$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FANTASY/8H-C-hcNWc3YzFXBkFik5joXhAo.roa File: 8H-C-hcNWc3YzFXBkFik5joXhAo.roa (raw, json) Hash identifier: 2GH1UOk0jOEJ87aWXHQHvoZYFalAGp+fPvknALQKfKM= Subject key identifier: F0:7F:82:FA:17:0D:59:CD:D8:CC:55:C1:90:58:A4:E6:3A:17:84:0A Certificate issuer: /CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C Certificate serial: 0B22 Authority key identifier: 59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/8H-C-hcNWc3YzFXBkFik5joXhAo.roa Signing time: Fri 22 Aug 2025 08:44:14 +0000 ROA not before: Fri 22 Aug 2025 08:44:14 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131671 IP address blocks: 103.146.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 01:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2850 (0xb22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59DEF2CF828F0D9AB6AD94F426131764D254CC5C Validity Not Before: Aug 22 08:44:14 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=F07F82FA170D59CDD8CC55C19058A4E63A17840A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5b:a4:83:a7:d2:4f:ab:4f:9d:a9:87:de:21: 41:86:f3:27:8f:1c:bc:99:05:83:80:2b:06:e7:ce: 64:66:c2:b1:18:0b:ce:87:bd:9b:f2:58:92:c9:b3: 04:53:fa:72:a8:d7:ec:47:c9:48:ca:5b:ef:27:28: 4c:eb:24:f4:63:19:68:db:2d:61:70:d2:c3:d5:6d: ec:a7:aa:cf:1a:20:55:63:7e:f9:05:d1:6f:19:c5: b2:b3:d9:f5:35:6e:5d:4f:30:eb:99:b5:ac:d4:b9: 1b:ea:34:50:dd:cf:b2:d0:f8:52:90:95:79:82:1b: 62:f0:8b:4e:10:6c:db:08:f3:ef:2f:b7:50:3a:db: e0:7c:b2:ef:ca:1c:c1:42:a2:19:d1:0f:99:9b:e8: 9f:4e:89:5d:62:e6:af:bc:45:19:3a:78:4f:a6:e2: 42:53:04:0b:bd:cc:4c:af:43:c0:1b:50:4a:e8:15: 4e:57:a0:4a:ac:49:be:20:d3:3f:d3:21:e5:4c:86: 2f:14:60:10:2c:84:df:89:57:cb:4d:ee:90:bf:fb: 40:24:d7:cc:64:f4:99:d6:50:ae:b1:a8:4a:35:2a: 2e:ef:25:9c:c4:53:b7:6c:19:c8:12:16:4b:29:4a: 6f:12:6b:81:02:35:0a:7d:9f:d1:fe:c5:92:82:c2: 81:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7F:82:FA:17:0D:59:CD:D8:CC:55:C1:90:58:A4:E6:3A:17:84:0A X509v3 Authority Key Identifier: keyid:59:DE:F2:CF:82:8F:0D:9A:B6:AD:94:F4:26:13:17:64:D2:54:CC:5C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Wd7yz4KPDZq2rZT0JhMXZNJUzFw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FANTASY/8H-C-hcNWc3YzFXBkFik5joXhAo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.146.213.0/24 Signature Algorithm: sha256WithRSAEncryption d1:42:e5:d1:50:0d:c1:46:f1:2a:6f:44:69:86:c8:f1:17:1f: 5c:67:00:b6:47:7b:44:46:5e:4e:60:b8:d7:42:d9:4f:c0:b7: 5d:60:ba:f2:49:cd:c1:58:24:40:f7:9c:b8:fe:12:45:bb:45: 82:e3:74:7c:b0:05:f9:87:0c:6c:37:ed:b4:7e:35:5f:d4:76: 17:89:4c:a5:7e:18:90:97:3e:df:4b:9e:fa:98:65:ef:fd:18: 93:02:32:4f:78:7f:73:49:c1:9f:26:d8:6b:5f:ce:cb:84:98: 18:2e:35:11:4f:fc:56:82:2d:21:17:4a:7e:e4:ca:55:2d:24: e5:81:28:b3:17:82:9e:91:f6:31:68:ef:84:dd:5f:90:ba:e2: 52:28:ae:24:e0:f0:d6:76:f1:3d:52:e7:68:ef:56:ec:a5:61: 9f:39:5b:cb:e8:ac:09:6d:2f:ab:88:ba:b0:e9:ed:06:43:c7: 01:43:b3:91:9f:1f:f2:34:a3:ce:37:ba:55:87:68:fe:bc:4b: b3:d1:52:8c:de:4c:aa:d8:a3:e8:77:37:ee:0b:c3:97:8d:d8: ea:40:fc:2d:fc:db:67:0d:8b:ea:9b:80:48:ce:0b:81:7a:ad: a8:88:c7:09:a1:44:c1:91:63:39:37:52:ab:91:b4:6f:50:44: 43:1f:78:75 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICCyIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTlE RUYyQ0Y4MjhGMEQ5QUI2QUQ5NEY0MjYxMzE3NjREMjU0Q0M1QzAeFw0yNTA4MjIw ODQ0MTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEYwN0Y4MkZBMTcwRDU5 Q0REOENDNTVDMTkwNThBNEU2M0ExNzg0MEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDSW6SDp9JPq0+dqYfeIUGG8yePHLyZBYOAKwbnzmRmwrEYC86H vZvyWJLJswRT+nKo1+xHyUjKW+8nKEzrJPRjGWjbLWFw0sPVbeynqs8aIFVjfvkF 0W8ZxbKz2fU1bl1PMOuZtazUuRvqNFDdz7LQ+FKQlXmCG2Lwi04QbNsI8+8vt1A6 2+B8su/KHMFCohnRD5mb6J9OiV1i5q+8RRk6eE+m4kJTBAu9zEyvQ8AbUEroFU5X oEqsSb4g0z/TIeVMhi8UYBAshN+JV8tN7pC/+0Ak18xk9JnWUK6xqEo1Ki7vJZzE U7dsGcgSFkspSm8Sa4ECNQp9n9H+xZKCwoG5AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU8H+C+hcNWc3YzFXBkFik5joXhAowHwYDVR0jBBgwFoAUWd7yz4KPDZq2rZT0 JhMXZNJUzFwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkFOVEFT WS9XZDd5ejRLUERacTJyWlQwSmhNWFpOSlV6RncuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL1dkN3l6NEtQRFpxMnJaVDBKaE1YWk5KVXpGdy5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0ZBTlRBU1kvOEgtQy1oY05XYzNZekZY QmtGaWs1am9YaEFvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGeS1TANBgkqhkiG9w0BAQsFAAOCAQEA0ULl0VANwUbxKm9EaYbI8RcfXGcAtkd7 REZeTmC410LZT8C3XWC68knNwVgkQPecuP4SRbtFguN0fLAF+YcMbDfttH41X9R2 F4lMpX4YkJc+30ue+phl7/0YkwIyT3h/c0nBnybYa1/Oy4SYGC41EU/8VoItIRdK fuTKVS0k5YEosxeCnpH2MWjvhN1fkLriUiiuJODw1nbxPVLnaO9W7KVhnzlby+is CW0vq4i6sOntBkPHAUOzkZ8f8jSjzje6VYdo/rxLs9FSjN5Mqtij6Hc37gvDl43Y 6kD8LfzbZw2L6puASM4LgXqtqIjHCaFEwZFjOTdSq5G0b1BEQx94dQ== -----END CERTIFICATE-----Generated at Wed Nov 5 23:29:49 2025 by rpki-client