$ rpki-client -vvf rpkica.twnic.tw/rpki/FET/0/AS9919.roa File: AS9919.roa (raw, json) Hash identifier: XvIMv9kxsNaAOImGZtlHRNfWn3viV4RoHWAwuaE5UV4= Subject key identifier: 15:A5:72:B5:8E:B5:46:3E:47:9D:35:93:DA:33:50:87:2A:64:49:86 Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Certificate serial: 1183F573D8439E92B25AD4B099104FD9061F6F3A Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/AS9919.roa Signing time: Mon 11 May 2026 17:55:30 +0000 ROA not before: Mon 11 May 2026 17:50:30 +0000 ROA not after: Mon 10 May 2027 17:55:30 +0000 asID: 9919 IP address blocks: 210.85.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:83:f5:73:d8:43:9e:92:b2:5a:d4:b0:99:10:4f:d9:06:1f:6f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Validity Not Before: May 11 17:50:30 2026 GMT Not After : May 10 17:55:30 2027 GMT Subject: CN=15A572B58EB5463E479D3593DA3350872A644986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ca:03:2d:91:b1:17:5a:f7:7f:9b:e9:2f:9f: 7f:9f:b3:c1:0b:72:76:8a:02:4e:c6:fd:a0:1f:12: 7f:f5:1d:10:ce:76:64:da:22:1f:42:37:f0:3a:01: 00:8a:3c:e9:2f:ce:76:f4:9f:a5:9a:83:39:71:0f: a5:c1:e6:00:66:f1:0d:51:dc:45:b6:59:ef:c2:73: 80:72:4d:99:8b:78:3e:bf:1f:63:f8:37:0e:d4:79: c9:c0:9c:28:c7:39:92:c9:10:5b:b2:3f:a2:1a:90: d9:b5:0c:58:b8:db:d9:c7:24:ef:54:3e:2a:32:42: dd:67:85:36:68:24:1f:69:4a:c1:70:77:c2:b2:b7: e3:36:30:a3:10:d3:66:32:ee:b0:f7:5b:e4:27:bf: 43:f4:3c:18:48:50:89:44:20:76:0f:83:13:51:e7: 08:f8:bc:ac:51:e5:4a:ce:0b:32:2d:9d:a4:a6:6b: 8f:ac:6f:6f:f0:fe:70:ac:0a:f6:c4:0f:7f:36:8a: 11:cd:0f:05:a7:e4:21:09:df:8e:c0:ee:38:6c:c0: 68:6a:3e:6a:8b:36:18:0d:46:26:23:77:5d:63:9b: 8c:36:0e:ba:69:c7:b9:99:bf:c4:8c:5e:4d:1f:01: 4c:09:47:d8:4d:ee:a1:19:f9:e6:23:a3:33:e3:9e: 67:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A5:72:B5:8E:B5:46:3E:47:9D:35:93:DA:33:50:87:2A:64:49:86 X509v3 Authority Key Identifier: keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS9919.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.85.16.0/20 Signature Algorithm: sha256WithRSAEncryption 5c:ff:b7:5a:e8:f5:28:d6:67:bf:88:ff:76:c0:24:6b:5d:78: 88:4e:32:5b:3e:f0:c5:a3:14:31:5c:37:60:8a:b3:b3:7a:93: b9:1b:c5:1d:e8:0d:49:e5:b7:6a:8a:c6:2b:9d:6b:c7:86:a4: d4:3a:16:03:80:ae:b6:da:7c:18:e2:c8:aa:a0:b8:29:a6:11: d3:47:72:4d:1d:ac:bc:dd:24:31:c7:70:e2:8b:a7:df:4d:3a: db:bd:f8:41:54:61:87:b5:d5:0b:10:c3:51:e9:db:95:37:9b: c4:c5:19:b2:9d:2e:0d:18:6d:3a:8e:f2:97:c0:0a:44:82:8b: fc:73:a6:31:6d:03:23:bd:9b:2c:b4:6e:53:ec:ce:3b:95:b7: 26:e3:de:b4:2c:c1:14:65:d3:4e:2e:4c:20:04:ae:fa:77:26: 30:91:35:d0:dd:a0:8f:1b:1b:b5:22:f5:4f:c7:3c:46:ad:5a: a0:b8:55:3c:f7:e5:14:88:01:3c:d5:a8:57:63:4b:6a:15:85: fc:5f:83:ff:d6:1a:71:af:28:28:12:c3:ca:91:7f:8a:dc:de: 20:02:d6:da:8a:76:87:50:32:30:19:c3:a2:b7:52:56:cd:8b: 32:96:67:72:9f:bc:4f:52:1e:8f:06:84:af:b9:65:77:5d:cd: 97:86:f3:07 -----BEGIN CERTIFICATE----- MIIEozCCA4ugAwIBAgIUEYP1c9hDnpKyWtSwmRBP2QYfbzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4 NDI0NkQxMDAeFw0yNjA1MTExNzUwMzBaFw0yNzA1MTAxNzU1MzBaMDMxMTAvBgNV BAMTKDE1QTU3MkI1OEVCNTQ2M0U0NzlEMzU5M0RBMzM1MDg3MkE2NDQ5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoygMtkbEXWvd/m+kvn3+fs8EL cnaKAk7G/aAfEn/1HRDOdmTaIh9CN/A6AQCKPOkvznb0n6WagzlxD6XB5gBm8Q1R 3EW2We/Cc4ByTZmLeD6/H2P4Nw7UecnAnCjHOZLJEFuyP6IakNm1DFi429nHJO9U PioyQt1nhTZoJB9pSsFwd8Kyt+M2MKMQ02Yy7rD3W+Qnv0P0PBhIUIlEIHYPgxNR 5wj4vKxR5UrOCzItnaSma4+sb2/w/nCsCvbED382ihHNDwWn5CEJ347A7jhswGhq PmqLNhgNRiYjd11jm4w2Drppx7mZv8SMXk0fAUwJR9hN7qEZ+eYjozPjnmfLAgMB AAGjggGtMIIBqTAdBgNVHQ4EFgQUFaVytY61Rj5HnTWT2jNQhypkSYYwHwYDVR0j BBgwFoAUcfog/Cac6YBbLGflmzV6poQkbRAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAv NzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4NDI0NkQxMC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MUZBMjBGQzI2OUNFOTgwNUIyQzY3RTU5QjM1N0FB Njg0MjQ2RDEwLmNlcjBJBggrBgEFBQcBCwQ9MDswOQYIKwYBBQUHMAuGLXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAvQVM5OTE5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE 0lUQMA0GCSqGSIb3DQEBCwUAA4IBAQBc/7da6PUo1me/iP92wCRrXXiITjJbPvDF oxQxXDdgirOzepO5G8Ud6A1J5bdqisYrnWvHhqTUOhYDgK622nwY4siqoLgpphHT R3JNHay83SQxx3Dii6ffTTrbvfhBVGGHtdULEMNR6duVN5vExRmynS4NGG06jvKX wApEgov8c6YxbQMjvZsstG5T7M47lbcm4960LMEUZdNOLkwgBK76dyYwkTXQ3aCP Gxu1IvVPxzxGrVqguFU89+UUiAE81ahXY0tqFYX8X4P/1hpxrygoEsPKkX+K3N4g AtbainaHUDIwGcOit1JWzYsylmdyn7xPUh6PBoSvuWV3Xc2XhvMH -----END CERTIFICATE-----Generated at Wed May 13 21:50:43 2026 by rpki-client