$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/yLsCnJ0t-eFoZLoC4G3TYxK7Wk0.roa File: yLsCnJ0t-eFoZLoC4G3TYxK7Wk0.roa (raw, json) Hash identifier: 2HgapwDJ3J1awEOgTYUTBVzu2Ubx5aFJ/+Hqtfr9zx4= Subject key identifier: C8:BB:02:9C:9D:2D:F9:E1:68:64:BA:02:E0:6D:D3:63:12:BB:5A:4D Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 075C Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/yLsCnJ0t-eFoZLoC4G3TYxK7Wk0.roa Signing time: Mon 10 Feb 2025 13:49:09 +0000 ROA not before: Mon 10 Feb 2025 13:49:09 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 17415 IP address blocks: 2406:3540:fff0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1884 (0x75c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Feb 10 13:49:09 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C8BB029C9D2DF9E16864BA02E06DD36312BB5A4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:d6:5e:3d:9e:4c:df:e3:d1:5c:7f:f9:0c: d9:ae:90:40:3b:ce:f1:31:db:d4:57:fe:86:2c:9d: 81:a5:f8:be:e5:e2:d3:4b:e8:f0:ca:61:ff:d6:3a: b3:4c:98:cc:c3:b9:28:f2:08:fd:09:05:ee:2c:2d: c9:07:a4:41:6e:21:98:33:32:11:81:a6:5e:33:52: 8d:38:f3:4a:8b:d3:e0:b2:43:05:60:5f:4a:a5:14: 52:25:5f:10:3a:79:22:4c:f5:da:ad:96:62:e6:3e: c0:99:74:52:c2:aa:3c:64:70:68:ef:88:52:23:2c: 87:0f:51:fd:fa:82:20:5f:ea:44:71:4c:f3:f4:92: 81:df:4b:4a:6f:6e:8b:b2:89:5c:1f:1f:29:8f:12: f7:dc:4b:18:92:26:44:c7:9d:54:f3:86:91:c2:e7: ea:a4:5e:25:63:90:ff:64:47:7a:62:86:ca:6f:b7: cf:52:65:99:61:da:af:58:da:ad:f0:a7:0a:38:c1: 69:d6:da:c4:f7:01:bd:54:2b:fc:47:02:1a:a4:72: fc:32:a4:a7:18:7d:61:b3:2f:58:e6:54:2a:d9:8e: 92:66:ba:c9:97:fb:a1:f5:77:05:8a:53:68:74:f7: 9c:4a:f4:4b:00:50:c4:fd:3e:de:08:d1:10:7b:df: 6e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BB:02:9C:9D:2D:F9:E1:68:64:BA:02:E0:6D:D3:63:12:BB:5A:4D X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/yLsCnJ0t-eFoZLoC4G3TYxK7Wk0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3540:fff0::/46 Signature Algorithm: sha256WithRSAEncryption 69:62:45:7b:30:f9:3a:31:f3:66:05:6c:ac:9a:ff:f9:b7:f9: bb:24:f5:ad:f4:cf:3c:69:8e:23:41:7a:1a:0e:e8:5e:f3:30: d3:44:eb:8b:57:31:55:b1:b7:60:01:1a:dd:d0:7d:f3:0b:12: f0:15:cd:87:c6:95:b6:e3:c1:44:6b:dc:17:2f:b1:7c:32:ac: 94:df:d5:b2:cd:7f:ac:1c:ba:4e:5c:0e:67:3e:5f:19:0b:30: 95:57:16:90:8c:7f:b6:a2:94:10:08:ed:99:39:c9:a2:17:2d: 50:2e:5d:10:ff:d7:4b:74:1d:3c:af:a4:58:35:4f:58:a7:ec: 19:41:dc:89:dd:4c:70:46:aa:da:8e:59:70:1f:5c:63:72:4a: 31:ec:fc:1f:97:23:1d:27:94:d8:dc:ee:cc:64:4c:51:7c:fd: 5d:a9:e1:c0:d9:7d:0d:c1:93:a9:7e:50:4f:8e:61:af:89:b3: 9e:d1:12:2b:01:ae:2d:8c:a0:c2:46:8b:5e:1e:a8:7d:76:4b: 1a:bc:64:37:69:ee:8f:c1:4c:95:59:5d:4c:67:68:a6:0d:6b: 58:87:c3:c1:ee:26:69:7e:f0:1d:db:ea:0a:69:e4:72:7b:35: e2:9e:17:3a:be:cd:ab:e5:f5:93:a9:77:ba:5b:50:44:70:ff: c4:3b:c7:b9 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICB1wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNTAyMTAx MzQ5MDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4QkIwMjlDOUQyREY5 RTE2ODY0QkEwMkUwNkREMzYzMTJCQjVBNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu5tZePZ5M3+PRXH/5DNmukEA7zvEx29RX/oYsnYGl+L7l4tNL 6PDKYf/WOrNMmMzDuSjyCP0JBe4sLckHpEFuIZgzMhGBpl4zUo0480qL0+CyQwVg X0qlFFIlXxA6eSJM9dqtlmLmPsCZdFLCqjxkcGjviFIjLIcPUf36giBf6kRxTPP0 koHfS0pvbouyiVwfHymPEvfcSxiSJkTHnVTzhpHC5+qkXiVjkP9kR3pihspvt89S ZZlh2q9Y2q3wpwo4wWnW2sT3Ab1UK/xHAhqkcvwypKcYfWGzL1jmVCrZjpJmusmX +6H1dwWKU2h095xK9EsAUMT9Pt4I0RB7327xAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUyLsCnJ0t+eFoZLoC4G3TYxK7Wk0wHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL3lMc0NuSjB0LWVG b1pMb0M0RzNUWXhLN1drMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwIkBjVA//AwDQYJKoZIhvcNAQELBQADggEBAGliRXsw+Tox82YFbKya//m3 +bsk9a30zzxpjiNBehoO6F7zMNNE64tXMVWxt2ABGt3QffMLEvAVzYfGlbbjwURr 3BcvsXwyrJTf1bLNf6wcuk5cDmc+XxkLMJVXFpCMf7ailBAI7Zk5yaIXLVAuXRD/ 10t0HTyvpFg1T1in7BlB3IndTHBGqtqOWXAfXGNySjHs/B+XIx0nlNjc7sxkTFF8 /V2p4cDZfQ3Bk6l+UE+OYa+Js57REisBri2MoMJGi14eqH12Sxq8ZDdp7o/BTJVZ XUxnaKYNa1iHw8HuJml+8B3b6gpp5HJ7NeKeFzq+zavl9ZOpd7pbUERw/8Q7x7k= -----END CERTIFICATE-----Generated at Wed Apr 16 02:42:02 2025 by rpki-client