$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/rMMKRHJI6N7K-aroA1sV6GINvv4.roa File: rMMKRHJI6N7K-aroA1sV6GINvv4.roa (raw, json) Hash identifier: ZzU8NkShK9IbMzDdlJcxqFXPFIQTt0tpIG3LWU2Srcc= Subject key identifier: AC:C3:0A:44:72:48:E8:DE:CA:F9:AA:E8:03:5B:15:E8:62:0D:BE:FE Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 12E8 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/rMMKRHJI6N7K-aroA1sV6GINvv4.roa Signing time: Mon 10 Feb 2025 14:08:53 +0000 ROA not before: Mon 10 Feb 2025 14:08:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 203.77.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 21:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4840 (0x12e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:08:53 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=ACC30A447248E8DECAF9AAE8035B15E8620DBEFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7e:20:8b:36:f7:e4:a2:b0:0a:0d:23:85:3b: 63:20:f0:ef:db:e7:9c:fa:45:23:c4:14:28:ef:c4: e7:05:91:5f:fc:77:24:87:5d:c4:15:b3:89:97:50: 58:15:a2:cf:83:dd:fb:37:1d:aa:0e:09:00:7f:71: 36:55:fd:e2:77:f2:9c:fe:15:2e:a9:90:d8:01:22: 50:bb:0d:e6:33:d8:29:4b:bd:7d:74:a1:da:af:1c: 09:21:40:97:0c:c1:b1:1f:03:19:7e:c4:d1:b6:08: 49:9c:b4:ff:99:b7:33:11:39:fe:b8:01:0f:3e:7f: 0e:dc:3c:41:09:e9:5b:b7:ac:f4:e9:06:e8:c0:40: 67:27:dc:04:45:b1:9e:a4:50:18:be:7a:a2:8a:91: 43:45:f0:6f:86:98:ac:55:eb:4e:28:72:91:f8:73: ac:33:d3:f8:77:21:db:be:38:e5:23:03:b5:cc:99: 68:28:9b:1d:ae:e3:52:ca:d2:95:c3:5a:b9:8f:4d: 78:3a:87:10:24:00:7d:7b:cd:cb:be:b1:c4:e5:35: 71:77:02:c5:d7:d9:f1:e1:0a:f6:6b:d2:7f:68:93: 06:41:c1:ed:7b:90:25:49:d1:50:7c:c8:7e:2a:b2: 2f:9e:1b:8d:c0:b4:dc:48:20:6a:5d:2a:aa:b4:d0: 58:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C3:0A:44:72:48:E8:DE:CA:F9:AA:E8:03:5B:15:E8:62:0D:BE:FE X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/rMMKRHJI6N7K-aroA1sV6GINvv4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.64.0/20 Signature Algorithm: sha256WithRSAEncryption 38:4a:f0:c3:49:42:4b:9c:26:aa:04:ad:53:7a:4c:f6:03:b7: d2:dd:fa:fd:98:f6:ad:ee:a2:3c:03:d1:12:cf:c3:9d:75:94: 66:8c:13:99:39:db:25:e6:58:85:aa:fc:9c:72:08:fd:e0:77: a9:64:5c:ed:14:e7:86:eb:48:93:aa:3a:e7:b0:1d:7f:bb:ed: f9:9d:d6:0d:7e:c6:1a:bf:a8:95:26:4b:5c:55:db:6a:91:2c: e5:8c:59:a5:9e:40:ca:27:84:18:a5:e7:d3:e6:0f:2b:ac:d2: 60:1f:b7:3e:cd:84:80:1c:dc:58:a3:5a:22:7e:c9:53:1a:6f: 70:4b:bc:9f:d3:f1:69:24:0e:48:4e:5a:bb:be:84:5b:bc:df: 85:2c:5b:ca:a1:f5:7f:7b:22:6f:fd:ec:42:6f:2c:6a:53:da: bc:cc:e8:44:3c:7b:11:e3:7b:0d:6e:b1:e4:58:b3:07:ad:af: 59:08:72:63:29:c6:0c:66:62:c7:16:4b:31:ae:74:f4:e3:6a: 34:84:53:7e:d8:ef:b1:2b:ce:3e:c7:45:a3:2e:3a:b1:a5:0f: c8:89:a9:b4:dd:b4:2e:3c:3d:05:21:4e:3c:f3:7a:24:ff:db: 08:d8:c3:56:b3:a9:d5:1d:61:17:11:9b:79:d6:a1:b2:a6:2d: 34:3c:25:ad -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEugwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA4NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFDQzMwQTQ0NzI0OEU4 REVDQUY5QUFFODAzNUIxNUU4NjIwREJFRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKfiCLNvfkorAKDSOFO2Mg8O/b55z6RSPEFCjvxOcFkV/8dySH XcQVs4mXUFgVos+D3fs3HaoOCQB/cTZV/eJ38pz+FS6pkNgBIlC7DeYz2ClLvX10 odqvHAkhQJcMwbEfAxl+xNG2CEmctP+ZtzMROf64AQ8+fw7cPEEJ6Vu3rPTpBujA QGcn3ARFsZ6kUBi+eqKKkUNF8G+GmKxV604ocpH4c6wz0/h3Idu+OOUjA7XMmWgo mx2u41LK0pXDWrmPTXg6hxAkAH17zcu+scTlNXF3AsXX2fHhCvZr0n9okwZBwe17 kCVJ0VB8yH4qsi+eG43AtNxIIGpdKqq00FhDAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUrMMKRHJI6N7K+aroA1sV6GINvv4wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvck1NS1JISkk2TjdLLWFy b0Exc1Y2R0lOdnY0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BMtNQDANBgkqhkiG9w0BAQsFAAOCAQEAOErww0lCS5wmqgStU3pM9gO30t36/Zj2 re6iPAPREs/DnXWUZowTmTnbJeZYhar8nHII/eB3qWRc7RTnhutIk6o657Adf7vt +Z3WDX7GGr+olSZLXFXbapEs5YxZpZ5AyieEGKXn0+YPK6zSYB+3Ps2EgBzcWKNa In7JUxpvcEu8n9PxaSQOSE5au76EW7zfhSxbyqH1f3sib/3sQm8salPavMzoRDx7 EeN7DW6x5FizB62vWQhyYynGDGZixxZLMa509ONqNIRTftjvsSvOPsdFoy46saUP yImptN20Ljw9BSFOPPN6JP/bCNjDVrOp1R1hFxGbedahsqYtNDwlrQ== -----END CERTIFICATE-----Generated at Tue Apr 8 16:56:38 2025 by rpki-client