$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/OwV3St-SxcsIzgpvPupGZF1MPb4.roa File: OwV3St-SxcsIzgpvPupGZF1MPb4.roa (raw, json) Hash identifier: RP6R6k5ayPw/CKqUEyD3J0aaVXhf06X61azaX6QlA04= Subject key identifier: 3B:05:77:4A:DF:92:C5:CB:08:CE:0A:6F:3E:EA:46:64:5D:4C:3D:BE Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 0852 Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/OwV3St-SxcsIzgpvPupGZF1MPb4.roa Signing time: Fri 22 Aug 2025 08:44:22 +0000 ROA not before: Fri 22 Aug 2025 08:44:22 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 38840 IP address blocks: 2406:3540:fff8::/46 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2130 (0x852) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Aug 22 08:44:22 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3B05774ADF92C5CB08CE0A6F3EEA46645D4C3DBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a8:f1:52:33:0c:dc:a8:8e:1d:f7:30:9d:b2: 45:cb:f0:58:eb:56:10:ac:9d:e8:0f:46:e6:38:86: 72:bb:87:9f:c3:a9:01:20:e6:68:85:89:94:3c:5b: 1a:bd:2a:d3:eb:55:b3:b1:48:f0:01:8e:f1:b3:1f: 40:c8:b4:ca:4f:35:03:06:71:ac:2c:2a:e1:e7:4f: 44:6d:bb:99:10:d1:83:77:a7:9e:fe:36:8a:9b:a3: a6:46:7c:37:0f:a1:00:5e:94:ed:a1:69:f9:6c:5d: 7a:af:a3:74:70:aa:86:73:df:74:b2:97:4a:8b:1e: 5a:0b:02:2f:45:ce:07:9f:46:d2:0d:40:81:d6:18: 4b:2e:3c:94:fb:3a:b8:46:a7:6c:23:22:13:a0:06: af:4d:7a:ee:2c:a9:b0:e3:01:82:27:d0:1e:5c:1e: ac:cc:e2:9d:5b:9d:df:5b:d3:ab:44:7a:29:23:b1: ff:2e:c8:7a:10:22:26:b3:68:12:32:73:33:15:0d: 84:4d:bd:cb:55:e0:8d:0e:a5:2b:70:df:42:d5:b6: 5f:89:bb:33:c9:fa:60:ac:05:eb:8c:cb:c9:71:5e: d4:af:0b:b7:14:47:6e:47:34:6e:ac:85:6f:4f:cc: 2f:89:77:be:f3:00:6c:7f:71:03:c4:98:a4:22:d3: 19:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:05:77:4A:DF:92:C5:CB:08:CE:0A:6F:3E:EA:46:64:5D:4C:3D:BE X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/OwV3St-SxcsIzgpvPupGZF1MPb4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3540:fff8::/46 Signature Algorithm: sha256WithRSAEncryption 72:63:35:58:32:49:ed:fb:9c:02:cc:90:26:31:6a:ac:00:29: 98:67:1d:19:f8:e0:e3:4d:26:c5:1e:c3:3b:dc:05:db:3b:d5: 49:e2:52:f0:2b:75:95:4f:eb:b9:28:ee:71:27:3b:6d:72:98: 7f:50:b8:0b:3e:78:52:a4:04:94:b9:e8:ec:89:7c:61:2c:13: 84:1b:47:23:b6:ca:92:cb:e7:81:87:8b:d1:ee:51:09:6b:32: 12:77:1c:7d:1d:66:12:cd:8e:0c:0f:35:c6:b2:67:33:95:ed: 67:35:c7:22:d8:68:11:bf:00:8b:c9:78:8c:f4:b2:ba:1f:a2: d8:3a:a2:69:0f:ac:2d:4b:e3:1b:ea:be:99:62:38:f8:c4:c7: cd:84:ce:c2:5e:d3:37:10:05:4a:98:ef:54:f6:89:b4:14:d5: e4:06:60:e0:18:dc:7d:2d:2f:68:cf:04:35:da:10:13:c9:26: 63:5c:eb:a2:21:2d:b9:59:7f:5a:52:a1:cb:59:c2:8b:48:76: 7b:28:3b:bb:9b:11:63:bf:10:ed:9c:b1:a7:a4:48:09:36:4c: ef:9d:11:52:64:4a:45:37:03:e4:98:a3:b1:ba:ca:7a:63:c4: 22:74:0d:bd:ec:dc:5c:66:2a:ba:ca:d9:78:4a:72:b6:0b:8d: c2:82:9e:b7 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNTA4MjIw ODQ0MjJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNCMDU3NzRBREY5MkM1 Q0IwOENFMEE2RjNFRUE0NjY0NUQ0QzNEQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2qPFSMwzcqI4d9zCdskXL8FjrVhCsnegPRuY4hnK7h5/DqQEg 5miFiZQ8Wxq9KtPrVbOxSPABjvGzH0DItMpPNQMGcawsKuHnT0Rtu5kQ0YN3p57+ Noqbo6ZGfDcPoQBelO2haflsXXqvo3RwqoZz33Syl0qLHloLAi9FzgefRtINQIHW GEsuPJT7OrhGp2wjIhOgBq9Neu4sqbDjAYIn0B5cHqzM4p1bnd9b06tEeikjsf8u yHoQIiazaBIyczMVDYRNvctV4I0OpStw30LVtl+JuzPJ+mCsBeuMy8lxXtSvC7cU R25HNG6shW9PzC+Jd77zAGx/cQPEmKQi0xm1AgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUOwV3St+SxcsIzgpvPupGZF1MPb4wHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL093VjNTdC1TeGNz SXpncHZQdXBHWkYxTVBiNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwIkBjVA//gwDQYJKoZIhvcNAQELBQADggEBAHJjNVgySe37nALMkCYxaqwA KZhnHRn44ONNJsUewzvcBds71UniUvArdZVP67ko7nEnO21ymH9QuAs+eFKkBJS5 6OyJfGEsE4QbRyO2ypLL54GHi9HuUQlrMhJ3HH0dZhLNjgwPNcayZzOV7Wc1xyLY aBG/AIvJeIz0srofotg6omkPrC1L4xvqvpliOPjEx82EzsJe0zcQBUqY71T2ibQU 1eQGYOAY3H0tL2jPBDXaEBPJJmNc66IhLblZf1pSoctZwotIdnsoO7ubEWO/EO2c saekSAk2TO+dEVJkSkU3A+SYo7G6ynpjxCJ0Db3s3FxmKrrK2XhKcrYLjcKCnrc= -----END CERTIFICATE-----Generated at Sun Aug 24 05:44:23 2025 by rpki-client