$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/gSg_NQfblMf8GMwAFCZ3ITbcpKk.roa File: gSg_NQfblMf8GMwAFCZ3ITbcpKk.roa (raw, json) Hash identifier: NWurS7/wKdRDs9XDd8vl82paWr52jlhURs+Io3+tbkk= Subject key identifier: 81:28:3F:35:07:DB:94:C7:FC:18:CC:00:14:26:77:21:36:DC:A4:A9 Certificate issuer: /CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68 Certificate serial: 05 Authority key identifier: 92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/gSg_NQfblMf8GMwAFCZ3ITbcpKk.roa Signing time: Wed 26 Feb 2025 03:00:34 +0000 ROA not before: Wed 26 Feb 2025 03:00:34 +0000 ROA not after: Fri 13 Feb 2026 15:30:28 +0000 asID: 152621 IP address blocks: 163.61.124.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 02:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68 Validity Not Before: Feb 26 03:00:34 2025 GMT Not After : Feb 13 15:30:28 2026 GMT Subject: CN=81283F3507DB94C7FC18CC001426772136DCA4A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:01:86:17:13:8b:4e:ee:90:c7:49:66:3f:c5: 81:44:f0:b2:ea:83:e4:3a:ef:29:8f:fb:f3:54:8c: 45:fb:1d:96:88:ef:82:e1:f2:b1:bd:fe:71:49:e5: dd:e2:25:59:aa:6e:1b:75:9c:4d:3c:f3:dc:7e:40: 84:1e:dc:a4:7c:60:8d:90:09:1e:6c:5f:0f:d8:2a: 6f:f7:c7:be:7c:67:2b:c5:64:3f:65:b9:6a:57:39: 90:2c:1c:1a:c9:f9:2a:df:3f:34:9e:30:14:15:66: 80:2b:e5:2b:59:09:be:21:ca:dd:d2:2a:f2:f5:d5: 18:3c:6c:e0:ba:ba:d3:85:e7:ab:3e:70:40:81:eb: d6:3b:9d:79:65:de:58:ef:f8:1b:68:7d:10:4e:33: da:72:f5:dc:d6:11:06:76:d0:1a:18:34:57:34:f9: 0e:34:5e:cd:30:e7:4e:16:01:16:d6:ed:25:c7:5a: c7:55:d7:67:b1:e7:ef:90:db:ca:b4:4b:81:a6:b0: 01:e7:6f:f0:6a:c3:50:06:20:d5:0f:fb:12:3a:86: cd:ca:ab:bb:f9:32:20:ea:52:52:dd:34:7e:ad:6d: 86:bc:4c:f9:9b:02:53:35:c2:f1:a6:c7:96:7c:fc: 7e:75:88:82:49:c6:7d:a1:30:e2:2d:ce:91:6e:34: c9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:28:3F:35:07:DB:94:C7:FC:18:CC:00:14:26:77:21:36:DC:A4:A9 X509v3 Authority Key Identifier: keyid:92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/gSg_NQfblMf8GMwAFCZ3ITbcpKk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.61.124.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:57:58:d4:f6:a4:29:dd:af:ec:3d:88:88:5c:bb:db:97:5c: 37:d6:b5:ae:de:b2:fa:59:a9:a2:bf:01:2e:74:40:21:09:01: 86:7c:87:82:7f:38:47:26:e3:d8:33:90:1c:9a:d9:08:ce:55: ad:f7:f8:9f:6a:b3:e7:34:25:a9:01:88:4f:be:2f:68:80:3d: d5:2a:1f:7a:49:ab:55:d1:d4:d3:93:79:2d:74:80:f8:2b:96: ca:8a:6c:44:df:cf:8c:64:40:ea:ab:25:93:46:99:00:fd:5d: 0d:0d:4b:76:8a:c1:f0:1b:2b:f9:b4:5c:ab:58:c9:8a:60:12: 9d:a0:cb:8c:42:2c:0f:72:15:e9:4c:71:55:21:9c:0a:b8:a3: 84:00:eb:10:9a:b0:09:fd:05:5b:b9:18:c4:9d:6a:c5:5d:c7: c8:cf:ba:62:28:2c:1d:92:4b:a1:4c:04:ef:ca:8c:c4:a6:5b: b8:e4:a1:6e:1e:c4:69:41:93:06:4a:c1:01:98:a3:71:64:b1: 10:f8:61:0a:cf:92:ee:13:51:e4:87:58:50:e1:d2:9c:fc:19: a6:4e:c3:bc:cb:4b:c2:7c:bb:85:f0:96:91:9b:e3:33:d7:d3: 72:36:26:6f:f6:cb:1e:2b:58:ae:13:e9:50:0b:1a:58:00:40: 5c:39:36:bc -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MjMw M0NFNjM2MkI1QTZGMUU3RTE2RDI1OEMxQzk2RkJCNjc0RDY4MB4XDTI1MDIyNjAz MDAzNFoXDTI2MDIxMzE1MzAyOFowMzExMC8GA1UEAxMoODEyODNGMzUwN0RCOTRD N0ZDMThDQzAwMTQyNjc3MjEzNkRDQTRBOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJkBhhcTi07ukMdJZj/FgUTwsuqD5DrvKY/781SMRfsdlojvguHy sb3+cUnl3eIlWapuG3WcTTzz3H5AhB7cpHxgjZAJHmxfD9gqb/fHvnxnK8VkP2W5 alc5kCwcGsn5Kt8/NJ4wFBVmgCvlK1kJviHK3dIq8vXVGDxs4Lq604Xnqz5wQIHr 1judeWXeWO/4G2h9EE4z2nL13NYRBnbQGhg0VzT5DjRezTDnThYBFtbtJcdax1XX Z7Hn75DbyrRLgaawAedv8GrDUAYg1Q/7EjqGzcqru/kyIOpSUt00fq1thrxM+ZsC UzXC8abHlnz8fnWIgknGfaEw4i3OkW40yccCAwEAAaOCAfQwggHwMB0GA1UdDgQW BBSBKD81B9uUx/wYzAAUJnchNtykqTAfBgNVHSMEGDAWgBSSMDzmNitabx5+FtJY wclvu2dNaDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GA1UdHwRYMFYwVKBS oFCGTnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NT1JOTUFQ TEUva2pBODVqWXJXbThlZmhiU1dNSEpiN3RuVFdnLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9rakE4NWpZcldtOGVmaGJTV01ISmI3dG5UV2cuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnwYIKwYBBQUHAQsEgZIwgY8wWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NT1JOTUFQTEUvZ1NnX05RZmJsTWY4 R013QUZDWjNJVGJjcEtrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3 bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAaM9fDANBgkqhkiG9w0BAQsFAAOCAQEAX1dY1PakKd2v7D2IiFy725dcN9a1 rt6y+lmpor8BLnRAIQkBhnyHgn84Rybj2DOQHJrZCM5Vrff4n2qz5zQlqQGIT74v aIA91SofekmrVdHU05N5LXSA+CuWyopsRN/PjGRA6qslk0aZAP1dDQ1LdorB8Bsr +bRcq1jJimASnaDLjEIsD3IV6UxxVSGcCrijhADrEJqwCf0FW7kYxJ1qxV3HyM+6 YigsHZJLoUwE78qMxKZbuOShbh7EaUGTBkrBAZijcWSxEPhhCs+S7hNR5IdYUOHS nPwZpk7DvMtLwny7hfCWkZvjM9fTcjYmb/bLHitYrhPpUAsaWABAXDk2vA== -----END CERTIFICATE-----Generated at Tue Oct 28 00:15:50 2025 by rpki-client