$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/AS9674.roa File: AS9674.roa (raw, json) Hash identifier: 0Rfkg57sQC52J1ZooDsndEjKqKJFwHoIjjU3JL58ooo= Subject key identifier: 10:DE:20:6D:5B:52:15:F1:A8:89:63:B6:C9:AB:D4:0E:67:BB:8A:62 Certificate issuer: /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Certificate serial: 3AEE92B96921D31576717D3B3F7732ED9E4CF4DC Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/0/AS9674.roa Signing time: Mon 11 May 2026 16:33:20 +0000 ROA not before: Mon 11 May 2026 16:28:20 +0000 ROA not after: Mon 10 May 2027 16:33:20 +0000 asID: 9674 IP address blocks: 106.107.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ee:92:b9:69:21:d3:15:76:71:7d:3b:3f:77:32:ed:9e:4c:f4:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Validity Not Before: May 11 16:28:20 2026 GMT Not After : May 10 16:33:20 2027 GMT Subject: CN=10DE206D5B5215F1A88963B6C9ABD40E67BB8A62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:48:06:ac:b3:6f:f2:fc:5f:f0:24:4a:87:f9: c9:9b:2b:cc:85:b9:5b:6a:53:42:52:2c:7f:16:a0: bc:0a:51:50:91:f6:2b:85:16:c8:0e:69:ef:3c:c5: bb:d6:26:96:39:88:7d:df:dd:1f:fc:af:64:ed:20: c2:a9:fc:86:df:62:f4:b0:fb:51:82:5b:31:d8:33: a4:f8:d1:6c:6a:2b:84:e2:96:44:d5:e4:2a:2e:27: 07:24:69:8c:a7:a1:7e:99:79:f9:b7:76:1b:1a:cd: 68:d2:0c:d6:91:31:c6:3c:fd:e6:b3:b1:e2:56:10: e0:95:e8:c4:19:c4:9f:5a:bd:42:59:27:72:66:22: 10:4a:bb:4f:90:f8:c1:9d:8c:5f:dd:1b:03:2b:6d: 51:45:6a:3d:81:be:4b:45:18:1b:b0:9d:c1:c9:58: be:4a:08:88:e6:be:f7:e6:07:28:8e:30:b8:0e:19: 81:d6:2a:5c:bb:bc:d1:e6:9f:7e:32:76:c9:fb:a2: 46:46:29:09:ca:48:7f:78:71:37:b9:18:cc:68:56: f4:2e:2a:3d:0c:c6:32:30:2e:24:68:8c:76:73:d1: 8d:e3:20:25:e1:6d:7d:25:f3:aa:68:b2:88:e8:cd: 2a:1a:c7:af:07:3a:f2:e5:e0:45:17:cd:c5:0b:d2: ec:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DE:20:6D:5B:52:15:F1:A8:89:63:B6:C9:AB:D4:0E:67:BB:8A:62 X509v3 Authority Key Identifier: keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/AS9674.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 106.107.0.0/16 Signature Algorithm: sha256WithRSAEncryption ac:62:f2:a6:67:1f:2c:96:39:74:72:27:4e:f2:a8:5b:40:4c: ef:a1:42:01:89:39:06:35:0f:cf:11:88:6d:f1:e0:cf:f1:a0: 64:bc:20:1a:4f:5a:95:8c:76:16:54:ae:33:02:7a:d2:20:e5: a0:a3:47:cf:28:8a:5e:34:d2:e2:fd:56:39:d5:74:c2:80:8d: 9a:9e:a0:51:2b:2e:9f:47:a3:8b:40:1d:bf:3d:f6:73:a3:29: 02:71:51:87:b5:80:cd:bf:12:f9:ac:5e:05:40:47:57:6c:3f: 6d:07:89:81:e3:b9:e6:33:d7:df:34:bc:1b:e6:37:9d:10:b4: a3:f5:90:45:a2:f6:03:48:11:45:11:4c:a1:49:61:54:68:82: 81:94:33:d4:cc:60:d2:a8:84:40:8e:56:31:cb:3f:49:4d:27: 6d:6e:3f:6a:77:30:58:9a:47:64:30:67:46:52:fe:08:e4:dd: 43:c2:37:45:ee:18:6c:30:4d:58:c2:a5:cb:8b:4c:df:f0:e9: 98:b3:1b:c0:b8:c8:42:c6:b4:76:90:54:15:5c:5c:10:94:7a: 9c:ab:06:81:0d:71:c4:77:7e:d9:6c:6a:c6:a1:8c:95:51:2e: 21:19:2e:e0:99:a9:0f:37:e9:a2:0e:8a:42:8e:a4:7e:25:b0: 80:87:a0:ba -----BEGIN CERTIFICATE----- MIIEpDCCA4ygAwIBAgIUOu6SuWkh0xV2cX07P3cy7Z5M9NwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdCMkNC NDc0RTdGQjAeFw0yNjA1MTExNjI4MjBaFw0yNzA1MTAxNjMzMjBaMDMxMTAvBgNV BAMTKDEwREUyMDZENUI1MjE1RjFBODg5NjNCNkM5QUJENDBFNjdCQjhBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOSAass2/y/F/wJEqH+cmbK8yF uVtqU0JSLH8WoLwKUVCR9iuFFsgOae88xbvWJpY5iH3f3R/8r2TtIMKp/IbfYvSw +1GCWzHYM6T40WxqK4TilkTV5CouJwckaYynoX6Zefm3dhsazWjSDNaRMcY8/eaz seJWEOCV6MQZxJ9avUJZJ3JmIhBKu0+Q+MGdjF/dGwMrbVFFaj2BvktFGBuwncHJ WL5KCIjmvvfmByiOMLgOGYHWKly7vNHmn34ydsn7okZGKQnKSH94cTe5GMxoVvQu Kj0MxjIwLiRojHZz0Y3jICXhbX0l86posojozSoax68HOvLl4EUXzcUL0uxJAgMB AAGjggGuMIIBqjAdBgNVHQ4EFgQUEN4gbVtSFfGoiWO2yavUDme7imIwHwYDVR0j BBgwFoAUzPhfmhJOsxX6b1obOCN7LLR05/swDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8w L0NDRjg1RjlBMTI0RUIzMTVGQTZGNUExQjM4MjM3QjJDQjQ3NEU3RkIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdC MkNCNDc0RTdGQi5jZXIwSgYIKwYBBQUHAQsEPjA8MDoGCCsGAQUFBzALhi5yc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMC9BUzk2NzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwBqazANBgkqhkiG9w0BAQsFAAOCAQEArGLypmcfLJY5dHInTvKoW0BM76FCAYk5 BjUPzxGIbfHgz/GgZLwgGk9alYx2FlSuMwJ60iDloKNHzyiKXjTS4v1WOdV0woCN mp6gUSsun0eji0Advz32c6MpAnFRh7WAzb8S+axeBUBHV2w/bQeJgeO55jPX3zS8 G+Y3nRC0o/WQRaL2A0gRRRFMoUlhVGiCgZQz1Mxg0qiEQI5WMcs/SU0nbW4/ancw WJpHZDBnRlL+COTdQ8I3Re4YbDBNWMKly4tM3/DpmLMbwLjIQsa0dpBUFVxcEJR6 nKsGgQ1xxHd+2WxqxqGMlVEuIRku4JmpDzfpog6KQo6kfiWwgIegug== -----END CERTIFICATE-----Generated at Tue May 12 22:53:32 2026 by rpki-client