$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/r3L6yttM2uauctbjHfvEYX9apYE.roa File: r3L6yttM2uauctbjHfvEYX9apYE.roa (raw, json) Hash identifier: qG0l5l8cBI/D1C2Z5zmTXnVral3zEsIqcEiBhf78lvk= Subject key identifier: AF:72:FA:CA:DB:4C:DA:E6:AE:72:D6:E3:1D:FB:C4:61:7F:5A:A5:81 Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 06E5 Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/r3L6yttM2uauctbjHfvEYX9apYE.roa Signing time: Mon 26 Aug 2024 05:21:00 +0000 ROA not before: Mon 26 Aug 2024 05:21:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24171 IP address blocks: 2406:3540:fff4::/46 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Aug 26 05:21:00 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=AF72FACADB4CDAE6AE72D6E31DFBC4617F5AA581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2d:28:af:75:06:e5:ef:73:d4:5e:77:07:a4: 54:62:fd:95:aa:23:35:67:e1:f8:1d:85:43:00:ac: 5a:56:ab:b5:db:96:fe:f6:03:16:86:72:66:69:60: 0a:8b:6d:4c:f7:67:c5:af:f9:11:9a:80:99:fe:86: 5f:f4:e6:5b:0f:c7:2c:09:e1:d0:fd:20:6a:48:0e: 50:1a:97:dd:60:25:4d:dc:99:65:6e:7a:3c:5f:85: 69:f1:fe:94:fc:46:bb:c0:7d:77:6d:1b:3d:ee:d4: 62:08:56:97:98:11:6d:bd:fc:d7:c5:59:c5:b0:ce: a2:9b:1c:32:ff:8f:11:7a:89:b7:50:96:f7:52:53: 3c:a9:79:a3:09:a2:e6:c1:8c:54:fa:9f:ec:36:64: e7:e1:e1:29:79:db:9f:fd:9c:81:50:7f:5f:07:52: 0d:60:b3:93:95:c2:07:97:61:66:b7:10:c6:fd:7d: 03:ae:c6:42:f4:54:e0:79:0d:dd:29:e9:4d:2f:92: 1d:0d:2e:76:5d:b9:3b:fb:43:3c:7d:70:8c:c1:c3: d0:2d:09:df:d9:7a:02:42:0b:9d:82:9c:5a:9e:90: 33:86:6b:bd:d6:fe:2e:0c:3a:e1:67:6a:d2:81:da: 64:93:66:85:39:64:1c:10:42:46:f9:84:33:e9:79: ae:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:72:FA:CA:DB:4C:DA:E6:AE:72:D6:E3:1D:FB:C4:61:7F:5A:A5:81 X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/r3L6yttM2uauctbjHfvEYX9apYE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3540:fff4::/46 Signature Algorithm: sha256WithRSAEncryption 5c:03:b5:b2:db:79:ca:e1:b4:c7:7c:77:40:88:30:d4:b9:e6: 7c:7a:54:d7:9a:30:c7:eb:e7:23:df:4e:a5:45:30:e2:02:a5: ec:4f:c1:9f:ae:8d:c2:2a:a5:43:45:13:c9:db:c0:4f:af:e1: 49:cc:f0:31:a6:32:1f:ca:a8:09:79:4e:61:d5:94:33:84:ab: 67:8e:9f:cd:91:c6:e0:d4:39:1f:e4:7e:19:86:da:d4:c3:40: 8d:d3:c4:30:29:4d:0d:8f:02:df:ca:97:6e:d6:ca:65:76:25: fe:96:3f:a0:54:00:2f:e0:a4:72:43:12:9c:4f:32:5d:ce:a9: 65:42:45:64:57:ee:0f:4e:74:9e:85:6b:24:cb:88:39:e0:0a: 55:f9:4a:8c:9a:d2:68:b7:71:aa:d5:31:fa:cf:b7:de:ed:d8: 72:c8:60:7b:d8:84:00:6e:59:a8:3b:59:2e:0e:c9:71:6c:b3: 46:6b:0b:9e:55:e6:de:09:b6:29:fb:9e:a0:be:d6:0c:98:84: b2:fd:02:56:94:8d:28:10:a5:a7:33:21:db:83:54:04:6f:39: d5:4e:b3:64:7a:30:90:ec:da:f3:d2:3e:0b:3f:92:e2:83:a1: d7:9a:97:36:01:82:d7:14:5a:4b:03:d9:80:d4:2a:f7:01:bb: e0:18:d8:70 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNDA4MjYw NTIxMDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFGNzJGQUNBREI0Q0RB RTZBRTcyRDZFMzFERkJDNDYxN0Y1QUE1ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlLSivdQbl73PUXncHpFRi/ZWqIzVn4fgdhUMArFpWq7Xblv72 AxaGcmZpYAqLbUz3Z8Wv+RGagJn+hl/05lsPxywJ4dD9IGpIDlAal91gJU3cmWVu ejxfhWnx/pT8RrvAfXdtGz3u1GIIVpeYEW29/NfFWcWwzqKbHDL/jxF6ibdQlvdS UzypeaMJoubBjFT6n+w2ZOfh4Sl525/9nIFQf18HUg1gs5OVwgeXYWa3EMb9fQOu xkL0VOB5Dd0p6U0vkh0NLnZduTv7Qzx9cIzBw9AtCd/ZegJCC52CnFqekDOGa73W /i4MOuFnatKB2mSTZoU5ZBwQQkb5hDPpea73AgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUr3L6yttM2uauctbjHfvEYX9apYEwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL3IzTDZ5dHRNMnVh dWN0YmpIZnZFWVg5YXBZRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwIkBjVA//QwDQYJKoZIhvcNAQELBQADggEBAFwDtbLbecrhtMd8d0CIMNS5 5nx6VNeaMMfr5yPfTqVFMOICpexPwZ+ujcIqpUNFE8nbwE+v4UnM8DGmMh/KqAl5 TmHVlDOEq2eOn82RxuDUOR/kfhmG2tTDQI3TxDApTQ2PAt/Kl27WymV2Jf6WP6BU AC/gpHJDEpxPMl3OqWVCRWRX7g9OdJ6FayTLiDngClX5Soya0mi3carVMfrPt97t 2HLIYHvYhABuWag7WS4OyXFss0ZrC55V5t4Jtin7nqC+1gyYhLL9AlaUjSgQpacz IduDVARvOdVOs2R6MJDs2vPSPgs/kuKDodealzYBgtcUWksD2YDUKvcBu+AY2HA= -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:33 2024 by rpki-client on console-ams.rpki-client.org