$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/Sire68ZMSuz49UtU4ex0SbO81Bg.roa File: Sire68ZMSuz49UtU4ex0SbO81Bg.roa (raw, json) Hash identifier: bMLQI7MprxmFO63dUkUMHb/fenN09MTjrpoNFxK1+hw= Subject key identifier: 4A:2A:DE:EB:C6:4C:4A:EC:F8:F5:4B:54:E1:EC:74:49:B3:BC:D4:18 Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 05DA Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/Sire68ZMSuz49UtU4ex0SbO81Bg.roa Signing time: Fri 01 Sep 2023 09:20:02 +0000 ROA not before: Fri 01 Sep 2023 09:20:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17415 IP address blocks: 103.152.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1498 (0x5da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Sep 1 09:20:02 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4A2ADEEBC64C4AECF8F54B54E1EC7449B3BCD418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3e:84:cc:2d:6c:f1:6c:76:e9:3e:16:52:b2: 4c:97:8c:db:76:63:cc:54:a9:9c:06:cb:a3:1a:bc: 3e:fd:31:42:8d:bd:cf:23:e9:b3:27:ec:b5:bb:aa: 33:26:77:d3:a6:49:b1:0f:d8:44:4f:9c:34:dc:65: f3:b1:92:b1:00:40:54:19:22:83:1f:89:ae:9c:07: 36:8a:df:32:40:a1:88:c5:48:05:d4:1c:f9:08:28: 13:65:f2:94:1f:e8:47:9a:2f:a1:aa:1f:4e:50:05: ce:fb:81:e2:fc:87:c1:98:73:58:3c:66:d5:c1:d9: 4c:f1:00:d2:1f:49:5c:73:53:fc:f0:51:79:69:ac: ea:f0:b6:b7:04:62:eb:06:e6:d0:9c:49:20:b3:d6: bc:b4:6f:82:33:70:eb:b0:6b:6a:db:23:b0:34:c2: 21:cf:e7:c9:0f:95:8c:d3:21:3b:28:eb:fc:fa:44: ce:36:c9:f9:85:a1:b4:67:8b:e3:df:4f:f2:a7:ef: 05:8c:2e:ca:7d:a1:b5:8c:51:7f:09:fb:69:2c:52: 86:c1:84:da:8b:cb:a5:2d:0c:d9:63:2f:de:d6:00: ef:67:ab:66:1a:2a:cc:ec:21:0d:81:b5:25:22:64: 45:2f:6c:c9:09:f8:52:db:0a:b0:7f:1f:1c:f9:39: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2A:DE:EB:C6:4C:4A:EC:F8:F5:4B:54:E1:EC:74:49:B3:BC:D4:18 X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/Sire68ZMSuz49UtU4ex0SbO81Bg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.152.202.0/23 Signature Algorithm: sha256WithRSAEncryption 99:b7:22:8b:0f:54:db:17:fc:a1:e7:41:88:e4:d5:2e:86:0f: 44:b1:79:b9:4e:30:cb:30:d6:ec:39:18:9e:82:af:4c:08:75: ea:7b:24:70:d4:60:78:b3:75:8b:63:b8:23:31:2f:1a:c5:53: 57:c1:5f:7f:80:44:64:1b:42:df:c5:e7:ea:a5:84:eb:80:53: 23:60:eb:b9:3c:38:38:7e:60:07:be:ff:11:16:c2:05:c1:e9: 29:8e:65:a7:14:d0:09:d2:91:a9:1e:45:53:cb:46:d8:92:a4: 2b:e1:ba:a5:61:95:a9:e7:13:97:31:cd:06:50:f1:b6:d8:fe: e1:70:44:7d:97:e9:bb:00:fa:05:82:4f:6c:6b:d7:33:ba:1f: cf:bf:d0:e7:1c:46:2c:76:b0:d8:52:9c:b5:7f:96:bd:87:c9: 1d:bc:08:bc:5a:40:95:01:82:2b:f8:c3:4d:8b:2c:51:dd:11: 40:7b:3d:0c:6f:44:43:7f:01:27:3b:3e:df:5f:24:33:ff:b2: 3a:db:a8:f1:4c:55:b4:f9:04:12:56:d3:e2:32:82:2b:9e:97: 4c:8e:3c:04:24:82:fd:6f:e9:52:86:ce:6e:69:9a:bc:dc:27: 27:b9:bf:49:b2:a8:88:76:2e:74:d5:54:3e:19:34:d2:0c:ae: 0f:2f:8d:cb -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICBdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yMzA5MDEw OTIwMDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRBMkFERUVCQzY0QzRB RUNGOEY1NEI1NEUxRUM3NDQ5QjNCQ0Q0MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDYPoTMLWzxbHbpPhZSskyXjNt2Y8xUqZwGy6MavD79MUKNvc8j 6bMn7LW7qjMmd9OmSbEP2ERPnDTcZfOxkrEAQFQZIoMfia6cBzaK3zJAoYjFSAXU HPkIKBNl8pQf6EeaL6GqH05QBc77geL8h8GYc1g8ZtXB2UzxANIfSVxzU/zwUXlp rOrwtrcEYusG5tCcSSCz1ry0b4IzcOuwa2rbI7A0wiHP58kPlYzTITso6/z6RM42 yfmFobRni+PfT/Kn7wWMLsp9obWMUX8J+2ksUobBhNqLy6UtDNljL97WAO9nq2Ya KszsIQ2BtSUiZEUvbMkJ+FLbCrB/Hxz5OUtBAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUSire68ZMSuz49UtU4ex0SbO81BgwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL1NpcmU2OFpNU3V6 NDlVdFU0ZXgwU2JPODFCZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAFnmMowDQYJKoZIhvcNAQELBQADggEBAJm3IosPVNsX/KHnQYjk1S6GD0Sx eblOMMsw1uw5GJ6Cr0wIdep7JHDUYHizdYtjuCMxLxrFU1fBX3+ARGQbQt/F5+ql hOuAUyNg67k8ODh+YAe+/xEWwgXB6SmOZacU0AnSkakeRVPLRtiSpCvhuqVhlann E5cxzQZQ8bbY/uFwRH2X6bsA+gWCT2xr1zO6H8+/0OccRix2sNhSnLV/lr2HyR28 CLxaQJUBgiv4w02LLFHdEUB7PQxvREN/ASc7Pt9fJDP/sjrbqPFMVbT5BBJW0+Iy giuel0yOPAQkgv1v6VKGzm5pmrzcJye5v0myqIh2LnTVVD4ZNNIMrg8vjcs= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:47 2024 by rpki-client on console-ams.rpki-client.org