$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/SODljBvIsuVG8-dB_kPkAdal4mw.roa File: SODljBvIsuVG8-dB_kPkAdal4mw.roa (raw, json) Hash identifier: Lws+6zI70GEyAa30X88eKudJPtlyPDJRxhQAi75bh8o= Subject key identifier: 48:E0:E5:8C:1B:C8:B2:E5:46:F3:E7:41:FE:43:E4:01:D6:A5:E2:6C Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 085A Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/SODljBvIsuVG8-dB_kPkAdal4mw.roa Signing time: Fri 22 Aug 2025 08:44:23 +0000 ROA not before: Fri 22 Aug 2025 08:44:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17415 IP address blocks: 103.152.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2138 (0x85a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Aug 22 08:44:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=48E0E58C1BC8B2E546F3E741FE43E401D6A5E26C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:4d:86:3b:2e:40:56:97:52:17:f5:c1:2f: 75:a1:5f:4b:99:a9:87:ca:85:89:d9:83:b8:ff:1a: fd:82:06:68:52:60:95:4a:92:76:f0:e7:ad:9d:97: 86:d5:ed:5c:17:8e:bc:12:78:6f:56:13:b6:47:7c: ab:97:5d:7b:07:8f:80:de:14:3b:31:02:be:7b:57: 81:7a:5a:ab:22:5b:fd:bc:1b:12:9c:64:0c:a6:b5: b7:20:26:4b:3b:db:b5:95:e0:13:25:6e:4c:70:71: df:63:ba:88:2e:df:66:b6:75:98:d6:24:de:c0:9f: 0e:c5:45:f9:7e:ce:74:eb:97:92:23:e5:0b:e5:ca: 59:4f:2f:f1:4c:50:18:ed:67:86:b8:43:7b:5b:a9: 94:c4:ed:92:b0:e2:9a:50:1c:ee:90:a8:cb:da:b7: 00:62:de:58:e8:e8:4f:98:35:45:3c:dc:d4:92:3c: 9a:7b:cf:3b:7a:bc:a5:79:b4:5f:95:ec:82:67:f4: a5:ae:6d:3f:cb:93:e2:fb:4f:af:26:0c:75:69:31: 32:7d:e6:18:11:b8:f8:0b:4c:fa:76:e9:f1:02:9d: 0d:6d:95:70:d9:d5:72:3a:ed:ae:bc:e9:84:eb:0a: 9f:a7:cf:65:fa:0a:2f:7d:96:8d:04:03:03:a1:d3: e5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E0:E5:8C:1B:C8:B2:E5:46:F3:E7:41:FE:43:E4:01:D6:A5:E2:6C X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/SODljBvIsuVG8-dB_kPkAdal4mw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.152.202.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:0d:03:7b:b3:be:a4:a4:f1:a4:86:b9:2e:4d:93:dd:d9:28: fc:e0:4a:4b:0c:20:97:d3:ce:c6:a2:a7:89:eb:98:69:8a:e5: 27:ad:64:06:66:c9:3d:31:27:31:06:01:0a:77:ce:f9:03:1c: a9:29:dd:30:8d:cd:ad:13:d6:af:26:74:91:ad:3c:87:fa:f9: 07:ad:04:04:e1:f8:a0:4d:e0:4e:cc:46:25:96:32:6a:81:02: 9e:03:fe:b4:2e:66:e9:03:73:d4:f4:43:d9:d7:1f:2a:d5:d2: 69:e5:b6:b4:fb:d9:84:50:0e:8c:f5:cf:99:ff:a8:46:de:81: 4c:b5:4b:35:56:f7:a2:5c:44:d4:4b:97:81:6b:9b:0a:e5:11: 03:6f:f0:d8:de:ae:20:63:a4:68:65:c7:d2:9f:88:4c:cd:dd: 5e:db:a7:5b:fb:69:5b:91:1a:ef:a7:b1:ca:aa:1f:a4:4e:fb: 2d:94:00:6f:94:fc:09:2c:ce:94:a2:56:1b:e4:d4:c4:8e:5a: 9e:5f:ea:d0:b3:a9:2c:29:ab:4f:5d:e8:6b:59:0a:c9:f2:8d: 12:2c:d6:d7:30:e3:c0:46:4b:22:b4:89:e2:0d:18:23:ac:b7: 5e:b0:63:cf:cd:88:90:e7:65:06:f2:bc:50:ca:43:a5:a0:ae: bc:7f:37:22 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICCFowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNTA4MjIw ODQ0MjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ4RTBFNThDMUJDOEIy RTU0NkYzRTc0MUZFNDNFNDAxRDZBNUUyNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0102GOy5AVpdSF/XBL3WhX0uZqYfKhYnZg7j/Gv2CBmhSYJVK knbw562dl4bV7VwXjrwSeG9WE7ZHfKuXXXsHj4DeFDsxAr57V4F6WqsiW/28GxKc ZAymtbcgJks727WV4BMlbkxwcd9juogu32a2dZjWJN7Anw7FRfl+znTrl5Ij5Qvl yllPL/FMUBjtZ4a4Q3tbqZTE7ZKw4ppQHO6QqMvatwBi3ljo6E+YNUU83NSSPJp7 zzt6vKV5tF+V7IJn9KWubT/Lk+L7T68mDHVpMTJ95hgRuPgLTPp26fECnQ1tlXDZ 1XI67a686YTrCp+nz2X6Ci99lo0EAwOh0+UzAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUSODljBvIsuVG8+dB/kPkAdal4mwwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL1NPRGxqQnZJc3VW RzgtZEJfa1BrQWRhbDRtdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnmMowDQYJKoZIhvcNAQELBQADggEBAC4NA3uzvqSk8aSGuS5Nk93ZKPzg SksMIJfTzsaip4nrmGmK5SetZAZmyT0xJzEGAQp3zvkDHKkp3TCNza0T1q8mdJGt PIf6+QetBATh+KBN4E7MRiWWMmqBAp4D/rQuZukDc9T0Q9nXHyrV0mnltrT72YRQ Doz1z5n/qEbegUy1SzVW96JcRNRLl4FrmwrlEQNv8NjeriBjpGhlx9KfiEzN3V7b p1v7aVuRGu+nscqqH6RO+y2UAG+U/AkszpSiVhvk1MSOWp5f6tCzqSwpq09d6GtZ CsnyjRIs1tcw48BGSyK0ieINGCOst16wY8/NiJDnZQbyvFDKQ6Wgrrx/NyI= -----END CERTIFICATE-----Generated at Sun Aug 24 05:43:39 2025 by rpki-client