$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/NyqW7U4Q6Uce7jieyoeqN6iOidc.roa File: NyqW7U4Q6Uce7jieyoeqN6iOidc.roa (raw, json) Hash identifier: yJnzTJliGPNOD1QA6xz61V/5jObrqgoRHK2ibO7soOc= Subject key identifier: 37:2A:96:ED:4E:10:E9:47:1E:EE:38:9E:CA:87:AA:37:A8:8E:89:D7 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 12FD Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/NyqW7U4Q6Uce7jieyoeqN6iOidc.roa Signing time: Mon 10 Feb 2025 14:08:58 +0000 ROA not before: Mon 10 Feb 2025 14:08:58 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4662 IP address blocks: 203.77.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4861 (0x12fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:08:58 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=372A96ED4E10E9471EEE389ECA87AA37A88E89D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:25:f5:b8:54:6f:d8:2c:9b:05:55:d4:ad:73: 9e:24:9b:82:2c:e7:82:41:ac:bf:54:a6:73:b1:f6: 04:45:5b:27:ae:70:3e:c9:c4:dc:19:ef:53:a4:a2: a1:80:84:79:d3:44:e5:c3:36:47:bb:69:5f:89:ab: 9a:5e:83:14:8a:75:10:b0:9e:74:92:0b:9b:6e:3e: cf:ac:3d:ff:3c:e0:5a:8a:b4:a1:0d:b7:a2:38:fd: 95:cb:42:2f:a1:db:05:d8:b8:93:ca:8b:00:f4:8b: f6:08:e1:36:1b:09:6d:66:b8:0b:4e:3e:53:66:a8: d4:ec:de:af:50:c7:ac:93:4e:82:50:44:d0:58:84: e7:44:d3:aa:13:d8:06:ad:43:b0:a9:3e:65:d9:bd: e1:78:37:ba:36:f5:b6:57:d6:cf:e8:d6:03:ca:c1: ba:37:56:f1:53:e2:c3:cf:0f:cf:83:23:5c:66:0f: da:13:71:1c:85:d5:e5:94:ad:b3:32:03:7e:73:6d: e5:1c:76:3b:8b:03:11:c5:ad:07:86:d3:72:c9:3e: fa:24:e9:f0:21:e4:13:06:61:69:93:4c:ef:7b:80: b3:93:9f:de:cd:69:fe:08:05:ba:27:64:25:af:aa: a9:6e:3f:5c:3f:19:6e:ee:b0:c3:33:6d:a8:61:ee: 10:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2A:96:ED:4E:10:E9:47:1E:EE:38:9E:CA:87:AA:37:A8:8E:89:D7 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/NyqW7U4Q6Uce7jieyoeqN6iOidc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.0.0/18 Signature Algorithm: sha256WithRSAEncryption 79:7d:0e:f2:d8:62:6f:65:de:2c:9b:0c:d4:68:22:5a:d1:0d: 0b:c8:68:dc:87:93:d6:d1:b4:d9:cf:39:e4:54:1e:22:ff:13: d7:a0:6e:93:59:d6:20:47:b7:c9:bc:51:13:88:85:39:95:16: ec:46:71:ea:42:05:26:46:86:86:33:c3:35:ee:aa:d9:4d:d8: fb:dc:57:8b:6c:8c:d9:60:c0:18:0c:b7:87:dc:4f:dc:2c:f8: 8f:a7:5f:bf:aa:c2:f1:06:48:83:6c:36:46:2f:e2:5e:1f:20: 82:a1:19:73:a9:92:93:27:66:6b:fb:3c:ac:d5:90:35:4f:aa: 8d:a0:65:bf:a4:a0:22:3b:8c:25:a3:f3:41:79:33:e6:14:a3: 37:25:94:b9:a3:43:93:53:c7:11:99:3c:c5:54:a3:c2:ff:53: 75:3f:dd:6d:c9:1a:a4:35:69:29:90:59:09:3f:e7:8a:19:c4: 00:9c:2c:6c:35:c8:29:f5:d6:b7:fb:98:cf:29:e8:ef:37:3d: 8e:54:f3:0c:4c:f3:8f:5c:25:28:7e:79:25:73:23:f1:f6:62: a2:a2:4f:f6:89:74:ec:2e:aa:6d:bd:28:bb:00:5c:e9:c1:4b: 8b:9d:6b:77:a8:76:1e:cf:e9:a2:8b:e5:ef:9b:c6:19:0b:04: 78:e5:a2:31 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEv0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA4NThaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM3MkE5NkVENEUxMEU5 NDcxRUVFMzg5RUNBODdBQTM3QTg4RTg5RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBJfW4VG/YLJsFVdStc54km4Is54JBrL9UpnOx9gRFWyeucD7J xNwZ71OkoqGAhHnTROXDNke7aV+Jq5pegxSKdRCwnnSSC5tuPs+sPf884FqKtKEN t6I4/ZXLQi+h2wXYuJPKiwD0i/YI4TYbCW1muAtOPlNmqNTs3q9Qx6yTToJQRNBY hOdE06oT2AatQ7CpPmXZveF4N7o29bZX1s/o1gPKwbo3VvFT4sPPD8+DI1xmD9oT cRyF1eWUrbMyA35zbeUcdjuLAxHFrQeG03LJPvok6fAh5BMGYWmTTO97gLOTn97N af4IBbonZCWvqqluP1w/GW7usMMzbahh7hD5AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUNyqW7U4Q6Uce7jieyoeqN6iOidcwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTnlxVzdVNFE2VWNlN2pp ZXlvZXFONmlPaWRjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BstNADANBgkqhkiG9w0BAQsFAAOCAQEAeX0O8thib2XeLJsM1GgiWtENC8ho3IeT 1tG02c855FQeIv8T16Buk1nWIEe3ybxRE4iFOZUW7EZx6kIFJkaGhjPDNe6q2U3Y +9xXi2yM2WDAGAy3h9xP3Cz4j6dfv6rC8QZIg2w2Ri/iXh8ggqEZc6mSkydma/s8 rNWQNU+qjaBlv6SgIjuMJaPzQXkz5hSjNyWUuaNDk1PHEZk8xVSjwv9TdT/dbcka pDVpKZBZCT/nihnEAJwsbDXIKfXWt/uYzyno7zc9jlTzDEzzj1wlKH55JXMj8fZi oqJP9ol07C6qbb0ouwBc6cFLi51rd6h2Hs/poovl75vGGQsEeOWiMQ== -----END CERTIFICATE-----Generated at Tue Apr 8 16:51:39 2025 by rpki-client