$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bAoiVS9BP9xSBJsq5JleJ4CksjA.roa File: bAoiVS9BP9xSBJsq5JleJ4CksjA.roa (raw, json) Hash identifier: Eh9Q4rA6Z+YknCSXRveBFwM8XXMFAUo0fTQzuCKe9Mo= Subject key identifier: 6C:0A:22:55:2F:41:3F:DC:52:04:9B:2A:E4:99:5E:27:80:A4:B2:30 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1336 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bAoiVS9BP9xSBJsq5JleJ4CksjA.roa Signing time: Mon 10 Feb 2025 14:09:14 +0000 ROA not before: Mon 10 Feb 2025 14:09:14 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24163 IP address blocks: 60.198.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4918 (0x1336) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:09:14 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6C0A22552F413FDC52049B2AE4995E2780A4B230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:8d:ce:22:00:05:f3:5b:b5:8d:05:3e:bc: 20:eb:19:9a:14:38:af:81:0f:39:cd:45:c8:f6:ad: d4:0c:26:4e:5e:39:d1:d3:c1:cb:51:e2:94:5d:49: f7:19:7e:08:b9:2f:2c:32:eb:0a:f9:0f:43:eb:2a: a3:ed:05:26:4f:db:10:b0:6e:b4:01:1a:a6:2c:ab: 7b:77:46:67:3e:d3:9f:4a:22:3c:9a:a6:42:a8:25: 9f:5c:f2:25:3c:cb:9c:e3:af:06:e0:98:e3:62:d8: 75:19:98:bf:f8:18:72:53:7a:56:43:37:b0:87:a4: e9:f0:f9:6a:3f:e1:67:c6:c5:7f:9d:d0:58:e9:2c: 92:32:b8:d8:26:4f:64:8f:92:3f:e3:86:c8:77:d1: 93:fc:61:dd:cd:57:c2:c7:27:c9:c3:d7:0a:15:02: 1f:34:76:1a:a7:87:b0:0b:a0:e5:42:56:e5:28:33: 66:ea:1f:85:e4:ce:af:22:b2:d9:59:06:1f:b6:62: ae:12:e8:ef:2c:cb:ba:73:6a:5d:26:b3:19:2f:c2: de:9f:8d:31:6c:c6:f8:7b:35:83:a3:db:f4:11:35: 90:5f:ac:6e:19:2f:25:39:21:df:e2:c9:5e:75:ad: 0c:99:f8:d4:74:1c:e7:7e:b7:b4:cb:3d:87:eb:3e: 72:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0A:22:55:2F:41:3F:DC:52:04:9B:2A:E4:99:5E:27:80:A4:B2:30 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bAoiVS9BP9xSBJsq5JleJ4CksjA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.198.36.0/22 Signature Algorithm: sha256WithRSAEncryption 38:73:83:f1:a0:2b:f6:a2:de:3c:f5:b5:a1:60:bc:61:ab:b8: 30:8f:6c:cb:ac:64:7a:4f:aa:5f:14:fe:38:33:0c:43:a7:6c: 54:74:a5:eb:72:e5:23:d9:8d:fc:e9:51:96:c0:9c:dd:de:50: 73:9d:54:12:41:79:c9:da:e0:8c:cc:00:3c:a8:06:18:a3:7e: 79:34:10:17:92:95:1e:42:d8:fa:2d:ae:61:fa:ed:37:c3:08: 10:a1:b1:1a:ff:d3:73:ba:df:51:a3:01:39:8d:f2:36:9a:d7: b0:cb:69:5e:65:52:8f:0c:78:31:9b:03:26:4a:c5:e4:7f:95: c0:45:7c:71:53:5d:4d:ba:88:90:38:ca:53:98:d8:04:3f:08: 8a:84:7a:9d:63:7d:8f:50:ab:d3:37:d6:28:cf:f9:21:1f:38: 14:a7:58:7b:9d:76:90:c8:b4:e8:22:00:88:72:31:92:f0:9e: 25:e4:1a:17:96:a7:c9:0d:28:e9:d9:f3:98:31:52:10:db:b4: 86:d0:43:d3:4b:35:65:9a:7b:76:8d:72:70:f8:fa:00:23:0b: cc:2d:4f:a2:b1:68:ff:08:e6:21:35:5f:b1:c2:c6:11:e0:1e: a9:82:bb:51:7a:15:3f:4d:63:92:31:a1:57:25:ab:7c:42:59: e5:06:6d:b0 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEzYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA5MTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZDMEEyMjU1MkY0MTNG REM1MjA0OUIyQUU0OTk1RTI3ODBBNEIyMzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC+uY3OIgAF81u1jQU+vCDrGZoUOK+BDznNRcj2rdQMJk5eOdHT wctR4pRdSfcZfgi5Lywy6wr5D0PrKqPtBSZP2xCwbrQBGqYsq3t3Rmc+059KIjya pkKoJZ9c8iU8y5zjrwbgmONi2HUZmL/4GHJTelZDN7CHpOnw+Wo/4WfGxX+d0Fjp LJIyuNgmT2SPkj/jhsh30ZP8Yd3NV8LHJ8nD1woVAh80dhqnh7ALoOVCVuUoM2bq H4Xkzq8istlZBh+2Yq4S6O8sy7pzal0msxkvwt6fjTFsxvh7NYOj2/QRNZBfrG4Z LyU5Id/iyV51rQyZ+NR0HOd+t7TLPYfrPnI3AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUbAoiVS9BP9xSBJsq5JleJ4CksjAwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvYkFvaVZTOUJQOXhTQkpz cTVKbGVKNENrc2pBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AjzGJDANBgkqhkiG9w0BAQsFAAOCAQEAOHOD8aAr9qLePPW1oWC8Yau4MI9sy6xk ek+qXxT+ODMMQ6dsVHSl63LlI9mN/OlRlsCc3d5Qc51UEkF5ydrgjMwAPKgGGKN+ eTQQF5KVHkLY+i2uYfrtN8MIEKGxGv/Tc7rfUaMBOY3yNprXsMtpXmVSjwx4MZsD JkrF5H+VwEV8cVNdTbqIkDjKU5jYBD8IioR6nWN9j1Cr0zfWKM/5IR84FKdYe512 kMi06CIAiHIxkvCeJeQaF5anyQ0o6dnzmDFSENu0htBD00s1ZZp7do1ycPj6ACML zC1PorFo/wjmITVfscLGEeAeqYK7UXoVP01jkjGhVyWrfEJZ5QZtsA== -----END CERTIFICATE-----Generated at Tue Apr 8 16:56:36 2025 by rpki-client