$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/eCo1oLH7_qTPVi-sOomp0nsRzAQ.roa File: eCo1oLH7_qTPVi-sOomp0nsRzAQ.roa (raw, json) Hash identifier: OM7pMTlX7VIPQbf5tZ9FnnHk8iAOFxNpr+y1u0OT69w= Subject key identifier: 78:2A:35:A0:B1:FB:FE:A4:CF:56:2F:AC:3A:89:A9:D2:7B:11:CC:04 Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C Certificate serial: 0B20 Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/eCo1oLH7_qTPVi-sOomp0nsRzAQ.roa Signing time: Fri 22 Aug 2025 08:44:13 +0000 ROA not before: Fri 22 Aug 2025 08:44:13 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131671 IP address blocks: 103.146.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2848 (0xb20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C Validity Not Before: Aug 22 08:44:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=782A35A0B1FBFEA4CF562FAC3A89A9D27B11CC04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:7f:d8:0a:b6:58:9f:51:44:60:d8:74:95: b3:a6:65:43:81:fb:1f:3d:ee:d4:87:64:2a:0a:77: f2:20:12:27:fc:14:b7:60:0f:2e:12:91:be:df:05: dd:b6:9a:7b:ac:d2:b4:6e:ee:27:4b:c7:45:37:fa: 40:7b:26:52:c9:7b:ff:bf:ee:12:c3:17:05:0e:12: d0:dc:6e:79:2e:e3:b9:fc:c2:e3:af:9f:5b:60:bc: 05:bb:4e:40:02:92:38:48:f6:17:43:0d:ab:cb:81: 1b:ad:28:9c:31:cf:4e:73:9f:b2:45:87:e9:8e:5e: 36:02:5c:04:60:9e:0a:cc:88:77:51:ad:c5:de:0a: 42:86:25:5f:c3:13:a4:26:77:f0:db:cf:62:df:e5: b9:c1:e8:ec:19:4d:99:20:94:df:61:8f:ef:57:5f: 19:ea:0e:f6:51:53:5d:87:3b:46:5b:d7:48:20:ce: 72:1d:cb:50:f7:bb:03:07:d8:7b:aa:57:30:a5:51: 67:12:c3:a4:50:c8:be:0d:97:29:d0:f5:bb:23:61: 88:05:45:61:8e:38:a9:56:1c:86:dd:c7:5b:d0:cf: bf:21:d7:e5:f4:2b:57:a0:e8:3e:37:9a:6a:4a:21: e7:98:52:d4:5f:e0:18:0d:4e:18:b7:51:0b:cf:04: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2A:35:A0:B1:FB:FE:A4:CF:56:2F:AC:3A:89:A9:D2:7B:11:CC:04 X509v3 Authority Key Identifier: keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/eCo1oLH7_qTPVi-sOomp0nsRzAQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.146.212.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:99:f6:6f:e5:c1:39:4d:55:db:81:8d:c5:39:f0:a9:41:ca: 03:21:5e:a2:58:cb:a6:5d:12:ad:1b:46:de:51:ef:94:5f:f5: 54:40:2a:47:25:a0:85:04:f5:58:49:40:f2:8d:5e:ca:eb:9d: ef:0f:ba:81:7f:ef:d7:39:71:83:f2:63:6f:3a:60:25:e8:f0: 7d:96:e0:7d:06:20:fc:a9:ff:7d:df:3b:a4:f3:71:6f:5a:ec: c1:88:f3:a0:83:e2:51:9d:55:24:7b:1e:da:01:c0:15:01:1a: 1f:ab:85:65:2d:c4:ef:72:e5:19:4f:6e:37:f5:96:5a:b7:f4: 3e:14:20:61:23:78:e3:25:3d:8f:3a:1a:07:29:0c:db:d0:05: 8e:7c:b1:8c:6c:14:61:ed:81:85:be:90:31:63:b5:78:df:b6: 9e:99:e2:b9:1c:f0:44:e4:52:b8:13:f3:6b:7f:00:88:e5:7f: a2:44:b8:ea:01:f7:ff:5d:f0:7d:4d:65:6e:6b:5a:fb:cd:3e: 42:a2:98:22:05:ae:37:72:50:d0:ca:29:75:82:bb:c4:d0:f7: a0:f8:b3:8f:ad:aa:a8:92:df:a7:ed:ad:3b:82:99:e6:a0:b0: 87:7d:d1:94:c7:2d:f6:81:63:06:35:57:ae:89:a0:33:6d:7d: fe:fb:0f:71 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTlE RUYyQ0Y4MjhGMEQ5QUI2QUQ5NEY0MjYxMzE3NjREMjU0Q0M1QzAeFw0yNTA4MjIw ODQ0MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc4MkEzNUEwQjFGQkZF QTRDRjU2MkZBQzNBODlBOUQyN0IxMUNDMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDCm3/YCrZYn1FEYNh0lbOmZUOB+x897tSHZCoKd/IgEif8FLdg Dy4Skb7fBd22mnus0rRu7idLx0U3+kB7JlLJe/+/7hLDFwUOEtDcbnku47n8wuOv n1tgvAW7TkACkjhI9hdDDavLgRutKJwxz05zn7JFh+mOXjYCXARgngrMiHdRrcXe CkKGJV/DE6Qmd/Dbz2Lf5bnB6OwZTZkglN9hj+9XXxnqDvZRU12HO0Zb10ggznId y1D3uwMH2HuqVzClUWcSw6RQyL4NlynQ9bsjYYgFRWGOOKlWHIbdx1vQz78h1+X0 K1eg6D43mmpKIeeYUtRf4BgNThi3UQvPBD+VAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUeCo1oLH7/qTPVi+sOomp0nsRzAQwHwYDVR0jBBgwFoAUWd7yz4KPDZq2rZT0 JhMXZNJUzFwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFOVEFT WS9XZDd5ejRLUERacTJyWlQwSmhNWFpOSlV6RncuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1dkN3l6NEtQRFpxMnJaVDBKaE1YWk5KVXpGdy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTlRBU1kvZUNvMW9MSDdfcVRQVmkt c09vbXAwbnNSekFRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGeS1DANBgkqhkiG9w0BAQsFAAOCAQEAS5n2b+XBOU1V24GNxTnwqUHKAyFeoljL pl0SrRtG3lHvlF/1VEAqRyWghQT1WElA8o1eyuud7w+6gX/v1zlxg/JjbzpgJejw fZbgfQYg/Kn/fd87pPNxb1rswYjzoIPiUZ1VJHse2gHAFQEaH6uFZS3E73LlGU9u N/WWWrf0PhQgYSN44yU9jzoaBykM29AFjnyxjGwUYe2Bhb6QMWO1eN+2npniuRzw RORSuBPza38AiOV/okS46gH3/13wfU1lbmta+80+QqKYIgWuN3JQ0MopdYK7xND3 oPizj62qqJLfp+2tO4KZ5qCwh33RlMct9oFjBjVXromgM219/vsPcQ== -----END CERTIFICATE-----Generated at Sun Aug 24 13:40:23 2025 by rpki-client