
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/9ZhjQAm7I3nxE0OZaDsYO9wxWXk.roa
File: 9ZhjQAm7I3nxE0OZaDsYO9wxWXk.roa (raw, json)
Hash identifier: +BkoiqRk9FKD5jliPi2viBVVjNTgRkFsANprVj/FnTs=
Subject key identifier: F5:98:63:40:09:BB:23:79:F1:13:43:99:68:3B:18:3B:DC:31:59:79
Certificate issuer: /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
Certificate serial: 02A0
Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/9ZhjQAm7I3nxE0OZaDsYO9wxWXk.roa
Signing time: Tue 10 Feb 2026 15:54:44 +0000
ROA not before: Tue 10 Feb 2026 15:54:44 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 150766
IP address blocks: 2401:5da0:53::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 12:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 672 (0x2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD
Validity
Not Before: Feb 10 15:54:44 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=F598634009BB2379F1134399683B183BDC315979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:46:f1:94:4c:35:36:a3:99:e5:54:03:1c:
56:9c:81:88:95:a5:f5:ac:2a:93:ad:83:5b:08:a0:
d6:6f:32:1a:d2:da:1e:4d:ce:12:ed:de:81:56:a8:
86:f9:09:99:1b:37:4a:98:4f:67:6d:b4:47:4d:0e:
11:c3:90:b1:09:31:82:f9:1b:5f:eb:16:24:8d:4b:
47:8c:55:a8:e6:ba:31:9c:aa:92:d4:33:54:6d:60:
db:6f:23:0b:82:c1:61:dd:45:b2:29:ac:33:d8:19:
c9:ac:f8:d5:ee:86:16:4a:cb:33:62:3c:64:53:31:
96:c4:ff:f8:01:26:94:67:e7:82:03:8e:31:de:f6:
40:14:51:d3:d0:1d:ce:6c:1a:a4:75:ed:7b:7e:a9:
c8:e5:ae:51:67:3d:ff:94:7d:cb:d9:30:40:60:9a:
f7:8d:d7:eb:e0:c2:37:6b:ec:b2:f9:75:eb:ac:ce:
18:04:45:83:49:11:1b:a0:3d:1b:68:87:ad:96:ec:
1f:4e:5d:e5:6e:fa:9d:e8:7a:f0:0c:96:f4:86:02:
c9:08:6f:54:77:51:41:35:4e:50:09:c0:e1:30:73:
7c:22:00:f8:c8:3a:8c:dc:e0:3d:8f:2f:34:67:e2:
d5:62:02:dc:d7:6e:2a:c6:29:b3:69:dc:b6:1f:28:
43:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:98:63:40:09:BB:23:79:F1:13:43:99:68:3B:18:3B:DC:31:59:79
X509v3 Authority Key Identifier:
keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/9ZhjQAm7I3nxE0OZaDsYO9wxWXk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:5da0:53::/48
Signature Algorithm: sha256WithRSAEncryption
13:fd:31:2c:9c:f1:59:65:4d:93:14:e9:de:c8:5f:19:d1:e3:
d5:17:3a:09:e9:15:19:ab:79:e8:ff:68:c6:7a:a1:5e:e8:10:
8d:5a:d2:b3:16:33:fe:e9:49:27:fe:76:60:6a:2a:e1:44:99:
af:5b:dd:fe:3a:e4:e3:42:5e:9e:7c:ce:d3:46:44:cb:ca:6c:
bd:db:dc:6b:94:15:2a:26:f0:84:5d:58:b7:40:8a:81:41:5e:
ed:5c:8b:d3:12:ab:43:b5:74:80:46:de:3d:cf:5e:43:5c:53:
e3:5d:57:14:e7:ad:4e:a1:f1:8e:0f:a1:98:d8:0c:8d:d4:a0:
2d:ca:25:42:eb:94:12:42:7c:b3:46:b9:4d:9f:c2:11:12:94:
f0:d4:6b:4b:d9:bb:72:20:39:d1:6a:45:14:6d:8a:58:63:7c:
e7:5f:a2:be:8b:17:85:15:0b:28:ea:c5:0b:c4:71:26:0f:fc:
1c:e0:49:49:37:88:10:5c:de:90:e1:25:b9:cc:46:dc:c4:64:
9c:1a:19:f7:ab:18:a3:b5:f1:28:cb:c0:ad:09:c1:e4:34:2c:
16:02:d0:9f:e4:47:81:2b:6c:3b:2e:98:f0:84:d7:a9:4e:40:
18:5d:2f:ef:51:af:58:1e:ea:d8:3b:42:29:ba:fd:eb:ed:5b:
70:9c:87:01
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICAqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJE
NEREQjRCRjkzMkM1MDA2QjcwNEI5ODI4NDEwMTc0QUM0MTJBRDAeFw0yNjAyMTAx
NTU0NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY1OTg2MzQwMDlCQjIz
NzlGMTEzNDM5OTY4M0IxODNCREMzMTU5NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTc0bxlEw1NqOZ5VQDHFacgYiVpfWsKpOtg1sIoNZvMhrS2h5N
zhLt3oFWqIb5CZkbN0qYT2dttEdNDhHDkLEJMYL5G1/rFiSNS0eMVajmujGcqpLU
M1RtYNtvIwuCwWHdRbIprDPYGcms+NXuhhZKyzNiPGRTMZbE//gBJpRn54IDjjHe
9kAUUdPQHc5sGqR17Xt+qcjlrlFnPf+UfcvZMEBgmveN1+vgwjdr7LL5deuszhgE
RYNJERugPRtoh62W7B9OXeVu+p3oevAMlvSGAskIb1R3UUE1TlAJwOEwc3wiAPjI
Oozc4D2PLzRn4tViAtzXbirGKbNp3LYfKEOfAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU9ZhjQAm7I3nxE0OZaDsYO9wxWXkwHwYDVR0jBBgwFoAUq9TdtL+TLFAGtwS5
goQQF0rEEq0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJ
R0lUL3E5VGR0TC1UTEZBR3R3UzVnb1FRRjByRUVxMC5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcTlUZHRMLVRMRkFHdHdTNWdvUVFGMHJFRXEwLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJR0lULzlaaGpRQW03STNu
eEUwT1phRHNZTzl3eFdYay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAkAV2gAFMwDQYJKoZIhvcNAQELBQADggEBABP9MSyc8VllTZMU6d7IXxnR
49UXOgnpFRmreej/aMZ6oV7oEI1a0rMWM/7pSSf+dmBqKuFEma9b3f465ONCXp58
ztNGRMvKbL3b3GuUFSom8IRdWLdAioFBXu1ci9MSq0O1dIBG3j3PXkNcU+NdVxTn
rU6h8Y4PoZjYDI3UoC3KJULrlBJCfLNGuU2fwhESlPDUa0vZu3IgOdFqRRRtilhj
fOdfor6LF4UVCyjqxQvEcSYP/BzgSUk3iBBc3pDhJbnMRtzEZJwaGferGKO18SjL
wK0JweQ0LBYC0J/kR4ErbDsumPCE16lOQBhdL+9Rr1ge6tg7Qim6/evtW3CchwE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:54:59 2026 by rpki-client