$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/-y7v_Trn1n9Rb7_SPRRMT5L9ZjA.roa File: -y7v_Trn1n9Rb7_SPRRMT5L9ZjA.roa (raw, json) Hash identifier: 3CaOKR/dyPZmxV7BOmD0hv7kcrJu1fKYxnAbCWUC1KE= Subject key identifier: FB:2E:EF:FD:3A:E7:D6:7F:51:6F:BF:D2:3D:14:4C:4F:92:FD:66:30 Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 0761 Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/-y7v_Trn1n9Rb7_SPRRMT5L9ZjA.roa Signing time: Mon 10 Feb 2025 13:49:10 +0000 ROA not before: Mon 10 Feb 2025 13:49:10 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17415 IP address blocks: 103.152.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1889 (0x761) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Feb 10 13:49:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=FB2EEFFD3AE7D67F516FBFD23D144C4F92FD6630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:61:6b:0a:23:f8:5c:cb:10:9f:b3:05:70:ac: af:1b:ba:8b:58:28:49:db:fd:77:0b:50:a8:63:c4: 18:f2:ce:c9:0b:3c:c2:5b:f7:10:4c:a4:77:8a:5f: c1:c6:a6:a8:81:fb:95:11:0c:20:74:14:ad:e1:8f: 33:f6:3b:a4:75:8c:46:8b:8d:11:ca:b9:85:0c:41: 60:d4:51:77:6c:fe:bb:c4:75:9a:37:de:66:33:14: 1d:39:fb:4e:ac:bd:1b:a8:c9:68:0d:3a:c2:94:d6: 2d:ce:2d:7d:9b:98:fb:80:70:09:e6:6f:bc:a2:b9: b4:05:95:80:6f:22:8f:4d:bb:b5:5e:aa:f5:da:66: 45:38:8a:1b:2c:b6:ba:85:18:5a:71:5f:8d:a3:ac: 16:14:b2:61:ff:9e:9e:be:89:ab:fd:5c:0a:98:33: 9a:22:4e:3f:aa:60:1d:a8:5f:c0:e3:01:fb:0f:b8: 62:14:08:0c:86:7b:89:83:9b:54:f1:c2:8c:e6:96: 4e:71:39:90:24:e2:a3:a8:31:45:fd:c6:72:7b:fb: 50:b3:91:23:de:f6:3f:7c:4e:3b:db:0c:01:7c:57: f0:06:47:2d:a8:d6:ee:8d:12:f3:33:2b:06:49:0d: 28:59:59:18:48:d7:5c:e3:53:10:02:fd:a5:3c:64: a5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2E:EF:FD:3A:E7:D6:7F:51:6F:BF:D2:3D:14:4C:4F:92:FD:66:30 X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/-y7v_Trn1n9Rb7_SPRRMT5L9ZjA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.152.203.0/24 Signature Algorithm: sha256WithRSAEncryption 72:89:74:77:f6:9f:ef:01:27:0d:e5:c5:0e:76:75:c7:f8:07: 0f:0a:03:bf:d1:78:e6:fb:17:df:5b:86:59:67:c4:81:2b:8d: 4a:db:24:ef:85:77:0f:bb:06:37:6b:dd:a2:28:1b:67:65:11: ee:22:80:bf:cf:74:79:5b:82:a0:fe:4a:d0:3e:9f:76:45:bf: 59:a8:0b:5f:15:82:f2:69:43:d4:03:15:19:6b:03:cc:10:21: 55:40:59:db:fa:5a:ea:22:84:c0:e5:5a:0f:51:90:eb:9a:13: a6:38:43:5d:37:e7:15:e4:f4:87:f7:c3:7e:0c:73:a8:08:c9: 80:08:00:d6:48:72:84:c4:82:61:eb:cb:3c:c4:64:b5:a5:7b: cc:25:ca:24:ad:3b:00:46:7a:da:2e:e5:3f:c8:ed:e7:8e:a5: 78:ca:48:d2:a0:f8:f8:b8:ef:0b:17:69:c6:98:58:e0:a4:3c: 91:4b:3e:9c:f3:3b:3c:a3:d1:20:8f:7f:b8:ce:1b:0d:04:64: cc:0e:c2:2c:9c:0d:6b:85:5a:52:c9:00:f1:49:41:68:55:19: 52:94:4b:d8:b6:98:97:87:28:4d:5c:ef:91:24:1c:d3:75:a7: 13:bc:a3:1c:c8:65:62:fd:c7:82:2e:ef:c3:fe:6f:5e:df:e6: a4:f0:67:e3 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICB2EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNTAyMTAx MzQ5MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZCMkVFRkZEM0FFN0Q2 N0Y1MTZGQkZEMjNEMTQ0QzRGOTJGRDY2MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFYWsKI/hcyxCfswVwrK8buotYKEnb/XcLUKhjxBjyzskLPMJb 9xBMpHeKX8HGpqiB+5URDCB0FK3hjzP2O6R1jEaLjRHKuYUMQWDUUXds/rvEdZo3 3mYzFB05+06svRuoyWgNOsKU1i3OLX2bmPuAcAnmb7yiubQFlYBvIo9Nu7VeqvXa ZkU4ihsstrqFGFpxX42jrBYUsmH/np6+iav9XAqYM5oiTj+qYB2oX8DjAfsPuGIU CAyGe4mDm1Txwozmlk5xOZAk4qOoMUX9xnJ7+1CzkSPe9j98TjvbDAF8V/AGRy2o 1u6NEvMzKwZJDShZWRhI11zjUxAC/aU8ZKX3AgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU+y7v/Trn1n9Rb7/SPRRMT5L9ZjAwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBLy15N3ZfVHJuMW45 UmI3X1NQUlJNVDVMOVpqQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnmMswDQYJKoZIhvcNAQELBQADggEBAHKJdHf2n+8BJw3lxQ52dcf4Bw8K A7/ReOb7F99bhllnxIErjUrbJO+Fdw+7Bjdr3aIoG2dlEe4igL/PdHlbgqD+StA+ n3ZFv1moC18VgvJpQ9QDFRlrA8wQIVVAWdv6WuoihMDlWg9RkOuaE6Y4Q1035xXk 9If3w34Mc6gIyYAIANZIcoTEgmHryzzEZLWle8wlyiStOwBGetou5T/I7eeOpXjK SNKg+Pi47wsXacaYWOCkPJFLPpzzOzyj0SCPf7jOGw0EZMwOwiycDWuFWlLJAPFJ QWhVGVKUS9i2mJeHKE1c75EkHNN1pxO8oxzIZWL9x4Iu78P+b17f5qTwZ+M= -----END CERTIFICATE-----Generated at Wed Apr 16 02:49:47 2025 by rpki-client