$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/TF9ESK-zF4LE8kvTj-_pLaunwmY.roa File: TF9ESK-zF4LE8kvTj-_pLaunwmY.roa (raw, json) Hash identifier: prygNj6B8DwEcv39HMuG1BHwCRQt6IVEo3GJOwgiNM4= Subject key identifier: 4C:5F:44:48:AF:B3:17:82:C4:F2:4B:D3:8F:EF:E9:2D:AB:A7:C2:66 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1378 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/TF9ESK-zF4LE8kvTj-_pLaunwmY.roa Signing time: Mon 10 Feb 2025 14:09:29 +0000 ROA not before: Mon 10 Feb 2025 14:09:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131634 IP address blocks: 124.108.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4984 (0x1378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:09:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=4C5F4448AFB31782C4F24BD38FEFE92DABA7C266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:8f:0c:37:a2:13:34:2f:c4:63:bc:ef:85: df:c9:a2:f2:1f:ce:9d:3f:57:fe:d2:75:aa:ea:e2: 16:78:a5:f6:69:2e:57:58:71:eb:b6:7c:9c:b7:67: a8:ef:fd:a1:0e:5e:b2:9e:28:f0:47:43:47:c6:44: 80:b2:de:fb:96:db:7e:a8:89:b9:de:84:a5:95:11: 3f:79:8f:34:f7:38:64:f9:51:49:8b:ce:52:d2:73: 9a:04:60:d7:8c:c9:a7:0f:99:6f:de:3d:de:da:3d: e8:7b:58:a2:85:1e:2b:16:4e:b6:10:9e:1f:9c:2c: 2f:81:5d:a2:d9:87:6a:25:58:85:18:6e:0d:c5:d1: 67:a9:f7:df:9d:60:21:69:ed:7f:4d:ad:a2:21:d2: ba:e0:03:58:7b:52:16:52:bf:58:8d:e6:2f:f0:66: 40:18:53:bc:a3:1c:2f:f5:9c:66:20:e0:3e:61:de: ac:5e:c3:34:94:ea:ed:5e:9c:1e:3d:f7:96:a0:fc: d4:8d:16:e5:19:f5:94:26:be:a7:9a:c4:3b:62:f2: cf:72:a4:70:77:a6:34:4a:c1:f4:fd:40:38:42:ca: 9a:ef:0a:cf:bd:35:99:9e:72:cd:87:c1:45:b6:72: e2:80:b8:a8:5a:96:64:79:99:01:e4:cc:4c:2e:75: f7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5F:44:48:AF:B3:17:82:C4:F2:4B:D3:8F:EF:E9:2D:AB:A7:C2:66 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/TF9ESK-zF4LE8kvTj-_pLaunwmY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.108.150.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:7b:d0:e5:1d:d5:fb:b9:27:64:e4:d4:65:c5:f1:04:d1:4e: 93:c0:22:74:9b:53:0e:e5:df:c5:e0:f9:6b:30:d7:25:48:a2: 45:fb:0f:ad:f5:99:df:dc:74:93:67:56:7f:59:a3:4a:89:05: 73:2c:ff:54:86:1d:c6:75:5f:78:34:a8:95:18:aa:79:0a:4e: e1:84:95:b1:22:51:2d:f9:57:d2:48:ee:a9:36:1f:cb:fc:5b: b2:b2:34:d6:49:fa:03:1d:69:96:44:0d:28:0b:51:4b:b9:d7: 0a:a5:a0:3c:88:b8:9e:78:87:a7:65:f2:e1:2e:5f:9c:f0:fa: dc:28:a1:62:33:20:c3:7b:90:94:f0:e2:4c:ee:25:12:52:92: 33:7b:5f:7b:4c:e6:b7:b3:d9:92:aa:e2:ad:8a:a7:c3:79:1c: 85:94:c7:38:fa:c6:fc:75:89:62:c6:fd:e6:9e:e8:eb:4a:bd: 17:3f:f4:d7:62:1a:b5:cd:6a:94:9b:f7:0d:80:8f:81:52:dd: 7e:b2:e1:40:a0:c2:e5:ca:aa:ea:62:ba:b1:af:76:30:fc:f5: 74:83:ae:2a:a7:3c:5f:39:ff:6d:aa:e3:2a:08:3b:b7:df:16: b4:ff:fd:b3:a6:8e:9e:f6:ca:eb:d9:86:81:be:88:0e:10:cf: 6d:97:7f:b3 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICE3gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA5MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRDNUY0NDQ4QUZCMzE3 ODJDNEYyNEJEMzhGRUZFOTJEQUJBN0MyNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCu+I8MN6ITNC/EY7zvhd/JovIfzp0/V/7Sdarq4hZ4pfZpLldY ceu2fJy3Z6jv/aEOXrKeKPBHQ0fGRICy3vuW236oibnehKWVET95jzT3OGT5UUmL zlLSc5oEYNeMyacPmW/ePd7aPeh7WKKFHisWTrYQnh+cLC+BXaLZh2olWIUYbg3F 0Wep99+dYCFp7X9NraIh0rrgA1h7UhZSv1iN5i/wZkAYU7yjHC/1nGYg4D5h3qxe wzSU6u1enB4995ag/NSNFuUZ9ZQmvqeaxDti8s9ypHB3pjRKwfT9QDhCyprvCs+9 NZmecs2HwUW2cuKAuKhalmR5mQHkzEwudfcvAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUTF9ESK+zF4LE8kvTj+/pLaunwmYwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvVEY5RVNLLXpGNExFOGt2 VGotX3BMYXVud21ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AXxsljANBgkqhkiG9w0BAQsFAAOCAQEAXXvQ5R3V+7knZOTUZcXxBNFOk8AidJtT DuXfxeD5azDXJUiiRfsPrfWZ39x0k2dWf1mjSokFcyz/VIYdxnVfeDSolRiqeQpO 4YSVsSJRLflX0kjuqTYfy/xbsrI01kn6Ax1plkQNKAtRS7nXCqWgPIi4nniHp2Xy 4S5fnPD63CihYjMgw3uQlPDiTO4lElKSM3tfe0zmt7PZkqrirYqnw3kchZTHOPrG /HWJYsb95p7o60q9Fz/012Iatc1qlJv3DYCPgVLdfrLhQKDC5cqq6mK6sa92MPz1 dIOuKqc8Xzn/barjKgg7t98WtP/9s6aOnvbK69mGgb6IDhDPbZd/sw== -----END CERTIFICATE-----Generated at Tue Apr 8 16:56:37 2025 by rpki-client