$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/1njHPFIRqhgvdinSLQVdNZIp2lU.roa File: 1njHPFIRqhgvdinSLQVdNZIp2lU.roa (raw, json) Hash identifier: 6z62nz3oWYoSwlO10JIZe/7ts14MOb0XAI517WYJQys= Subject key identifier: D6:78:C7:3C:52:11:AA:18:2F:76:29:D2:2D:05:5D:35:92:29:DA:55 Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 075A Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/1njHPFIRqhgvdinSLQVdNZIp2lU.roa Signing time: Mon 10 Feb 2025 13:49:08 +0000 ROA not before: Mon 10 Feb 2025 13:49:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131682 IP address blocks: 2406:3540:fffc::/46 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1882 (0x75a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Feb 10 13:49:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D678C73C5211AA182F7629D22D055D359229DA55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2a:bb:1d:77:17:08:09:d4:e7:d8:97:56:3c: b5:87:85:b1:0e:08:d9:54:75:08:a9:5c:59:2d:ce: ad:fb:9a:85:98:99:54:11:76:85:a5:43:f4:61:3e: 84:8e:dc:11:5f:26:3d:e8:7d:b0:b2:5d:53:c8:34: 28:8e:af:6c:78:02:b2:34:bc:eb:a5:9e:2b:6b:b6: c1:70:cd:07:6a:fd:5c:fe:37:96:b9:8c:4f:23:79: f8:7d:b3:9f:fe:21:9a:93:04:cf:e7:da:51:cb:6c: a1:aa:6a:56:35:bf:f3:a6:2c:d8:59:fd:eb:73:7c: 0c:b9:62:48:42:67:8f:4c:31:5e:4d:b5:e7:50:bc: 0a:1e:a8:8b:21:b1:8b:2b:9b:22:3e:d0:b3:0d:fe: 1c:d4:3d:75:47:5b:39:ae:d1:4e:b2:6c:a2:d5:fc: 3c:b8:dd:5d:5d:09:04:04:fa:06:76:65:bc:fc:e6: c3:7a:33:85:c0:61:c6:c8:3b:8a:3c:e9:4e:47:8f: f2:c1:78:a0:30:2c:cf:62:f1:70:ff:cb:ea:35:99: 0d:3b:9c:c0:41:00:b1:0c:ad:e3:78:53:63:9a:3a: 4f:59:53:09:33:50:65:92:8d:10:1e:aa:1e:5f:58: 1a:db:c5:fa:02:aa:62:72:e5:6f:81:04:45:8c:82: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:78:C7:3C:52:11:AA:18:2F:76:29:D2:2D:05:5D:35:92:29:DA:55 X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/1njHPFIRqhgvdinSLQVdNZIp2lU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3540:fffc::/46 Signature Algorithm: sha256WithRSAEncryption c1:5f:f2:9a:69:4a:fa:7f:0c:cc:cc:43:07:36:a7:ff:a0:c2: 5b:9e:4f:9e:e3:6a:69:cb:d7:3a:8b:d9:55:e1:20:f1:15:39: e4:ce:4d:23:0d:3c:19:ca:1c:b6:c8:ef:f0:05:9f:d2:57:0c: 32:43:c4:8a:40:8f:92:a6:08:6e:16:7c:cd:d2:bd:3c:5f:0a: 95:bd:5c:77:f3:3f:9e:3d:48:cd:12:af:13:08:a5:28:70:e4: 72:3c:01:10:5a:3d:a0:f7:bc:57:5e:72:ff:25:e5:23:71:9f: 02:20:38:a5:a2:44:5d:11:1a:c9:81:23:e2:de:4d:4a:01:4b: 8d:b4:1e:b1:9a:7e:54:bd:e0:26:d1:9c:23:8a:ca:97:04:4d: f9:ab:56:86:ed:9f:98:69:69:63:80:1e:f6:0f:48:55:23:b2: 9a:88:a6:8d:42:0f:54:5a:d2:33:48:df:f8:77:0f:a2:86:a1: 2c:30:ad:8a:d3:51:dc:75:c0:58:27:48:e3:d7:bc:17:c5:53: f0:ce:12:a3:0f:04:b5:8c:2f:53:d3:2b:06:e5:63:fc:bc:e5: 04:d5:ba:33:1b:97:87:da:47:7a:b8:d5:d8:d9:39:59:4a:15: 3d:5a:33:94:92:6e:b1:70:1f:8a:e7:87:6d:bc:2b:68:55:42: 15:4d:fd:a3 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICB1owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNTAyMTAx MzQ5MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ2NzhDNzNDNTIxMUFB MTgyRjc2MjlEMjJEMDU1RDM1OTIyOURBNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDGKrsddxcICdTn2JdWPLWHhbEOCNlUdQipXFktzq37moWYmVQR doWlQ/RhPoSO3BFfJj3ofbCyXVPINCiOr2x4ArI0vOulnitrtsFwzQdq/Vz+N5a5 jE8jefh9s5/+IZqTBM/n2lHLbKGqalY1v/OmLNhZ/etzfAy5YkhCZ49MMV5NtedQ vAoeqIshsYsrmyI+0LMN/hzUPXVHWzmu0U6ybKLV/Dy43V1dCQQE+gZ2Zbz85sN6 M4XAYcbIO4o86U5Hj/LBeKAwLM9i8XD/y+o1mQ07nMBBALEMreN4U2OaOk9ZUwkz UGWSjRAeqh5fWBrbxfoCqmJy5W+BBEWMgugHAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQU1njHPFIRqhgvdinSLQVdNZIp2lUwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBLzFuakhQRklScWhn dmRpblNMUVZkTlpJcDJsVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwIkBjVA//wwDQYJKoZIhvcNAQELBQADggEBAMFf8pppSvp/DMzMQwc2p/+g wlueT57jamnL1zqL2VXhIPEVOeTOTSMNPBnKHLbI7/AFn9JXDDJDxIpAj5KmCG4W fM3SvTxfCpW9XHfzP549SM0SrxMIpShw5HI8ARBaPaD3vFdecv8l5SNxnwIgOKWi RF0RGsmBI+LeTUoBS420HrGaflS94CbRnCOKypcETfmrVobtn5hpaWOAHvYPSFUj spqIpo1CD1Ra0jNI3/h3D6KGoSwwrYrTUdx1wFgnSOPXvBfFU/DOEqMPBLWML1PT KwblY/y85QTVujMbl4faR3q41djZOVlKFT1aM5SSbrFwH4rnh228K2hVQhVN/aM= -----END CERTIFICATE-----Generated at Wed Apr 16 02:48:35 2025 by rpki-client