$ rpki-client -vvf rpkica.twnic.tw/rpki/FET/0/AS9415.roa File: AS9415.roa (raw, json) Hash identifier: mKFpD5bUU8702FNsEGf/NSEUs3naus85mS1aXRB/EDM= Subject key identifier: 5B:6A:EC:DC:62:62:DC:A3:77:CE:F2:F2:D9:E9:4D:D8:6A:68:08:64 Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Certificate serial: 0D3FAC723032F8B737141BD263B743A0465439F1 Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/AS9415.roa Signing time: Mon 11 May 2026 17:34:34 +0000 ROA not before: Mon 11 May 2026 17:29:34 +0000 ROA not after: Mon 10 May 2027 17:34:34 +0000 asID: 9415 IP address blocks: 2404:0:3000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3f:ac:72:30:32:f8:b7:37:14:1b:d2:63:b7:43:a0:46:54:39:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Validity Not Before: May 11 17:29:34 2026 GMT Not After : May 10 17:34:34 2027 GMT Subject: CN=5B6AECDC6262DCA377CEF2F2D9E94DD86A680864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:21:d9:00:9a:39:e0:eb:d8:f1:a3:17:cd: 79:77:db:ac:ea:8e:9b:24:1d:3c:f9:9c:9b:61:0c: 39:14:42:8c:17:98:a9:49:9d:78:7e:0e:74:e0:1b: bb:49:3a:6f:15:1d:8e:1a:95:8d:15:c3:ff:38:2d: a1:a4:88:14:ea:9a:cc:ce:d0:c9:1f:12:18:a5:33: a3:1b:59:e5:c0:91:ee:36:40:56:6c:e7:62:32:15: 60:cc:8c:75:46:d7:a0:5c:b0:60:a7:4c:b9:96:15: 2e:f7:b5:dd:42:e6:52:19:d7:09:ac:a6:69:2f:e2: 00:de:42:85:92:dc:0e:30:c0:38:47:66:b9:b6:46: 72:45:dd:17:79:16:55:0c:38:76:82:98:0a:00:c9: 7d:f8:95:54:68:c6:95:f7:46:57:47:1b:03:92:4c: ee:87:4f:ed:12:ab:60:22:90:3c:f9:2f:48:06:77: ff:99:ee:6b:f5:40:a6:63:7e:8c:f3:e6:3a:d9:92: 56:24:3b:73:e9:dc:81:22:da:8d:02:74:db:ce:5b: e3:5b:4a:ec:89:ed:1e:a5:f9:96:9c:2a:eb:6d:e0: bc:5d:39:d5:b1:56:2b:1e:0a:e2:46:53:ae:e0:90: 61:ff:63:01:e7:0d:33:29:4f:e0:63:ee:ac:ec:79: 4d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6A:EC:DC:62:62:DC:A3:77:CE:F2:F2:D9:E9:4D:D8:6A:68:08:64 X509v3 Authority Key Identifier: keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS9415.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:0:3000::/36 Signature Algorithm: sha256WithRSAEncryption 66:ce:14:b2:60:fa:41:17:03:b7:f9:91:9a:7c:01:37:a1:46: eb:3a:42:c4:b8:79:24:56:b0:ef:91:bf:20:a6:95:ea:7f:e5: 8c:ff:a1:c9:f5:92:b3:71:70:ec:3c:ac:08:de:d5:5a:09:42: 0e:d5:2f:7a:ed:b3:e1:21:9e:4d:1c:b1:b2:ad:28:6c:f2:36: e2:c4:93:9d:53:2a:d8:ce:fd:f6:a3:7d:c8:24:63:db:b7:12: 3b:c3:5f:74:9a:42:35:29:f3:20:52:e8:a0:83:f2:fc:a0:9d: 51:83:92:04:ca:6a:f0:00:56:b5:bd:11:5e:55:88:8f:40:b2: bf:27:dd:6b:1f:9e:04:e2:c0:eb:a0:80:d1:d0:34:7c:37:e1: 49:68:e2:28:74:0d:32:69:0a:34:41:11:49:bc:3c:5f:5b:87: 65:e3:6d:fc:32:ac:6b:a1:95:e5:d3:3f:dc:84:b4:85:a9:78: 4c:01:39:d6:d5:0b:98:fa:97:2f:cc:d6:c5:eb:50:10:33:2a: cb:30:73:84:a6:a9:b8:4e:61:08:e5:99:6f:f3:09:9a:32:99: ea:f3:16:41:e1:d5:aa:93:d1:0a:bd:f4:39:df:84:8a:5c:5b: f6:80:b8:6f:5b:42:2a:a5:d1:59:9a:d2:ab:af:2e:c5:10:c4: fe:08:c2:b0 -----BEGIN CERTIFICATE----- MIIEpTCCA42gAwIBAgIUDT+scjAy+Lc3FBvSY7dDoEZUOfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4 NDI0NkQxMDAeFw0yNjA1MTExNzI5MzRaFw0yNzA1MTAxNzM0MzRaMDMxMTAvBgNV BAMTKDVCNkFFQ0RDNjI2MkRDQTM3N0NFRjJGMkQ5RTk0REQ4NkE2ODA4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+iHZAJo54OvY8aMXzXl326zq jpskHTz5nJthDDkUQowXmKlJnXh+DnTgG7tJOm8VHY4alY0Vw/84LaGkiBTqmszO 0MkfEhilM6MbWeXAke42QFZs52IyFWDMjHVG16BcsGCnTLmWFS73td1C5lIZ1wms pmkv4gDeQoWS3A4wwDhHZrm2RnJF3Rd5FlUMOHaCmAoAyX34lVRoxpX3RldHGwOS TO6HT+0Sq2AikDz5L0gGd/+Z7mv1QKZjfozz5jrZklYkO3Pp3IEi2o0CdNvOW+Nb SuyJ7R6l+ZacKutt4LxdOdWxViseCuJGU67gkGH/YwHnDTMpT+Bj7qzseU1DAgMB AAGjggGvMIIBqzAdBgNVHQ4EFgQUW2rs3GJi3KN3zvLy2elN2GpoCGQwHwYDVR0j BBgwFoAUcfog/Cac6YBbLGflmzV6poQkbRAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAv NzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4NDI0NkQxMC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MUZBMjBGQzI2OUNFOTgwNUIyQzY3RTU5QjM1N0FB Njg0MjQ2RDEwLmNlcjBJBggrBgEFBQcBCwQ9MDswOQYIKwYBBQUHMAuGLXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAvQVM5NDE1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYE JAQAADAwDQYJKoZIhvcNAQELBQADggEBAGbOFLJg+kEXA7f5kZp8ATehRus6QsS4 eSRWsO+RvyCmlep/5Yz/ocn1krNxcOw8rAje1VoJQg7VL3rts+Ehnk0csbKtKGzy NuLEk51TKtjO/fajfcgkY9u3EjvDX3SaQjUp8yBS6KCD8vygnVGDkgTKavAAVrW9 EV5ViI9Asr8n3WsfngTiwOuggNHQNHw34Ulo4ih0DTJpCjRBEUm8PF9bh2Xjbfwy rGuhleXTP9yEtIWpeEwBOdbVC5j6ly/M1sXrUBAzKsswc4SmqbhOYQjlmW/zCZoy merzFkHh1aqT0Qq99DnfhIpcW/aAuG9bQiql0Vma0quvLsUQxP4IwrA= -----END CERTIFICATE-----Generated at Wed May 13 21:50:41 2026 by rpki-client