$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/fZJJwdwUJa0d9Dr1kZFQ8abvINk.roa File: fZJJwdwUJa0d9Dr1kZFQ8abvINk.roa (raw, json) Hash identifier: q+xujKXmlQxLq4tShx8BKr+TDeKQZiRsl9xR1oPn4MY= Subject key identifier: 7D:92:49:C1:DC:14:25:AD:1D:F4:3A:F5:91:91:50:F1:A6:EF:20:D9 Certificate issuer: /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD Certificate serial: 0293 Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/fZJJwdwUJa0d9Dr1kZFQ8abvINk.roa Signing time: Wed 28 Jan 2026 14:55:21 +0000 ROA not before: Wed 28 Jan 2026 14:55:21 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9923 IP address blocks: 2401:5da0:9923::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 12:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 659 (0x293) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD Validity Not Before: Jan 28 14:55:21 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7D9249C1DC1425AD1DF43AF5919150F1A6EF20D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ab:89:bc:c8:12:9f:0d:6b:cf:da:81:2e:5f: e2:3a:c9:fa:1b:90:eb:e0:f8:69:75:ab:f1:d9:a3: e0:e2:45:91:6c:3c:b6:f0:08:f3:65:07:03:a4:a8: 02:76:e8:36:f4:75:b7:7b:75:d0:d8:06:4d:e0:5f: a1:f1:9b:e4:8c:d3:36:3e:87:4e:0c:3b:68:72:46: ab:f0:a0:b2:45:af:18:a8:e8:56:bd:af:48:6d:49: c3:c4:fe:53:d2:35:29:77:82:3e:6f:9c:93:57:a1: e0:f4:a9:4e:24:63:ad:a7:1a:13:b7:08:ea:98:8e: 4c:58:d6:93:56:af:f0:33:1e:b2:1f:8d:65:77:03: 29:fb:e6:70:67:4d:20:38:a9:9f:3f:82:73:4d:ba: e3:5f:24:be:21:f5:b7:69:c7:10:c7:75:9d:49:42: e8:5e:a4:e0:cb:60:82:2f:91:b3:97:21:25:83:83: fa:8d:7c:a0:5d:aa:3b:39:c4:1b:22:84:da:71:6c: d1:05:b6:d5:1d:e2:62:09:fa:cb:21:07:5d:be:94: 07:0e:a7:c2:5b:78:73:f5:07:62:9a:2b:eb:85:08: b8:bb:b2:b1:17:6c:75:0c:56:e0:8c:06:52:39:bf: 31:88:6b:41:38:4b:6e:5b:04:63:ee:18:d5:ab:5b: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:92:49:C1:DC:14:25:AD:1D:F4:3A:F5:91:91:50:F1:A6:EF:20:D9 X509v3 Authority Key Identifier: keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/fZJJwdwUJa0d9Dr1kZFQ8abvINk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:5da0:9923::/48 Signature Algorithm: sha256WithRSAEncryption 74:40:96:06:fc:b8:64:44:c3:fe:d3:63:53:10:89:5a:fc:38: 3c:92:36:32:eb:b5:d4:08:4b:b9:ad:01:a5:bd:46:7c:b6:28: 39:78:6d:88:d6:67:28:31:25:31:d5:10:81:d3:33:92:2c:9b: 7a:4a:63:36:1e:f7:b7:4f:ee:e8:5e:41:24:81:94:23:08:8c: 65:ce:e6:80:65:1a:f3:50:9f:9d:ed:59:a8:f3:c1:62:cb:a1: 6b:64:3f:e0:8c:44:da:61:dc:17:a7:dc:c2:c0:64:20:b4:4d: dd:9a:8a:0d:95:81:0e:52:ba:db:68:f6:99:15:86:55:47:da: 15:46:99:44:bb:80:0c:e3:2a:94:87:b0:34:a2:6a:7b:93:9f: 2b:65:01:49:1e:3a:fa:43:8d:cb:4c:df:ac:b6:57:b5:a1:94: b8:08:60:62:e6:64:dc:79:8b:d6:70:ae:e2:b9:41:55:79:b3: 1a:ca:66:ef:a7:eb:a6:99:84:7b:7a:08:7b:83:59:de:47:e6: db:f9:6e:eb:7e:a2:47:66:1f:ab:60:98:4a:d2:45:a3:4d:c5: c7:e2:bf:d6:d7:c5:0f:58:38:b3:22:56:4e:f0:87:f3:89:fd: c1:b5:a9:bc:1e:eb:16:a5:30:c4:5a:c5:56:c5:1d:a1:85:0b: 27:27:ff:97 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICApMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJE NEREQjRCRjkzMkM1MDA2QjcwNEI5ODI4NDEwMTc0QUM0MTJBRDAeFw0yNjAxMjgx NDU1MjFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdEOTI0OUMxREMxNDI1 QUQxREY0M0FGNTkxOTE1MEYxQTZFRjIwRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwq4m8yBKfDWvP2oEuX+I6yfobkOvg+Gl1q/HZo+DiRZFsPLbw CPNlBwOkqAJ26Db0dbd7ddDYBk3gX6Hxm+SM0zY+h04MO2hyRqvwoLJFrxio6Fa9 r0htScPE/lPSNSl3gj5vnJNXoeD0qU4kY62nGhO3COqYjkxY1pNWr/AzHrIfjWV3 Ayn75nBnTSA4qZ8/gnNNuuNfJL4h9bdpxxDHdZ1JQuhepODLYIIvkbOXISWDg/qN fKBdqjs5xBsihNpxbNEFttUd4mIJ+sshB12+lAcOp8JbeHP1B2KaK+uFCLi7srEX bHUMVuCMBlI5vzGIa0E4S25bBGPuGNWrW6TxAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUfZJJwdwUJa0d9Dr1kZFQ8abvINkwHwYDVR0jBBgwFoAUq9TdtL+TLFAGtwS5 goQQF0rEEq0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJ R0lUL3E5VGR0TC1UTEZBR3R3UzVnb1FRRjByRUVxMC5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcTlUZHRMLVRMRkFHdHdTNWdvUVFGMHJFRXEwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJR0lUL2ZaSkp3ZHdVSmEw ZDlEcjFrWkZROGFidklOay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAkAV2gmSMwDQYJKoZIhvcNAQELBQADggEBAHRAlgb8uGREw/7TY1MQiVr8 ODySNjLrtdQIS7mtAaW9Rny2KDl4bYjWZygxJTHVEIHTM5Ism3pKYzYe97dP7uhe QSSBlCMIjGXO5oBlGvNQn53tWajzwWLLoWtkP+CMRNph3Ben3MLAZCC0Td2aig2V gQ5Sutto9pkVhlVH2hVGmUS7gAzjKpSHsDSianuTnytlAUkeOvpDjctM36y2V7Wh lLgIYGLmZNx5i9ZwruK5QVV5sxrKZu+n66aZhHt6CHuDWd5H5tv5but+okdmH6tg mErSRaNNxcfiv9bXxQ9YOLMiVk7wh/OJ/cG1qbwe6xalMMRaxVbFHaGFCycn/5c= -----END CERTIFICATE-----Generated at Mon Mar 2 08:54:14 2026 by rpki-client