$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/L8g1hAdm4_Nha2YSRG41hCVaTlQ.roa File: L8g1hAdm4_Nha2YSRG41hCVaTlQ.roa (raw, json) Hash identifier: 2/hJ09npkVZsqbRYanV/zl7+X0N3RvEk5RrpsEIVXLU= Subject key identifier: 2F:C8:35:84:07:66:E3:F3:61:6B:66:12:44:6E:35:84:25:5A:4E:54 Certificate issuer: /CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68 Certificate serial: 07 Authority key identifier: 92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/L8g1hAdm4_Nha2YSRG41hCVaTlQ.roa Signing time: Wed 26 Feb 2025 03:00:51 +0000 ROA not before: Wed 26 Feb 2025 03:00:51 +0000 ROA not after: Fri 13 Feb 2026 15:30:28 +0000 asID: 131657 IP address blocks: 163.61.124.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68 Validity Not Before: Feb 26 03:00:51 2025 GMT Not After : Feb 13 15:30:28 2026 GMT Subject: CN=2FC835840766E3F3616B6612446E3584255A4E54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:7a:d9:04:b3:85:32:0e:f6:55:fa:16:fb: 36:be:c8:3a:31:a9:13:27:e9:d3:7a:6f:00:3c:85: 47:d3:6e:e0:f2:7a:fb:bd:e9:09:1e:80:61:4f:3f: 62:44:08:5a:d8:b0:47:04:c9:fe:cc:b8:a5:ca:62: 5b:64:37:ea:54:5f:ac:dc:e4:9e:2e:ff:4e:9c:1d: 2b:67:f5:1c:04:98:bd:7a:52:de:be:97:89:5b:51: 97:26:55:09:b2:55:f0:9e:44:86:7f:9d:63:71:36: 53:c6:a3:0d:ba:dc:02:49:f8:e3:a4:fd:97:01:4d: 24:c1:7f:61:62:3b:5d:22:e1:36:64:5c:28:22:03: ca:0e:08:08:0e:af:15:a5:30:c3:07:b2:7d:d5:f8: 2a:5f:d7:31:b4:71:e7:0a:bd:8d:5c:89:b3:9c:3a: 56:96:1b:75:eb:04:3c:bc:41:d6:f5:be:3a:fd:48: f2:41:71:80:11:c6:e1:fb:78:af:21:1e:1c:57:a4: f4:9f:59:6f:aa:9c:99:e4:00:23:2b:b6:dc:c6:c0: 45:3b:b9:f8:8e:f1:5f:d4:53:fb:86:03:a5:b5:ba: 64:5b:55:d2:eb:7a:13:0f:4b:b4:e6:54:7d:b6:8d: 14:73:a8:e6:0e:68:5c:e6:40:76:b9:bf:0b:34:55: 52:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C8:35:84:07:66:E3:F3:61:6B:66:12:44:6E:35:84:25:5A:4E:54 X509v3 Authority Key Identifier: keyid:92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/L8g1hAdm4_Nha2YSRG41hCVaTlQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.61.124.0/24 Signature Algorithm: sha256WithRSAEncryption ab:db:81:2d:6d:f6:37:e4:b0:f8:07:33:ba:10:b7:b9:d2:40: 18:72:5e:35:f8:d2:42:2a:f4:13:11:c4:c5:0b:f3:9a:a9:9a: 91:99:58:90:0e:e2:93:15:7b:35:ae:85:1b:c8:77:cd:65:05: b7:52:35:1b:8c:2d:15:4b:8d:16:d1:51:ed:a7:45:5f:ec:ba: c9:53:b1:c1:7b:e3:41:5b:6f:8b:6b:3c:e3:c6:b1:38:c8:1b: e7:3c:ee:17:79:8f:a6:d9:7a:f0:6f:8b:0c:af:79:77:d9:e9: ce:4d:51:d7:07:bb:a8:6e:1a:20:31:a8:93:6e:4e:37:9d:da: a9:3f:03:d0:55:e4:e7:84:3c:32:ee:9e:f5:ee:25:d4:a9:6f: e5:0e:3e:c1:1b:9a:2f:34:56:7a:71:55:b1:e3:9b:ad:26:21: 15:55:87:48:32:46:62:c5:83:04:f3:98:3b:de:cd:ef:39:e3: 68:43:13:f7:64:e5:bd:30:0f:f5:86:f5:2d:14:e1:4a:4b:da: 7a:59:9d:2e:83:e1:47:75:c4:c6:d3:9e:a5:42:ab:f7:29:fb: a6:a4:bf:0e:b7:3d:ba:37:93:53:43:63:8e:8e:8a:d6:8e:9b: 3c:98:f0:eb:08:25:69:24:08:2d:5c:ea:c1:ed:de:97:aa:12: 86:a2:de:5e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MjMw M0NFNjM2MkI1QTZGMUU3RTE2RDI1OEMxQzk2RkJCNjc0RDY4MB4XDTI1MDIyNjAz MDA1MVoXDTI2MDIxMzE1MzAyOFowMzExMC8GA1UEAxMoMkZDODM1ODQwNzY2RTNG MzYxNkI2NjEyNDQ2RTM1ODQyNTVBNEU1NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJuGetkEs4UyDvZV+hb7Nr7IOjGpEyfp03pvADyFR9Nu4PJ6+73p CR6AYU8/YkQIWtiwRwTJ/sy4pcpiW2Q36lRfrNzkni7/TpwdK2f1HASYvXpS3r6X iVtRlyZVCbJV8J5Ehn+dY3E2U8ajDbrcAkn446T9lwFNJMF/YWI7XSLhNmRcKCID yg4ICA6vFaUwwweyfdX4Kl/XMbRx5wq9jVyJs5w6VpYbdesEPLxB1vW+Ov1I8kFx gBHG4ft4ryEeHFek9J9Zb6qcmeQAIyu23MbARTu5+I7xX9RT+4YDpbW6ZFtV0ut6 Ew9LtOZUfbaNFHOo5g5oXOZAdrm/CzRVUpECAwEAAaOCAfQwggHwMB0GA1UdDgQW BBQvyDWEB2bj82FrZhJEbjWEJVpOVDAfBgNVHSMEGDAWgBSSMDzmNitabx5+FtJY wclvu2dNaDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF8GA1UdHwRYMFYwVKBS oFCGTnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NT1JOTUFQ TEUva2pBODVqWXJXbThlZmhiU1dNSEpiN3RuVFdnLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9rakE4NWpZcldtOGVmaGJTV01ISmI3dG5UV2cuY2VyMA4GA1UdDwEB/wQE AwIHgDCBnwYIKwYBBQUHAQsEgZIwgY8wWgYIKwYBBQUHMAuGTnJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NT1JOTUFQTEUvTDhnMWhBZG00X05o YTJZU1JHNDFoQ1ZhVGxRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3 bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAKM9fDANBgkqhkiG9w0BAQsFAAOCAQEAq9uBLW32N+Sw+AczuhC3udJAGHJe NfjSQir0ExHExQvzmqmakZlYkA7ikxV7Na6FG8h3zWUFt1I1G4wtFUuNFtFR7adF X+y6yVOxwXvjQVtvi2s848axOMgb5zzuF3mPptl68G+LDK95d9npzk1R1we7qG4a IDGok25ON53aqT8D0FXk54Q8Mu6e9e4l1Klv5Q4+wRuaLzRWenFVseObrSYhFVWH SDJGYsWDBPOYO97N7znjaEMT92TlvTAP9Yb1LRThSkvaelmdLoPhR3XExtOepUKr 9yn7pqS/Drc9ujeTU0Njjo6K1o6bPJjw6wglaSQILVzqwe3el6oShqLeXg== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:40 2025 by rpki-client on console.sobornost.net