$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/s2omCCvZxbfNVxc23FBznFWKQec.roa File: s2omCCvZxbfNVxc23FBznFWKQec.roa (raw, json) Hash identifier: AFawhO2vhOzkylH/qGiObuVfHB1AJ/ESSw/EFGgnxRQ= Subject key identifier: B3:6A:26:08:2B:D9:C5:B7:CD:57:17:36:DC:50:73:9C:55:8A:41:E7 Certificate issuer: /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Certificate serial: 0854 Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/s2omCCvZxbfNVxc23FBznFWKQec.roa Signing time: Fri 22 Aug 2025 08:44:23 +0000 ROA not before: Fri 22 Aug 2025 08:44:23 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131682 IP address blocks: 2406:3540:fffc::/46 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2132 (0x854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864 Validity Not Before: Aug 22 08:44:23 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B36A26082BD9C5B7CD571736DC50739C558A41E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bf:fa:61:94:48:85:30:0a:1c:ff:6c:7b:a9: a8:4a:4c:5b:33:48:ef:1b:ac:e4:be:93:60:7f:fa: 9c:39:57:94:b0:de:1e:33:89:30:d9:85:f3:80:76: 72:c3:6d:07:ba:85:3a:3f:7e:4e:91:5b:a3:db:9d: 50:f9:10:7e:0c:82:64:1f:e8:2d:62:55:b5:cc:af: 87:f8:a0:9d:24:3b:42:7f:ab:63:67:88:44:74:b4: 97:f7:85:7e:eb:d7:0c:a3:63:46:95:7b:be:9d:01: b9:2f:65:2c:4b:29:03:07:81:76:12:b5:71:f1:bf: 55:d6:ad:0b:c6:99:7e:30:84:8b:37:c7:3a:be:a9: bd:03:c3:19:c0:fc:5a:fe:de:dc:79:cf:38:7f:a2: d4:e8:52:04:a0:ce:96:c6:31:ac:3e:fc:0a:b2:8e: 21:67:4f:5d:e0:03:a1:2b:fa:af:f6:1d:74:ea:2c: 40:c7:e0:ef:ed:68:c4:1f:73:40:87:6c:77:72:49: bf:50:9f:71:c9:2e:2e:6b:eb:be:a8:df:1b:65:ad: 8a:65:3b:32:47:43:00:96:c6:0b:3e:25:21:1c:73: 11:a5:fe:85:46:54:50:be:9a:5e:16:5d:62:98:40: 19:68:63:30:5c:f6:55:ea:f5:88:13:03:ec:35:31: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6A:26:08:2B:D9:C5:B7:CD:57:17:36:DC:50:73:9C:55:8A:41:E7 X509v3 Authority Key Identifier: keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/s2omCCvZxbfNVxc23FBznFWKQec.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2406:3540:fffc::/46 Signature Algorithm: sha256WithRSAEncryption 87:31:8b:33:7a:83:15:8c:ed:57:94:f7:8e:9b:2e:1d:1c:0e: 87:89:38:58:df:75:7a:f7:cd:3d:33:e2:62:4a:da:fb:ea:bb: 96:3d:bd:17:bc:d5:f6:a5:4f:c0:b5:ea:41:d4:3a:35:f5:45: 11:d6:1d:57:20:dd:eb:c6:e1:4d:5c:94:ae:f2:01:5b:80:34: 3c:a8:13:37:5b:7b:79:4a:5c:1d:94:6c:76:2c:21:46:66:dd: 3e:43:38:45:d7:e9:c8:d2:80:21:a9:b5:a9:00:61:f1:de:16: 2d:19:f3:ba:a8:45:da:b5:91:57:5c:44:1d:40:28:73:44:33: ba:d1:5a:ef:7f:cd:24:8c:ce:0d:1f:9b:f2:f0:ff:27:47:e0: 65:1c:db:5a:11:4d:21:e0:1e:e5:70:b1:b8:68:0f:79:41:4b: 8a:13:68:61:35:1e:46:2c:52:dd:34:e0:3b:35:1b:fd:32:15: dc:2e:5b:31:00:ab:bd:58:12:b6:65:70:54:e2:ab:c4:69:b9: 03:a6:68:f1:0f:b6:03:81:f4:98:3b:32:36:7f:f1:77:7f:e9: d5:99:7c:1f:93:59:f0:97:ff:54:4e:6c:60:a6:00:6d:d9:bc: 57:a7:dd:52:06:4f:1e:dc:1b:8d:74:f1:7e:99:f1:54:e1:39: 47:fa:20:89 -----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNTA4MjIw ODQ0MjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIzNkEyNjA4MkJEOUM1 QjdDRDU3MTczNkRDNTA3MzlDNTU4QTQxRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDXv/phlEiFMAoc/2x7qahKTFszSO8brOS+k2B/+pw5V5Sw3h4z iTDZhfOAdnLDbQe6hTo/fk6RW6PbnVD5EH4MgmQf6C1iVbXMr4f4oJ0kO0J/q2Nn iER0tJf3hX7r1wyjY0aVe76dAbkvZSxLKQMHgXYStXHxv1XWrQvGmX4whIs3xzq+ qb0DwxnA/Fr+3tx5zzh/otToUgSgzpbGMaw+/AqyjiFnT13gA6Er+q/2HXTqLEDH 4O/taMQfc0CHbHdySb9Qn3HJLi5r676o3xtlrYplOzJHQwCWxgs+JSEccxGl/oVG VFC+ml4WXWKYQBloYzBc9lXq9YgTA+w1MWkfAgMBAAGjggH3MIIB8zAdBgNVHQ4E FgQUs2omCCvZxbfNVxc23FBznFWKQecwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL3Myb21DQ3ZaeGJm TlZ4YzIzRkJ6bkZXS1FlYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwIkBjVA//wwDQYJKoZIhvcNAQELBQADggEBAIcxizN6gxWM7VeU946bLh0c DoeJOFjfdXr3zT0z4mJK2vvqu5Y9vRe81falT8C16kHUOjX1RRHWHVcg3evG4U1c lK7yAVuANDyoEzdbe3lKXB2UbHYsIUZm3T5DOEXX6cjSgCGptakAYfHeFi0Z87qo Rdq1kVdcRB1AKHNEM7rRWu9/zSSMzg0fm/Lw/ydH4GUc21oRTSHgHuVwsbhoD3lB S4oTaGE1HkYsUt004Ds1G/0yFdwuWzEAq71YErZlcFTiq8RpuQOmaPEPtgOB9Jg7 MjZ/8Xd/6dWZfB+TWfCX/1RObGCmAG3ZvFen3VIGTx7cG4108X6Z8VThOUf6IIk= -----END CERTIFICATE-----Generated at Sun Aug 24 05:43:22 2025 by rpki-client