
$ rpki-client -vvf rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a313233343a3a2f34382d3438203d3e20313530373636.roa
File: 323430313a356461303a313233343a3a2f34382d3438203d3e20313530373636.roa (raw, json)
Hash identifier: 5TUA2SXMLAmP0ZYVxlurx0SWantZ3oV/H15YGJH3LH8=
Subject key identifier: D9:A3:3A:7E:3B:2D:67:0D:F2:2E:C2:F7:E7:8D:6A:C3:2D:11:A3:44
Certificate issuer: /CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
Certificate serial: 4A17CD29E821B2CF5863B8B2C7235B40010FC7C6
Authority key identifier: F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a313233343a3a2f34382d3438203d3e20313530373636.roa
Signing time: Mon 11 May 2026 17:58:03 +0000
ROA not before: Mon 11 May 2026 17:53:03 +0000
ROA not after: Mon 10 May 2027 17:58:03 +0000
asID: 150766
IP address blocks: 2401:5da0:1234::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl
rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 22:17:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:17:cd:29:e8:21:b2:cf:58:63:b8:b2:c7:23:5b:40:01:0f:c7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
Validity
Not Before: May 11 17:53:03 2026 GMT
Not After : May 10 17:58:03 2027 GMT
Subject: CN=D9A33A7E3B2D670DF22EC2F7E78D6AC32D11A344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:b7:30:aa:2d:e4:5b:04:e1:32:8f:55:0e:
17:ad:08:8f:57:1b:af:9f:b2:c3:7f:62:66:e1:1f:
87:01:41:ff:5b:38:c6:38:6a:ee:bb:58:0e:71:df:
4b:e8:0f:bd:1d:44:b7:ba:e7:ee:2c:3b:99:83:47:
63:3d:d5:78:75:7f:78:24:6f:93:a8:ab:e9:5a:42:
3b:04:02:d0:26:77:c5:01:b2:2b:99:57:e1:ad:9c:
d6:e0:59:ad:ec:72:1e:d4:00:48:fd:91:a3:2e:f3:
21:73:55:7f:08:68:bb:54:a4:31:d7:c0:79:be:07:
75:f7:27:db:50:39:8e:2e:7c:f7:e2:00:20:94:a4:
29:32:06:ce:2b:3e:8b:29:49:fd:fd:00:64:7d:64:
7e:91:cf:0a:e7:42:ea:a3:67:9c:be:29:68:18:93:
14:ed:bd:2a:c4:0f:38:cd:d2:ec:de:3b:cb:77:58:
20:f8:e6:80:4d:7f:87:c4:95:17:de:64:00:fb:71:
ab:8c:90:f5:17:b8:74:63:e2:29:aa:aa:c0:d9:62:
93:98:a3:19:4c:da:b2:d3:ef:a1:c4:09:3a:2e:fa:
cf:a4:9a:1a:b2:68:7f:e4:09:51:8b:b3:b0:df:65:
d6:ac:07:e2:e6:6b:97:cd:76:65:0e:40:61:f9:59:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A3:3A:7E:3B:2D:67:0D:F2:2E:C2:F7:E7:8D:6A:C3:2D:11:A3:44
X509v3 Authority Key Identifier:
keyid:F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a313233343a3a2f34382d3438203d3e20313530373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:5da0:1234::/48
Signature Algorithm: sha256WithRSAEncryption
8f:47:a5:5b:7d:68:51:f4:2f:8f:d0:af:d4:dd:44:85:f2:1f:
b3:ce:e6:91:85:3d:88:ba:7a:a3:40:79:d8:b9:8d:df:b6:a4:
61:b8:87:77:9b:fb:4b:4c:c6:2a:94:ae:84:62:f5:89:98:2f:
ab:d5:48:21:52:36:f8:3c:79:bb:e2:35:c1:92:c6:cf:01:ac:
ba:67:ed:98:91:d2:3c:33:a3:8f:89:f5:39:15:8c:4c:13:16:
0f:05:71:ba:09:ca:2d:93:a3:a5:52:9b:a4:17:ee:37:90:f1:
81:6b:36:10:9b:df:05:89:82:d1:d2:e0:8f:2d:ae:85:33:71:
e6:5b:9f:b8:eb:35:4e:5b:49:e1:48:42:d5:d7:a7:fd:36:e5:
b3:eb:29:85:33:4f:ab:b9:d3:1f:75:b6:20:72:b2:f9:c4:24:
41:e2:d5:e3:80:e3:79:b5:9b:ae:c2:f8:ef:1f:56:11:60:25:
86:3e:1c:e5:24:6c:6c:8e:38:fd:88:b2:55:d6:b9:a9:32:35:
ee:c4:16:ba:4a:c9:f3:25:84:34:f3:db:4b:43:1d:82:33:56:
21:8a:d9:5e:84:96:3a:ff:23:99:91:ce:6f:a0:c6:75:be:30:
61:80:ff:d7:46:8a:d7:6a:e0:1e:1f:88:11:b1:b1:37:9a:ba:
b5:6a:70:d4
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgIUShfNKeghss9YY7iyxyNbQAEPx8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjgyNUQ4NTI3NDM0Q0FGMEZDRjlGNjU0NDZENkVCMDZD
QTg5OTNGNDAeFw0yNjA1MTExNzUzMDNaFw0yNzA1MTAxNzU4MDNaMDMxMTAvBgNV
BAMTKEQ5QTMzQTdFM0IyRDY3MERGMjJFQzJGN0U3OEQ2QUMzMkQxMUEzNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1orcwqi3kWwThMo9VDhetCI9X
G6+fssN/YmbhH4cBQf9bOMY4au67WA5x30voD70dRLe65+4sO5mDR2M91Xh1f3gk
b5Ooq+laQjsEAtAmd8UBsiuZV+GtnNbgWa3sch7UAEj9kaMu8yFzVX8IaLtUpDHX
wHm+B3X3J9tQOY4ufPfiACCUpCkyBs4rPospSf39AGR9ZH6RzwrnQuqjZ5y+KWgY
kxTtvSrEDzjN0uzeO8t3WCD45oBNf4fElRfeZAD7cauMkPUXuHRj4imqqsDZYpOY
oxlM2rLT76HECTou+s+kmhqyaH/kCVGLs7DfZdasB+Lma5fNdmUOQGH5WUtVAgMB
AAGjggH3MIIB8zAdBgNVHQ4EFgQU2aM6fjstZw3yLsL3541qwy0Ro0QwHwYDVR0j
BBgwFoAU+CXYUnQ0yvD8+fZURtbrBsqJk/QwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ09DT0RJ
R0lULzAvRjgyNUQ4NTI3NDM0Q0FGMEZDRjlGNjU0NDZENkVCMDZDQTg5OTNGNC5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GODI1RDg1Mjc0MzRDQUYwRkNGOUY2NTQ0
NkQ2RUIwNkNBODk5M0Y0LmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzAL
hm1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NPQ09ESUdJVC8wLzMyMzQz
MDMxM2EzNTY0NjEzMDNhMzEzMjMzMzQzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAz
MTM1MzAzNzM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYB
BQUHAQcBAf8EEzARMA8EAgACMAkDBwAkAV2gEjQwDQYJKoZIhvcNAQELBQADggEB
AI9HpVt9aFH0L4/Qr9TdRIXyH7PO5pGFPYi6eqNAedi5jd+2pGG4h3eb+0tMxiqU
roRi9YmYL6vVSCFSNvg8ebviNcGSxs8BrLpn7ZiR0jwzo4+J9TkVjEwTFg8FcboJ
yi2To6VSm6QX7jeQ8YFrNhCb3wWJgtHS4I8troUzceZbn7jrNU5bSeFIQtXXp/02
5bPrKYUzT6u50x91tiBysvnEJEHi1eOA43m1m67C+O8fVhFgJYY+HOUkbGyOOP2I
slXWuakyNe7EFrpKyfMlhDTz20tDHYIzViGK2V6Eljr/I5mRzm+gxnW+MGGA/9dG
itdq4B4fiBGxsTeaurVqcNQ=
-----END CERTIFICATE-----
Generated at Wed May 13 09:18:11 2026 by rpki-client