$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/ysgtSCJFDwoGbOcFC0ht_Bwovrk.roa File: ysgtSCJFDwoGbOcFC0ht_Bwovrk.roa (raw, json) Hash identifier: 5ChWtorCRqm/XMa/GK0AOkn7zcH8LcQwrjtyG6oNjYQ= Subject key identifier: CA:C8:2D:48:22:45:0F:0A:06:6C:E7:05:0B:48:6D:FC:1C:28:BE:B9 Certificate issuer: /CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68 Certificate serial: 0110 Authority key identifier: 92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/ysgtSCJFDwoGbOcFC0ht_Bwovrk.roa Signing time: Fri 30 Jan 2026 15:47:47 +0000 ROA not before: Fri 30 Jan 2026 15:47:47 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131657 IP address blocks: 163.61.124.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 12:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92303CE6362B5A6F1E7E16D258C1C96FBB674D68 Validity Not Before: Jan 30 15:47:47 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CAC82D4822450F0A066CE7050B486DFC1C28BEB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:28:d1:13:61:9f:07:6a:b3:78:a0:b7:af:23: d4:03:01:9d:ac:80:76:f2:a8:fe:62:9b:d0:de:f0: 25:18:0b:aa:71:e8:b5:ff:83:b3:de:0b:82:70:8e: 5a:8b:10:7e:5b:54:67:06:79:68:31:50:50:a7:c7: 07:1f:82:0d:c4:c7:c1:27:0e:60:64:99:71:7e:02: f8:bf:7c:29:7f:db:78:f6:e1:6e:9b:a2:f6:e1:74: 60:44:a2:85:3e:84:4a:b7:88:b8:14:f4:39:d9:46: e3:66:24:ff:05:9c:de:96:b3:b6:94:41:ce:60:93: b5:fd:f8:3d:28:40:df:d9:e1:33:e0:9b:f0:22:d5: 19:15:63:52:47:22:88:2b:e6:b6:f1:25:dc:a6:38: 8b:fc:a1:24:90:b2:36:44:10:9c:de:08:65:2c:a2: 5a:d9:d2:8f:e6:ea:1b:20:4b:4f:2b:26:d9:45:80: 75:3c:c3:25:b9:aa:20:54:65:ab:c7:41:5a:e1:e7: 44:04:f4:61:d4:36:ce:62:48:ae:58:56:8e:38:2f: 0e:a4:5c:fa:40:39:95:82:e7:9c:29:2c:fa:f1:8b: 6b:22:11:5e:71:fc:c1:b1:8e:39:20:ea:f5:95:bf: 89:28:d3:e0:d8:57:b2:94:7c:b8:bd:f6:bd:18:b6: 38:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C8:2D:48:22:45:0F:0A:06:6C:E7:05:0B:48:6D:FC:1C:28:BE:B9 X509v3 Authority Key Identifier: keyid:92:30:3C:E6:36:2B:5A:6F:1E:7E:16:D2:58:C1:C9:6F:BB:67:4D:68 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/kjA85jYrWm8efhbSWMHJb7tnTWg.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/kjA85jYrWm8efhbSWMHJb7tnTWg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MORNMAPLE/ysgtSCJFDwoGbOcFC0ht_Bwovrk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 163.61.124.0/23 Signature Algorithm: sha256WithRSAEncryption 92:aa:62:da:30:ce:6e:7a:81:4e:37:1c:62:e2:27:19:a9:48: 6c:5c:e2:af:3e:1b:f6:da:67:1e:10:9c:47:c2:87:40:b2:3f: 69:b3:a9:5d:91:27:d7:14:b2:a0:21:3d:6b:54:be:07:95:32: 04:48:a9:a8:5d:47:f4:d2:79:cc:a9:20:9f:e7:9f:ba:fb:1f: e7:99:cc:81:be:39:c5:0c:eb:af:08:63:d6:b2:84:2b:43:6a: c7:f3:59:5c:2a:1e:66:fd:3d:79:de:99:65:33:e9:45:5f:8e: a3:5c:a5:49:bf:5f:84:16:50:f1:a1:63:3e:10:4e:b7:e6:a9: 54:9e:4b:3b:74:9a:03:75:6e:f3:b8:4f:72:2b:ce:db:6c:e9: cb:fc:7d:2b:ec:b0:c1:ee:11:43:3b:90:d4:b2:72:8b:a1:93: 20:1a:46:f2:83:d6:46:4a:46:17:77:38:fa:03:3c:fa:17:f5: 8e:ad:dd:22:2d:e1:4a:40:d0:e4:94:08:cf:1e:b8:c3:7b:a5: 05:8f:d8:bf:8f:42:9d:88:2a:52:c7:08:80:8e:47:75:a2:75: d2:d7:54:67:40:37:88:85:73:96:7f:88:48:1f:11:1e:d1:3a: f6:2c:b9:26:d4:24:c7:21:54:dd:80:ea:67:d7:63:e0:ce:c8: 63:5f:1f:64 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICARAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTIz MDNDRTYzNjJCNUE2RjFFN0UxNkQyNThDMUM5NkZCQjY3NEQ2ODAeFw0yNjAxMzAx NTQ3NDdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENBQzgyRDQ4MjI0NTBG MEEwNjZDRTcwNTBCNDg2REZDMUMyOEJFQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQKNETYZ8HarN4oLevI9QDAZ2sgHbyqP5im9De8CUYC6px6LX/ g7PeC4JwjlqLEH5bVGcGeWgxUFCnxwcfgg3Ex8EnDmBkmXF+Avi/fCl/23j24W6b ovbhdGBEooU+hEq3iLgU9DnZRuNmJP8FnN6Ws7aUQc5gk7X9+D0oQN/Z4TPgm/Ai 1RkVY1JHIogr5rbxJdymOIv8oSSQsjZEEJzeCGUsolrZ0o/m6hsgS08rJtlFgHU8 wyW5qiBUZavHQVrh50QE9GHUNs5iSK5YVo44Lw6kXPpAOZWC55wpLPrxi2siEV5x /MGxjjkg6vWVv4ko0+DYV7KUfLi99r0YtjhJAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUysgtSCJFDwoGbOcFC0ht/BwovrkwHwYDVR0jBBgwFoAUkjA85jYrWm8efhbS WMHJb7tnTWgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9STk1B UExFL2tqQTg1allyV204ZWZoYlNXTUhKYjd0blRXZy5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0Eva2pBODVqWXJXbThlZmhiU1dNSEpiN3RuVFdnLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTU9STk1BUExFL3lzZ3RTQ0pGRHdv R2JPY0ZDMGh0X0J3b3Zyay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGjPXwwDQYJKoZIhvcNAQELBQADggEBAJKqYtowzm56gU43HGLiJxmpSGxc 4q8+G/baZx4QnEfCh0CyP2mzqV2RJ9cUsqAhPWtUvgeVMgRIqahdR/TSecypIJ/n n7r7H+eZzIG+OcUM668IY9ayhCtDasfzWVwqHmb9PXnemWUz6UVfjqNcpUm/X4QW UPGhYz4QTrfmqVSeSzt0mgN1bvO4T3Irztts6cv8fSvssMHuEUM7kNSycouhkyAa RvKD1kZKRhd3OPoDPPoX9Y6t3SIt4UpA0OSUCM8euMN7pQWP2L+PQp2IKlLHCICO R3WiddLXVGdAN4iFc5Z/iEgfER7ROvYsuSbUJMchVN2A6mfXY+DOyGNfH2Q= -----END CERTIFICATE-----Generated at Mon Mar 2 10:19:03 2026 by rpki-client