$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/ddUEL_10kuexYcNkPBzU_cBreZk.roa File: ddUEL_10kuexYcNkPBzU_cBreZk.roa (raw, json) Hash identifier: wkQnXmxLZrn6bFWPG6/RPR8K4SZ0Rs1cSCagi/2Hwps= Subject key identifier: 75:D5:04:2F:FD:74:92:E7:B1:61:C3:64:3C:1C:D4:FD:C0:6B:79:99 Certificate issuer: /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD Certificate serial: 0223 Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/ddUEL_10kuexYcNkPBzU_cBreZk.roa Signing time: Fri 22 Aug 2025 09:03:38 +0000 ROA not before: Fri 22 Aug 2025 09:03:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 150766 IP address blocks: 2401:5da0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 04:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD Validity Not Before: Aug 22 09:03:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=75D5042FFD7492E7B161C3643C1CD4FDC06B7999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:79:05:7e:40:54:00:14:28:76:49:3e:be:6d: c6:9a:4e:f4:3e:74:4b:45:e2:51:0e:87:81:d1:1a: 3d:ae:d2:c2:38:14:89:78:5e:f9:47:d4:ca:ce:c0: ac:bf:0e:4b:8a:41:c7:ee:ad:37:31:4e:26:13:75: 9d:4b:63:f3:f5:90:eb:f7:c1:77:c1:0d:01:32:dd: 5b:2f:6a:cd:29:44:ed:70:ee:3e:e6:84:02:3b:3d: 92:4e:d0:79:5f:18:b5:fa:76:31:88:1b:bc:29:72: f6:ba:67:09:c2:50:d3:ae:2f:b5:a2:b3:b0:9a:fb: 1c:7f:bb:d7:7f:fe:44:f4:71:4f:49:7b:f5:84:9e: 18:fd:ba:8b:e6:68:30:a5:69:f7:f8:41:b5:cd:2c: c2:c3:00:b5:67:13:b8:7f:02:2c:df:bc:52:91:45: bf:80:34:04:b4:f0:ac:0c:62:ec:42:42:98:85:2d: ce:24:dc:5d:2d:1d:be:19:2d:2a:73:71:3a:dd:e9: 1d:90:77:48:f8:37:4f:c8:94:36:fa:28:66:eb:ea: ad:f3:82:82:01:96:93:dc:2d:c6:8f:5f:ee:df:3a: 43:4d:9b:f6:89:ec:ff:dc:51:03:9d:dc:06:d7:f1: 19:9c:6c:a9:4a:25:92:0b:0b:47:3c:c2:45:79:bb: 4e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D5:04:2F:FD:74:92:E7:B1:61:C3:64:3C:1C:D4:FD:C0:6B:79:99 X509v3 Authority Key Identifier: keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/ddUEL_10kuexYcNkPBzU_cBreZk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:5da0:1::/48 Signature Algorithm: sha256WithRSAEncryption 2d:e4:21:74:d7:1e:40:c4:da:98:67:df:1f:64:74:d3:d3:f9: de:d3:95:01:73:d4:ff:75:ed:f9:35:84:30:a4:bc:bf:e6:27: cd:a0:c2:ce:ea:58:4c:0a:db:8b:19:96:92:63:8f:b0:aa:5a: 53:38:cb:be:b6:d7:0e:bc:9d:28:52:ba:bf:2c:e7:e2:c3:6f: 84:df:0b:23:3e:6a:96:f9:27:3d:0b:5a:e0:6a:51:87:e7:f3: 37:41:61:ea:ac:cb:92:85:c7:24:3d:58:82:a9:b4:31:03:5b: 58:2e:e6:01:4f:cf:5a:c1:fd:d1:91:3a:f7:d1:39:1a:37:27: 75:af:62:97:5b:de:07:b3:19:91:01:28:91:e3:78:f6:b6:36: a4:7e:19:fd:32:08:3e:56:ae:7f:c5:cc:6f:93:33:e6:5c:e3: 01:14:be:f4:fc:26:e3:e1:4e:1d:46:5b:da:c7:29:00:4b:8b: 80:1d:aa:2d:63:a5:d2:af:6f:32:c6:5d:b5:ea:84:b2:3b:65: 65:b7:cd:d4:2c:7d:84:e0:65:34:d0:86:7c:ad:bc:ec:69:d4: 49:22:ed:10:27:9a:fb:7c:24:4a:eb:41:34:d1:e8:09:f5:10: 99:59:67:a9:7a:fa:94:4b:77:1b:f5:44:a6:8e:b2:d4:7a:22: ce:30:2a:b1 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJE NEREQjRCRjkzMkM1MDA2QjcwNEI5ODI4NDEwMTc0QUM0MTJBRDAeFw0yNTA4MjIw OTAzMzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc1RDUwNDJGRkQ3NDky RTdCMTYxQzM2NDNDMUNENEZEQzA2Qjc5OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLeQV+QFQAFCh2ST6+bcaaTvQ+dEtF4lEOh4HRGj2u0sI4FIl4 XvlH1MrOwKy/DkuKQcfurTcxTiYTdZ1LY/P1kOv3wXfBDQEy3Vsvas0pRO1w7j7m hAI7PZJO0HlfGLX6djGIG7wpcva6ZwnCUNOuL7Wis7Ca+xx/u9d//kT0cU9Je/WE nhj9uovmaDClaff4QbXNLMLDALVnE7h/AizfvFKRRb+ANAS08KwMYuxCQpiFLc4k 3F0tHb4ZLSpzcTrd6R2Qd0j4N0/IlDb6KGbr6q3zgoIBlpPcLcaPX+7fOkNNm/aJ 7P/cUQOd3AbX8RmcbKlKJZILC0c8wkV5u069AgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUddUEL/10kuexYcNkPBzU/cBreZkwHwYDVR0jBBgwFoAUq9TdtL+TLFAGtwS5 goQQF0rEEq0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJ R0lUL3E5VGR0TC1UTEZBR3R3UzVnb1FRRjByRUVxMC5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcTlUZHRMLVRMRkFHdHdTNWdvUVFGMHJFRXEwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJR0lUL2RkVUVMXzEwa3Vl eFljTmtQQnpVX2NCcmVaay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAkAV2gAAEwDQYJKoZIhvcNAQELBQADggEBAC3kIXTXHkDE2phn3x9kdNPT +d7TlQFz1P917fk1hDCkvL/mJ82gws7qWEwK24sZlpJjj7CqWlM4y7621w68nShS ur8s5+LDb4TfCyM+apb5Jz0LWuBqUYfn8zdBYeqsy5KFxyQ9WIKptDEDW1gu5gFP z1rB/dGROvfRORo3J3WvYpdb3gezGZEBKJHjePa2NqR+Gf0yCD5Wrn/FzG+TM+Zc 4wEUvvT8JuPhTh1GW9rHKQBLi4Adqi1jpdKvbzLGXbXqhLI7ZWW3zdQsfYTgZTTQ hnytvOxp1Eki7RAnmvt8JErrQTTR6An1EJlZZ6l6+pRLdxv1RKaOstR6Is4wKrE= -----END CERTIFICATE-----Generated at Thu Sep 18 02:08:36 2025 by rpki-client