$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/htJj-APTd_RgbBoqi-3EOTksmUI.roa File: htJj-APTd_RgbBoqi-3EOTksmUI.roa (raw, json) Hash identifier: 5KwgQ12CkqXSChzzZKSH3Q56BVK0qL+aRuCjMeGFMa4= Subject key identifier: 86:D2:63:F8:03:D3:77:F4:60:6C:1A:2A:8B:ED:C4:39:39:2C:99:42 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1384 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/htJj-APTd_RgbBoqi-3EOTksmUI.roa Signing time: Mon 10 Feb 2025 14:09:31 +0000 ROA not before: Mon 10 Feb 2025 14:09:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131602 IP address blocks: 210.62.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4996 (0x1384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:09:31 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=86D263F803D377F4606C1A2A8BEDC439392C9942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e5:fa:90:17:03:b8:5e:47:56:b3:77:2f:42: 8a:95:e1:1f:96:a3:ed:5c:26:8f:b6:60:de:59:24: 09:72:3a:60:8b:55:6d:6c:e9:50:89:b8:4c:fa:51: 05:81:69:65:3a:4f:02:c5:cb:35:14:88:57:5c:b4: b4:cc:99:77:3d:41:6b:22:53:70:0e:78:47:2f:97: 68:f1:44:62:28:83:20:89:29:fb:e8:50:6e:50:73: 81:79:ea:4e:77:45:61:34:3f:b0:49:ee:15:53:d6: ca:f9:30:c1:46:c9:8d:be:a5:b9:af:db:ca:80:85: c4:84:f2:14:0d:b0:e7:57:ec:66:17:21:fb:89:78: 5e:b0:c9:e9:53:1b:23:4d:d4:31:14:53:06:4f:8b: d0:c1:4e:44:73:f9:1e:91:46:be:bd:c9:13:b8:26: 5f:19:90:f2:f1:da:a4:a6:95:a5:f8:87:29:3c:ee: 52:35:ef:d2:97:a1:88:79:2c:85:73:15:ab:48:76: b9:8d:83:f4:e7:df:63:ae:10:a4:97:39:b5:92:03: af:ed:50:aa:16:4e:ac:4e:d3:04:76:29:29:e4:01: 2c:c1:05:fd:e5:7b:2f:ca:fa:77:f1:d3:87:21:15: 53:8f:54:8c:33:7f:b7:99:79:01:57:7d:bc:0d:8a: a9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D2:63:F8:03:D3:77:F4:60:6C:1A:2A:8B:ED:C4:39:39:2C:99:42 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/htJj-APTd_RgbBoqi-3EOTksmUI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.0.0/19 Signature Algorithm: sha256WithRSAEncryption 6c:1d:3b:4d:8f:57:51:f5:a5:69:2f:37:78:a4:6a:70:7a:2e: 85:3d:0b:eb:12:b5:dc:27:46:26:be:d9:c3:82:00:e2:f6:7e: 4a:73:68:d0:78:98:f6:66:bb:6d:48:70:fc:5e:d8:1b:36:cf: 3c:88:d4:53:12:bc:e9:3e:a7:cb:b0:e1:b6:65:4d:b3:49:31: c1:02:44:6f:42:50:0b:45:5d:43:9d:ec:bd:c6:33:5d:7e:35: 27:46:1d:41:12:4b:e9:55:87:17:c7:fa:30:fa:ac:43:61:6b: 44:ff:e0:14:1e:4a:8f:82:05:d2:95:d0:9b:2c:86:0a:8e:cf: e7:e2:39:97:06:0f:7c:90:f4:aa:0e:d2:01:19:a3:3b:97:4b: eb:1c:91:55:4e:68:15:4a:96:06:90:5e:b7:2b:af:9a:b9:9f: 6c:d4:a6:19:29:32:67:7e:bf:9c:3d:ec:5c:e2:1b:6f:2c:d7: d1:61:9d:61:00:cc:87:de:33:89:08:4a:65:32:fd:bb:6d:5b: 23:cf:12:ab:d1:52:f2:ec:fa:fc:7b:7a:0e:d5:60:89:45:b6: 32:b1:f7:a0:b0:4a:30:b4:35:8e:76:a3:a3:51:c5:f0:48:f8: ad:82:65:bf:67:d5:0c:51:37:c8:14:ed:6c:ca:0b:c2:fb:f6: 33:46:10:ca -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICE4QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA5MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg2RDI2M0Y4MDNEMzc3 RjQ2MDZDMUEyQThCRURDNDM5MzkyQzk5NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCg5fqQFwO4XkdWs3cvQoqV4R+Wo+1cJo+2YN5ZJAlyOmCLVW1s 6VCJuEz6UQWBaWU6TwLFyzUUiFdctLTMmXc9QWsiU3AOeEcvl2jxRGIogyCJKfvo UG5Qc4F56k53RWE0P7BJ7hVT1sr5MMFGyY2+pbmv28qAhcSE8hQNsOdX7GYXIfuJ eF6wyelTGyNN1DEUUwZPi9DBTkRz+R6RRr69yRO4Jl8ZkPLx2qSmlaX4hyk87lI1 79KXoYh5LIVzFatIdrmNg/Tn32OuEKSXObWSA6/tUKoWTqxO0wR2KSnkASzBBf3l ey/K+nfx04chFVOPVIwzf7eZeQFXfbwNiqkFAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUhtJj+APTd/RgbBoqi+3EOTksmUIwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvaHRKai1BUFRkX1JnYkJv cWktM0VPVGtzbVVJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BdI+ADANBgkqhkiG9w0BAQsFAAOCAQEAbB07TY9XUfWlaS83eKRqcHouhT0L6xK1 3CdGJr7Zw4IA4vZ+SnNo0HiY9ma7bUhw/F7YGzbPPIjUUxK86T6ny7DhtmVNs0kx wQJEb0JQC0VdQ53svcYzXX41J0YdQRJL6VWHF8f6MPqsQ2FrRP/gFB5Kj4IF0pXQ myyGCo7P5+I5lwYPfJD0qg7SARmjO5dL6xyRVU5oFUqWBpBetyuvmrmfbNSmGSky Z36/nD3sXOIbbyzX0WGdYQDMh94ziQhKZTL9u21bI88Sq9FS8uz6/Ht6DtVgiUW2 MrH3oLBKMLQ1jnajo1HF8Ej4rYJlv2fVDFE3yBTtbMoLwvv2M0YQyg== -----END CERTIFICATE-----Generated at Tue Apr 8 16:47:00 2025 by rpki-client