$ rpki-client -vvf rpkica.twnic.tw/rpki/FET/0/AS9922.roa File: AS9922.roa (raw, json) Hash identifier: MVCBqHzYeQFy7e/XjCCEL5a6x+MKv8PMkA6VTTn34lo= Subject key identifier: 07:09:36:76:00:25:85:44:E0:86:36:66:9A:5E:C2:FB:6C:BC:0F:55 Certificate issuer: /CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Certificate serial: 2F0AB17A3205EBD34FADC6D113D066AF7B88335D Authority key identifier: 71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject info access: rsync://rpkica.twnic.tw/rpki/FET/0/AS9922.roa Signing time: Mon 11 May 2026 17:35:51 +0000 ROA not before: Mon 11 May 2026 17:30:51 +0000 ROA not after: Mon 10 May 2027 17:35:51 +0000 asID: 9922 IP address blocks: 124.218.64.0/22 maxlen: 24 124.218.68.0/22 maxlen: 24 124.218.72.0/21 maxlen: 24 124.218.80.0/20 maxlen: 24 124.218.128.0/18 maxlen: 24 124.218.160.0/21 maxlen: 24 124.218.168.0/22 maxlen: 24 124.218.172.0/24 maxlen: 24 124.218.173.0/24 maxlen: 24 124.218.174.0/24 maxlen: 24 124.218.175.0/24 maxlen: 24 124.218.176.0/24 maxlen: 24 124.218.177.0/24 maxlen: 24 124.218.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0a:b1:7a:32:05:eb:d3:4f:ad:c6:d1:13:d0:66:af:7b:88:33:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71FA20FC269CE9805B2C67E59B357AA684246D10 Validity Not Before: May 11 17:30:51 2026 GMT Not After : May 10 17:35:51 2027 GMT Subject: CN=0709367600258544E08636669A5EC2FB6CBC0F55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:68:5b:c2:3e:c7:ec:15:c1:30:d4:40:c9: ce:55:61:8a:ae:3d:93:f3:ce:d7:a3:a5:e2:b7:4e: ff:ae:43:01:a3:b4:4c:92:9a:e1:d7:d5:ab:52:58: 6d:e0:5e:3c:f3:d4:5b:8f:49:f4:73:e7:fc:f3:c9: d7:ae:2a:c6:ef:90:f5:d3:5d:83:4c:40:32:35:a0: 96:54:29:36:82:fd:a8:c7:92:9c:76:5b:21:e0:2a: de:1e:9e:39:32:ce:75:e2:82:d3:3c:97:d9:f0:db: c3:46:d7:bc:f7:38:2e:b0:96:2c:91:ff:50:48:40: b1:00:0e:10:30:79:cd:9e:af:bc:a3:1a:e1:48:5a: 10:ce:4d:25:d7:a0:a9:21:56:83:59:b7:3e:3d:f6: 77:39:54:62:09:d6:42:5b:23:3c:00:79:9d:02:82: 5f:0f:7c:02:d5:d9:c4:82:ff:38:ec:ca:32:2f:76: a8:cb:3e:bf:3f:d5:d0:f1:38:22:4d:ef:42:60:41: 75:82:57:4e:20:fb:23:dd:e7:e6:a5:f1:85:69:42: 0d:8a:bc:9b:8d:70:fe:cd:80:29:91:08:8e:bf:42: 64:e5:ce:33:97:10:f0:05:3f:00:f5:a7:0c:56:73: 05:d0:83:5d:06:5b:07:8a:45:62:ec:f2:62:ff:6a: e3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:09:36:76:00:25:85:44:E0:86:36:66:9A:5E:C2:FB:6C:BC:0F:55 X509v3 Authority Key Identifier: keyid:71:FA:20:FC:26:9C:E9:80:5B:2C:67:E5:9B:35:7A:A6:84:24:6D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/FET/0/71FA20FC269CE9805B2C67E59B357AA684246D10.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/71FA20FC269CE9805B2C67E59B357AA684246D10.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FET/0/AS9922.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.218.64.0/19 124.218.128.0/18 Signature Algorithm: sha256WithRSAEncryption 9d:af:f8:77:19:81:57:6d:b1:ce:54:38:e9:a3:9e:41:c3:05: 85:7e:bf:9c:e7:2d:6e:0a:dc:f0:b3:a1:23:88:90:26:7f:2d: fa:e3:0e:e9:17:9a:9e:e1:93:2f:ad:3e:2a:94:66:cd:7f:42: 1e:e8:50:71:97:b9:69:c7:6e:19:b6:14:a2:34:ff:46:84:56: d0:cc:fa:2f:83:1e:33:4a:62:95:23:f7:fd:ad:6b:a9:ef:29: 78:c1:a8:0f:14:48:3e:3d:9a:d5:26:61:e5:a7:df:c9:84:91: da:16:ce:7d:cf:28:77:38:e4:4c:f0:98:46:91:7a:f7:ec:dd: 90:f6:c2:2b:70:bc:a5:23:0a:99:4e:52:bb:02:f1:da:d6:e6: 50:c4:76:ed:86:ed:13:f0:6b:00:82:af:4f:43:87:77:85:33: a6:65:61:5a:58:83:6f:5e:9d:fa:8b:d4:cb:11:0d:f5:01:0a: 59:2d:64:4d:4a:a9:00:5a:87:02:08:72:ef:ea:fb:43:05:a1: 5e:0b:92:1c:7d:99:0a:46:fb:ad:b8:a1:d9:cc:a4:09:b1:a9: 30:85:c1:1b:f9:78:73:3f:60:84:f7:36:dc:67:2e:25:9b:73: f8:b0:12:1c:5b:0d:15:64:08:91:40:55:66:13:74:8f:88:2b: b5:63:6f:3f -----BEGIN CERTIFICATE----- MIIEqTCCA5GgAwIBAgIULwqxejIF69NPrcbRE9Bmr3uIM10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4 NDI0NkQxMDAeFw0yNjA1MTExNzMwNTFaFw0yNzA1MTAxNzM1NTFaMDMxMTAvBgNV BAMTKDA3MDkzNjc2MDAyNTg1NDRFMDg2MzY2NjlBNUVDMkZCNkNCQzBGNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HGhbwj7H7BXBMNRAyc5VYYqu PZPzztejpeK3Tv+uQwGjtEySmuHX1atSWG3gXjzz1FuPSfRz5/zzydeuKsbvkPXT XYNMQDI1oJZUKTaC/ajHkpx2WyHgKt4enjkyznXigtM8l9nw28NG17z3OC6wliyR /1BIQLEADhAwec2er7yjGuFIWhDOTSXXoKkhVoNZtz499nc5VGIJ1kJbIzwAeZ0C gl8PfALV2cSC/zjsyjIvdqjLPr8/1dDxOCJN70JgQXWCV04g+yPd5+al8YVpQg2K vJuNcP7NgCmRCI6/QmTlzjOXEPAFPwD1pwxWcwXQg10GWweKRWLs8mL/auNFAgMB AAGjggGzMIIBrzAdBgNVHQ4EFgQUBwk2dgAlhUTghjZmml7C+2y8D1UwHwYDVR0j BBgwFoAUcfog/Cac6YBbLGflmzV6poQkbRAwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAv NzFGQTIwRkMyNjlDRTk4MDVCMkM2N0U1OUIzNTdBQTY4NDI0NkQxMC5jcmwwbwYI KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50 dy9ycGtpL1RXTklDQ0EvMS83MUZBMjBGQzI2OUNFOTgwNUIyQzY3RTU5QjM1N0FB Njg0MjQ2RDEwLmNlcjBJBggrBgEFBQcBCwQ9MDswOQYIKwYBBQUHMAuGLXJzeW5j Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkVULzAvQVM5OTIyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQF fNpAAwQGfNqAMA0GCSqGSIb3DQEBCwUAA4IBAQCdr/h3GYFXbbHOVDjpo55BwwWF fr+c5y1uCtzws6EjiJAmfy364w7pF5qe4ZMvrT4qlGbNf0Ie6FBxl7lpx24ZthSi NP9GhFbQzPovgx4zSmKVI/f9rWup7yl4wagPFEg+PZrVJmHlp9/JhJHaFs59zyh3 OORM8JhGkXr37N2Q9sIrcLylIwqZTlK7AvHa1uZQxHbthu0T8GsAgq9PQ4d3hTOm ZWFaWINvXp36i9TLEQ31AQpZLWRNSqkAWocCCHLv6vtDBaFeC5IcfZkKRvutuKHZ zKQJsakwhcEb+XhzP2CE9zbcZy4lm3P4sBIcWw0VZAiRQFVmE3SPiCu1Y28/ -----END CERTIFICATE-----Generated at Wed May 13 21:50:45 2026 by rpki-client