$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/uev8BwuMDKNgBXG6_m7uo1pJnd0.roa File: uev8BwuMDKNgBXG6_m7uo1pJnd0.roa (raw, json) Hash identifier: 2FPOoi8SKxKI93kt47fTc3rh/JJXyu7ocSieOSaAGq4= Subject key identifier: B9:EB:FC:07:0B:8C:0C:A3:60:05:71:BA:FE:6E:EE:A3:5A:49:9D:DD Certificate issuer: /CN=ABD4DDB4BF932C5006B704B9828410174AC412AD Certificate serial: 029E Authority key identifier: AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/uev8BwuMDKNgBXG6_m7uo1pJnd0.roa Signing time: Mon 09 Feb 2026 10:08:44 +0000 ROA not before: Mon 09 Feb 2026 10:08:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 150766 IP address blocks: 2401:5da0:4321::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 12:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABD4DDB4BF932C5006B704B9828410174AC412AD Validity Not Before: Feb 9 10:08:44 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B9EBFC070B8C0CA3600571BAFE6EEEA35A499DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:5a:b1:67:a5:d5:71:82:85:a9:2d:f6:48: 87:b3:cd:06:8c:06:95:7d:c7:36:c8:27:bc:18:aa: 68:89:a1:61:e9:c7:39:69:d7:81:7f:db:e1:d1:95: 1e:be:14:56:1c:9c:df:1c:6c:45:3b:97:34:52:58: 0f:1e:9f:a9:1c:c5:5c:dc:60:e1:da:c6:49:4a:1c: 82:45:da:d4:52:49:13:d1:bb:6e:6a:30:ea:d2:83: b4:8e:7a:19:1c:ea:6a:22:a9:59:2f:ca:bc:0c:3e: 82:ed:f8:79:34:a6:70:b0:89:f5:aa:c8:06:56:a0: 6c:b5:d5:5f:3f:97:e9:3e:a7:29:f0:38:79:62:5d: bf:8e:ab:96:9a:4e:b2:cb:8b:b1:e3:f5:f9:93:ff: a8:b8:70:e6:d3:42:ef:97:5d:14:a9:55:a2:d6:41: f3:39:7b:a8:b8:98:81:ad:d0:51:52:65:f2:33:db: 77:d9:e2:ee:e0:f6:68:31:2d:2a:bd:ab:aa:8b:9e: 13:d4:25:c7:64:42:ef:2b:ab:be:88:ad:1b:0b:1b: 64:96:c2:f1:63:c1:dc:61:55:65:59:4c:3f:44:81: bd:51:f8:e5:97:36:94:3c:9a:9d:85:ba:aa:9f:5b: db:6b:d7:f5:8e:f4:82:91:0f:b1:a4:85:d6:ae:6c: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EB:FC:07:0B:8C:0C:A3:60:05:71:BA:FE:6E:EE:A3:5A:49:9D:DD X509v3 Authority Key Identifier: keyid:AB:D4:DD:B4:BF:93:2C:50:06:B7:04:B9:82:84:10:17:4A:C4:12:AD X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/q9TdtL-TLFAGtwS5goQQF0rEEq0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q9TdtL-TLFAGtwS5goQQF0rEEq0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COCODIGIT/uev8BwuMDKNgBXG6_m7uo1pJnd0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:5da0:4321::/48 Signature Algorithm: sha256WithRSAEncryption 22:fe:3e:72:34:a9:5c:c0:b6:f8:49:07:8d:4f:85:2c:6d:dd: 22:e1:20:e7:2a:87:f3:e1:10:2b:01:a5:41:0d:90:77:79:2c: 1b:be:91:72:29:d2:28:fa:f1:8b:e3:91:9c:d6:69:2f:b1:18: ba:5b:61:6a:4a:b0:19:82:9d:22:8a:1f:a7:dc:87:2c:21:bd: 36:59:fc:b6:63:f6:37:ef:e8:ae:2f:28:8f:6b:15:76:86:ee: 7b:3a:e1:36:65:05:47:9b:66:af:1c:8b:02:9e:e2:df:90:e1: 28:f2:ae:21:84:4d:6b:39:10:b5:4a:73:9c:0f:48:a5:2e:8a: 1d:37:b8:b9:64:a8:06:fc:2a:53:e8:79:05:e3:3a:7a:9b:72: b4:7f:70:ae:76:ea:1d:6b:78:d5:1b:b5:26:88:03:dd:e5:68: e4:76:14:b1:91:93:4e:11:8f:90:e5:b5:7d:d9:10:92:4c:9c: 30:dc:32:31:d5:0d:4d:e0:c9:13:88:b2:02:e3:23:68:a0:f1: dd:97:fd:3b:5e:48:e5:22:be:c5:6a:3c:10:65:09:50:9d:d8: 0e:c4:1f:1e:46:88:bb:2a:d1:65:02:a5:55:84:89:fb:5b:34: 95:4b:d8:a8:e8:48:6c:31:10:ff:7f:c5:42:56:f5:5e:d3:f7: 27:4d:d1:75 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJE NEREQjRCRjkzMkM1MDA2QjcwNEI5ODI4NDEwMTc0QUM0MTJBRDAeFw0yNjAyMDkx MDA4NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI5RUJGQzA3MEI4QzBD QTM2MDA1NzFCQUZFNkVFRUEzNUE0OTlEREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCyMVqxZ6XVcYKFqS32SIezzQaMBpV9xzbIJ7wYqmiJoWHpxzlp 14F/2+HRlR6+FFYcnN8cbEU7lzRSWA8en6kcxVzcYOHaxklKHIJF2tRSSRPRu25q MOrSg7SOehkc6moiqVkvyrwMPoLt+Hk0pnCwifWqyAZWoGy11V8/l+k+pynwOHli Xb+Oq5aaTrLLi7Hj9fmT/6i4cObTQu+XXRSpVaLWQfM5e6i4mIGt0FFSZfIz23fZ 4u7g9mgxLSq9q6qLnhPUJcdkQu8rq76IrRsLG2SWwvFjwdxhVWVZTD9Egb1R+OWX NpQ8mp2FuqqfW9tr1/WO9IKRD7GkhdaubI7tAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUuev8BwuMDKNgBXG6/m7uo1pJnd0wHwYDVR0jBBgwFoAUq9TdtL+TLFAGtwS5 goQQF0rEEq0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJ R0lUL3E5VGR0TC1UTEZBR3R3UzVnb1FRRjByRUVxMC5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcTlUZHRMLVRMRkFHdHdTNWdvUVFGMHJFRXEwLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09DT0RJR0lUL3VldjhCd3VNREtO Z0JYRzZfbTd1bzFwSm5kMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAkAV2gQyEwDQYJKoZIhvcNAQELBQADggEBACL+PnI0qVzAtvhJB41PhSxt 3SLhIOcqh/PhECsBpUENkHd5LBu+kXIp0ij68YvjkZzWaS+xGLpbYWpKsBmCnSKK H6fchywhvTZZ/LZj9jfv6K4vKI9rFXaG7ns64TZlBUebZq8ciwKe4t+Q4SjyriGE TWs5ELVKc5wPSKUuih03uLlkqAb8KlPoeQXjOnqbcrR/cK526h1reNUbtSaIA93l aOR2FLGRk04Rj5DltX3ZEJJMnDDcMjHVDU3gyROIsgLjI2ig8d2X/TteSOUivsVq PBBlCVCd2A7EHx5GiLsq0WUCpVWEiftbNJVL2KjoSGwxEP9/xUJW9V7T9ydN0XU= -----END CERTIFICATE-----Generated at Mon Mar 2 11:57:00 2026 by rpki-client