$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/h3bW2HZczPV5bWoLGK8ghDHxSWA.roa File: h3bW2HZczPV5bWoLGK8ghDHxSWA.roa (raw, json) Hash identifier: bzfRMc33GnZaX40Z33FzE3Yb7ESDDb6d5sTRRWkRzO8= Subject key identifier: 87:76:D6:D8:76:5C:CC:F5:79:6D:6A:0B:18:AF:20:84:31:F1:49:60 Certificate issuer: /CN=5B6B6F9DD4E2976144344002CF16293A0CA0A7D5 Certificate serial: 03 Authority key identifier: 5B:6B:6F:9D:D4:E2:97:61:44:34:40:02:CF:16:29:3A:0C:A0:A7:D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/h3bW2HZczPV5bWoLGK8ghDHxSWA.roa Signing time: Mon 21 Aug 2023 05:12:37 +0000 ROA not before: Mon 21 Aug 2023 05:12:37 +0000 ROA not after: Tue 20 Aug 2024 03:15:58 +0000 asID: 131642 IP address blocks: 103.255.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/W2tvndTil2FENEACzxYpOgygp9U.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/W2tvndTil2FENEACzxYpOgygp9U.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 21:53:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B6B6F9DD4E2976144344002CF16293A0CA0A7D5 Validity Not Before: Aug 21 05:12:37 2023 GMT Not After : Aug 20 03:15:58 2024 GMT Subject: CN=8776D6D8765CCCF5796D6A0B18AF208431F14960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:d8:a3:91:d9:a1:f6:9e:ea:9d:cb:fd:81: 80:a8:56:47:75:b7:e0:27:88:36:9c:2a:05:4c:9d: 41:02:5a:c5:2e:c9:dd:c1:52:3e:56:ae:c7:f2:d8: 2d:8a:ad:df:9c:bc:82:fc:e9:4e:fb:31:0a:93:94: 3a:2a:d1:81:73:1f:bb:67:2f:65:f8:c6:5a:a0:d6: 53:99:47:45:a5:fa:28:6a:d5:80:20:a3:4a:b8:8d: 95:54:7d:20:f8:7a:50:aa:01:7c:70:8e:b7:1e:fa: 31:6e:af:9b:64:5a:9a:ec:e2:72:32:d9:84:be:8f: 58:6c:68:c5:24:3a:ab:0a:9d:38:5e:32:93:57:16: f0:ee:48:d2:54:9f:3b:f6:25:dd:f3:55:f1:12:ac: e2:2d:39:82:75:0f:13:de:a8:62:f1:59:00:c6:54: 44:68:b4:dc:24:7d:94:6e:a5:38:0f:15:a0:f7:c4: dc:9e:64:37:9a:6c:22:be:c6:ea:c9:c6:4e:39:93: 9d:e3:1b:06:94:f4:1b:a8:60:98:6b:b2:20:53:7e: 68:22:bf:43:21:37:cc:0d:09:d5:89:04:ef:4c:a3: 85:b2:22:de:a1:70:1e:16:21:73:4d:05:ed:5c:79: e7:f2:be:ec:0c:8c:d9:0e:20:5c:49:6a:ef:6b:2b: ea:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:76:D6:D8:76:5C:CC:F5:79:6D:6A:0B:18:AF:20:84:31:F1:49:60 X509v3 Authority Key Identifier: keyid:5B:6B:6F:9D:D4:E2:97:61:44:34:40:02:CF:16:29:3A:0C:A0:A7:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/W2tvndTil2FENEACzxYpOgygp9U.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/h3bW2HZczPV5bWoLGK8ghDHxSWA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.255.40.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:cc:54:39:4a:7e:3e:3c:c4:40:7c:a1:b8:a8:d4:47:bf:0a: c7:b5:b5:fd:1a:dd:f6:cd:b4:21:d1:06:bf:9f:96:14:ce:f2: 7d:63:82:9e:78:71:af:a7:a5:a3:3d:00:41:77:d3:dc:e7:44: 1a:b3:db:fe:2e:ba:ee:99:a9:4d:52:6a:25:b6:9e:0f:4c:5a: 3b:11:51:1c:42:9e:56:ef:0e:bf:e6:63:5b:45:a6:87:8f:88: 41:a5:55:02:5e:38:1d:8d:38:ac:0d:9d:49:50:57:8f:3c:04: 76:08:36:d8:5f:cb:eb:8a:4f:2c:7e:00:32:73:3b:8a:b1:fb: 12:63:82:8a:53:e9:de:8c:5b:a9:41:88:f0:0a:44:7d:76:21: 03:fb:79:f4:84:f6:b5:8f:d5:77:f1:90:cd:6e:1a:bf:d6:a9: 51:0d:f6:5f:3d:18:9a:9d:b6:8a:94:a7:ee:30:f4:28:46:2e: 22:e4:82:5b:de:8d:56:0c:eb:61:29:aa:83:b9:86:08:1f:4c: 77:ea:d2:a2:72:3b:84:6a:d0:bc:55:ba:83:bb:56:c1:6c:8a: f7:66:52:9b:f1:43:31:5a:64:44:cb:12:26:3e:ee:06:cd:d0: 20:a8:72:70:ff:1b:94:53:15:bb:c6:93:75:c0:2b:6f:c6:c2: e5:79:08:25 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QjZC NkY5REQ0RTI5NzYxNDQzNDQwMDJDRjE2MjkzQTBDQTBBN0Q1MB4XDTIzMDgyMTA1 MTIzN1oXDTI0MDgyMDAzMTU1OFowMzExMC8GA1UEAxMoODc3NkQ2RDg3NjVDQ0NG NTc5NkQ2QTBCMThBRjIwODQzMUYxNDk2MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ8H2KOR2aH2nuqdy/2BgKhWR3W34CeINpwqBUydQQJaxS7J3cFS Plaux/LYLYqt35y8gvzpTvsxCpOUOirRgXMfu2cvZfjGWqDWU5lHRaX6KGrVgCCj SriNlVR9IPh6UKoBfHCOtx76MW6vm2RamuzicjLZhL6PWGxoxSQ6qwqdOF4yk1cW 8O5I0lSfO/Yl3fNV8RKs4i05gnUPE96oYvFZAMZURGi03CR9lG6lOA8VoPfE3J5k N5psIr7G6snGTjmTneMbBpT0G6hgmGuyIFN+aCK/QyE3zA0J1YkE70yjhbIi3qFw HhYhc00F7Vx55/K+7AyM2Q4gXElq72sr6ocCAwEAAaOCAfIwggHuMB0GA1UdDgQW BBSHdtbYdlzM9XltagsYryCEMfFJYDAfBgNVHSMEGDAWgBRba2+d1OKXYUQ0QALP Fik6DKCn1TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF4GA1UdHwRXMFUwU6BR oE+GTXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9GQU5UQVNJ QS9XMnR2bmRUaWwyRkVORUFDenhZcE9neWdwOVUuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1cydHZuZFRpbDJGRU5FQUN6eFlwT2d5Z3A5VS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGeBggrBgEFBQcBCwSBkTCBjjBZBggrBgEFBQcwC4ZNcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTlRBU0lBL2gzYlcySFpjelBWNWJX b0xHSzhnaERIeFNXQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25p Yy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn/ygwDQYJKoZIhvcNAQELBQADggEBAErMVDlKfj48xEB8obio1Ee/Cse1tf0a 3fbNtCHRBr+flhTO8n1jgp54ca+npaM9AEF309znRBqz2/4uuu6ZqU1SaiW2ng9M WjsRURxCnlbvDr/mY1tFpoePiEGlVQJeOB2NOKwNnUlQV488BHYINthfy+uKTyx+ ADJzO4qx+xJjgopT6d6MW6lBiPAKRH12IQP7efSE9rWP1XfxkM1uGr/WqVEN9l89 GJqdtoqUp+4w9ChGLiLkglvejVYM62EpqoO5hggfTHfq0qJyO4Rq0LxVuoO7VsFs ivdmUpvxQzFaZETLEiY+7gbN0CCocnD/G5RTFbvGk3XAK2/GwuV5CCU= -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:42 2024 by rpki-client on console-ams.rpki-client.org