$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/9zlG9Dhm15ge2BnwmKfX4v7kC-w.roa File: 9zlG9Dhm15ge2BnwmKfX4v7kC-w.roa (raw, json) Hash identifier: OpIxSsN+rPTudlFjDz05ES1dtcc55jbmsiOOCuEfAAI= Subject key identifier: F7:39:46:F4:38:66:D7:98:1E:D8:19:F0:98:A7:D7:E2:FE:E4:0B:EC Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 0763 Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/9zlG9Dhm15ge2BnwmKfX4v7kC-w.roa Signing time: Mon 10 Feb 2025 13:49:11 +0000 ROA not before: Mon 10 Feb 2025 13:49:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17415 IP address blocks: 103.152.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1891 (0x763) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Feb 10 13:49:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F73946F43866D7981ED819F098A7D7E2FEE40BEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:6b:82:ee:92:42:3a:91:7f:eb:f8:18:79: a4:19:1f:d7:f8:5d:f9:db:46:bb:8f:5b:c5:45:9f: db:c9:9e:6d:db:12:f9:0b:cb:ee:e2:c0:7f:a2:81: 04:e6:0d:99:14:53:ce:8d:29:79:b6:77:fe:27:f1: e4:2d:b1:11:18:cd:67:aa:95:84:65:d5:8b:53:a3: d8:42:8f:c0:ea:78:04:85:55:1e:ad:4c:4d:f2:60: 38:3b:5d:73:a8:98:d0:c8:ff:17:65:1a:14:6f:6f: dd:6d:f1:16:58:49:03:1b:92:57:8d:a4:d4:e8:ac: 79:b6:0a:2d:58:f5:13:91:a9:98:f8:e6:41:64:3b: 47:18:e7:c6:e4:eb:96:2d:a7:39:62:29:25:45:91: a7:29:43:49:76:f1:2c:5d:88:ca:66:9c:42:b4:f7: 99:0b:8e:9f:4b:dd:e3:1d:d3:14:c4:e4:67:13:8f: de:01:9c:6a:58:2b:43:a7:e4:75:53:5b:b6:03:a3: 4d:d7:09:05:9f:fe:c9:f2:6c:a2:af:ed:72:2f:3d: 1f:50:4f:52:23:e9:fc:4a:2d:60:a4:5e:be:41:f4: b8:f1:27:c2:90:dd:7d:e1:b0:6b:02:ce:fe:77:1a: 99:e9:47:8f:30:6f:98:0d:fd:c9:55:ca:80:a4:c3: 6a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:39:46:F4:38:66:D7:98:1E:D8:19:F0:98:A7:D7:E2:FE:E4:0B:EC X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/9zlG9Dhm15ge2BnwmKfX4v7kC-w.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.152.202.0/24 Signature Algorithm: sha256WithRSAEncryption b7:3b:55:42:f1:94:5d:37:43:7b:60:45:31:5c:1d:87:48:10: 6e:39:ca:a1:2e:ba:9d:ef:e3:70:19:15:a6:9d:40:a9:89:5b: f9:2b:6c:b2:88:30:b0:d4:c0:e4:e5:4c:12:5b:db:60:f9:5a: 17:9f:24:ef:e5:5f:57:3e:1c:c4:4f:02:f1:fc:37:8d:26:4b: 37:d8:62:87:b2:f2:46:06:69:73:c6:2e:89:56:d4:79:09:8b: 3d:6a:cb:60:32:12:12:a6:c4:2e:de:57:c4:3a:b8:6d:ad:a6: a0:da:c5:b6:28:29:b2:54:5a:eb:bc:ba:a0:a0:32:7a:a4:a1: 0c:17:d3:65:91:53:21:e2:9e:f4:df:14:df:2f:79:93:e3:85: aa:2b:fa:fc:a0:99:b3:0f:7c:87:17:a3:1d:ef:b8:c4:6b:c3: 37:a6:0c:06:3d:71:02:cb:ac:93:fc:bc:b7:72:8f:83:f6:be: 24:f0:49:e4:30:d4:fd:99:65:8a:70:a7:ae:8b:d0:dc:d8:f2: aa:0f:e9:48:cc:08:5d:bc:6e:e1:9e:dd:c7:e8:ce:3f:2b:6d: ba:17:bd:4b:c4:52:40:55:b1:a2:2a:77:da:91:e0:d4:23:96: 7f:cf:b0:af:66:60:27:61:fb:9c:b0:df:a0:7e:11:c0:50:ee: 3b:2c:d1:e6 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNTAyMTAx MzQ5MTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY3Mzk0NkY0Mzg2NkQ3 OTgxRUQ4MTlGMDk4QTdEN0UyRkVFNDBCRUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDahGuC7pJCOpF/6/gYeaQZH9f4XfnbRruPW8VFn9vJnm3bEvkL y+7iwH+igQTmDZkUU86NKXm2d/4n8eQtsREYzWeqlYRl1YtTo9hCj8DqeASFVR6t TE3yYDg7XXOomNDI/xdlGhRvb91t8RZYSQMbkleNpNTorHm2Ci1Y9RORqZj45kFk O0cY58bk65YtpzliKSVFkacpQ0l28SxdiMpmnEK095kLjp9L3eMd0xTE5GcTj94B nGpYK0On5HVTW7YDo03XCQWf/snybKKv7XIvPR9QT1Ij6fxKLWCkXr5B9LjxJ8KQ 3X3hsGsCzv53GpnpR48wb5gN/clVyoCkw2oVAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQU9zlG9Dhm15ge2BnwmKfX4v7kC+wwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBLzl6bEc5RGhtMTVn ZTJCbndtS2ZYNHY3a0Mtdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnmMowDQYJKoZIhvcNAQELBQADggEBALc7VULxlF03Q3tgRTFcHYdIEG45 yqEuup3v43AZFaadQKmJW/krbLKIMLDUwOTlTBJb22D5WhefJO/lX1c+HMRPAvH8 N40mSzfYYoey8kYGaXPGLolW1HkJiz1qy2AyEhKmxC7eV8Q6uG2tpqDaxbYoKbJU Wuu8uqCgMnqkoQwX02WRUyHinvTfFN8veZPjhaor+vygmbMPfIcXox3vuMRrwzem DAY9cQLLrJP8vLdyj4P2viTwSeQw1P2ZZYpwp66L0NzY8qoP6UjMCF28buGe3cfo zj8rbboXvUvEUkBVsaIqd9qR4NQjln/PsK9mYCdh+5yw36B+EcBQ7jss0eY= -----END CERTIFICATE-----Generated at Wed Apr 16 02:45:13 2025 by rpki-client