$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/t_iNt46vxa-BefdNNO3DFO9bH6k.roa File: t_iNt46vxa-BefdNNO3DFO9bH6k.roa (raw, json) Hash identifier: ja9T8hqllQShH8G9XliVpGRRrUEZHaaO93w9EdMiFd8= Subject key identifier: B7:F8:8D:B7:8E:AF:C5:AF:81:79:F7:4D:34:ED:C3:14:EF:5B:1F:A9 Certificate issuer: /CN=5B6B6F9DD4E2976144344002CF16293A0CA0A7D5 Certificate serial: 0105 Authority key identifier: 5B:6B:6F:9D:D4:E2:97:61:44:34:40:02:CF:16:29:3A:0C:A0:A7:D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/t_iNt46vxa-BefdNNO3DFO9bH6k.roa Signing time: Mon 26 Aug 2024 05:15:36 +0000 ROA not before: Mon 26 Aug 2024 05:15:36 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 2401:28e0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/W2tvndTil2FENEACzxYpOgygp9U.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/W2tvndTil2FENEACzxYpOgygp9U.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Sep 2024 11:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B6B6F9DD4E2976144344002CF16293A0CA0A7D5 Validity Not Before: Aug 26 05:15:36 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B7F88DB78EAFC5AF8179F74D34EDC314EF5B1FA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:de:1f:01:99:46:30:c5:9f:8f:ff:82:79:f8: b1:49:a3:1c:30:dc:7c:e9:bd:2d:8b:83:bc:51:d7: 74:7d:b5:31:d2:0f:ac:41:a1:76:ec:d7:f5:29:a6: 31:00:da:80:a9:de:ae:87:3b:81:d1:a5:78:e4:72: 6c:0c:f1:29:8d:76:1f:e7:96:d4:0e:21:fb:d8:ee: 42:0c:ab:be:f2:34:86:3b:a2:2b:17:0c:38:91:ad: 2a:dc:96:9b:a4:c7:ee:61:be:24:27:d3:c0:d1:d8: 0f:1c:de:dc:6e:f9:c9:84:db:96:ea:77:8c:22:dc: 74:7a:4e:14:9e:9b:be:9f:fa:62:db:7c:ca:c9:8a: 0b:41:af:8b:b7:5e:a8:56:6f:51:e8:9a:c8:09:64: ea:57:0f:b0:5c:04:7e:c1:ef:18:a4:1b:4b:ca:75: b9:98:b4:f2:af:a0:7b:51:72:11:e4:74:6c:38:10: 27:5a:3a:7f:05:f5:68:36:ad:9f:56:3e:6c:f7:b2: ac:3e:ad:b2:a9:ab:3e:20:90:93:40:d8:5b:5d:dc: d3:46:c6:d1:c3:22:45:1f:84:00:fc:49:9b:b6:37: f4:52:f2:3d:aa:16:77:ed:85:69:07:85:7e:f5:46: e4:88:40:09:2e:dc:01:36:5a:2c:9c:36:26:42:5a: 7b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F8:8D:B7:8E:AF:C5:AF:81:79:F7:4D:34:ED:C3:14:EF:5B:1F:A9 X509v3 Authority Key Identifier: keyid:5B:6B:6F:9D:D4:E2:97:61:44:34:40:02:CF:16:29:3A:0C:A0:A7:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/W2tvndTil2FENEACzxYpOgygp9U.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/W2tvndTil2FENEACzxYpOgygp9U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASIA/t_iNt46vxa-BefdNNO3DFO9bH6k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:28e0::/32 Signature Algorithm: sha256WithRSAEncryption 82:a9:38:ec:e3:91:92:dc:16:d5:92:8f:8d:81:a0:74:3b:a9: e3:3b:13:15:c8:c0:c6:2d:f0:46:9f:51:e1:8a:15:bd:1a:67: 2e:30:b8:4a:6f:d5:3a:0b:ca:32:11:57:13:a5:f9:9f:ab:00: a6:13:b8:21:25:f8:14:9e:10:ac:b9:24:f0:0a:86:9d:be:a0: 36:0b:94:78:ba:f5:0f:f1:0a:7f:97:65:04:6f:6b:05:8f:8e: fb:3c:46:a5:37:0e:54:fc:a2:38:d9:ae:27:16:d9:43:27:88: 94:0c:61:54:0f:76:6c:cf:c1:0e:39:9b:b9:1e:97:cf:3a:78: 63:f2:46:60:35:9d:85:38:70:bf:2d:ec:c0:46:2f:b4:61:e7: 88:bb:e9:9a:39:98:83:0c:e4:25:23:72:c1:18:e4:8f:1a:8e: 00:e7:0c:d9:dd:1b:df:aa:c9:d1:15:bb:f2:a7:da:3c:4d:dc: 3e:7b:f5:6f:72:28:23:76:46:82:11:90:ac:a0:3a:51:0a:aa: 03:ee:75:1c:fe:fe:5d:e0:76:44:10:de:8a:ae:48:46:cb:43: 2b:74:e9:2a:16:1e:0f:e3:ec:35:de:b4:d2:cf:7b:e5:2c:32: d9:50:86:5c:aa:ea:e7:41:57:6a:c1:5b:d9:40:8c:25:d0:b0: 7d:f6:6b:9f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUI2 QjZGOURENEUyOTc2MTQ0MzQ0MDAyQ0YxNjI5M0EwQ0EwQTdENTAeFw0yNDA4MjYw NTE1MzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI3Rjg4REI3OEVBRkM1 QUY4MTc5Rjc0RDM0RURDMzE0RUY1QjFGQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDq3h8BmUYwxZ+P/4J5+LFJoxww3HzpvS2Lg7xR13R9tTHSD6xB oXbs1/UppjEA2oCp3q6HO4HRpXjkcmwM8SmNdh/nltQOIfvY7kIMq77yNIY7oisX DDiRrSrclpukx+5hviQn08DR2A8c3txu+cmE25bqd4wi3HR6ThSem76f+mLbfMrJ igtBr4u3XqhWb1HomsgJZOpXD7BcBH7B7xikG0vKdbmYtPKvoHtRchHkdGw4ECda On8F9Wg2rZ9WPmz3sqw+rbKpqz4gkJNA2Ftd3NNGxtHDIkUfhAD8SZu2N/RS8j2q FnfthWkHhX71RuSIQAku3AE2WiycNiZCWnvhAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUt/iNt46vxa+BefdNNO3DFO9bH6kwHwYDVR0jBBgwFoAUW2tvndTil2FENEAC zxYpOgygp9UwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFOVEFT SUEvVzJ0dm5kVGlsMkZFTkVBQ3p4WXBPZ3lncDlVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9XMnR2bmRUaWwyRkVORUFDenhZcE9neWdwOVUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9GQU5UQVNJQS90X2lOdDQ2dnhhLUJl ZmROTk8zREZPOWJINmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAEo4DANBgkqhkiG9w0BAQsFAAOCAQEAgqk47OORktwW1ZKPjYGgdDup4zsT FcjAxi3wRp9R4YoVvRpnLjC4Sm/VOgvKMhFXE6X5n6sAphO4ISX4FJ4QrLkk8AqG nb6gNguUeLr1D/EKf5dlBG9rBY+O+zxGpTcOVPyiONmuJxbZQyeIlAxhVA92bM/B DjmbuR6Xzzp4Y/JGYDWdhThwvy3swEYvtGHniLvpmjmYgwzkJSNywRjkjxqOAOcM 2d0b36rJ0RW78qfaPE3cPnv1b3IoI3ZGghGQrKA6UQqqA+51HP7+XeB2RBDeiq5I RstDK3TpKhYeD+PsNd600s975Swy2VCGXKrq50FXasFb2UCMJdCwffZrnw== -----END CERTIFICATE-----Generated at Fri Sep 20 08:12:11 2024 by rpki-client on console-fra.rpki-client.org