$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/nRdcJyl5uW21vQ0Spsl5tTHIyl4.roa File: nRdcJyl5uW21vQ0Spsl5tTHIyl4.roa (raw, json) Hash identifier: 6TbUSsaubII8lL8LTBJ4cSG+zWObMpXX/Rl41GVdlwo= Subject key identifier: 9D:17:5C:27:29:79:B9:6D:B5:BD:0D:12:A6:C9:79:B5:31:C8:CA:5E Certificate issuer: /CN=34F47974E551C20236C3D89395F57F3BA02B57B7 Certificate serial: 0D33 Authority key identifier: 34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/nRdcJyl5uW21vQ0Spsl5tTHIyl4.roa Signing time: Fri 22 Aug 2025 08:51:52 +0000 ROA not before: Fri 22 Aug 2025 08:51:52 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 395793 IP address blocks: 103.129.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 21:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3379 (0xd33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34F47974E551C20236C3D89395F57F3BA02B57B7 Validity Not Before: Aug 22 08:51:52 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9D175C272979B96DB5BD0D12A6C979B531C8CA5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:36:73:19:a0:f9:56:bd:58:cd:c2:59:43:db: 57:6f:09:90:83:31:29:14:a5:12:57:c4:d2:fc:bd: df:5d:c0:ca:c5:0c:00:d1:b8:3d:d0:d9:5a:2d:ed: b4:ba:a1:4a:95:88:87:b7:71:67:f6:f7:2d:a0:c2: d6:37:cc:f7:02:a8:89:db:5c:8a:dd:5e:d5:fc:c8: fb:db:78:e5:87:57:e0:d8:d8:7b:a1:a1:af:3a:b6: 94:7f:b3:b9:a0:96:bb:a8:2f:f2:ba:61:73:1f:f1: c9:f7:88:1a:f1:6b:e1:eb:83:2e:e3:c3:30:05:12: 87:bf:fc:47:45:88:13:ee:e9:e2:0c:d5:50:43:a1: ff:82:f2:b9:5c:5f:05:5f:cc:94:9b:83:c3:62:38: 96:2c:61:64:8d:d3:06:7d:83:02:3c:e1:75:a8:a9: be:95:b3:86:14:71:b3:c6:32:13:8c:f2:78:e5:bd: 49:9c:57:42:8b:c3:f4:6d:23:54:73:e7:8d:2b:e0: 95:1e:74:f7:f8:55:53:48:2d:23:83:49:57:53:43: 80:9c:6b:6a:c7:ac:14:c8:3f:3a:85:b3:9b:8e:17: f2:06:ec:e7:3d:40:e9:ad:c5:c9:f5:5c:34:dd:f5: 0c:af:a4:fd:c3:3d:8e:83:66:0b:1b:ba:cf:27:b0: 9e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:17:5C:27:29:79:B9:6D:B5:BD:0D:12:A6:C9:79:B5:31:C8:CA:5E X509v3 Authority Key Identifier: keyid:34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/nRdcJyl5uW21vQ0Spsl5tTHIyl4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.129.160.0/22 Signature Algorithm: sha256WithRSAEncryption a9:12:4b:38:f0:fc:50:f6:6f:78:6b:be:c4:8d:81:27:6b:c9: bb:10:9e:24:51:10:36:c2:aa:d4:e0:66:c3:6d:c1:8c:9f:46: 5f:11:d2:4a:47:0a:b2:8d:b6:a7:8a:5e:b9:be:f0:28:e8:1a: ae:26:13:f5:1e:59:ff:d7:72:0a:3f:50:45:1d:b6:00:98:fa: e9:66:d9:ba:a7:fa:96:1f:1f:25:cf:1f:7e:12:36:64:32:ea: db:1c:55:3a:79:2b:1c:11:b7:b3:b4:55:d8:5e:f1:87:d6:a7: d3:23:1c:22:ec:8e:af:c6:72:20:73:e5:7e:0d:14:ba:1a:37: b7:29:d7:be:cd:80:24:2a:51:fa:ba:e2:6a:eb:e5:51:59:af: 2e:53:a3:db:0c:3b:59:d3:c6:d5:04:53:83:8a:2f:bd:21:18: b2:79:90:a4:6e:7d:ac:b7:eb:81:d9:9f:69:32:20:7d:63:f4: 94:09:65:60:e7:75:b5:08:6e:34:f7:06:d7:8a:a2:08:7c:f3: ed:eb:54:c2:d6:6b:50:d2:5f:a0:97:2d:17:ea:b6:43:ae:1a: c8:76:55:21:69:0c:51:01:aa:1e:54:fd:d2:40:91:dd:92:d6: b7:a8:9d:ec:15:f0:a5:85:27:d9:84:bc:de:5a:f3:f8:76:4b: 94:33:55:f7 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRG NDc5NzRFNTUxQzIwMjM2QzNEODkzOTVGNTdGM0JBMDJCNTdCNzAeFw0yNTA4MjIw ODUxNTJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlEMTc1QzI3Mjk3OUI5 NkRCNUJEMEQxMkE2Qzk3OUI1MzFDOENBNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtNnMZoPlWvVjNwllD21dvCZCDMSkUpRJXxNL8vd9dwMrFDADR uD3Q2Vot7bS6oUqViIe3cWf29y2gwtY3zPcCqInbXIrdXtX8yPvbeOWHV+DY2Huh oa86tpR/s7mglruoL/K6YXMf8cn3iBrxa+Hrgy7jwzAFEoe//EdFiBPu6eIM1VBD of+C8rlcXwVfzJSbg8NiOJYsYWSN0wZ9gwI84XWoqb6Vs4YUcbPGMhOM8njlvUmc V0KLw/RtI1Rz540r4JUedPf4VVNILSODSVdTQ4Cca2rHrBTIPzqFs5uOF/IG7Oc9 QOmtxcn1XDTd9QyvpP3DPY6DZgsbus8nsJ7XAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUnRdcJyl5uW21vQ0Spsl5tTHIyl4wHwYDVR0jBBgwFoAUNPR5dOVRwgI2w9iT lfV/O6ArV7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9SSUNM T1VEL05QUjVkT1ZSd2dJMnc5aVRsZlZfTzZBclY3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvTlBSNWRPVlJ3Z0kydzlpVGxmVl9PNkFyVjdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9SSUNMT1VEL25SZGNKeWw1dVcy MXZRMFNwc2w1dFRISXlsNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJngaAwDQYJKoZIhvcNAQELBQADggEBAKkSSzjw/FD2b3hrvsSNgSdrybsQ niRREDbCqtTgZsNtwYyfRl8R0kpHCrKNtqeKXrm+8CjoGq4mE/UeWf/Xcgo/UEUd tgCY+ulm2bqn+pYfHyXPH34SNmQy6tscVTp5KxwRt7O0Vdhe8YfWp9MjHCLsjq/G ciBz5X4NFLoaN7cp177NgCQqUfq64mrr5VFZry5To9sMO1nTxtUEU4OKL70hGLJ5 kKRufay364HZn2kyIH1j9JQJZWDndbUIbjT3BteKogh88+3rVMLWa1DSX6CXLRfq tkOuGsh2VSFpDFEBqh5U/dJAkd2S1reonewV8KWFJ9mEvN5a8/h2S5QzVfc= -----END CERTIFICATE-----Generated at Fri Oct 24 18:56:23 2025 by rpki-client