$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ju6qlDmIi0QYs5I_abo6nZV6WcI.roa File: Ju6qlDmIi0QYs5I_abo6nZV6WcI.roa (raw, json) Hash identifier: 34p42XvgmdFDoG2lrxdV4IKFVAZMA553iZJhNICducc= Subject key identifier: 26:EE:AA:94:39:88:8B:44:18:B3:92:3F:69:BA:3A:9D:95:7A:59:C2 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 12FC Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ju6qlDmIi0QYs5I_abo6nZV6WcI.roa Signing time: Mon 10 Feb 2025 14:08:58 +0000 ROA not before: Mon 10 Feb 2025 14:08:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131634 IP address blocks: 124.108.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4860 (0x12fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:08:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=26EEAA9439888B4418B3923F69BA3A9D957A59C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f2:4b:b6:ae:61:11:80:8f:0b:e0:4f:9f:31: 87:54:f1:0b:90:c9:e6:db:17:bb:18:df:8f:92:83: 09:68:de:63:d1:5d:43:ab:04:ce:6a:3e:0e:1b:47: 31:1c:eb:99:0a:c2:f8:45:93:81:5f:fb:57:da:0e: 2b:ae:8a:9a:fb:c0:94:cc:23:f0:7d:2c:c2:f5:c1: b4:b1:fb:af:53:a9:ac:6a:79:66:17:91:21:82:c4: a8:56:9b:18:b1:64:49:fd:4b:38:0a:32:bc:3c:3a: 30:28:eb:37:35:83:a1:9b:76:3e:3e:0f:ba:c4:3e: 42:76:aa:f4:9d:d5:83:a7:05:f8:3a:0a:a4:ea:01: e1:39:d6:06:d3:3a:c9:7e:23:d5:75:d6:cc:ed:2c: f4:52:b0:5e:b4:31:52:5b:49:39:51:2b:c4:30:18: fb:29:63:ef:26:e4:22:f3:a2:c6:ad:c4:98:13:88: c6:8c:a2:50:62:10:c6:c5:bf:02:72:66:45:99:f3: 5a:18:7e:1c:5e:d2:63:dc:d1:8f:33:23:36:60:4d: 75:42:28:e1:e2:62:73:fa:29:42:fb:85:95:c7:84: 11:35:ef:de:66:b7:f7:e6:b6:19:87:e1:66:56:67: c9:2e:ae:69:c9:1c:19:7a:b2:e0:d0:64:26:d1:ac: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EE:AA:94:39:88:8B:44:18:B3:92:3F:69:BA:3A:9D:95:7A:59:C2 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ju6qlDmIi0QYs5I_abo6nZV6WcI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.108.140.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:8b:8c:65:cc:7c:d0:11:ce:bf:93:3e:b7:2b:67:f8:34:84: 2f:5b:2d:a4:ee:d3:a1:89:47:af:a5:23:3f:b1:18:4f:03:19: 36:1a:00:f9:54:a8:9e:06:fe:50:47:b9:e1:f0:c8:c0:10:4f: 53:d8:66:03:cb:fd:3d:d1:3e:06:c9:f8:d5:cd:b6:08:c6:d7: 17:ab:e1:10:fd:72:f9:17:1b:90:41:97:c4:48:64:83:e9:17: ca:c6:34:ac:06:45:a9:e8:fa:c8:6a:5d:3f:33:42:9f:1d:96: 05:04:3a:56:a4:9a:d5:20:72:13:2d:a9:cc:c2:4c:78:09:69: b3:e9:2f:f5:ab:b7:9b:a5:3d:ac:6c:84:c9:0d:a5:53:b4:59: 4b:12:da:8d:78:a0:17:45:55:ac:d0:ab:b5:92:53:16:64:75: b3:20:d1:12:c9:24:6a:ab:eb:22:24:4f:e8:03:f6:f1:ff:57: e2:eb:70:df:05:00:b7:8a:70:dd:04:43:5c:5c:69:a7:d2:dd: 4f:73:9f:1d:34:ca:6c:93:e3:30:57:ad:65:0c:7c:52:5b:aa: 17:e4:01:3b:4a:59:2a:1c:86:a2:47:99:df:5d:c9:25:4b:af: 35:2c:49:cd:f8:ad:eb:dc:fd:79:76:ec:bb:bf:3b:d2:af:86: ec:3b:5f:b4 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEvwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA4NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI2RUVBQTk0Mzk4ODhC NDQxOEIzOTIzRjY5QkEzQTlEOTU3QTU5QzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDk8ku2rmERgI8L4E+fMYdU8QuQyebbF7sY34+Sgwlo3mPRXUOr BM5qPg4bRzEc65kKwvhFk4Ff+1faDiuuipr7wJTMI/B9LML1wbSx+69TqaxqeWYX kSGCxKhWmxixZEn9SzgKMrw8OjAo6zc1g6Gbdj4+D7rEPkJ2qvSd1YOnBfg6CqTq AeE51gbTOsl+I9V11sztLPRSsF60MVJbSTlRK8QwGPspY+8m5CLzosatxJgTiMaM olBiEMbFvwJyZkWZ81oYfhxe0mPc0Y8zIzZgTXVCKOHiYnP6KUL7hZXHhBE1795m t/fmthmH4WZWZ8kurmnJHBl6suDQZCbRrFSPAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUJu6qlDmIi0QYs5I/abo6nZV6WcIwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvSnU2cWxEbUlpMFFZczVJ X2FibzZuWlY2V2NJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AXxsjDANBgkqhkiG9w0BAQsFAAOCAQEAi4uMZcx80BHOv5M+tytn+DSEL1stpO7T oYlHr6UjP7EYTwMZNhoA+VSongb+UEe54fDIwBBPU9hmA8v9PdE+Bsn41c22CMbX F6vhEP1y+RcbkEGXxEhkg+kXysY0rAZFqej6yGpdPzNCnx2WBQQ6VqSa1SByEy2p zMJMeAlps+kv9au3m6U9rGyEyQ2lU7RZSxLajXigF0VVrNCrtZJTFmR1syDREskk aqvrIiRP6AP28f9X4utw3wUAt4pw3QRDXFxpp9LdT3OfHTTKbJPjMFetZQx8Uluq F+QBO0pZKhyGokeZ313JJUuvNSxJzfit69z9eXbsu7870q+G7DtftA== -----END CERTIFICATE-----Generated at Tue Apr 8 17:01:53 2025 by rpki-client