$ rpki-client -vvf rpkica.twnic.tw/rpki/HINET/0/AS9678.roa File: AS9678.roa (raw, json) Hash identifier: HNJcoSOYfMTsvd68jE2DnDPviUo0e1GZbEsZ9LQbPiM= Subject key identifier: C7:F0:5E:A3:93:10:DE:03:CC:6A:9A:1E:2A:E9:CF:63:1C:F5:1A:03 Certificate issuer: /CN=6276AF5AEFB216534D76803A45D67CADC23447BD Certificate serial: 511E249248DD8F115FE8624D86F60EFB006DBC1A Authority key identifier: 62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer Subject info access: rsync://rpkica.twnic.tw/rpki/HINET/0/AS9678.roa Signing time: Mon 11 May 2026 17:04:54 +0000 ROA not before: Mon 11 May 2026 16:59:54 +0000 ROA not after: Mon 10 May 2027 17:04:54 +0000 asID: 9678 IP address blocks: 203.66.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 15:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1e:24:92:48:dd:8f:11:5f:e8:62:4d:86:f6:0e:fb:00:6d:bc:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6276AF5AEFB216534D76803A45D67CADC23447BD Validity Not Before: May 11 16:59:54 2026 GMT Not After : May 10 17:04:54 2027 GMT Subject: CN=C7F05EA39310DE03CC6A9A1E2AE9CF631CF51A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:8f:de:71:b3:38:27:c3:ed:05:56:b3:3f: 81:cd:42:6c:db:31:57:32:4f:23:00:f6:36:e8:18: 54:48:ae:90:ac:d1:dd:87:a4:05:75:ae:90:83:2e: 62:17:16:6d:4d:42:45:a7:cc:e1:06:0f:79:47:2f: 18:8f:b5:08:e0:65:fe:a2:40:48:7d:d6:c7:53:22: 16:1e:84:36:4d:4b:49:af:45:64:48:d5:db:c5:54: 60:90:b2:f3:a5:38:90:12:9b:92:aa:94:b3:fb:e4: ec:6d:44:cc:b8:0f:2b:a3:74:8f:08:d2:0a:3f:05: 53:0c:66:11:36:26:45:ba:b8:e1:a3:8a:29:e3:c3: 6f:a3:90:90:f8:21:c5:07:69:66:74:5c:4e:f4:40: df:5d:be:03:0d:d3:5d:66:c1:82:04:f5:8a:99:68: 6c:32:79:d9:83:24:25:c8:2b:dd:b2:f5:65:42:d6: 64:00:68:f1:85:ef:55:06:57:90:2e:19:86:fa:0d: 4e:b1:a5:4f:73:a8:7f:5d:2d:01:72:6f:f4:66:9a: ed:30:ef:1c:cc:1b:1c:71:0f:12:69:7f:cc:ca:da: 28:34:7c:c9:d5:a9:11:f8:75:c6:c8:bf:ad:64:88: 22:dc:ba:0c:ea:4e:c5:82:95:3f:85:9f:74:98:0f: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F0:5E:A3:93:10:DE:03:CC:6A:9A:1E:2A:E9:CF:63:1C:F5:1A:03 X509v3 Authority Key Identifier: keyid:62:76:AF:5A:EF:B2:16:53:4D:76:80:3A:45:D6:7C:AD:C2:34:47:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/HINET/0/6276AF5AEFB216534D76803A45D67CADC23447BD.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/6276AF5AEFB216534D76803A45D67CADC23447BD.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HINET/0/AS9678.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.66.151.0/24 Signature Algorithm: sha256WithRSAEncryption 09:6b:f5:45:41:24:29:1c:c2:7a:8a:7e:9e:c9:40:4c:a8:b0: 6f:0b:58:a4:6a:80:3c:24:2a:fd:ac:a9:1e:96:dc:83:f1:f8: 5b:51:44:2f:de:b4:82:7a:1b:b7:85:87:26:9d:1c:01:87:f0: 7e:17:08:12:f5:80:cb:91:34:a2:34:c6:88:36:32:a9:f4:83: b6:74:02:81:29:90:96:c1:7b:2c:c2:53:26:f4:0e:e5:ce:26: 51:e6:2b:95:e6:29:25:20:11:ef:b2:d3:7f:b0:e4:33:19:45: 31:60:33:7e:0f:47:8c:b1:cd:a4:48:a2:6c:02:7f:d7:64:2e: 5d:fc:cd:b3:26:3b:b4:ce:38:bd:cf:eb:50:07:01:74:a2:09: 70:21:56:5d:58:30:f1:5b:5b:95:02:90:fe:87:59:7c:08:71: 02:7a:d4:30:c1:1b:b3:66:a3:86:80:5d:8d:e8:4e:c2:d7:1c: f2:9c:4c:90:c7:1e:d5:99:da:32:6b:4b:89:5e:48:2a:6c:4a: a5:7a:a2:a0:03:9e:46:f3:c1:7d:6e:a3:0b:84:fd:03:c7:83: c9:03:3b:5d:08:f8:80:5a:6b:32:aa:79:8b:eb:16:10:fc:8f: 4e:3f:d7:41:78:60:29:a1:cd:cb:f6:4f:f8:9e:92:89:27:c4: 50:55:91:45 -----BEGIN CERTIFICATE----- MIIEpzCCA4+gAwIBAgIUUR4kkkjdjxFf6GJNhvYO+wBtvBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI3NkFGNUFFRkIyMTY1MzRENzY4MDNBNDVENjdDQURD MjM0NDdCRDAeFw0yNjA1MTExNjU5NTRaFw0yNzA1MTAxNzA0NTRaMDMxMTAvBgNV BAMTKEM3RjA1RUEzOTMxMERFMDNDQzZBOUExRTJBRTlDRjYzMUNGNTFBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7Y/ecbM4J8PtBVazP4HNQmzb MVcyTyMA9jboGFRIrpCs0d2HpAV1rpCDLmIXFm1NQkWnzOEGD3lHLxiPtQjgZf6i QEh91sdTIhYehDZNS0mvRWRI1dvFVGCQsvOlOJASm5KqlLP75OxtRMy4DyujdI8I 0go/BVMMZhE2JkW6uOGjiinjw2+jkJD4IcUHaWZ0XE70QN9dvgMN011mwYIE9YqZ aGwyedmDJCXIK92y9WVC1mQAaPGF71UGV5AuGYb6DU6xpU9zqH9dLQFyb/Rmmu0w 7xzMGxxxDxJpf8zK2ig0fMnVqRH4dcbIv61kiCLcugzqTsWClT+Fn3SYD0qpAgMB AAGjggGxMIIBrTAdBgNVHQ4EFgQUx/Beo5MQ3gPMapoeKunPYxz1GgMwHwYDVR0j BBgwFoAUYnavWu+yFlNNdoA6RdZ8rcI0R70wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSElORVQv MC82Mjc2QUY1QUVGQjIxNjUzNEQ3NjgwM0E0NUQ2N0NBREMyMzQ0N0JELmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzYyNzZBRjVBRUZCMjE2NTM0RDc2ODAzQTQ1RDY3 Q0FEQzIzNDQ3QkQuY2VyMEsGCCsGAQUFBwELBD8wPTA7BggrBgEFBQcwC4YvcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ISU5FVC8wL0FTOTY3OC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMtClzANBgkqhkiG9w0BAQsFAAOCAQEACWv1RUEkKRzCeop+nslATKiwbwtY pGqAPCQq/aypHpbcg/H4W1FEL960gnobt4WHJp0cAYfwfhcIEvWAy5E0ojTGiDYy qfSDtnQCgSmQlsF7LMJTJvQO5c4mUeYrleYpJSAR77LTf7DkMxlFMWAzfg9HjLHN pEiibAJ/12QuXfzNsyY7tM44vc/rUAcBdKIJcCFWXVgw8VtblQKQ/odZfAhxAnrU MMEbs2ajhoBdjehOwtcc8pxMkMce1ZnaMmtLiV5IKmxKpXqioAOeRvPBfW6jC4T9 A8eDyQM7XQj4gFprMqp5i+sWEPyPTj/XQXhgKaHNy/ZP+J6SiSfEUFWRRQ== -----END CERTIFICATE-----Generated at Wed May 13 21:51:08 2026 by rpki-client