
$ rpki-client -vvf rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a3a2f33322d3332203d3e20313530373636.roa
File: 323430313a356461303a3a2f33322d3332203d3e20313530373636.roa (raw, json)
Hash identifier: j1+WzthZrOuZj7vc+dnX2QxBk/WOSNrujStbD4fbrXc=
Subject key identifier: E2:7D:A9:39:F8:CA:8A:D5:08:5A:D9:CE:D2:28:78:9E:EA:61:46:36
Certificate issuer: /CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
Certificate serial: 1D30B793AE2FB4AE279FB7D5412F3002DB223226
Authority key identifier: F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a3a2f33322d3332203d3e20313530373636.roa
Signing time: Mon 11 May 2026 17:36:39 +0000
ROA not before: Mon 11 May 2026 17:31:39 +0000
ROA not after: Mon 10 May 2027 17:36:39 +0000
asID: 150766
IP address blocks: 2401:5da0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl
rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:48:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:30:b7:93:ae:2f:b4:ae:27:9f:b7:d5:41:2f:30:02:db:22:32:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F825D8527434CAF0FCF9F65446D6EB06CA8993F4
Validity
Not Before: May 11 17:31:39 2026 GMT
Not After : May 10 17:36:39 2027 GMT
Subject: CN=E27DA939F8CA8AD5085AD9CED228789EEA614636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:4c:ea:b3:a2:2d:88:1f:61:75:d0:8c:64:
0a:57:95:1a:10:b7:22:52:c8:b7:06:38:36:ba:6f:
b5:35:7a:56:94:64:01:23:db:80:f4:c3:a9:82:43:
95:0d:e9:77:5d:a7:e8:a8:a6:9b:d5:8a:90:7b:90:
44:ab:b8:bd:f2:90:9c:59:bb:f3:ce:60:c1:aa:4b:
43:75:88:cf:27:b7:88:58:4d:60:4a:78:a4:75:bd:
46:90:e9:a5:48:08:e4:5c:a0:1c:b8:b6:1b:e3:1f:
fd:30:d1:bd:6c:ea:cf:d7:c5:7b:09:9c:c1:1c:21:
97:ba:8a:74:5b:f0:d0:45:bb:4f:93:fc:2e:82:ca:
e1:14:0f:7d:6f:f6:57:b6:c4:09:d5:d4:40:de:f6:
be:69:79:cb:39:6c:ac:42:a3:42:68:17:19:0d:a6:
60:06:fe:e3:b1:17:f9:c4:b6:de:76:0e:16:0c:78:
bb:12:e4:a5:64:22:95:26:fd:44:ec:be:3e:cf:2e:
36:17:a2:6a:28:b8:da:5f:d7:31:76:a4:8e:35:ba:
06:34:1c:e3:ac:d4:e7:55:b6:df:5b:65:5a:c2:cb:
f5:fb:a9:e0:21:16:e9:24:24:60:96:19:32:0d:6f:
f6:89:b2:f2:86:06:85:a9:86:ca:f2:7e:e5:73:8e:
a0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7D:A9:39:F8:CA:8A:D5:08:5A:D9:CE:D2:28:78:9E:EA:61:46:36
X509v3 Authority Key Identifier:
keyid:F8:25:D8:52:74:34:CA:F0:FC:F9:F6:54:46:D6:EB:06:CA:89:93:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F825D8527434CAF0FCF9F65446D6EB06CA8993F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/COCODIGIT/0/323430313a356461303a3a2f33322d3332203d3e20313530373636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2401:5da0::/32
Signature Algorithm: sha256WithRSAEncryption
3f:66:11:9e:c8:49:76:3e:2b:76:c0:fa:95:37:9e:73:b7:0c:
47:29:b6:97:45:4c:6e:eb:21:6c:3b:b0:4c:55:02:49:c5:dd:
9a:3f:e0:38:55:47:38:40:cf:2a:b7:e7:bc:c4:89:e4:66:e4:
07:6d:e9:76:96:04:c1:47:33:82:c4:7f:dc:47:2c:09:94:e4:
61:b9:2f:e9:3b:26:de:f3:54:0d:11:7a:93:1c:3e:2e:33:59:
9d:35:86:51:4e:2f:bb:40:08:44:79:aa:2f:8a:01:e8:57:2b:
5d:5e:4f:b5:c3:dd:82:4b:51:45:2e:a9:66:5e:cf:5f:04:75:
dc:c6:7b:ee:36:d0:2c:e2:01:e5:09:4c:54:6a:4e:4b:e1:c2:
61:5e:f4:89:be:5c:69:d1:44:90:c5:d6:05:89:2f:93:35:c1:
c1:ab:d5:dc:ad:de:89:20:13:0e:06:50:f4:db:3f:99:80:80:
99:2f:62:e9:4d:75:45:bd:46:91:b9:9f:8c:f8:20:16:c5:1a:
53:c2:ba:34:7e:fc:0c:83:62:b7:31:f9:4c:45:1d:bb:53:9b:
e3:22:04:a6:09:42:4a:f8:fe:f6:60:a5:e2:70:ad:1e:3a:1f:
26:1c:69:50:6e:03:79:0e:d9:cd:c5:7c:97:81:8c:bc:3e:dd:
60:9f:23:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:41 2026 by rpki-client