$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/XD0_u-GTFO6kzuoGMzI_5agq-Us.roa File: XD0_u-GTFO6kzuoGMzI_5agq-Us.roa (raw, json) Hash identifier: CPeqRHO7bLwmT1GZ99GfDU+FdIp2CYlv+LkPioY7Bzc= Subject key identifier: 5C:3D:3F:BB:E1:93:14:EE:A4:CE:EA:06:33:32:3F:E5:A8:2A:F9:4B Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 075E Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/XD0_u-GTFO6kzuoGMzI_5agq-Us.roa Signing time: Mon 10 Feb 2025 13:49:09 +0000 ROA not before: Mon 10 Feb 2025 13:49:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131682 IP address blocks: 103.152.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1886 (0x75e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Feb 10 13:49:09 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=5C3D3FBBE19314EEA4CEEA0633323FE5A82AF94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:7d:e0:00:ab:89:c4:b2:a0:aa:93:17:e2: c7:30:bc:f7:a6:d2:ba:54:6d:9a:e3:dc:34:9e:cb: 6a:c1:2d:5c:47:ed:0b:4b:9a:00:80:c6:59:a7:5e: 76:13:07:dc:29:b9:3e:c5:91:d9:60:63:1d:48:96: 22:e9:95:5e:b4:b9:71:34:0d:bc:b0:d3:5f:f7:3e: bd:77:58:15:e2:ad:25:16:09:87:61:5f:51:ec:49: c3:c8:12:40:7b:75:3e:75:05:c9:56:ea:df:0b:46: 5e:53:c0:b2:03:f6:94:0b:f0:0a:9f:d8:81:8a:b6: f5:34:05:86:13:6e:8c:27:8f:38:67:81:f0:43:d1: 74:99:2c:cb:5e:f4:74:2c:f5:6b:e7:33:6a:fb:e4: cd:c7:8f:65:b5:ae:51:67:d3:ae:55:91:0b:c0:78: 1d:80:f9:75:09:5f:65:2c:42:ef:71:98:64:e8:ab: cc:35:a4:41:63:2d:5f:a0:11:91:be:40:a2:1f:29: 00:14:40:53:d7:eb:c3:25:a8:23:79:71:78:1f:b2: 35:b1:4f:6a:7c:7d:c6:aa:cd:7d:5f:62:97:34:35: 3d:58:c8:d5:94:14:c2:88:cc:0c:b7:f4:1e:b6:53: 94:22:85:0c:dd:c9:1a:82:3c:c8:8f:42:35:97:18: fe:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3D:3F:BB:E1:93:14:EE:A4:CE:EA:06:33:32:3F:E5:A8:2A:F9:4B X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/XD0_u-GTFO6kzuoGMzI_5agq-Us.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.152.202.0/23 Signature Algorithm: sha256WithRSAEncryption 06:f4:86:48:53:bc:a4:8b:50:c8:9f:c1:5b:79:18:24:6a:10: 1f:26:87:37:5c:07:a9:8f:47:fc:48:af:c3:59:ed:c5:3f:4b: df:38:fd:0d:06:11:06:96:b7:5d:49:bc:e4:e2:2c:fd:ca:f2: a5:a5:0a:0d:80:21:69:8f:60:cd:ab:9c:61:2d:9c:e0:ef:32: df:26:c4:b1:2e:e6:55:9c:e4:db:fe:bd:b5:fb:15:5c:5d:f8: 9f:16:48:8c:f3:de:0b:df:b4:7a:fa:0d:12:7e:e7:b2:7b:0a: de:70:24:cb:19:1d:a1:62:fc:09:ea:e7:b5:ab:a7:39:ad:8a: f3:1b:7e:52:e7:f3:32:b7:bf:0c:98:e5:e0:60:b1:3c:4c:57: 40:f1:3e:17:7c:45:63:66:15:4b:47:82:68:c4:43:0c:a5:49: 90:e9:ee:5d:23:2a:f9:28:16:f7:41:9b:f0:95:02:5c:13:f7: 18:a9:42:73:7b:72:d2:03:37:24:5c:10:03:85:05:0a:1d:bb: 4a:b7:94:13:02:a1:00:46:91:d6:cf:5f:b2:a8:56:9b:05:e6: bf:8a:91:8b:a6:d5:97:05:cd:1f:5d:ed:21:3d:57:fa:c5:a5: 15:42:38:40:f2:17:f6:8c:ee:9a:18:7d:00:7b:45:3e:79:23: 16:9f:76:5a -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICB14wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNTAyMTAx MzQ5MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVDM0QzRkJCRTE5MzE0 RUVBNENFRUEwNjMzMzIzRkU1QTgyQUY5NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7zH3gAKuJxLKgqpMX4scwvPem0rpUbZrj3DSey2rBLVxH7QtL mgCAxlmnXnYTB9wpuT7FkdlgYx1IliLplV60uXE0Dbyw01/3Pr13WBXirSUWCYdh X1HsScPIEkB7dT51BclW6t8LRl5TwLID9pQL8Aqf2IGKtvU0BYYTbownjzhngfBD 0XSZLMte9HQs9WvnM2r75M3Hj2W1rlFn065VkQvAeB2A+XUJX2UsQu9xmGToq8w1 pEFjLV+gEZG+QKIfKQAUQFPX68MlqCN5cXgfsjWxT2p8fcaqzX1fYpc0NT1YyNWU FMKIzAy39B62U5QihQzdyRqCPMiPQjWXGP7NAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUXD0/u+GTFO6kzuoGMzI/5agq+UswHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL1hEMF91LUdURk82 a3p1b0dNeklfNWFncS1Vcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnmMowDQYJKoZIhvcNAQELBQADggEBAAb0hkhTvKSLUMifwVt5GCRqEB8m hzdcB6mPR/xIr8NZ7cU/S984/Q0GEQaWt11JvOTiLP3K8qWlCg2AIWmPYM2rnGEt nODvMt8mxLEu5lWc5Nv+vbX7FVxd+J8WSIzz3gvftHr6DRJ+57J7Ct5wJMsZHaFi /Anq57WrpzmtivMbflLn8zK3vwyY5eBgsTxMV0DxPhd8RWNmFUtHgmjEQwylSZDp 7l0jKvkoFvdBm/CVAlwT9xipQnN7ctIDNyRcEAOFBQodu0q3lBMCoQBGkdbPX7Ko VpsF5r+KkYum1ZcFzR9d7SE9V/rFpRVCOEDyF/aM7poYfQB7RT55Ixafdlo= -----END CERTIFICATE-----Generated at Wed Apr 16 02:50:36 2025 by rpki-client