$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RTi79TZYTpZL1XH_oGqIGlLAKBg.roa File: RTi79TZYTpZL1XH_oGqIGlLAKBg.roa (raw, json) Hash identifier: CfJONz4+JrZ1moJsBiicozn4PjOQ8kzImRI8oCT4KZA= Subject key identifier: 45:38:BB:F5:36:58:4E:96:4B:D5:71:FF:A0:6A:88:1A:52:C0:28:18 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11DC Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RTi79TZYTpZL1XH_oGqIGlLAKBg.roa Signing time: Mon 26 Aug 2024 05:24:27 +0000 ROA not before: Mon 26 Aug 2024 05:24:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 60.198.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Sep 2024 03:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4572 (0x11dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:27 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4538BBF536584E964BD571FFA06A881A52C02818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b9:f3:2f:ca:92:fa:a1:c3:02:c2:32:70:bd: 5f:d8:e5:ba:ee:b9:d4:c1:22:ac:0c:45:4e:36:2e: 8c:f3:76:55:b5:99:16:42:67:af:a5:e5:d7:84:db: c0:7a:48:0f:4e:24:af:6b:fb:6d:3a:8a:57:6d:e4: 81:a3:a1:a8:d2:2b:a4:e4:e1:9e:4e:c6:b9:94:de: 87:99:d5:8b:a1:45:c4:24:48:17:09:58:f2:0d:e2: da:bf:df:f4:7d:03:6e:c6:2d:5d:71:ba:cc:a6:ee: 57:14:a0:f9:b4:1d:9e:81:e8:da:40:94:c0:ac:f4: 62:1b:c4:b3:0a:39:25:56:07:6b:89:62:27:e2:7c: 7f:cb:70:e1:24:17:28:41:36:a8:5a:93:cf:7d:86: 58:d9:d4:16:16:4e:16:59:1f:71:9b:ee:d7:38:8a: 62:8e:89:ce:9d:13:9e:17:aa:13:c8:04:e2:ee:eb: 96:cb:bb:c5:1f:cb:c5:d1:19:ce:c2:67:12:e2:27: c3:10:80:ca:36:7e:90:ef:90:08:b6:e9:25:d1:75: e5:3b:72:89:23:e5:e5:c6:49:9a:fe:f0:c7:bd:43: db:b8:34:e6:dd:fa:f4:c2:7d:ab:38:aa:94:2f:67: 06:0e:0b:20:d7:a6:29:ec:3b:e3:57:7b:c0:e3:19: 7a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:38:BB:F5:36:58:4E:96:4B:D5:71:FF:A0:6A:88:1A:52:C0:28:18 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RTi79TZYTpZL1XH_oGqIGlLAKBg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.198.32.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:5b:3e:4a:fa:28:7a:6e:eb:33:46:f6:76:c2:0c:ce:9b:1c: 24:df:13:73:f7:6b:2d:e0:37:e9:d7:16:08:08:81:b9:50:03: 08:2e:b3:85:10:cc:9b:07:28:3c:33:5f:45:e4:dc:5c:92:53: 5f:88:51:66:83:74:6c:b5:77:4e:ad:70:00:76:2f:46:32:a9: dd:1a:8a:e3:36:7b:1c:32:43:a3:e3:54:a8:10:0b:e9:8f:98: 97:c5:8c:4b:14:2f:69:a4:9a:e3:86:fb:f5:5f:cd:20:38:dd: d1:c8:f9:fd:69:1d:ff:12:23:bf:c7:35:ca:b4:c1:f9:95:da: 08:b7:2e:03:7b:c6:e2:3c:95:9f:59:3c:9e:65:97:57:44:99: 46:ec:40:6c:bd:b9:80:05:04:eb:5c:06:9b:b9:8a:e2:b8:86: e9:1e:b0:bc:70:e1:f3:ed:c6:b4:76:bc:18:4c:b7:f2:0f:65: 7f:5f:39:27:11:46:a4:66:26:af:bc:f1:3d:bb:f3:d6:c9:59: ad:8d:80:ac:3c:ac:b5:1e:b9:b1:88:29:e8:2b:fa:ce:0c:50: 7c:d0:14:b7:91:f5:f6:e5:6c:10:a6:bf:a2:b7:43:4b:cb:68: 6a:7e:cd:6a:f4:a8:34:f6:32:97:5b:c1:ef:de:77:ed:1d:8b: 00:c9:16:c3 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ1MzhCQkY1MzY1ODRF OTY0QkQ1NzFGRkEwNkE4ODFBNTJDMDI4MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD2ufMvypL6ocMCwjJwvV/Y5bruudTBIqwMRU42LozzdlW1mRZC Z6+l5deE28B6SA9OJK9r+206ildt5IGjoajSK6Tk4Z5OxrmU3oeZ1YuhRcQkSBcJ WPIN4tq/3/R9A27GLV1xusym7lcUoPm0HZ6B6NpAlMCs9GIbxLMKOSVWB2uJYifi fH/LcOEkFyhBNqhak899hljZ1BYWThZZH3Gb7tc4imKOic6dE54XqhPIBOLu65bL u8Ufy8XRGc7CZxLiJ8MQgMo2fpDvkAi26SXRdeU7cokj5eXGSZr+8Me9Q9u4NObd +vTCfas4qpQvZwYOCyDXpinsO+NXe8DjGXrvAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQURTi79TZYTpZL1XH/oGqIGlLAKBgwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUlRpNzlUWllUcFpMMVhI X29HcUlHbExBS0JnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AjzGIDANBgkqhkiG9w0BAQsFAAOCAQEAO1s+Svooem7rM0b2dsIMzpscJN8Tc/dr LeA36dcWCAiBuVADCC6zhRDMmwcoPDNfReTcXJJTX4hRZoN0bLV3Tq1wAHYvRjKp 3RqK4zZ7HDJDo+NUqBAL6Y+Yl8WMSxQvaaSa44b79V/NIDjd0cj5/Wkd/xIjv8c1 yrTB+ZXaCLcuA3vG4jyVn1k8nmWXV0SZRuxAbL25gAUE61wGm7mK4riG6R6wvHDh 8+3GtHa8GEy38g9lf185JxFGpGYmr7zxPbvz1slZrY2ArDystR65sYgp6Cv6zgxQ fNAUt5H19uVsEKa/ordDS8toan7NavSoNPYyl1vB79537R2LAMkWww== -----END CERTIFICATE-----Generated at Fri Sep 27 23:52:52 2024 by rpki-client on console-ams.rpki-client.org