$ rpki-client -vvf rpkica.twnic.tw/rpki/UBBNET/0/AS9924.roa File: AS9924.roa (raw, json) Hash identifier: XcdGJFStk6sFQBvaBPyyGpaFfDK/D04lA1uO4zNGZoQ= Subject key identifier: CD:6C:0F:D1:20:61:0E:42:2B:92:82:20:79:8D:A0:E0:69:94:B5:3C Certificate issuer: /CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E Certificate serial: 73298731B4E82367A39B1F50E27DFAF8C9D79673 Authority key identifier: 70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/UBBNET/0/AS9924.roa Signing time: Mon 11 May 2026 17:27:30 +0000 ROA not before: Mon 11 May 2026 17:22:30 +0000 ROA not after: Mon 10 May 2027 17:27:30 +0000 asID: 9924 IP address blocks: 61.60.214.0/23 maxlen: 23 114.198.160.0/20 maxlen: 20 114.198.176.0/20 maxlen: 20 119.77.188.0/22 maxlen: 22 180.218.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 14:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:29:87:31:b4:e8:23:67:a3:9b:1f:50:e2:7d:fa:f8:c9:d7:96:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704404201DFE2DEA001DB9D48001735C8BEE3A0E Validity Not Before: May 11 17:22:30 2026 GMT Not After : May 10 17:27:30 2027 GMT Subject: CN=CD6C0FD120610E422B928220798DA0E06994B53C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6d:e9:a2:61:01:58:6f:a8:95:b3:e4:53:b1: 9b:2a:b6:8a:c6:ba:81:0d:f0:f5:a6:dd:cb:8a:e8: 55:8d:32:22:8f:46:a3:bb:50:f1:dd:73:b5:4f:ad: 15:58:bf:e3:43:64:76:5e:d7:4f:0c:64:5d:88:9e: c9:4c:2d:c6:20:d1:73:df:27:7c:4b:22:0d:33:26: 49:73:bd:fc:47:12:b1:2f:a1:4e:f7:3d:d0:89:3f: 23:d6:c2:2e:9d:a9:74:4a:fc:e7:77:8b:f8:24:c7: f1:ae:2f:a1:f1:56:ff:43:5f:93:37:98:43:9d:68: dc:ef:67:c4:58:96:a4:9c:5e:01:39:93:f2:07:0f: 04:01:e6:33:5d:b2:80:cd:52:8d:4f:0b:f6:85:a9: 22:34:78:1b:c2:50:e8:72:d2:4f:c6:c9:45:fc:13: e7:05:1f:05:63:ed:1e:5f:a5:d0:52:30:de:27:a2: 56:37:2c:a8:e6:6a:64:9b:c6:6e:1f:64:e9:8e:a3: 30:68:12:f0:88:80:b0:af:1c:e6:ec:d9:c7:b5:92: e6:53:17:f5:3f:a3:d2:2b:2e:87:df:86:6e:56:ad: b6:de:e0:a7:23:2b:aa:89:dd:19:eb:fc:8f:3c:a8: 02:3b:a5:11:ed:fe:5e:e0:4d:73:15:ad:b0:b8:32: 37:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6C:0F:D1:20:61:0E:42:2B:92:82:20:79:8D:A0:E0:69:94:B5:3C X509v3 Authority Key Identifier: keyid:70:44:04:20:1D:FE:2D:EA:00:1D:B9:D4:80:01:73:5C:8B:EE:3A:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/704404201DFE2DEA001DB9D48001735C8BEE3A0E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/704404201DFE2DEA001DB9D48001735C8BEE3A0E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UBBNET/0/AS9924.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.60.214.0/23 114.198.160.0/19 119.77.188.0/22 180.218.240.0/20 Signature Algorithm: sha256WithRSAEncryption de:ff:03:43:78:32:36:5c:13:0f:3b:b6:76:a5:7d:c5:16:07: 40:81:79:36:bd:3b:14:bd:70:69:55:3e:36:4a:98:0d:26:41: d0:68:f5:a0:61:44:c9:14:6a:e1:23:5b:62:31:d4:ce:20:08: 3f:73:62:42:71:05:7c:e3:db:19:e3:04:03:c1:a3:06:ca:3f: f5:21:1a:f4:a9:63:30:6a:91:d7:65:86:d6:91:16:7a:4a:03: fc:06:34:b7:b7:f5:d0:47:4a:97:0d:e3:b0:3c:67:28:5f:cd: 1c:53:0b:74:e0:40:2c:c9:52:eb:7d:fc:9a:c7:37:e7:ec:64: 21:b1:82:4c:49:39:72:a9:ca:af:15:d8:9f:bb:54:0c:1c:b1: 9d:4e:b1:4f:69:18:a6:6c:36:b0:11:eb:cf:93:44:f4:fb:03: 73:0b:18:f8:03:3c:63:bf:e1:e6:92:fd:82:f2:bc:98:74:72: ba:56:d7:8f:b7:8e:a1:e1:2f:dc:7e:13:7c:bf:88:8b:27:7e: 12:4e:cf:d5:b5:ac:d0:c9:c2:33:db:e2:e4:72:18:06:1a:23: 2c:80:43:53:23:25:63:b6:04:33:34:f7:fd:cd:d8:f8:4e:a1: d7:eb:36:90:42:0c:a9:ea:b7:e4:1a:37:91:45:b9:e7:6a:a0: 9f:7b:8c:d4 -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgIUcymHMbToI2ejmx9Q4n36+MnXlnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4 QkVFM0EwRTAeFw0yNjA1MTExNzIyMzBaFw0yNzA1MTAxNzI3MzBaMDMxMTAvBgNV BAMTKENENkMwRkQxMjA2MTBFNDIyQjkyODIyMDc5OERBMEUwNjk5NEI1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlbemiYQFYb6iVs+RTsZsqtorG uoEN8PWm3cuK6FWNMiKPRqO7UPHdc7VPrRVYv+NDZHZe108MZF2InslMLcYg0XPf J3xLIg0zJklzvfxHErEvoU73PdCJPyPWwi6dqXRK/Od3i/gkx/GuL6HxVv9DX5M3 mEOdaNzvZ8RYlqScXgE5k/IHDwQB5jNdsoDNUo1PC/aFqSI0eBvCUOhy0k/GyUX8 E+cFHwVj7R5fpdBSMN4nolY3LKjmamSbxm4fZOmOozBoEvCIgLCvHObs2ce1kuZT F/U/o9IrLoffhm5Wrbbe4KcjK6qJ3Rnr/I88qAI7pRHt/l7gTXMVrbC4MjdPAgMB AAGjggHFMIIBwTAdBgNVHQ4EFgQUzWwP0SBhDkIrkoIgeY2g4GmUtTwwHwYDVR0j BBgwFoAUcEQEIB3+LeoAHbnUgAFzXIvuOg4wDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVU LzAvNzA0NDA0MjAxREZFMkRFQTAwMURCOUQ0ODAwMTczNUM4QkVFM0EwRS5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS83MDQ0MDQyMDFERkUyREVBMDAxREI5RDQ4MDAx NzM1QzhCRUUzQTBFLmNlcjBMBggrBgEFBQcBCwRAMD4wPAYIKwYBBQUHMAuGMHJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVUJCTkVULzAvQVM5OTI0LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIA ATAYAwQBPTzWAwQFcsagAwQCd028AwQEtNrwMA0GCSqGSIb3DQEBCwUAA4IBAQDe /wNDeDI2XBMPO7Z2pX3FFgdAgXk2vTsUvXBpVT42SpgNJkHQaPWgYUTJFGrhI1ti MdTOIAg/c2JCcQV849sZ4wQDwaMGyj/1IRr0qWMwapHXZYbWkRZ6SgP8BjS3t/XQ R0qXDeOwPGcoX80cUwt04EAsyVLrffyaxzfn7GQhsYJMSTlyqcqvFdifu1QMHLGd TrFPaRimbDawEevPk0T0+wNzCxj4Azxjv+Hmkv2C8ryYdHK6VtePt46h4S/cfhN8 v4iLJ34STs/VtazQycIz2+LkchgGGiMsgENTIyVjtgQzNPf9zdj4TqHX6zaQQgyp 6rfkGjeRRbnnaqCfe4zU -----END CERTIFICATE-----Generated at Wed May 13 21:08:09 2026 by rpki-client