$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/DNA7-SG3rT7Z9tSJQVMSwltfWcg.roa File: DNA7-SG3rT7Z9tSJQVMSwltfWcg.roa (raw, json) Hash identifier: lWjuRQIxzQBd3r9iREV+d2m00QdbX/xtmpSOn+Btpss= Subject key identifier: 0C:D0:3B:F9:21:B7:AD:3E:D9:F6:D4:89:41:53:12:C2:5B:5F:59:C8 Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 05D6 Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/DNA7-SG3rT7Z9tSJQVMSwltfWcg.roa Signing time: Fri 01 Sep 2023 09:20:00 +0000 ROA not before: Fri 01 Sep 2023 09:20:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 134098 IP address blocks: 103.152.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1494 (0x5d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Sep 1 09:20:00 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=0CD03BF921B7AD3ED9F6D489415312C25B5F59C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:0f:ec:98:77:f2:59:a4:d1:fb:c0:9e:0a: 5e:cd:3f:a5:d1:e2:bf:64:2b:9d:96:eb:30:2a:e2: 01:7b:75:98:a2:71:ac:70:bd:86:5a:95:d1:5a:c7: 26:21:3c:3f:eb:0d:89:a3:58:4c:c9:d4:9d:30:a4: fa:d1:4f:36:8d:ce:fa:34:7f:af:f1:1f:f6:f5:d7: f5:5d:15:8f:e5:39:ed:4c:ca:57:9b:fc:7a:90:45: 81:02:97:89:1e:5d:42:c0:23:c3:07:e1:06:07:0f: aa:f2:0f:d4:f2:28:87:d5:95:2d:81:f5:d9:e6:ac: ee:2b:3a:33:ab:50:8b:1a:3c:ba:b3:81:d7:f3:52: 49:95:57:26:1b:43:7e:07:dc:16:77:0c:cb:28:d0: 48:63:6b:33:76:06:42:30:02:92:c4:3c:5e:dc:52: e4:6c:89:21:e8:42:5f:95:e0:cf:19:32:53:df:fa: 4c:53:53:48:ed:a3:da:21:38:22:2f:8e:b4:88:16: b4:e2:09:dd:93:37:47:58:03:33:b5:06:fa:98:ed: f9:79:fe:3e:7d:da:f8:bf:8d:7c:c5:12:b2:78:65: d8:72:a7:8a:ab:73:86:b8:83:85:ce:58:ec:7a:2a: fe:dd:9a:97:b5:e7:ce:a2:a8:ff:db:24:62:aa:e7: f5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D0:3B:F9:21:B7:AD:3E:D9:F6:D4:89:41:53:12:C2:5B:5F:59:C8 X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/DNA7-SG3rT7Z9tSJQVMSwltfWcg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.152.203.0/24 Signature Algorithm: sha256WithRSAEncryption 32:51:a1:40:82:ae:b2:df:d9:bb:08:1e:bf:7e:e9:8e:a0:9e: 82:ae:7e:19:9d:aa:26:2b:c1:fd:2d:07:6f:cd:47:17:72:22: f9:8d:a3:52:5e:55:ca:9b:45:2b:e3:4e:c6:51:62:67:f5:0b: 59:a5:e6:a8:d5:b1:f9:79:3a:96:f8:67:93:36:1e:c8:d3:97: 3e:df:79:e8:37:42:3a:2e:16:75:89:47:b2:16:6a:3d:a8:27: a5:53:d5:67:0f:6d:d6:3b:ac:6c:40:f1:24:5a:81:80:ae:c0: 2f:84:4d:49:39:6c:8a:45:2c:0c:80:24:56:d6:a5:a1:98:27: af:8d:b1:02:64:83:54:08:99:92:1e:34:a7:80:bd:88:1a:9a: 31:d5:38:7c:be:2e:d5:e5:ed:a0:cb:34:4e:ae:78:11:bb:9c: 0e:d1:6c:09:ad:40:5e:a7:ab:05:69:52:9c:36:b7:27:06:34: 9d:72:b8:97:62:e9:e9:70:54:fc:22:d0:74:80:83:c4:7f:0d: ec:26:81:22:7d:9c:a9:67:72:05:68:52:22:89:3b:9e:f2:c1: 3c:6f:20:cd:86:af:36:0a:d2:e9:44:06:f6:1b:fa:e7:31:a3: 70:b4:6e:bf:5d:4c:da:75:ef:48:87:0d:f5:a7:a5:fa:58:0f: e8:07:83:5c -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICBdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yMzA5MDEw OTIwMDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBDRDAzQkY5MjFCN0FE M0VEOUY2RDQ4OTQxNTMxMkMyNUI1RjU5QzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG2w/smHfyWaTR+8CeCl7NP6XR4r9kK52W6zAq4gF7dZiicaxw vYZaldFaxyYhPD/rDYmjWEzJ1J0wpPrRTzaNzvo0f6/xH/b11/VdFY/lOe1Myleb /HqQRYECl4keXULAI8MH4QYHD6ryD9TyKIfVlS2B9dnmrO4rOjOrUIsaPLqzgdfz UkmVVyYbQ34H3BZ3DMso0EhjazN2BkIwApLEPF7cUuRsiSHoQl+V4M8ZMlPf+kxT U0jto9ohOCIvjrSIFrTiCd2TN0dYAzO1BvqY7fl5/j592vi/jXzFErJ4Zdhyp4qr c4a4g4XOWOx6Kv7dmpe1586iqP/bJGKq5/WTAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUDNA7+SG3rT7Z9tSJQVMSwltfWcgwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL0ROQTctU0czclQ3 Wjl0U0pRVk1Td2x0ZldjZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnmMswDQYJKoZIhvcNAQELBQADggEBADJRoUCCrrLf2bsIHr9+6Y6gnoKu fhmdqiYrwf0tB2/NRxdyIvmNo1JeVcqbRSvjTsZRYmf1C1ml5qjVsfl5Opb4Z5M2 HsjTlz7feeg3QjouFnWJR7IWaj2oJ6VT1WcPbdY7rGxA8SRagYCuwC+ETUk5bIpF LAyAJFbWpaGYJ6+NsQJkg1QImZIeNKeAvYgamjHVOHy+LtXl7aDLNE6ueBG7nA7R bAmtQF6nqwVpUpw2tycGNJ1yuJdi6elwVPwi0HSAg8R/DewmgSJ9nKlncgVoUiKJ O57ywTxvIM2GrzYK0ulEBvYb+ucxo3C0br9dTNp170iHDfWnpfpYD+gHg1w= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:47 2024 by rpki-client on console-ams.rpki-client.org