$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/JyCJhX6jS_XawEOk2jWY3vXdgVA.roa File: JyCJhX6jS_XawEOk2jWY3vXdgVA.roa (raw, json) Hash identifier: LB0XJ/o3UlYnuvwGV+diH9TVqgLnv0l/elpBRSxXnqM= Subject key identifier: 27:20:89:85:7E:A3:4B:F5:DA:C0:43:A4:DA:35:98:DE:F5:DD:81:50 Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 075B Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/JyCJhX6jS_XawEOk2jWY3vXdgVA.roa Signing time: Mon 10 Feb 2025 13:49:08 +0000 ROA not before: Mon 10 Feb 2025 13:49:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38840 IP address blocks: 2406:3540:fff8::/46 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1883 (0x75b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Feb 10 13:49:08 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=272089857EA34BF5DAC043A4DA3598DEF5DD8150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dc:af:36:8e:21:b1:e2:8f:23:a0:b5:51:37: d6:a3:9e:ec:2e:20:7b:2f:dc:62:5c:9c:cc:00:22: 40:bb:06:36:ff:0a:6c:9a:93:ec:bf:11:ff:7f:83: ed:15:61:28:a1:48:b5:9b:fe:4f:d9:a0:2e:f2:be: 79:ed:fc:18:4a:65:96:bb:40:a3:de:e7:13:ce:ab: 98:70:7e:f4:d9:c4:56:1e:e1:cb:4c:57:fc:ea:81: 32:3d:8a:26:74:4f:78:5b:26:7b:e1:02:78:6c:ca: 18:fc:57:43:e8:ae:ba:23:0b:e5:4d:2b:17:3c:bc: 16:5f:86:0f:8c:d0:56:26:a4:04:20:63:9a:3f:6c: 01:1f:cb:ec:53:ab:80:a7:0c:68:28:0c:9f:be:53: 08:ff:a7:ec:6d:c5:52:74:e0:07:90:4d:18:61:6f: 16:15:47:3c:f8:cc:2a:6b:63:87:cc:88:e4:61:dd: ea:24:16:9e:c1:63:d7:36:d9:0e:49:6b:d4:24:58: 7b:2a:f0:f6:4f:40:be:1c:b8:39:ae:d2:ee:03:3e: b2:cc:f2:cf:56:1e:a3:b5:a0:a4:97:a4:b7:4a:ec: a6:fa:0b:ff:c9:d8:08:45:1b:65:70:c5:a0:d3:bf: cd:f1:c4:44:1a:00:ec:9f:5b:99:d4:b5:a2:3c:aa: 35:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:20:89:85:7E:A3:4B:F5:DA:C0:43:A4:DA:35:98:DE:F5:DD:81:50 X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/JyCJhX6jS_XawEOk2jWY3vXdgVA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3540:fff8::/46 Signature Algorithm: sha256WithRSAEncryption 06:f9:56:ee:55:55:9f:01:30:03:cc:5e:46:f0:ec:8f:5c:f3: bb:bb:73:16:f2:dd:8e:3d:f7:d0:2a:4e:6c:c8:9f:4c:25:eb: b0:3f:cd:f2:be:16:5e:00:b1:ae:9b:10:33:a4:d8:2d:e9:75: af:6e:6a:fc:b2:aa:50:d6:f6:72:70:99:85:e9:7f:d2:e3:ad: ae:6c:ac:e4:73:d5:26:c8:b9:cd:48:2c:a5:06:d4:2b:95:90: 91:d0:97:9d:eb:6f:20:20:1c:59:de:44:5c:f4:c9:9a:f3:b2: c2:19:dd:c7:3f:be:2f:61:a6:7b:ed:89:23:d3:9a:30:7d:95: a2:8d:b2:1a:80:85:d5:cd:2e:82:62:da:4c:49:00:c5:d7:81: 76:3b:f3:b0:38:fe:d2:eb:af:5d:3c:25:7a:f2:2b:d5:b4:b4: 65:2a:d4:a2:45:a1:ca:96:5d:1f:30:68:08:a8:43:fe:ba:84: 9d:23:85:d9:90:f5:6d:bf:6f:06:ba:14:dc:a5:a6:66:7c:63: e8:95:28:cc:59:13:4d:dc:de:24:65:5e:39:c5:a5:22:28:1f: 74:a6:12:48:44:20:c0:d0:c1:37:a8:48:9c:72:a3:45:9a:1e: 0b:f0:4d:f5:9a:a2:65:c7:79:96:91:14:dd:07:ee:2b:1a:dd: 8d:7a:d2:f9 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICB1swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNTAyMTAx MzQ5MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI3MjA4OTg1N0VBMzRC RjVEQUMwNDNBNERBMzU5OERFRjVERDgxNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDn3K82jiGx4o8joLVRN9ajnuwuIHsv3GJcnMwAIkC7Bjb/Cmya k+y/Ef9/g+0VYSihSLWb/k/ZoC7yvnnt/BhKZZa7QKPe5xPOq5hwfvTZxFYe4ctM V/zqgTI9iiZ0T3hbJnvhAnhsyhj8V0PorrojC+VNKxc8vBZfhg+M0FYmpAQgY5o/ bAEfy+xTq4CnDGgoDJ++Uwj/p+xtxVJ04AeQTRhhbxYVRzz4zCprY4fMiORh3eok Fp7BY9c22Q5Ja9QkWHsq8PZPQL4cuDmu0u4DPrLM8s9WHqO1oKSXpLdK7Kb6C//J 2AhFG2VwxaDTv83xxEQaAOyfW5nUtaI8qjXPAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUJyCJhX6jS/XawEOk2jWY3vXdgVAwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL0p5Q0poWDZqU19Y YXdFT2syaldZM3ZYZGdWQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwIkBjVA//gwDQYJKoZIhvcNAQELBQADggEBAAb5Vu5VVZ8BMAPMXkbw7I9c 87u7cxby3Y4999AqTmzIn0wl67A/zfK+Fl4Asa6bEDOk2C3pda9uavyyqlDW9nJw mYXpf9Ljra5srORz1SbIuc1ILKUG1CuVkJHQl53rbyAgHFneRFz0yZrzssIZ3cc/ vi9hpnvtiSPTmjB9laKNshqAhdXNLoJi2kxJAMXXgXY787A4/tLrr108JXryK9W0 tGUq1KJFocqWXR8waAioQ/66hJ0jhdmQ9W2/bwa6FNylpmZ8Y+iVKMxZE03c3iRl XjnFpSIoH3SmEkhEIMDQwTeoSJxyo0WaHgvwTfWaomXHeZaRFN0H7isa3Y160vk= -----END CERTIFICATE-----Generated at Wed Apr 16 02:46:05 2025 by rpki-client