$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/a2tZ2h6DsgcHPuu3jQgg9RbZ5Xk.roa File: a2tZ2h6DsgcHPuu3jQgg9RbZ5Xk.roa (raw, json) Hash identifier: QI3VPerdJ0LTEhCIdEalfY2PE7ODbtni9sLreA5Jyxk= Subject key identifier: 6B:6B:59:DA:1E:83:B2:07:07:3E:EB:B7:8D:08:20:F5:16:D9:E5:79 Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Certificate serial: 0F94 Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/a2tZ2h6DsgcHPuu3jQgg9RbZ5Xk.roa Signing time: Mon 19 May 2025 03:09:27 +0000 ROA not before: Mon 19 May 2025 03:09:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 63897 IP address blocks: 103.135.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3988 (0xf94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Validity Not Before: May 19 03:09:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6B6B59DA1E83B207073EEBB78D0820F516D9E579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ec:34:01:0d:e4:a5:2c:25:bd:a0:6b:58:d1: ee:88:1f:4d:29:0a:65:25:d6:c4:fd:e3:bf:9c:c1: 18:1e:c2:b9:e4:da:d6:96:e3:ab:1a:ad:59:5c:d6: 5a:cc:08:45:8b:e2:fb:0e:c2:38:6f:31:b6:d8:70: ea:a2:5a:84:20:9d:c6:75:30:21:90:3d:7e:d9:b0: 18:aa:8e:22:36:3d:ee:81:fe:1e:bb:c9:29:fb:73: af:70:c1:8a:79:11:c4:26:3b:14:10:c3:60:2d:3e: d9:a1:fc:14:57:3d:34:2e:78:35:cc:9a:2f:a2:a8: db:46:09:dc:f8:40:30:87:5b:f5:be:da:15:b9:fc: bd:6f:d8:df:bf:ab:a8:5c:1b:ca:45:26:2d:fc:33: 99:68:b6:31:7d:96:4f:60:ab:4b:b0:b4:08:4c:c7: 0a:ce:3f:2e:69:27:e9:e8:e2:f3:3d:e4:fd:54:79: b5:c9:57:43:ba:e0:b3:ef:2a:b4:54:4f:82:60:29: 1f:b2:8e:00:c2:4e:df:4b:54:6d:3a:9a:27:52:e9: 51:94:32:1a:7f:e3:af:7a:6a:03:11:6a:53:0c:2c: e1:73:ab:ef:63:0e:b5:a8:85:a5:70:82:ee:d7:7f: 53:6c:cd:18:9b:d6:db:cd:68:c1:bc:68:74:03:a5: f0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6B:59:DA:1E:83:B2:07:07:3E:EB:B7:8D:08:20:F5:16:D9:E5:79 X509v3 Authority Key Identifier: keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/a2tZ2h6DsgcHPuu3jQgg9RbZ5Xk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.23.0/24 Signature Algorithm: sha256WithRSAEncryption 29:d4:6d:5a:95:d1:41:6c:0b:74:01:a3:e3:a2:db:9c:dc:af: be:73:87:a7:90:6c:9e:e5:67:90:97:45:81:20:95:bb:2f:ae: e7:52:4a:7a:de:5c:17:76:ff:55:67:53:b7:3d:d4:6f:f0:3d: f3:2d:f5:f0:2e:48:62:42:48:49:87:5c:ee:d2:17:3b:1f:34: 84:16:0b:b8:1a:3f:8a:77:5d:f4:cb:9a:fd:f1:e4:51:dd:47: 31:a1:ca:13:24:03:a7:ce:96:06:74:ae:83:4a:95:a4:49:41: 08:bd:2f:15:37:01:4f:fc:9b:87:fd:80:67:36:e1:e0:b7:7a: 42:ae:8c:64:31:08:d3:ed:22:0e:2c:e8:6f:3f:13:2a:47:29: d0:6d:d4:6e:5c:a0:b6:4d:13:90:dd:39:e8:23:3b:0c:35:08: 9a:59:0c:17:48:ba:fc:b2:88:0b:74:d5:b4:2e:89:81:2a:86: e2:0b:69:91:a0:d3:20:f7:61:4b:03:57:81:74:63:e7:88:cb: 1b:d4:6b:e2:45:1b:b1:f8:aa:a6:c1:93:54:59:a9:13:59:be: 0a:24:43:cd:06:75:08:d5:3f:b8:55:8b:d8:f9:05:84:d5:f0: 7c:bb:2e:1c:f0:ee:be:bf:2c:d4:7f:56:b5:52:e6:2c:b6:72: 91:22:1f:5b -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICD5QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTE4 RUIzNzdERDAzMThBRTQ2NUQ4RjNGN0Q2RTBBRDBBNEU5RUQxRTAeFw0yNTA1MTkw MzA5MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZCNkI1OURBMUU4M0Iy MDcwNzNFRUJCNzhEMDgyMEY1MTZEOUU1NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG7DQBDeSlLCW9oGtY0e6IH00pCmUl1sT947+cwRgewrnk2taW 46sarVlc1lrMCEWL4vsOwjhvMbbYcOqiWoQgncZ1MCGQPX7ZsBiqjiI2Pe6B/h67 ySn7c69wwYp5EcQmOxQQw2AtPtmh/BRXPTQueDXMmi+iqNtGCdz4QDCHW/W+2hW5 /L1v2N+/q6hcG8pFJi38M5lotjF9lk9gq0uwtAhMxwrOPy5pJ+no4vM95P1UebXJ V0O64LPvKrRUT4JgKR+yjgDCTt9LVG06midS6VGUMhp/4696agMRalMMLOFzq+9j DrWohaVwgu7Xf1NszRib1tvNaMG8aHQDpfBvAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUa2tZ2h6DsgcHPuu3jQgg9RbZ5XkwHwYDVR0jBBgwFoAUoY6zd90DGK5GXY8/ fW4K0KTp7R4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkdFTi9vWTZ6ZDkwREdLNUdYWThfZlc0SzBLVHA3UjQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL29ZNnpkOTBER0s1R1hZOF9mVzRLMEtUcDdSNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL01JTkdKSU5HRU4vYTJ0WjJoNkRz Z2NIUHV1M2pRZ2c5UmJaNVhrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGeHFzANBgkqhkiG9w0BAQsFAAOCAQEAKdRtWpXRQWwLdAGj46LbnNyv vnOHp5BsnuVnkJdFgSCVuy+u51JKet5cF3b/VWdTtz3Ub/A98y318C5IYkJISYdc 7tIXOx80hBYLuBo/indd9Mua/fHkUd1HMaHKEyQDp86WBnSug0qVpElBCL0vFTcB T/ybh/2AZzbh4Ld6Qq6MZDEI0+0iDizobz8TKkcp0G3Ublygtk0TkN056CM7DDUI mlkMF0i6/LKIC3TVtC6JgSqG4gtpkaDTIPdhSwNXgXRj54jLG9Rr4kUbsfiqpsGT VFmpE1m+CiRDzQZ1CNU/uFWL2PkFhNXwfLsuHPDuvr8s1H9WtVLmLLZykSIfWw== -----END CERTIFICATE-----Generated at Sun Jun 22 07:48:50 2025 by rpki-client