$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SatLuCg8LcU1H7NksZdhs4qxnRY.roa File: SatLuCg8LcU1H7NksZdhs4qxnRY.roa (raw, json) Hash identifier: ADYkZ3/6U7QBkzUhaHUXL528hoVzkgzjpNokWKd6jp0= Subject key identifier: 49:AB:4B:B8:28:3C:2D:C5:35:1F:B3:64:B1:97:61:B3:8A:B1:9D:16 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 12F7 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SatLuCg8LcU1H7NksZdhs4qxnRY.roa Signing time: Mon 10 Feb 2025 14:08:56 +0000 ROA not before: Mon 10 Feb 2025 14:08:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 203.77.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4855 (0x12f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:08:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=49AB4BB8283C2DC5351FB364B19761B38AB19D16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:ab:42:55:da:fc:8f:3f:3d:b0:d5:de:f5: ef:3e:4d:01:29:d0:eb:49:45:29:ca:4d:1e:24:fa: 56:53:e0:a3:6b:b2:8e:ee:4c:07:d7:db:97:82:84: 1a:71:4d:73:e2:97:22:cc:9b:c3:49:7f:84:a8:61: bc:d4:4a:2e:05:be:ff:88:50:03:43:2f:a9:45:5f: 12:3b:27:e7:31:ed:16:b1:11:69:12:79:0f:d9:30: 10:af:20:61:b8:54:83:d4:36:b8:8e:78:f7:10:b0: 4b:c3:42:d2:88:ae:a7:c7:ab:07:27:75:1d:0e:de: 64:83:52:05:d5:2b:1a:be:0f:00:5a:0b:d2:17:86: c2:78:cf:54:6b:7c:2e:77:9f:cc:6e:ba:28:77:bd: 8f:92:1e:f1:13:e4:d3:f2:72:60:87:85:33:86:b4: 28:0e:c5:bc:20:67:68:cb:01:d5:72:ec:72:d8:54: 99:c0:40:3e:15:bf:f4:82:ec:8c:b1:4d:96:29:91: 43:de:84:f4:1d:d6:21:6a:d8:1f:ba:91:8d:93:3a: 9c:e0:f1:31:34:f8:63:86:15:3d:4e:53:c2:4d:a2: ae:88:25:3e:b8:5f:a0:55:b9:7b:23:89:fe:38:ea: 35:d8:6b:e3:21:64:a6:81:d5:14:a3:66:22:33:43: 4f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AB:4B:B8:28:3C:2D:C5:35:1F:B3:64:B1:97:61:B3:8A:B1:9D:16 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SatLuCg8LcU1H7NksZdhs4qxnRY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.48.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:b2:5d:0a:fd:a0:0b:86:21:c0:86:f0:55:94:2f:c6:1e:51: 2a:88:b4:3d:a3:a8:39:9c:fd:f4:2d:da:16:fb:a6:5b:c8:20: 9f:84:e3:51:4c:b3:ae:60:91:1e:2b:55:c9:29:82:65:48:53: 9c:f7:70:a5:94:af:e1:a6:d6:c5:71:13:03:b2:b4:67:87:c4: 51:6d:85:70:2c:d4:b4:4d:13:0c:c9:4b:2e:50:49:ad:b8:a1: df:37:63:8d:d1:18:90:fc:b8:29:14:be:ce:cc:08:8d:34:b7: e0:7f:52:75:b9:a3:9c:4b:33:b8:f3:13:05:26:44:fa:69:ab: 2a:46:78:d3:09:e4:5d:1c:e8:fd:6f:60:d5:f0:2c:1f:be:e1: 1d:cd:51:93:d6:33:ad:38:80:3a:a6:d1:35:22:03:f8:c2:4a: a6:ec:6c:3a:a2:51:70:f8:e5:51:61:60:03:7e:94:45:f3:0f: b4:b0:d9:59:47:23:5f:33:cb:e1:83:3d:87:8f:55:48:60:a1: b5:2f:7c:42:a4:12:75:eb:df:ca:85:c0:1d:39:f6:0c:a0:b0: ba:8e:a8:2d:b1:56:af:b2:c3:08:f2:d3:d3:8c:2d:4d:56:32: d2:a1:b3:b3:64:f8:29:96:c2:d7:91:9f:f1:f5:93:ec:87:d2: 30:11:ba:60 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEvcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA4NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ5QUI0QkI4MjgzQzJE QzUzNTFGQjM2NEIxOTc2MUIzOEFCMTlEMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6LatCVdr8jz89sNXe9e8+TQEp0OtJRSnKTR4k+lZT4KNrso7u TAfX25eChBpxTXPilyLMm8NJf4SoYbzUSi4Fvv+IUANDL6lFXxI7J+cx7RaxEWkS eQ/ZMBCvIGG4VIPUNriOePcQsEvDQtKIrqfHqwcndR0O3mSDUgXVKxq+DwBaC9IX hsJ4z1RrfC53n8xuuih3vY+SHvET5NPycmCHhTOGtCgOxbwgZ2jLAdVy7HLYVJnA QD4Vv/SC7IyxTZYpkUPehPQd1iFq2B+6kY2TOpzg8TE0+GOGFT1OU8JNoq6IJT64 X6BVuXsjif446jXYa+MhZKaB1RSjZiIzQ0+bAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUSatLuCg8LcU1H7NksZdhs4qxnRYwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvU2F0THVDZzhMY1UxSDdO a3NaZGhzNHF4blJZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ActNMDANBgkqhkiG9w0BAQsFAAOCAQEAXrJdCv2gC4YhwIbwVZQvxh5RKoi0PaOo OZz99C3aFvumW8ggn4TjUUyzrmCRHitVySmCZUhTnPdwpZSv4abWxXETA7K0Z4fE UW2FcCzUtE0TDMlLLlBJrbih3zdjjdEYkPy4KRS+zswIjTS34H9SdbmjnEszuPMT BSZE+mmrKkZ40wnkXRzo/W9g1fAsH77hHc1Rk9YzrTiAOqbRNSID+MJKpuxsOqJR cPjlUWFgA36URfMPtLDZWUcjXzPL4YM9h49VSGChtS98QqQSdevfyoXAHTn2DKCw uo6oLbFWr7LDCPLT04wtTVYy0qGzs2T4KZbC15Gf8fWT7IfSMBG6YA== -----END CERTIFICATE-----Generated at Tue Apr 8 16:59:08 2025 by rpki-client