$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/E8OFxoXx1OE1jTf-UxeGs5IXZt4.roa File: E8OFxoXx1OE1jTf-UxeGs5IXZt4.roa (raw, json) Hash identifier: iZuvczBvO/NACKGdSFsXWZlKlEVoE+YiRBc06ZoqhYc= Subject key identifier: 13:C3:85:C6:85:F1:D4:E1:35:8D:37:FE:53:17:86:B3:92:17:66:DE Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1303 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/E8OFxoXx1OE1jTf-UxeGs5IXZt4.roa Signing time: Mon 10 Feb 2025 14:08:59 +0000 ROA not before: Mon 10 Feb 2025 14:08:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 60.198.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4867 (0x1303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:08:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=13C385C685F1D4E1358D37FE531786B3921766DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2e:15:3f:c8:77:93:f4:9f:a5:59:87:96:27: 24:b2:3f:18:10:5d:0c:5f:b9:2a:61:2e:00:e4:68: cf:a6:3f:b5:ad:b1:f3:65:32:3b:41:c3:dc:42:60: 51:91:ad:e7:d4:67:76:e7:30:2d:05:7d:dd:d3:6e: 97:b8:21:0a:ee:46:25:8b:59:f6:f3:a2:7a:28:9a: 68:08:93:23:40:8a:2f:93:c2:64:18:74:e7:9d:61: 6b:42:86:c5:11:36:36:f4:95:9d:09:dd:fa:21:aa: 52:2b:e5:c2:04:1a:74:54:ad:ec:dc:5f:2e:73:fa: f1:1d:7a:11:a2:3e:cc:38:04:81:db:44:3b:dc:0d: 18:d9:ca:45:ee:e8:4f:da:85:f0:79:51:6a:08:45: d6:5a:2f:60:8f:77:87:aa:63:a3:05:ae:9c:81:10: b7:05:e6:58:3c:ab:9f:99:01:3b:ac:d0:8c:11:fc: d6:48:f1:24:c2:2e:83:5a:88:cc:7e:ca:fb:3b:61: 09:d2:0a:84:8c:a1:d0:8c:af:03:73:80:59:b9:80: b1:f0:e4:05:3e:eb:0d:a3:e1:66:2e:c5:43:b4:a4: ce:83:13:d0:ae:a0:0f:3b:8d:7c:b4:e2:db:a2:f9: eb:39:8d:c3:ea:c5:43:e3:1b:59:82:43:e5:9c:ec: 8d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C3:85:C6:85:F1:D4:E1:35:8D:37:FE:53:17:86:B3:92:17:66:DE X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/E8OFxoXx1OE1jTf-UxeGs5IXZt4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.198.32.0/22 Signature Algorithm: sha256WithRSAEncryption 01:36:fc:68:3c:be:41:37:fd:99:98:9c:41:31:a5:f2:2a:0c: a8:a3:00:76:80:fc:26:22:1f:a2:79:63:91:a3:40:02:8d:15: 27:bd:24:7f:c3:75:53:c8:74:c7:30:bd:04:89:81:bc:c4:6b: a6:69:d2:a8:3d:8e:05:a0:e2:1b:31:a3:10:fc:85:91:88:b6: 06:97:18:ec:b0:46:4c:e8:2a:f1:f6:7b:d3:60:46:27:9d:b2: 46:c0:38:bf:10:7f:e2:dc:61:6e:52:2d:a9:13:ba:ce:c1:45: bf:4f:c0:6a:8c:f1:9b:f2:be:fd:a2:f9:54:e9:aa:2a:9d:c8: b3:95:d3:c6:10:fd:15:d0:b5:dc:60:cf:5e:8d:c3:bd:e2:f5: 5c:43:66:69:50:90:7d:36:50:89:e9:3d:6e:03:d4:20:5d:39: 17:c7:3a:89:71:a7:2d:26:14:e8:f0:19:fe:fb:76:08:16:c4: 44:a6:dd:1a:f6:2a:5b:9b:52:f1:db:dd:14:fd:39:4d:74:31: de:ec:7c:67:21:c4:3c:fc:f9:b6:a1:5d:38:1f:5e:7d:f2:5e: 08:85:48:8f:64:10:46:e9:e3:29:3f:c5:7b:e2:01:65:13:45: 67:f8:2a:5d:01:74:d8:52:a2:53:ff:80:b1:c1:8e:0e:9a:2f: 4a:a9:d1:69 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEwMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA4NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEzQzM4NUM2ODVGMUQ0 RTEzNThEMzdGRTUzMTc4NkIzOTIxNzY2REUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDQLhU/yHeT9J+lWYeWJySyPxgQXQxfuSphLgDkaM+mP7WtsfNl MjtBw9xCYFGRrefUZ3bnMC0Ffd3Tbpe4IQruRiWLWfbzonoommgIkyNAii+TwmQY dOedYWtChsURNjb0lZ0J3fohqlIr5cIEGnRUrezcXy5z+vEdehGiPsw4BIHbRDvc DRjZykXu6E/ahfB5UWoIRdZaL2CPd4eqY6MFrpyBELcF5lg8q5+ZATus0IwR/NZI 8STCLoNaiMx+yvs7YQnSCoSModCMrwNzgFm5gLHw5AU+6w2j4WYuxUO0pM6DE9Cu oA87jXy04tui+es5jcPqxUPjG1mCQ+Wc7I1/AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUE8OFxoXx1OE1jTf+UxeGs5IXZt4wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvRThPRnhvWHgxT0UxalRm LVV4ZUdzNUlYWnQ0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AjzGIDANBgkqhkiG9w0BAQsFAAOCAQEAATb8aDy+QTf9mZicQTGl8ioMqKMAdoD8 JiIfonljkaNAAo0VJ70kf8N1U8h0xzC9BImBvMRrpmnSqD2OBaDiGzGjEPyFkYi2 BpcY7LBGTOgq8fZ702BGJ52yRsA4vxB/4txhblItqRO6zsFFv0/Aaozxm/K+/aL5 VOmqKp3Is5XTxhD9FdC13GDPXo3DveL1XENmaVCQfTZQiek9bgPUIF05F8c6iXGn LSYU6PAZ/vt2CBbERKbdGvYqW5tS8dvdFP05TXQx3ux8ZyHEPPz5tqFdOB9effJe CIVIj2QQRunjKT/Fe+IBZRNFZ/gqXQF02FKiU/+AscGODpovSqnRaQ== -----END CERTIFICATE-----Generated at Tue Apr 8 16:51:38 2025 by rpki-client