$ rpki-client -vvf rpkica.twnic.tw/rpki/FET/0/AS9922.roa File: AS9922.roa (raw, json) Hash identifier: cGX9mhVNHUdblYG/4qkFRMh0u3j0NsaEQmuHzgjlcdw= Subject key identifier: 75:C3:4A:C8:2C:0A:EB:B8:A7:A3:7B:A7:C6:20:7A:91:24:6F:BB:B2 Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Certificate serial: 137657F866B517F29F5E7F2DCCB95E37072434C6 Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/AS9922.roa Signing time: Thu 11 Jun 2026 09:03:49 +0000 ROA not before: Thu 11 Jun 2026 08:58:49 +0000 ROA not after: Thu 10 Jun 2027 09:03:49 +0000 asID: 9922 IP address blocks: 124.218.64.0/22 maxlen: 24 124.218.68.0/22 maxlen: 24 124.218.72.0/21 maxlen: 24 124.218.80.0/20 maxlen: 24 124.218.128.0/18 maxlen: 24 124.218.160.0/21 maxlen: 24 124.218.168.0/22 maxlen: 24 124.218.172.0/24 maxlen: 24 124.218.173.0/24 maxlen: 24 124.218.174.0/24 maxlen: 24 124.218.175.0/24 maxlen: 24 124.218.176.0/24 maxlen: 24 124.218.177.0/24 maxlen: 24 124.218.178.0/24 maxlen: 24 210.85.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:76:57:f8:66:b5:17:f2:9f:5e:7f:2d:cc:b9:5e:37:07:24:34:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Validity Not Before: Jun 11 08:58:49 2026 GMT Not After : Jun 10 09:03:49 2027 GMT Subject: CN=75C34AC82C0AEBB8A7A37BA7C6207A91246FBBB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:26:d1:19:c5:5a:dc:43:47:63:b3:0b:64:e7: 24:20:73:c1:58:e1:8b:4b:29:2c:95:71:a9:84:7f: d8:15:8b:df:56:7c:88:c8:30:72:4b:64:b5:7f:c4: 28:96:9d:60:a7:e9:e0:e1:07:4b:70:7f:dc:e4:53: ca:48:8c:fc:cb:63:7a:44:29:41:a6:24:8f:1d:bf: c9:d9:35:00:e9:df:70:2e:f5:4c:e3:8e:ef:bd:7a: 29:29:13:31:ca:ba:62:bc:6f:cc:41:4e:64:1b:60: f3:05:1a:85:51:30:62:e8:9f:ba:8a:18:ee:68:21: 19:4b:c1:f9:2b:27:b3:ad:bf:a3:bb:8f:13:21:e0: 3f:f0:7b:a8:67:fe:01:9a:30:85:10:08:22:11:5f: 9b:4b:b1:fd:10:74:47:de:bd:73:c8:18:10:af:38: 58:75:90:c3:e4:21:22:1a:a7:49:a1:ba:14:df:46: ad:82:ad:29:55:db:93:68:2a:e5:22:1f:82:3f:e5: 08:34:55:ae:cc:e1:05:92:e1:a7:61:a9:77:81:87: b8:01:43:f0:df:32:d8:1b:33:4a:3d:12:b5:ae:95: 5b:00:c4:5a:20:02:0a:3d:09:90:83:11:8c:52:c7: ff:93:9c:4d:25:15:d3:bb:4e:bf:b5:3a:c3:5c:79: 73:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C3:4A:C8:2C:0A:EB:B8:A7:A3:7B:A7:C6:20:7A:91:24:6F:BB:B2 X509v3 Authority Key Identifier: keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS9922.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.218.64.0/19 124.218.128.0/18 210.85.32.0/21 Signature Algorithm: sha256WithRSAEncryption 50:24:fd:b6:c8:3d:0f:f7:9f:d1:c5:09:7f:02:4b:06:66:17: 23:30:2b:b8:d1:74:34:74:a1:f4:07:1f:fe:8e:f1:96:0a:00: bd:c3:f5:e9:25:09:fe:c7:4f:cf:e9:51:d3:96:0b:06:4e:3c: 27:34:37:db:e2:a1:40:46:a9:58:48:e5:b2:d1:92:d9:4d:1e: 34:1a:15:6d:b4:e8:9e:cc:52:c5:89:8a:a4:9d:67:1e:1c:a1: aa:a0:22:b2:61:8b:25:fc:e2:3a:7c:8a:bc:85:e4:b8:1f:81: 66:0e:fd:29:aa:19:db:40:61:64:26:11:cf:82:91:13:26:b3: 2a:ea:6d:0c:34:f6:5c:50:d3:e6:a2:0b:11:69:65:ec:a8:7f: 69:90:a2:98:a9:b6:55:3e:b4:7d:ea:bc:a6:06:66:42:d4:ee: c3:10:ba:e7:16:26:16:52:53:dd:38:01:54:c9:e3:bc:d3:2a: 30:07:42:74:b1:af:c6:5e:31:b7:09:ae:bc:df:3a:3c:46:61: b8:85:e6:c5:2e:bb:58:42:a6:4c:f4:ba:1e:80:fa:d7:c3:ad: ea:9c:5d:98:d8:2f:82:3b:d0:56:b4:a9:2c:c7:b1:65:77:f0: 0a:f3:5a:34:7b:41:5f:62:7b:9e:17:e3:44:66:2b:17:1e:ad: 8d:de:17:ef -----BEGIN CERTIFICATE----- MIIErzCCA5egAwIBAgIUE3ZX+Ga1F/KfXn8tzLleNwckNMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4 NDI0NkQxMDAeFw0yNjA2MTEwODU4NDlaFw0yNzA2MTAwOTAzNDlaMDMxMTAvBgNV BAMTKDc1QzM0QUM4MkMwQUVCQjhBN0EzN0JBN0M2MjA3QTkxMjQ2RkJCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJtEZxVrcQ0djswtk5yQgc8FY 4YtLKSyVcamEf9gVi99WfIjIMHJLZLV/xCiWnWCn6eDhB0twf9zkU8pIjPzLY3pE KUGmJI8dv8nZNQDp33Au9Uzjju+9eikpEzHKumK8b8xBTmQbYPMFGoVRMGLon7qK GO5oIRlLwfkrJ7Otv6O7jxMh4D/we6hn/gGaMIUQCCIRX5tLsf0QdEfevXPIGBCv OFh1kMPkISIap0mhuhTfRq2CrSlV25NoKuUiH4I/5Qg0Va7M4QWS4adhqXeBh7gB Q/DfMtgbM0o9ErWulVsAxFogAgo9CZCDEYxSx/+TnE0lFdO7Tr+1OsNceXMlAgMB AAGjggG5MIIBtTAdBgNVHQ4EFgQUdcNKyCwK67ino3unxiB6kSRvu7IwHwYDVR0j BBgwFoAUcfog/Cac6YBbLGflmzV6poQkbRAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAv NzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4NDI0NkQxMC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MUZBMjBGQzI2OUNFOTgwNUIyQzY3RTU5QjM1N0FB Njg0MjQ2RDEwLmNlcjBJBggrBgEFBQcBCwQ9MDswOQYIKwYBBQUHMAuGLXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAvQVM5OTIyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQF fNpAAwQGfNqAAwQD0lUgMA0GCSqGSIb3DQEBCwUAA4IBAQBQJP22yD0P95/RxQl/ AksGZhcjMCu40XQ0dKH0Bx/+jvGWCgC9w/XpJQn+x0/P6VHTlgsGTjwnNDfb4qFA RqlYSOWy0ZLZTR40GhVttOiezFLFiYqknWceHKGqoCKyYYsl/OI6fIq8heS4H4Fm Dv0pqhnbQGFkJhHPgpETJrMq6m0MNPZcUNPmogsRaWXsqH9pkKKYqbZVPrR96rym BmZC1O7DELrnFiYWUlPdOAFUyeO80yowB0J0sa/GXjG3Ca683zo8RmG4hebFLrtY QqZM9LoegPrXw63qnF2Y2C+CO9BWtKksx7Fld/AK81o0e0FfYnueF+NEZisXHq2N 3hfv -----END CERTIFICATE-----Generated at Sat Jun 13 11:27:37 2026 by rpki-client