$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/9TgZ27xKTvpEBo4_SFicilqK9FI.roa File: 9TgZ27xKTvpEBo4_SFicilqK9FI.roa (raw, json) Hash identifier: 8jpXN8/Kkp0+w2SLVIsmqqh+UgRdevNVOh87QuYMc18= Subject key identifier: F5:38:19:DB:BC:4A:4E:FA:44:06:8E:3F:48:58:9C:8A:5A:8A:F4:52 Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C Certificate serial: 0A32 Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/9TgZ27xKTvpEBo4_SFicilqK9FI.roa Signing time: Mon 10 Feb 2025 13:46:33 +0000 ROA not before: Mon 10 Feb 2025 13:46:33 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131671 IP address blocks: 103.146.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 08:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2610 (0xa32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C Validity Not Before: Feb 10 13:46:33 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F53819DBBC4A4EFA44068E3F48589C8A5A8AF452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:89:f5:04:c2:25:28:fd:c0:55:97:15:a7:70: a3:dc:67:e6:c1:02:d1:45:01:96:eb:a0:6a:e8:14: 5b:d3:7c:1d:93:78:3e:a8:6a:89:44:35:78:83:43: 88:3a:bd:0d:2a:90:e1:92:b5:8b:de:67:62:64:f1: 20:4b:ed:39:c3:99:d7:c6:ee:09:5f:51:76:af:fa: 0b:73:e6:d0:5c:5d:47:d4:33:28:c0:b7:23:21:c0: ae:6b:5e:be:ec:43:2d:fb:cb:cc:21:ad:24:a0:31: a4:32:1a:8d:ee:ad:b9:67:8c:b2:75:a1:77:a3:44: 88:bc:bc:e0:ab:b1:8e:45:cf:c7:8d:43:36:c2:76: 98:1d:b2:64:81:c7:64:95:a2:f1:05:a4:16:c4:34: 7d:ad:fb:26:39:d5:25:ab:2c:bf:60:47:1a:e7:fc: cf:55:1c:21:c8:54:bd:3c:40:cb:36:ec:a1:c5:88: 21:a1:97:43:02:da:6e:7b:e4:ea:dd:03:cb:0b:12: 08:f3:38:77:37:e0:7d:23:33:02:17:aa:bd:1b:ca: 52:8d:e7:72:84:88:48:05:7a:c0:01:7c:fd:3a:52: bf:d4:99:35:a6:0b:0b:5e:45:d4:b0:ce:a3:5d:f6: 84:e5:7f:31:10:82:d8:c6:56:1c:32:bf:88:a1:3c: 03:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:38:19:DB:BC:4A:4E:FA:44:06:8E:3F:48:58:9C:8A:5A:8A:F4:52 X509v3 Authority Key Identifier: keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/9TgZ27xKTvpEBo4_SFicilqK9FI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.146.213.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:8a:e2:00:7f:05:8d:1f:93:b2:98:c7:8f:a5:57:17:66:24: 8b:48:88:ce:42:19:37:70:72:8e:5a:6d:04:43:8f:25:0d:b7: a8:4d:f4:7f:9a:b1:a4:15:eb:f5:dc:8e:cb:87:57:ab:19:f9: e9:a6:68:45:c4:c9:a7:a6:42:a3:47:1e:2e:74:bb:7d:23:02: a0:ca:aa:10:54:ff:e8:59:12:ea:db:8a:b6:86:97:be:ca:b6: 99:2e:01:5e:e4:83:0d:e4:8e:e6:69:4f:03:eb:70:94:09:6c: 42:93:8d:35:93:51:3a:f2:b3:b1:83:a7:1b:02:58:84:c4:9e: 7f:eb:6c:a0:02:74:ff:69:41:4c:5a:23:3b:de:33:b5:7b:ba: ce:d2:98:2e:3c:1c:67:f0:36:40:9e:d1:46:44:af:7a:6e:6b: 4c:05:bd:09:f9:8c:b0:3b:76:cc:42:b7:0e:41:db:b6:b6:14: 96:22:f7:8c:8b:ea:fa:b3:7b:bd:1e:fb:08:6d:a9:d9:00:4a: 03:44:d7:43:0a:fe:dc:fc:d5:0a:12:5a:82:1c:df:4e:67:86: 04:53:60:65:bd:16:3c:1d:7d:9f:e6:d5:1c:aa:ab:8d:7b:9d: 55:51:f8:be:d2:b4:70:07:7c:fd:d2:7b:92:3c:0a:e9:5c:01: 24:f0:fe:1e -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICCjIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTlE RUYyQ0Y4MjhGMEQ5QUI2QUQ5NEY0MjYxMzE3NjREMjU0Q0M1QzAeFw0yNTAyMTAx MzQ2MzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEY1MzgxOURCQkM0QTRF RkE0NDA2OEUzRjQ4NTg5QzhBNUE4QUY0NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCfifUEwiUo/cBVlxWncKPcZ+bBAtFFAZbroGroFFvTfB2TeD6o aolENXiDQ4g6vQ0qkOGStYveZ2Jk8SBL7TnDmdfG7glfUXav+gtz5tBcXUfUMyjA tyMhwK5rXr7sQy37y8whrSSgMaQyGo3urblnjLJ1oXejRIi8vOCrsY5Fz8eNQzbC dpgdsmSBx2SVovEFpBbENH2t+yY51SWrLL9gRxrn/M9VHCHIVL08QMs27KHFiCGh l0MC2m575OrdA8sLEgjzOHc34H0jMwIXqr0bylKN53KEiEgFesABfP06Ur/UmTWm CwteRdSwzqNd9oTlfzEQgtjGVhwyv4ihPAPLAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU9TgZ27xKTvpEBo4/SFicilqK9FIwHwYDVR0jBBgwFoAUWd7yz4KPDZq2rZT0 JhMXZNJUzFwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFOVEFT WS9XZDd5ejRLUERacTJyWlQwSmhNWFpOSlV6RncuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1dkN3l6NEtQRFpxMnJaVDBKaE1YWk5KVXpGdy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTlRBU1kvOVRnWjI3eEtUdnBFQm80 X1NGaWNpbHFLOUZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGeS1TANBgkqhkiG9w0BAQsFAAOCAQEAL4riAH8FjR+TspjHj6VXF2Yki0iIzkIZ N3ByjlptBEOPJQ23qE30f5qxpBXr9dyOy4dXqxn56aZoRcTJp6ZCo0ceLnS7fSMC oMqqEFT/6FkS6tuKtoaXvsq2mS4BXuSDDeSO5mlPA+twlAlsQpONNZNROvKzsYOn GwJYhMSef+tsoAJ0/2lBTFojO94ztXu6ztKYLjwcZ/A2QJ7RRkSvem5rTAW9CfmM sDt2zEK3DkHbtrYUliL3jIvq+rN7vR77CG2p2QBKA0TXQwr+3PzVChJaghzfTmeG BFNgZb0WPB19n+bVHKqrjXudVVH4vtK0cAd8/dJ7kjwK6VwBJPD+Hg== -----END CERTIFICATE-----Generated at Mon May 19 05:31:29 2025 by rpki-client