$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/fqdCH72mqJw0Kzba8vM4ZPV--3I.roa File: fqdCH72mqJw0Kzba8vM4ZPV--3I.roa (raw, json) Hash identifier: mxxID5zs0bsvxfcE8YhvWY3wqmUBpEgfQvjSg1teW1U= Subject key identifier: 7E:A7:42:1F:BD:A6:A8:9C:34:2B:36:DA:F2:F3:38:64:F5:7E:FB:72 Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 05DE Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/fqdCH72mqJw0Kzba8vM4ZPV--3I.roa Signing time: Fri 01 Sep 2023 09:20:03 +0000 ROA not before: Fri 01 Sep 2023 09:20:03 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17415 IP address blocks: 2406:3540::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1502 (0x5de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Sep 1 09:20:03 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7EA7421FBDA6A89C342B36DAF2F33864F57EFB72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d6:75:d3:8e:0d:c4:29:ea:d2:13:fb:1b:fb: 48:b1:8b:3d:0a:bb:c1:5b:c8:ac:4a:98:ac:c7:1d: c0:1c:aa:8b:9e:a9:9f:70:08:f0:cf:ec:9d:95:1a: 96:18:f4:fa:be:ff:a5:32:ed:61:ae:e7:9e:09:04: 13:eb:ae:f9:73:47:29:ea:3d:32:9d:e9:69:6b:7f: 29:88:d6:25:a6:b6:ce:38:a8:bf:40:dd:a9:87:3b: 60:95:5f:d3:b1:01:49:a1:f4:03:d7:e6:50:f1:c4: 46:86:17:8a:4a:86:c4:3b:bc:45:2a:10:af:9d:47: d4:6f:19:7a:c4:cd:30:30:c3:21:58:a0:6e:7a:5e: 21:85:38:20:73:1e:d7:a3:bc:18:93:45:dd:5d:cd: f7:34:4b:8f:aa:31:31:91:22:bc:73:d2:d7:ce:82: 86:28:3d:90:16:0d:6c:9a:77:b2:7f:f7:0b:5c:5d: 77:65:1c:95:e0:ab:3f:e9:0f:0f:17:80:32:87:3c: ef:af:ce:1e:78:39:bf:5b:c5:c7:ff:b1:f5:52:17: b1:08:a9:a6:9f:fc:79:8d:7a:8b:c7:52:d2:ef:fd: b9:8e:8a:bc:c5:f6:5e:c0:07:19:e7:11:dc:a5:b0: 2e:f4:4c:d3:de:3d:3c:3e:64:65:85:fe:ef:57:8d: 35:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A7:42:1F:BD:A6:A8:9C:34:2B:36:DA:F2:F3:38:64:F5:7E:FB:72 X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/fqdCH72mqJw0Kzba8vM4ZPV--3I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3540::/32 Signature Algorithm: sha256WithRSAEncryption a7:0a:50:0a:d4:59:64:bd:12:14:0a:bc:04:d6:77:43:30:2e: a9:88:c0:57:bd:09:e1:91:5b:55:43:04:d2:40:78:59:c9:c7: 7a:45:9b:e2:97:12:6a:db:44:62:40:32:cd:0b:66:a3:74:c6: 68:bb:12:f8:94:57:3b:1b:81:4b:bb:4c:64:fd:9b:92:19:f1: 1e:c2:d1:5a:4f:fd:e5:b1:be:6f:96:ec:26:13:78:e8:4b:31: 55:8d:d4:d4:a9:fb:d8:7e:4d:36:48:02:9b:33:01:ae:4d:14: 55:54:83:7a:3d:39:fe:ad:78:29:7c:bf:f2:1e:d9:c3:1b:47: 01:3f:75:5e:66:35:d7:fc:17:25:a9:eb:59:cb:6a:6b:aa:3d: d8:9b:82:78:40:57:b1:39:49:26:c2:c3:cc:91:5d:85:63:66: 4b:7a:4c:c8:4f:ac:7b:38:fa:4c:3a:da:d9:37:b7:f6:f4:d1: 0b:b4:e7:de:8b:be:54:15:0e:65:ab:ca:4e:03:3d:80:f4:40: b5:5e:f8:02:a4:f2:bc:e6:df:3a:0a:90:74:35:54:4d:e7:24: 8b:0a:73:6e:82:be:f2:d5:04:af:c5:b7:67:de:55:97:7e:34: 28:33:d2:6c:9e:0e:e0:fc:c4:54:ec:a7:73:cf:78:06:79:f9: c8:a1:39:0b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICBd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yMzA5MDEw OTIwMDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdFQTc0MjFGQkRBNkE4 OUMzNDJCMzZEQUYyRjMzODY0RjU3RUZCNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI1nXTjg3EKerSE/sb+0ixiz0Ku8FbyKxKmKzHHcAcqoueqZ9w CPDP7J2VGpYY9Pq+/6Uy7WGu554JBBPrrvlzRynqPTKd6WlrfymI1iWmts44qL9A 3amHO2CVX9OxAUmh9APX5lDxxEaGF4pKhsQ7vEUqEK+dR9RvGXrEzTAwwyFYoG56 XiGFOCBzHtejvBiTRd1dzfc0S4+qMTGRIrxz0tfOgoYoPZAWDWyad7J/9wtcXXdl HJXgqz/pDw8XgDKHPO+vzh54Ob9bxcf/sfVSF7EIqaaf/HmNeovHUtLv/bmOirzF 9l7ABxnnEdylsC70TNPePTw+ZGWF/u9XjTWFAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQUfqdCH72mqJw0Kzba8vM4ZPV++3IwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL2ZxZENINzJtcUp3 MEt6YmE4dk00WlBWLS0zSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgAC MAcDBQAkBjVAMA0GCSqGSIb3DQEBCwUAA4IBAQCnClAK1FlkvRIUCrwE1ndDMC6p iMBXvQnhkVtVQwTSQHhZycd6RZvilxJq20RiQDLNC2ajdMZouxL4lFc7G4FLu0xk /ZuSGfEewtFaT/3lsb5vluwmE3joSzFVjdTUqfvYfk02SAKbMwGuTRRVVIN6PTn+ rXgpfL/yHtnDG0cBP3VeZjXX/BclqetZy2prqj3Ym4J4QFexOUkmwsPMkV2FY2ZL ekzIT6x7OPpMOtrZN7f29NELtOfei75UFQ5lq8pOAz2A9EC1XvgCpPK85t86CpB0 NVRN5ySLCnNugr7y1QSvxbdn3lWXfjQoM9Jsng7g/MRU7Kdzz3gGefnIoTkL -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:41 2024 by rpki-client on console-fra.rpki-client.org