1:b9:b4:1e:8e:b9:33:60:12:7b:51: a6:4f:34:28:26:9a:27:52:85:2c:98:fd:6f:ed:0b:2a:c5:e6: b6:a3:c2:0e:7c:ff:e0:51:f7:95:b5:4e:a4:47:3f:53:99:37: 73:d8:19:13:56:6b:19:f2:fd:f9:47:d1:3d:27:31:8d:fe:a7: 5f:11:33:bf:05:5c:d9:fa:50:56:e2:54:b1:eb:8b:f5:1e:20: 26:ac:ed:95:cd:31:86:01:f3:e6:3d:b8:04:23:48:0b:67:be: 58:3d:94:ee:03:f6:f3:a0:68:65:fa:1c:54:d1:02:db:0f:76: 27:56:45:16:2f:b8:d4:3c:28:65:4d:36:b4:bd:0c:27:ab:b0: 3a:a1:62:62:69:b0:06:70:d4:f7:b8:d2:5c:d0:62:3d:2f:7f: 00:e2:07:da:2b:4e:80:63:45:32:76:13:68:fa:6f:76:bb:ba: 78:6c:33:c0:c6:6c:99:a5:c7:e4:2d:54:c4:45:77:9a:58:fe: 03:93:04:ac -----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgIUEZmoK28Z1bbRbxC8zD3uIrP1Vu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU2RTQ5MDVCNDM5MUNBQTczNzc4RjVGQkJBRUFBQjY4 NjU1MUZBNzAeFw0yNjA1MTExNzMxMDhaFw0yNzA1MTAxNzM2MDhaMDMxMTAvBgNV BAMTKDM1N0JDRDQzRUQ5RUIzNjgyM0ZDMUI4NEZBQUExMTE2RjZDMjZCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5PcXaWye9539FKFcJal6wca/ QxR97GblyyKxzVUIQ1/8/byhafreiOFeUEWEwTuWpSoZiPzC7rJJNl7svPtK2j/z ZWZoN2mqp/Py9g8YlUy/iI5t7tT18puhGt8SsuG+F2QoUabjx9HcidNmSccckSgL s9iT3+6MkeYGp1vbeMHMzOcBlwE5A3TJMvvr557qvGTZUDlWFqLysOTestI1DTLf 6n1AnsX6kT0GjRjCQTkF2rsKXcvtFnqXIbZIByDkIhp7Ro6VOyDVqH/Ulj97NYAk jyy/s5Z51CY0QW0RYDVcJMiTpc1jbC24kChI1N8umN36KUpB15GFCZxHPo1TAgMB AAGjggHEMIIBwDAdBgNVHQ4EFgQUNXvNQ+2es2gj/BuE+qoRFvbCa5kwHwYDVR0j BBgwFoAUTm5JBbQ5HKpzd49fu66qtoZVH6cwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFVOR0hP LzAvNEU2RTQ5MDVCNDM5MUNBQTczNzc4RjVGQkJBRUFBQjY4NjU1MUZBNy5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS80RTZFNDkwNUI0MzkxQ0FBNzM3NzhGNUZCQkFF QUFCNjg2NTUxRkE3LmNlcjBNBggrBgEFBQcBCwRBMD8wPQYIKwYBBQUHMAuGMXJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFVOR0hPLzAvQVMxODQyOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAvBggrBgEFBQcBBwEB/wQgMB4wHAQC AAEwFgMFBnboxEAwDQMEAHboxwMFB3boyAAwDQYJKoZIhvcNAQELBQADggEBAFX8 Y6sCbA5OBucrK6rbt8aniQb+CvkaCCs1mDYWeq/tT1/3bUZiT+Ox510tBpx2ioRP mQIaWvSY38PrukihubQejrkzYBJ7UaZPNCgmmidShSyY/W/tCyrF5rajwg58/+BR 95W1TqRHP1OZN3PYGRNWaxny/flH0T0nMY3+p18RM78FXNn6UFbiVLHri/UeICas 7ZXNMYYB8+Y9uAQjSAtnvlg9lO4D9vOgaGX6HFTRAtsPdidWRRYvuNQ8KGVNNrS9 DCersDqhYmJpsAZw1Pe40lzQYj0vfwDiB9orToBjRTJ2E2j6b3a7unhsM8DGbJml x+QtVMRFd5pY/gOTBKw= -----END CERTIFICATE-----Generated at Wed May 13 21:51:08 2026 by rpki-client