$ rpki-client -vvvf rpkica.twnic.tw/rpki/NCIC/0/AS9918.roa File: AS9918.roa (raw, json) Hash identifier: 2refZs4f99sQRMmyUPPf2jLvHWdKtcX8LhYPrjISptU= Subject key identifier: EF:FD:06:45:98:4E:26:06:47:96:48:71:B2:35:4A:B9:D0:29:A0:5A Certificate issuer: /CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Certificate serial: 4CB99F456C493F7EEF03F992B275F11785565887 Authority key identifier: CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NCIC/0/AS9918.roa Signing time: Fri 30 Oct 2026 07:44:01 +0000 ROA not before: Fri 30 Oct 2026 07:39:01 +0000 ROA not after: Fri 29 Oct 2027 07:44:01 +0000 asID: 9918 IP address blocks: 61.61.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b9:9f:45:6c:49:3f:7e:ef:03:f9:92:b2:75:f1:17:85:56:58:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB Validity Not Before: Oct 30 07:39:01 2026 GMT Not After : Oct 29 07:44:01 2027 GMT Subject: CN=EFFD0645984E260647964871B2354AB9D029A05A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:71:88:af:51:ef:a1:4b:b6:62:7a:98:98:d2: 59:c3:3e:c1:57:3b:1f:1f:90:22:a8:a5:f8:66:57: e4:3b:62:e3:b4:fa:aa:3f:54:f3:0c:7d:1f:f8:7a: 1d:2d:e3:b0:78:9a:a9:7c:fe:0b:bd:2f:75:7a:43: 97:32:61:52:c3:cd:c1:d3:3e:b1:30:b8:7c:18:b1: 3e:2a:3e:9e:15:2c:42:a1:bb:ee:2f:52:f7:ab:83: c6:f4:a0:18:14:7f:8d:d5:b7:03:fb:8a:59:6e:3d: 76:77:ee:37:e8:36:20:f9:14:bc:e6:34:f5:16:be: b3:25:af:4a:d9:c1:40:ca:97:46:e7:38:9b:a9:e6: a9:73:d8:eb:fb:10:c5:3b:4a:2a:73:0c:7a:b2:ee: 93:b6:06:bc:38:c5:f0:60:42:73:8a:3d:ec:15:d1: bf:a5:1c:53:41:29:aa:f2:14:0f:7a:e5:00:4e:a8: da:6f:c5:59:13:53:a2:28:16:52:f1:46:16:66:0f: e4:97:59:29:11:a4:7c:84:f8:1a:9a:26:a1:43:dc: 7c:ca:f0:0a:26:57:70:3d:06:bd:2a:7e:56:45:bf: a7:39:8e:54:1e:b1:ee:c7:87:26:2b:f5:20:28:f3: f3:51:1f:69:29:5c:6e:0e:7d:62:3f:74:5d:9e:c3: 75:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FD:06:45:98:4E:26:06:47:96:48:71:B2:35:4A:B9:D0:29:A0:5A X509v3 Authority Key Identifier: keyid:CC:F8:5F:9A:12:4E:B3:15:FA:6F:5A:1B:38:23:7B:2C:B4:74:E7:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/CCF85F9A124EB315FA6F5A1B38237B2CB474E7FB.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCIC/0/AS9918.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.61.128.0/18 Signature Algorithm: sha256WithRSAEncryption 4b:af:8c:5a:08:08:e5:44:3f:2c:f5:e7:d2:8b:ac:d3:c9:eb: 5e:7f:e6:47:a2:5c:4f:35:3e:d8:63:d0:9e:04:cf:99:b9:0e: c9:88:a5:2d:f5:5d:0c:f7:c4:3e:20:06:f9:da:4d:48:dc:0b: 1e:4b:77:33:91:7b:1c:ea:0f:dd:33:41:94:e0:89:a2:71:53: ea:30:83:e4:a0:8c:a1:a1:99:e9:45:aa:fb:8d:4b:02:79:63: 8c:b3:ef:2a:8a:36:d8:7e:94:f6:36:d5:45:6d:0f:e5:86:43: e7:64:35:ac:ac:b6:d4:75:39:a5:b6:94:34:f6:d4:57:25:23: 8f:ad:c5:34:ce:2b:a6:f9:9c:10:19:27:c5:f7:60:91:3f:d9: 8c:d8:b9:67:ad:8a:f2:d1:7f:1a:78:f3:a9:2e:c3:63:60:a2: c1:47:90:0b:0f:2b:2f:b1:29:d8:82:fa:d7:5e:60:55:7a:39: c2:21:3b:81:8c:bc:f2:33:48:b4:3f:eb:b9:70:b6:00:25:5b: 02:34:66:f4:e5:db:d6:fb:58:8c:59:ab:11:b2:49:8b:16:69: 78:b9:18:ad:3c:71:83:be:8b:e9:7d:bc:07:71:52:83:68:de: 67:16:3f:9a:d1:2a:4c:34:db:74:7d:f6:9e:e2:c0:3b:c6:c4: 11:68:d2:b9 -----BEGIN CERTIFICATE----- MIIEpTCCA42gAwIBAgIUTLmfRWxJP37vA/mSsnXxF4VWWIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdCMkNC NDc0RTdGQjAeFw0yNjEwMzAwNzM5MDFaFw0yNzEwMjkwNzQ0MDFaMDMxMTAvBgNV BAMTKEVGRkQwNjQ1OTg0RTI2MDY0Nzk2NDg3MUIyMzU0QUI5RDAyOUEwNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfcYivUe+hS7ZiepiY0lnDPsFX Ox8fkCKopfhmV+Q7YuO0+qo/VPMMfR/4eh0t47B4mql8/gu9L3V6Q5cyYVLDzcHT PrEwuHwYsT4qPp4VLEKhu+4vUverg8b0oBgUf43VtwP7illuPXZ37jfoNiD5FLzm NPUWvrMlr0rZwUDKl0bnOJup5qlz2Ov7EMU7SipzDHqy7pO2Brw4xfBgQnOKPewV 0b+lHFNBKaryFA965QBOqNpvxVkTU6IoFlLxRhZmD+SXWSkRpHyE+BqaJqFD3HzK 8AomV3A9Br0qflZFv6c5jlQese7HhyYr9SAo8/NRH2kpXG4OfWI/dF2ew3WPAgMB AAGjggGvMIIBqzAdBgNVHQ4EFgQU7/0GRZhOJgZHlkhxsjVKudApoFowHwYDVR0j BBgwFoAUzPhfmhJOsxX6b1obOCN7LLR05/swDgYDVR0PAQH/BAQDAgeAMGEGA1Ud HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkNJQy8w L0NDRjg1RjlBMTI0RUIzMTVGQTZGNUExQjM4MjM3QjJDQjQ3NEU3RkIuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvQ0NGODVGOUExMjRFQjMxNUZBNkY1QTFCMzgyMzdC MkNCNDc0RTdGQi5jZXIwSgYIKwYBBQUHAQsEPjA8MDoGCCsGAQUFBzALhi5yc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05DSUMvMC9BUzk5MTgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAY9PYAwDQYJKoZIhvcNAQELBQADggEBAEuvjFoICOVEPyz159KLrNPJ615/5kei XE81Pthj0J4Ez5m5DsmIpS31XQz3xD4gBvnaTUjcCx5LdzORexzqD90zQZTgiaJx U+owg+SgjKGhmelFqvuNSwJ5Y4yz7yqKNth+lPY21UVtD+WGQ+dkNaysttR1OaW2 lDT21FclI4+txTTOK6b5nBAZJ8X3YJE/2YzYuWetivLRfxp486kuw2NgosFHkAsP Ky+xKdiC+tdeYFV6OcIhO4GMvPIzSLQ/67lwtgAlWwI0ZvTl29b7WIxZqxGySYsW aXi5GK08cYO+i+l9vAdxUoNo3mcWP5rRKkw023R99p7iwDvGxBFo0rk= -----END CERTIFICATE-----Generated at Sun Nov 15 15:37:09 2026 by rpki-client