$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/Cn_s4ZUwpbzBWg6NwMtcEIy00O0.roa File: Cn_s4ZUwpbzBWg6NwMtcEIy00O0.roa (raw, json) Hash identifier: /iJBx9dXXQTdBiW/5SELw4rLF+l1l35k+PoO2t7uLg8= Subject key identifier: 0A:7F:EC:E1:95:30:A5:BC:C1:5A:0E:8D:C0:CB:5C:10:8C:B4:D0:ED Certificate issuer: /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD Certificate serial: 0222 Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/Cn_s4ZUwpbzBWg6NwMtcEIy00O0.roa Signing time: Fri 22 Aug 2025 09:03:38 +0000 ROA not before: Fri 22 Aug 2025 09:03:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 150766 IP address blocks: 2401:5da0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 04:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 546 (0x222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD Validity Not Before: Aug 22 09:03:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0A7FECE19530A5BCC15A0E8DC0CB5C108CB4D0ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:6f:ff:34:62:a1:25:c0:00:52:17:7b:8e: 95:f0:4d:70:70:5a:ba:c1:a6:9f:29:c4:98:8b:bf: 36:5d:42:68:c2:f8:ff:0e:87:d5:7c:b4:18:36:1c: a4:5c:8b:20:37:af:8e:c9:14:51:be:30:a5:bc:39: f1:e8:0d:0c:8a:4c:9d:9d:da:2f:80:11:d0:76:c4: 60:18:9f:04:87:4d:5b:a5:73:b9:55:67:0a:60:df: f2:fc:d3:63:34:d4:f5:ec:4a:49:8a:72:76:0e:f2: 9c:9a:8f:27:4d:4c:b6:73:92:2d:32:2c:b3:9e:d0: 23:86:82:fb:b1:bb:5c:d3:90:ca:b7:43:16:84:45: 42:2f:f1:81:e6:cc:6d:60:7b:09:6e:93:92:ae:45: 45:78:c2:04:7c:0f:ad:68:f4:e6:6d:1a:8a:11:34: 67:49:c6:29:4d:e2:10:72:72:3d:5c:98:f3:b4:00: a0:15:05:dd:d2:a0:ef:67:e0:4e:4a:2b:5d:46:7f: c4:66:1c:40:59:f0:da:36:8e:7e:b2:a8:53:5a:a0: 0c:27:02:3a:03:0b:a5:ad:e4:65:07:74:7d:35:09: a9:1a:1a:ab:cf:75:84:a2:d4:94:43:96:bd:90:f8: ee:67:d7:0c:8b:59:70:44:67:fa:d2:cc:e4:c0:af: 08:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7F:EC:E1:95:30:A5:BC:C1:5A:0E:8D:C0:CB:5C:10:8C:B4:D0:ED X509v3 Authority Key Identifier: keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/Cn_s4ZUwpbzBWg6NwMtcEIy00O0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:5da0:2::/48 Signature Algorithm: sha256WithRSAEncryption 19:84:2e:17:c0:24:29:11:3d:67:74:64:86:28:a7:26:dd:91: d6:94:55:19:a7:97:23:61:f2:3e:71:05:80:5c:6d:e6:69:df: 03:0e:30:8e:74:ee:fe:81:0f:94:67:7a:63:47:a3:06:84:12: 7b:8e:ef:88:68:67:37:51:72:6a:1b:5f:dd:d3:b2:d5:bf:59: 9a:a4:6c:50:78:eb:7f:15:ed:88:23:67:f7:8a:d1:5d:59:c8: 33:f7:85:44:b4:dd:42:b5:36:ee:2c:58:90:24:a4:e4:40:7d: bf:6b:e6:c0:1b:3b:3f:00:c9:15:a4:2c:29:7d:c2:79:1c:84: 52:3e:a9:3c:5c:04:b3:3d:3e:42:26:6e:45:c3:62:a5:e8:46: ca:5c:9a:35:08:d2:62:1c:3c:b5:c4:40:3a:40:43:8b:c1:8e: c0:f9:92:a8:66:08:87:ce:ee:cb:be:22:d5:ae:48:64:d8:0f: af:8f:bc:07:d7:2f:d0:89:17:ae:17:da:f3:48:53:e7:11:55: af:f6:3b:b3:cd:52:c9:5f:d2:7b:e7:6e:f9:87:05:d0:12:13: 90:45:8d:0e:40:a4:34:c6:11:04:2f:cc:d4:3c:c4:98:d5:c2: 42:42:73:f1:e9:e5:7b:39:1d:42:ab:f2:1d:9d:06:c2:46:a6: a0:b1:77:71 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJE NEREQjRCRjkzMkM1MDA2QjcwNEI5ODI4NDEwMTc0QUM0MTJBRDAeFw0yNTA4MjIw OTAzMzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBBN0ZFQ0UxOTUzMEE1 QkNDMTVBMEU4REMwQ0I1QzEwOENCNEQwRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCux2//NGKhJcAAUhd7jpXwTXBwWrrBpp8pxJiLvzZdQmjC+P8O h9V8tBg2HKRciyA3r47JFFG+MKW8OfHoDQyKTJ2d2i+AEdB2xGAYnwSHTVulc7lV Zwpg3/L802M01PXsSkmKcnYO8pyajydNTLZzki0yLLOe0COGgvuxu1zTkMq3QxaE RUIv8YHmzG1gewluk5KuRUV4wgR8D61o9OZtGooRNGdJxilN4hBycj1cmPO0AKAV Bd3SoO9n4E5KK11Gf8RmHEBZ8No2jn6yqFNaoAwnAjoDC6Wt5GUHdH01CakaGqvP dYSi1JRDlr2Q+O5n1wyLWXBEZ/rSzOTArwgRAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUCn/s4ZUwpbzBWg6NwMtcEIy00O0wHwYDVR0jBBgwFoAUq9TdtL+TLFAGtwS5 goQQF0rEEq0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJ R0lUL3E5VGR0TC1UTEZBR3R3UzVnb1FRRjByRUVxMC5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcTlUZHRMLVRMRkFHdHdTNWdvUVFGMHJFRXEwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJR0lUL0NuX3M0WlV3cGJ6 QldnNk53TXRjRUl5MDBPMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAkAV2gAAIwDQYJKoZIhvcNAQELBQADggEBABmELhfAJCkRPWd0ZIYopybd kdaUVRmnlyNh8j5xBYBcbeZp3wMOMI507v6BD5RnemNHowaEEnuO74hoZzdRcmob X93TstW/WZqkbFB4638V7YgjZ/eK0V1ZyDP3hUS03UK1Nu4sWJAkpORAfb9r5sAb Oz8AyRWkLCl9wnkchFI+qTxcBLM9PkImbkXDYqXoRspcmjUI0mIcPLXEQDpAQ4vB jsD5kqhmCIfO7su+ItWuSGTYD6+PvAfXL9CJF64X2vNIU+cRVa/2O7PNUslf0nvn bvmHBdASE5BFjQ5ApDTGEQQvzNQ8xJjVwkJCc/Hp5Xs5HUKr8h2dBsJGpqCxd3E= -----END CERTIFICATE-----Generated at Thu Sep 18 02:08:42 2025 by rpki-client