$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1XEbplVGOkvt1m2yOQJ2RJqScbo.roa File: 1XEbplVGOkvt1m2yOQJ2RJqScbo.roa (raw, json) Hash identifier: pnoUDTcBS4QmXU5vSwdEo1XwlRFYiLMZerqLnlaiwc4= Subject key identifier: D5:71:1B:A6:55:46:3A:4B:ED:D6:6D:B2:39:02:76:44:9A:92:71:BA Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 137A Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1XEbplVGOkvt1m2yOQJ2RJqScbo.roa Signing time: Mon 10 Feb 2025 14:09:29 +0000 ROA not before: Mon 10 Feb 2025 14:09:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 203.77.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4986 (0x137a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:09:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D5711BA655463A4BEDD66DB2390276449A9271BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:dc:fc:b4:f0:39:62:66:40:05:a1:9b:3c: d0:9e:fb:96:fa:f0:02:ce:48:14:bc:53:4c:3e:2b: 17:e3:90:b5:72:3f:0f:55:d6:5b:76:77:51:bd:fc: 8c:7e:3c:24:d4:8b:62:0a:22:b3:39:f9:c9:99:37: 80:7b:a0:00:3f:9e:1c:c8:5e:d9:b4:8c:03:63:5e: cd:f7:9d:45:e4:4c:5c:32:2f:af:4f:ce:26:23:22: c6:2a:f8:65:23:10:1a:29:88:b1:08:94:10:d6:c9: eb:ea:17:e1:6b:1a:06:d2:14:05:e3:74:d5:aa:69: e7:e6:6d:77:42:c9:c8:4d:2e:16:aa:22:b4:8b:ec: 77:41:66:1e:f2:41:15:13:84:ab:65:6e:42:c4:5c: 20:fb:04:6c:88:d5:10:5e:15:c1:43:cb:ea:0f:80: 3a:55:ff:74:7c:6d:1f:b5:79:ca:a9:7f:4d:f3:9d: 1d:4b:60:e4:f2:b4:29:e9:e7:7f:87:7d:00:88:91: 24:1b:70:23:08:4b:19:72:c7:18:45:73:3b:aa:db: 7c:ea:78:4a:d9:38:cf:a8:e5:5c:c9:b5:22:10:78: a7:8e:a2:ab:86:14:1e:c7:b6:2d:0f:ec:5c:58:40: 5d:d0:c0:73:97:1d:12:21:0b:2e:5c:e4:7f:1d:cb: ef:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:71:1B:A6:55:46:3A:4B:ED:D6:6D:B2:39:02:76:44:9A:92:71:BA X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1XEbplVGOkvt1m2yOQJ2RJqScbo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.50.0/24 Signature Algorithm: sha256WithRSAEncryption 35:3c:b7:dc:17:3a:f8:26:62:2d:29:25:81:81:dc:02:bf:7a: 45:f9:3d:6d:fb:ae:79:d6:d8:50:26:86:fb:f3:da:85:dd:83: 2b:fe:b9:e9:a5:81:70:82:bc:62:a6:54:86:5a:54:ea:c4:ed: b1:b2:25:d2:85:d5:dc:92:a9:6f:b4:48:d5:b7:02:e8:76:b4: 5d:25:9a:70:b7:d6:5c:ad:e1:b1:f2:c8:ff:29:e3:06:1b:c9: 81:d9:ff:fa:3e:b3:39:aa:21:e1:9c:96:61:4a:8d:e9:2b:e9: a6:23:6a:99:bf:8a:8b:0c:c8:8c:d3:29:ed:10:7f:6b:07:f3: d6:d9:30:10:f7:18:e5:d2:40:e9:6d:df:2b:dc:fe:b9:85:37: 11:38:b5:9e:6d:f1:71:8a:a2:3f:ab:d8:9d:95:7c:30:d7:e5: b0:21:5a:3c:c9:ff:fa:e0:1f:af:c5:1e:f8:7c:66:a1:4d:e8: ac:52:f9:b9:3c:7a:b4:0f:ee:e5:f8:a4:6b:de:35:02:6f:ef: 1e:f6:9b:5b:bf:4a:61:f1:63:da:b9:64:07:ed:42:87:c7:af: c9:70:84:ab:4f:dd:4c:5f:d7:c3:67:d1:f9:1a:f3:12:eb:93: 58:c5:eb:b6:86:c1:e8:4b:5d:eb:73:55:43:61:86:dd:5e:da: 96:2f:da:7c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICE3owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA5MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1NzExQkE2NTU0NjNB NEJFREQ2NkRCMjM5MDI3NjQ0OUE5MjcxQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxB9z8tPA5YmZABaGbPNCe+5b68ALOSBS8U0w+KxfjkLVyPw9V 1lt2d1G9/Ix+PCTUi2IKIrM5+cmZN4B7oAA/nhzIXtm0jANjXs33nUXkTFwyL69P ziYjIsYq+GUjEBopiLEIlBDWyevqF+FrGgbSFAXjdNWqaefmbXdCychNLhaqIrSL 7HdBZh7yQRUThKtlbkLEXCD7BGyI1RBeFcFDy+oPgDpV/3R8bR+1ecqpf03znR1L YOTytCnp53+HfQCIkSQbcCMISxlyxxhFczuq23zqeErZOM+o5VzJtSIQeKeOoquG FB7Hti0P7FxYQF3QwHOXHRIhCy5c5H8dy++vAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU1XEbplVGOkvt1m2yOQJ2RJqScbowHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvMVhFYnBsVkdPa3Z0MW0y eU9RSjJSSnFTY2JvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AMtNMjANBgkqhkiG9w0BAQsFAAOCAQEANTy33Bc6+CZiLSklgYHcAr96Rfk9bfuu edbYUCaG+/Pahd2DK/656aWBcIK8YqZUhlpU6sTtsbIl0oXV3JKpb7RI1bcC6Ha0 XSWacLfWXK3hsfLI/ynjBhvJgdn/+j6zOaoh4ZyWYUqN6SvppiNqmb+KiwzIjNMp 7RB/awfz1tkwEPcY5dJA6W3fK9z+uYU3ETi1nm3xcYqiP6vYnZV8MNflsCFaPMn/ +uAfr8Ue+HxmoU3orFL5uTx6tA/u5fika941Am/vHvabW79KYfFj2rlkB+1Ch8ev yXCEq0/dTF/Xw2fR+RrzEuuTWMXrtobB6Etd63NVQ2GG3V7ali/afA== -----END CERTIFICATE-----Generated at Tue Apr 8 16:59:08 2025 by rpki-client