$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/G6qUEgGsnCdNyGnhiyraFakEYmo.roa File: G6qUEgGsnCdNyGnhiyraFakEYmo.roa (raw, json) Hash identifier: fQ4Kx1BrVnKMTLBUnIsw4+UnUcluscz5831vze1Tyxs= Subject key identifier: 1B:AA:94:12:01:AC:9C:27:4D:C8:69:E1:8B:2A:DA:15:A9:04:62:6A Certificate issuer: /CN=34F47974E551C20236C3D89395F57F3BA02B57B7 Certificate serial: 0C41 Authority key identifier: 34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/G6qUEgGsnCdNyGnhiyraFakEYmo.roa Signing time: Mon 10 Feb 2025 14:03:55 +0000 ROA not before: Mon 10 Feb 2025 14:03:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 395793 IP address blocks: 103.129.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 00:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34F47974E551C20236C3D89395F57F3BA02B57B7 Validity Not Before: Feb 10 14:03:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1BAA941201AC9C274DC869E18B2ADA15A904626A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:db:a4:35:ba:d5:42:12:0d:24:8e:13:c1: 46:f2:b6:ad:5f:80:b8:f4:9f:74:74:d6:bf:fc:43: c6:12:da:de:de:48:65:4d:0a:cf:5b:c9:78:56:ab: 02:18:48:52:24:ec:66:1c:36:60:30:12:35:c7:07: 85:f6:0e:6c:ce:bf:b0:6f:0e:01:4a:fa:ea:2c:6d: 83:bd:e2:aa:44:b8:f1:9a:6f:fa:33:3d:a7:ed:91: b9:ab:51:e7:a5:89:c7:85:af:9b:2f:d4:92:f4:01: 0d:05:97:6f:4e:d3:36:63:57:68:e9:d9:5c:78:37: 87:c6:95:61:ca:a2:af:b4:2f:df:3c:af:5c:0a:10: be:e5:05:b7:75:59:b7:f3:80:bd:24:81:76:64:ad: 67:f7:db:42:86:bb:1e:6e:2e:e7:11:39:ff:36:ae: f8:07:68:82:6f:32:a0:92:b7:ce:1a:2f:14:de:0b: 23:0b:f2:f1:d7:8b:6e:82:01:40:26:a0:b8:29:b9: 00:a7:49:c5:2a:9e:61:be:ff:79:37:d3:e7:57:2a: 39:8f:8d:d5:5a:6f:e4:2f:0e:81:61:9c:75:ff:ee: 42:cf:d0:04:b4:00:f5:8d:34:34:ac:18:17:dd:25: a7:66:4c:b8:03:e9:25:49:e7:4f:d6:7e:26:b4:9e: 81:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AA:94:12:01:AC:9C:27:4D:C8:69:E1:8B:2A:DA:15:A9:04:62:6A X509v3 Authority Key Identifier: keyid:34:F4:79:74:E5:51:C2:02:36:C3:D8:93:95:F5:7F:3B:A0:2B:57:B7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/NPR5dOVRwgI2w9iTlfV_O6ArV7c.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NPR5dOVRwgI2w9iTlfV_O6ArV7c.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORICLOUD/G6qUEgGsnCdNyGnhiyraFakEYmo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.129.162.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:15:3a:32:cf:8f:d2:09:bf:35:d1:5b:a9:0f:38:90:ff:70: eb:4b:f2:0a:e6:76:e2:2e:4d:44:67:71:16:68:86:2b:84:f4: 43:bf:3a:f4:c5:9a:3d:49:58:34:2b:ad:a6:e2:1f:a0:a0:a6: 01:ac:e9:6b:63:32:cc:20:e3:ae:1e:11:49:af:e0:e9:53:45: 6c:33:82:d4:09:31:3b:28:34:0f:e2:92:48:f7:6c:31:90:9d: c6:23:bb:38:9f:bb:7c:f8:a6:00:df:29:58:11:42:5b:de:77: 88:be:48:41:43:8a:00:7f:e5:0d:80:23:49:af:0b:e7:bd:c6: bc:9f:43:db:7d:3e:8b:aa:79:d9:94:97:4a:77:89:a5:12:35: 53:9a:b9:27:b4:fd:e0:f2:a9:16:9a:6e:4a:54:fd:84:e3:9b: 6a:46:12:b9:62:09:a9:63:52:15:22:be:98:56:f9:10:cf:52: 2b:fa:c7:7e:20:38:a8:78:b6:1f:77:e0:56:20:4e:bc:a8:4f: 81:68:0a:c0:cd:41:06:92:50:c8:09:e0:89:39:76:13:97:e7: 87:08:6e:7f:9a:d4:89:05:25:a7:33:ae:57:bd:0d:f7:ca:e1: 6e:53:06:a7:42:d7:d9:64:2b:30:39:4f:bb:3c:a2:e0:b6:07: ad:f7:85:e0 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzRG NDc5NzRFNTUxQzIwMjM2QzNEODkzOTVGNTdGM0JBMDJCNTdCNzAeFw0yNTAyMTAx NDAzNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFCQUE5NDEyMDFBQzlD Mjc0REM4NjlFMThCMkFEQTE1QTkwNDYyNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuuNukNbrVQhINJI4TwUbytq1fgLj0n3R01r/8Q8YS2t7eSGVN Cs9byXhWqwIYSFIk7GYcNmAwEjXHB4X2DmzOv7BvDgFK+uosbYO94qpEuPGab/oz PaftkbmrUeeliceFr5sv1JL0AQ0Fl29O0zZjV2jp2Vx4N4fGlWHKoq+0L988r1wK EL7lBbd1WbfzgL0kgXZkrWf320KGux5uLucROf82rvgHaIJvMqCSt84aLxTeCyML 8vHXi26CAUAmoLgpuQCnScUqnmG+/3k30+dXKjmPjdVab+QvDoFhnHX/7kLP0AS0 APWNNDSsGBfdJadmTLgD6SVJ50/Wfia0noHhAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUG6qUEgGsnCdNyGnhiyraFakEYmowHwYDVR0jBBgwFoAUNPR5dOVRwgI2w9iT lfV/O6ArV7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9SSUNM T1VEL05QUjVkT1ZSd2dJMnc5aVRsZlZfTzZBclY3Yy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvTlBSNWRPVlJ3Z0kydzlpVGxmVl9PNkFyVjdjLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9SSUNMT1VEL0c2cVVFZ0dzbkNk TnlHbmhpeXJhRmFrRVltby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABngaIwDQYJKoZIhvcNAQELBQADggEBAH8VOjLPj9IJvzXRW6kPOJD/cOtL 8grmduIuTURncRZohiuE9EO/OvTFmj1JWDQrrabiH6CgpgGs6WtjMswg464eEUmv 4OlTRWwzgtQJMTsoNA/ikkj3bDGQncYjuzifu3z4pgDfKVgRQlved4i+SEFDigB/ 5Q2AI0mvC+e9xryfQ9t9PouqedmUl0p3iaUSNVOauSe0/eDyqRaabkpU/YTjm2pG ErliCaljUhUivphW+RDPUiv6x34gOKh4th934FYgTryoT4FoCsDNQQaSUMgJ4Ik5 dhOX54cIbn+a1IkFJaczrle9DffK4W5TBqdC19lkKzA5T7s8ouC2B633heA= -----END CERTIFICATE-----Generated at Wed May 7 22:04:44 2025 by rpki-client