$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/Pu_c_OJKUWhK3BCHC-d2JfutFos.roa File: Pu_c_OJKUWhK3BCHC-d2JfutFos.roa (raw, json) Hash identifier: lUhWGPmAasQgGwFnNNihOYn7OrBTDi87frsq3tg2my8= Subject key identifier: 3E:EF:DC:FC:E2:4A:51:68:4A:DC:10:87:0B:E7:76:25:FB:AD:16:8B Certificate issuer: /CN=5B6B6F9DD4E2976144344002CF16293A0CA0A7D5 Certificate serial: 0119 Authority key identifier: 5B:6B:6F:9D:D4:E2:97:61:44:34:40:02:CF:16:29:3A:0C:A0:A7:D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/Pu_c_OJKUWhK3BCHC-d2JfutFos.roa Signing time: Sun 22 Sep 2024 18:01:14 +0000 ROA not before: Sun 22 Sep 2024 18:01:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.255.40.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/W2tvndTil2FENEACzxYpOgygp9U.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/W2tvndTil2FENEACzxYpOgygp9U.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B6B6F9DD4E2976144344002CF16293A0CA0A7D5 Validity Not Before: Sep 22 18:01:14 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3EEFDCFCE24A51684ADC10870BE77625FBAD168B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:d1:0f:3d:99:49:d3:56:b4:b2:08:82:38: 1d:7c:27:55:b6:1b:47:be:53:2a:8d:bd:15:a3:41: f0:a0:b2:a2:3b:26:71:c9:28:c0:11:2e:22:6a:59: 99:39:06:0a:8d:ba:8a:2d:30:9f:b1:0d:c3:95:fa: 91:8d:88:89:15:da:99:49:54:c8:69:dd:5e:ab:7e: 7b:b4:14:87:25:ec:3b:4d:a0:65:5a:7d:e2:21:8a: 7d:49:f0:29:42:a6:df:3e:88:95:c0:d1:6e:e5:cd: a3:bd:ec:25:d0:54:07:c5:c5:dc:ee:0b:f6:2e:00: f0:c3:35:98:1b:b7:8c:be:f0:6e:df:44:ab:da:9c: ed:43:6d:8a:15:17:e7:97:1d:b3:ad:9b:b1:59:c1: 62:70:34:84:60:98:dc:b8:fd:fd:e7:b0:c6:8f:b0: 75:6c:30:0c:dc:f3:6b:57:58:db:9c:19:88:d1:64: 09:9f:6a:d0:ec:2c:f8:88:2c:8d:43:9b:f8:e6:c9: d0:1d:21:0f:0f:d0:31:85:cd:aa:ff:30:f3:5a:bc: 40:ce:f2:cb:d3:70:e6:c5:7b:65:d1:28:57:b7:48: 06:6a:86:fd:21:cd:56:6f:47:62:c0:57:d3:96:71: 60:5e:c9:21:5c:db:db:35:9a:bb:8f:6b:4b:58:4e: 41:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EF:DC:FC:E2:4A:51:68:4A:DC:10:87:0B:E7:76:25:FB:AD:16:8B X509v3 Authority Key Identifier: keyid:5B:6B:6F:9D:D4:E2:97:61:44:34:40:02:CF:16:29:3A:0C:A0:A7:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/W2tvndTil2FENEACzxYpOgygp9U.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/Pu_c_OJKUWhK3BCHC-d2JfutFos.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.255.40.0/23 Signature Algorithm: sha256WithRSAEncryption 35:1f:7e:26:b3:7f:7c:c2:c3:ed:bc:5f:c4:22:59:25:2f:4f: 4c:58:0f:63:1e:e5:37:cc:50:b4:e2:49:47:11:35:28:88:f6: c2:93:86:bd:c1:7c:3c:92:64:0f:74:03:1e:16:cd:0d:36:34: 4b:25:68:23:b3:1d:d2:7d:c9:cb:db:23:33:e7:96:4e:74:13: 90:42:75:f4:84:1b:5f:3b:a2:fc:b9:e1:ba:b0:9e:79:55:69: 01:e2:12:7b:bf:bd:97:2f:14:6e:91:bb:6b:04:d4:d9:d5:aa: 9b:3f:62:7a:39:12:59:b3:d6:9d:3e:f9:8e:06:b4:8f:22:48: 48:fe:6d:5a:0a:e8:32:0e:02:66:ce:90:4f:6a:74:b7:83:4f: 6d:83:f2:92:32:39:da:50:fa:db:3a:b6:06:f3:1f:1d:7f:d3: 09:e0:51:df:9a:8c:12:73:75:c3:41:48:64:d5:f5:bb:7f:92: 7f:b8:da:ef:bf:87:65:ea:29:91:09:80:79:14:c3:8e:47:17: 42:00:73:30:6d:8f:c4:15:f4:d2:19:c0:6f:f9:ea:b7:4b:e6: 0f:21:92:93:dd:65:e7:4b:38:79:0e:d7:8f:50:fb:4c:b3:ab: 37:5e:99:e5:f7:04:f4:78:67:d0:e9:c9:41:2c:b1:66:ae:c2: 0c:b8:d5:f8 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICARkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUI2 QjZGOURENEUyOTc2MTQ0MzQ0MDAyQ0YxNjI5M0EwQ0EwQTdENTAeFw0yNDA5MjIx ODAxMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNFRUZEQ0ZDRTI0QTUx Njg0QURDMTA4NzBCRTc3NjI1RkJBRDE2OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMSNEPPZlJ01a0sgiCOB18J1W2G0e+UyqNvRWjQfCgsqI7JnHJ KMARLiJqWZk5BgqNuootMJ+xDcOV+pGNiIkV2plJVMhp3V6rfnu0FIcl7DtNoGVa feIhin1J8ClCpt8+iJXA0W7lzaO97CXQVAfFxdzuC/YuAPDDNZgbt4y+8G7fRKva nO1DbYoVF+eXHbOtm7FZwWJwNIRgmNy4/f3nsMaPsHVsMAzc82tXWNucGYjRZAmf atDsLPiILI1Dm/jmydAdIQ8P0DGFzar/MPNavEDO8svTcObFe2XRKFe3SAZqhv0h zVZvR2LAV9OWcWBeySFc29s1mruPa0tYTkGTAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUPu/c/OJKUWhK3BCHC+d2JfutFoswHwYDVR0jBBgwFoAUW2tvndTil2FENEAC zxYpOgygp9UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFOVEFT SUEvVzJ0dm5kVGlsMkZFTkVBQ3p4WXBPZ3lncDlVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9XMnR2bmRUaWwyRkVORUFDenhZcE9neWdwOVUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9GQU5UQVNJQS9QdV9jX09KS1VXaEsz QkNIQy1kMkpmdXRGb3Mucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ/8oMA0GCSqGSIb3DQEBCwUAA4IBAQA1H34ms398wsPtvF/EIlklL09MWA9j HuU3zFC04klHETUoiPbCk4a9wXw8kmQPdAMeFs0NNjRLJWgjsx3SfcnL2yMz55ZO dBOQQnX0hBtfO6L8ueG6sJ55VWkB4hJ7v72XLxRukbtrBNTZ1aqbP2J6ORJZs9ad PvmOBrSPIkhI/m1aCugyDgJmzpBPanS3g09tg/KSMjnaUPrbOrYG8x8df9MJ4FHf mowSc3XDQUhk1fW7f5J/uNrvv4dl6imRCYB5FMOORxdCAHMwbY/EFfTSGcBv+eq3 S+YPIZKT3WXnSzh5DtePUPtMs6s3Xpnl9wT0eGfQ6clBLLFmrsIMuNX4 -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:31 2024 by rpki-client on console-ams.rpki-client.org