$ rpki-client -vvf rpkica.twnic.tw/rpki/NCIC/0/AS9918.roa File: AS9918.roa (raw, json) Hash identifier: qwPqUMuG1isiHeDJu+TjNCXOlzxE8BXASoJ7f8GuPh4= Subject key identifier: 03:FE:5A:D3:56:ED:F2:FA:07:7F:88:A0:AC:C7:5D:97:41:57:12:F9 Certificate issuer: /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Certificate serial: 2E00DFE48D7682496B81525A6503D055C677FF98 Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/0/AS9918.roa Signing time: Tue 12 May 2026 01:49:01 +0000 ROA not before: Tue 12 May 2026 01:44:01 +0000 ROA not after: Tue 11 May 2027 01:49:01 +0000 asID: 9918 IP address blocks: 61.61.0.0/17 maxlen: 24 61.61.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:00:df:e4:8d:76:82:49:6b:81:52:5a:65:03:d0:55:c6:77:ff:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Validity Not Before: May 12 01:44:01 2026 GMT Not After : May 11 01:49:01 2027 GMT Subject: CN=03FE5AD356EDF2FA077F88A0ACC75D97415712F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:13:2f:f9:4f:7c:00:81:79:2e:42:f8:ad: d0:1e:9a:07:55:3b:92:18:15:53:53:f5:2c:44:bd: 61:60:f9:9c:e5:46:d3:e5:14:79:ba:17:8d:a5:fd: 71:de:83:10:9f:68:e6:50:7a:02:85:86:17:93:0d: 48:ef:1a:20:44:a3:2a:d5:a0:ed:4b:fb:d6:87:7a: 46:7c:95:b2:40:20:b0:ea:69:b8:a7:da:00:75:cd: 41:8d:35:64:88:8e:5c:91:5f:f1:a8:6a:d0:0a:e4: ef:2c:56:5d:86:46:3d:47:a0:bb:de:7d:ca:68:9e: 7d:99:f9:09:ff:67:51:aa:e0:99:46:bb:de:73:64: 94:b0:fb:48:53:15:67:2e:f9:7c:3a:a6:bd:c6:c7: 78:da:7b:4b:7f:dd:d9:f4:bc:6e:bc:55:ea:d2:a1: cf:66:cd:4a:7a:c0:78:f4:a0:ed:bb:f2:93:b3:65: 2a:74:41:e4:23:83:11:b1:dc:b8:6b:b1:be:0f:de: 39:b7:3f:61:8e:48:c6:e8:87:ab:90:b2:4d:2e:cf: 3c:e2:58:31:74:75:32:c0:78:36:1a:f2:37:02:b1: d1:74:b0:ab:1a:d7:b9:5c:f6:9c:0d:54:2a:f5:a8: 6b:2e:8f:7e:ee:0f:20:01:e2:65:e5:d9:55:5e:24: 55:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FE:5A:D3:56:ED:F2:FA:07:7F:88:A0:AC:C7:5D:97:41:57:12:F9 X509v3 Authority Key Identifier: keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/AS9918.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.61.0.0-61.61.191.255 Signature Algorithm: sha256WithRSAEncryption 12:c1:11:dd:67:0a:d8:d7:82:dc:f9:69:20:b1:6e:bb:76:11: 2e:c4:01:c7:79:6f:31:5c:82:e8:ab:c4:7e:6b:1e:c6:be:5c: 08:f4:69:95:ac:31:65:24:6c:73:cb:44:29:ef:cc:6e:7f:bf: 53:97:30:4f:0e:58:73:f0:74:55:1b:85:ce:30:b6:29:b8:2d: c1:ce:3b:e6:e2:20:61:24:2e:03:c6:6d:ce:9e:81:62:d1:f0: a3:f7:92:62:11:a0:09:35:62:a2:e8:67:f1:d1:37:06:b0:89: 22:8e:d1:3e:2a:70:7a:c1:b2:db:26:60:ed:34:d4:c5:f8:17: 15:e2:7a:79:18:55:1a:0f:ea:f9:f7:8d:d6:cb:ae:19:f8:61: 52:0b:2c:e1:f2:61:ef:90:9b:3a:25:5a:63:38:5f:e8:12:43: 7e:8b:d3:3d:98:d5:db:3b:70:63:12:48:60:87:a0:c2:80:84: 06:a0:34:85:e8:3d:f4:b5:4a:0f:0e:01:7e:e4:3f:d8:1e:50: 1b:e5:76:1e:6e:b9:41:ff:42:6a:84:8d:46:0e:47:12:53:5f: 6f:7b:ee:f1:62:d7:6c:4b:55:df:e6:99:34:c0:b5:b6:0c:70: 2b:61:ec:b0:8b:6b:b4:a3:25:b3:f8:81:08:f0:54:cb:ac:0d: 2f:c0:75:3b -----BEGIN CERTIFICATE----- MIIErDCCA5SgAwIBAgIULgDf5I12gklrgVJaZQPQVcZ3/5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdCMkNC NDc0RTdGQjAeFw0yNjA1MTIwMTQ0MDFaFw0yNzA1MTEwMTQ5MDFaMDMxMTAvBgNV BAMTKDAzRkU1QUQzNTZFREYyRkEwNzdGODhBMEFDQzc1RDk3NDE1NzEyRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClthMv+U98AIF5LkL4rdAemgdV O5IYFVNT9SxEvWFg+ZzlRtPlFHm6F42l/XHegxCfaOZQegKFhheTDUjvGiBEoyrV oO1L+9aHekZ8lbJAILDqabin2gB1zUGNNWSIjlyRX/GoatAK5O8sVl2GRj1HoLve fcponn2Z+Qn/Z1Gq4JlGu95zZJSw+0hTFWcu+Xw6pr3Gx3jae0t/3dn0vG68VerS oc9mzUp6wHj0oO278pOzZSp0QeQjgxGx3Lhrsb4P3jm3P2GOSMboh6uQsk0uzzzi WDF0dTLAeDYa8jcCsdF0sKsa17lc9pwNVCr1qGsuj37uDyAB4mXl2VVeJFV5AgMB AAGjggG2MIIBsjAdBgNVHQ4EFgQUA/5a01bt8voHf4igrMddl0FXEvkwHwYDVR0j BBgwFoAUzPhfmhJOsxX6b1obOCN7LLR05/swDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8w L0NDRjg1RjlBMTI0RUIzMTVGQTZGNUExQjM4MjM3QjJDQjQ3NEU3RkIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdC MkNCNDc0RTdGQi5jZXIwSgYIKwYBBQUHAQsEPjA8MDoGCCsGAQUFBzALhi5yc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMC9BUzk5MTgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJgYIKwYBBQUHAQcBAf8EFzAVMBMEAgABMA0w CwMDAD09AwQGPT2AMA0GCSqGSIb3DQEBCwUAA4IBAQASwRHdZwrY14Lc+WkgsW67 dhEuxAHHeW8xXILoq8R+ax7GvlwI9GmVrDFlJGxzy0Qp78xuf79TlzBPDlhz8HRV G4XOMLYpuC3Bzjvm4iBhJC4Dxm3OnoFi0fCj95JiEaAJNWKi6Gfx0TcGsIkijtE+ KnB6wbLbJmDtNNTF+BcV4np5GFUaD+r5943Wy64Z+GFSCyzh8mHvkJs6JVpjOF/o EkN+i9M9mNXbO3BjEkhgh6DCgIQGoDSF6D30tUoPDgF+5D/YHlAb5XYebrlB/0Jq hI1GDkcSU19ve+7xYtdsS1Xf5pk0wLW2DHArYeywi2u0oyWz+IEI8FTLrA0vwHU7 -----END CERTIFICATE-----Generated at Tue May 12 22:53:34 2026 by rpki-client