
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/aeySRbmC0EN_TVFSKV61fOg48wI.roa
File: aeySRbmC0EN_TVFSKV61fOg48wI.roa (raw, json)
Hash identifier: OOVjHZNKXj1sLBdBMwlpYHTOFiud+Y3vgHhzkMmfW8s=
Subject key identifier: 69:EC:92:45:B9:82:D0:43:7F:4D:51:52:29:5E:B5:7C:E8:38:F3:02
Certificate issuer: /CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68
Certificate serial: 0110
Authority key identifier: 92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/aeySRbmC0EN_TVFSKV61fOg48wI.roa
Signing time: Fri 30 Jan 2026 15:47:48 +0000
ROA not before: Fri 30 Jan 2026 15:47:48 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131657
IP address blocks: 163.61.125.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 12:24:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 272 (0x110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68
Validity
Not Before: Jan 30 15:47:48 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=69EC9245B982D0437F4D5152295EB57CE838F302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d2:ce:ee:7d:d9:5b:00:ac:ad:1a:b9:bd:34:
31:1b:1b:e2:34:7a:a9:02:ec:b3:d6:a8:bd:be:cd:
6c:a1:9d:08:15:99:8a:17:d8:6a:ad:5b:32:59:03:
5e:32:30:8e:9c:29:7b:da:a7:e2:dc:d2:6e:ae:b2:
dd:03:50:d9:11:1d:a1:be:bd:ed:94:7d:9e:b8:ca:
72:3a:72:a0:6f:ce:2d:8f:a4:37:d0:99:8b:8e:91:
57:47:83:09:31:f9:16:f8:6b:1f:db:5b:e6:69:2b:
66:a6:e9:2c:5e:70:18:05:be:f0:39:b4:83:98:7a:
f5:1a:49:18:66:92:10:08:bf:d4:d0:91:53:37:6b:
9e:be:b4:f4:b8:68:df:82:92:1f:6d:29:48:f3:92:
82:c7:b9:67:73:9a:a2:29:ce:40:05:c6:b6:2c:cc:
f4:3d:f7:09:a7:92:8a:61:76:49:49:26:e7:70:4f:
7d:c3:0a:31:d5:ec:ba:01:78:e2:cb:27:65:da:cd:
c9:83:86:27:d8:98:fa:b4:d1:a9:0c:7e:42:09:a8:
ef:41:f0:a6:bf:b4:b3:05:ae:2f:29:4f:58:c9:4f:
2a:97:4f:c1:d0:dd:e6:97:9d:dc:2b:36:6b:8c:f2:
5a:b1:81:c0:38:ac:b5:82:e4:a9:e6:d7:00:82:40:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EC:92:45:B9:82:D0:43:7F:4D:51:52:29:5E:B5:7C:E8:38:F3:02
X509v3 Authority Key Identifier:
keyid:92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/aeySRbmC0EN_TVFSKV61fOg48wI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.61.125.0/24
Signature Algorithm: sha256WithRSAEncryption
76:70:5c:e7:95:a3:0f:61:2a:ac:a3:de:76:39:85:01:54:98:
5b:a4:1b:67:38:a4:c4:51:2b:da:98:2f:aa:26:82:f9:13:2e:
d3:c3:83:14:5f:ab:6c:f6:c0:bd:62:18:16:03:66:33:3c:d4:
ac:13:d2:73:ac:27:c1:ce:19:3e:52:7e:e6:c4:62:d6:98:71:
86:99:49:6e:b7:ae:ae:ab:b2:24:66:48:c8:7c:83:f3:88:f0:
7f:96:80:e4:cc:7f:04:c1:d2:eb:f6:58:53:cd:45:28:88:83:
11:48:3a:89:30:3b:30:af:e1:bc:c1:a9:44:47:64:e6:65:81:
4d:80:06:45:f7:c4:8a:e1:4c:ca:c6:08:c8:c4:95:ec:c1:2e:
fb:17:f0:16:b7:07:90:02:3c:54:ba:c1:be:4c:f2:2b:e4:25:
b4:62:ed:3f:48:eb:29:ca:55:ee:53:80:70:16:50:51:97:7b:
04:a6:45:be:07:50:1f:f2:45:20:50:22:72:ae:02:ac:30:96:
b6:df:1f:8c:13:84:24:9c:b8:24:df:9d:10:1b:23:00:5c:ae:
ee:09:de:26:9c:ce:91:09:c3:64:9b:ce:4e:50:42:83:f2:1a:
88:31:5b:d6:cd:e3:03:21:a1:87:32:94:f6:5e:22:94:8c:2e:
c4:e4:17:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:54 2026 by rpki-client