$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/XInZT1vi8KI79tft1eSI4KLTPd4.roa File: XInZT1vi8KI79tft1eSI4KLTPd4.roa (raw, json) Hash identifier: +VrNkbHj3zT5eHK3nLu9D7VMvn5bcNo4H2yKj41zmaE= Subject key identifier: 5C:89:D9:4F:5B:E2:F0:A2:3B:F6:D7:ED:D5:E4:88:E0:A2:D3:3D:DE Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C Certificate serial: 08BF Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/XInZT1vi8KI79tft1eSI4KLTPd4.roa Signing time: Fri 01 Sep 2023 08:50:37 +0000 ROA not before: Fri 01 Sep 2023 08:50:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131671 IP address blocks: 103.146.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 03:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2239 (0x8bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C Validity Not Before: Sep 1 08:50:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=5C89D94F5BE2F0A23BF6D7EDD5E488E0A2D33DDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:84:e5:8b:d1:56:88:e5:78:92:0f:76:d5:da: 2d:37:64:dd:53:f5:9e:ab:fa:48:09:43:26:6b:75: 66:db:8f:a3:cb:f3:c6:5a:06:b9:4b:b4:c9:39:9f: 56:c0:34:4d:de:6f:4c:1c:c0:aa:e9:b2:66:69:44: 60:a3:45:c4:29:d2:6f:da:f2:c2:46:0a:6a:fe:f2: 30:5f:da:84:ed:74:33:ee:63:0d:b6:99:bf:81:db: 9a:92:00:ef:b8:4e:67:e9:48:e5:8d:6f:b5:7c:08: 9a:13:e9:98:2e:36:51:79:04:c6:bd:ad:3e:4d:25: 66:6a:53:f5:be:1b:2b:76:c5:a5:ab:e8:d5:b0:5d: 0d:59:85:33:72:03:18:85:a9:f2:3a:b3:6d:55:84: b0:ba:c1:f7:80:66:57:96:2a:1e:02:bd:37:20:59: f5:ad:f6:71:29:99:68:3a:94:6e:c4:50:10:b7:ec: 27:58:a3:78:87:da:32:51:b6:8a:aa:a5:3c:b2:0f: e6:f7:f3:54:87:43:84:f8:48:88:84:e5:d4:58:6b: 6a:ba:2e:85:e3:30:37:f1:f3:0c:22:e2:fe:75:f1: b0:de:de:61:1b:f7:6e:2b:f0:7e:c5:d4:58:02:7b: 2b:7a:01:7b:e7:09:d9:77:84:a5:7e:ce:0f:3d:b8: 2c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:89:D9:4F:5B:E2:F0:A2:3B:F6:D7:ED:D5:E4:88:E0:A2:D3:3D:DE X509v3 Authority Key Identifier: keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/XInZT1vi8KI79tft1eSI4KLTPd4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.146.212.0/24 Signature Algorithm: sha256WithRSAEncryption 89:4d:ad:2e:e1:b9:0c:5f:9e:33:4b:3b:55:c3:bf:30:7e:d4: 51:bf:b4:93:96:53:e4:81:9a:93:b7:54:21:58:58:51:df:7c: 30:e8:76:47:c9:83:7a:07:33:57:9e:1e:09:9d:6f:64:3f:df: 88:69:54:9e:4a:cc:a7:3f:1a:39:a2:89:f8:9c:67:0d:85:db: 54:fe:54:60:d8:c9:b9:75:10:d8:5b:18:dd:f2:f5:8e:63:60: e6:4f:10:df:ec:e1:24:94:91:df:13:7e:56:fe:8d:4a:9b:49: 16:7d:bc:d3:39:e3:6f:18:43:fb:3a:8e:08:ee:d6:81:57:97: c8:eb:8d:ab:b7:55:51:e3:c2:f3:6f:8c:20:fb:84:e1:7c:83: da:41:ad:16:8b:cf:11:5c:03:c5:ec:ae:9f:78:a0:f9:e7:25: 5c:57:51:c3:f7:fa:f9:c2:4d:6e:0d:e5:b1:96:6a:73:6e:b7: 74:70:b2:7e:22:db:ac:45:b0:ae:21:d6:1b:55:3a:72:e0:28: b9:f2:ea:80:c0:78:18:30:6d:67:d8:50:86:6e:9e:fe:0e:ca: 01:13:fd:9e:32:61:a5:42:4f:7e:2c:6f:72:8e:7f:dd:da:03: e2:44:0d:ee:f0:27:7f:6a:00:fa:71:9b:cf:a2:9d:b2:9e:0f: c7:19:80:e4 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTlE RUYyQ0Y4MjhGMEQ5QUI2QUQ5NEY0MjYxMzE3NjREMjU0Q0M1QzAeFw0yMzA5MDEw ODUwMzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVDODlEOTRGNUJFMkYw QTIzQkY2RDdFREQ1RTQ4OEUwQTJEMzNEREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+hOWL0VaI5XiSD3bV2i03ZN1T9Z6r+kgJQyZrdWbbj6PL88Za BrlLtMk5n1bANE3eb0wcwKrpsmZpRGCjRcQp0m/a8sJGCmr+8jBf2oTtdDPuYw22 mb+B25qSAO+4TmfpSOWNb7V8CJoT6ZguNlF5BMa9rT5NJWZqU/W+Gyt2xaWr6NWw XQ1ZhTNyAxiFqfI6s21VhLC6wfeAZleWKh4CvTcgWfWt9nEpmWg6lG7EUBC37CdY o3iH2jJRtoqqpTyyD+b381SHQ4T4SIiE5dRYa2q6LoXjMDfx8wwi4v518bDe3mEb 924r8H7F1FgCeyt6AXvnCdl3hKV+zg89uCxdAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUXInZT1vi8KI79tft1eSI4KLTPd4wHwYDVR0jBBgwFoAUWd7yz4KPDZq2rZT0 JhMXZNJUzFwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFOVEFT WS9XZDd5ejRLUERacTJyWlQwSmhNWFpOSlV6RncuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1dkN3l6NEtQRFpxMnJaVDBKaE1YWk5KVXpGdy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTlRBU1kvWEluWlQxdmk4S0k3OXRm dDFlU0k0S0xUUGQ0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGeS1DANBgkqhkiG9w0BAQsFAAOCAQEAiU2tLuG5DF+eM0s7VcO/MH7UUb+0k5ZT 5IGak7dUIVhYUd98MOh2R8mDegczV54eCZ1vZD/fiGlUnkrMpz8aOaKJ+JxnDYXb VP5UYNjJuXUQ2FsY3fL1jmNg5k8Q3+zhJJSR3xN+Vv6NSptJFn280znjbxhD+zqO CO7WgVeXyOuNq7dVUePC82+MIPuE4XyD2kGtFovPEVwDxeyun3ig+eclXFdRw/f6 +cJNbg3lsZZqc263dHCyfiLbrEWwriHWG1U6cuAoufLqgMB4GDBtZ9hQhm6e/g7K ARP9njJhpUJPfixvco5/3doD4kQN7vAnf2oA+nGbz6Kdsp4PxxmA5A== -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:39 2024 by rpki-client on console-fra.rpki-client.org