$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/03DzuQEZwFK-Q-SUVkvTNmnriWU.roa File: 03DzuQEZwFK-Q-SUVkvTNmnriWU.roa (raw, json) Hash identifier: 4J570o3e+w4ks6sVurJgABxiR85QySANDlmVC7geaXI= Subject key identifier: D3:70:F3:B9:01:19:C0:52:BE:43:E4:94:56:4B:D3:36:69:EB:89:65 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1216 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/03DzuQEZwFK-Q-SUVkvTNmnriWU.roa Signing time: Mon 26 Aug 2024 05:24:40 +0000 ROA not before: Mon 26 Aug 2024 05:24:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 210.17.72.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4630 (0x1216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D370F3B90119C052BE43E494564BD33669EB8965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:84:6d:51:43:1c:28:47:ee:f8:dd:5a:88: 0c:d5:6a:5a:1d:f4:ff:3b:11:d6:92:6b:8a:00:05: 76:63:4a:88:7f:2d:1f:09:e8:35:d8:4a:cb:1a:36: a6:da:02:04:99:36:4b:99:7a:ab:4f:c2:2c:b8:50: 42:cb:47:a4:6f:26:2c:1f:b2:42:c2:83:8b:46:a0: 97:15:a3:7b:85:dc:99:7d:51:f1:54:84:23:0d:02: 3f:5b:2e:1c:91:19:90:7a:a1:d2:77:50:83:9c:8a: b6:66:d2:44:9a:70:d3:5c:37:6b:2c:84:66:a1:da: c7:0f:ca:6e:52:1b:86:fd:bb:ab:4b:0e:ad:83:dd: a7:00:b1:cf:5d:74:d8:0d:95:85:80:80:79:85:fe: a8:a0:f1:a7:05:6f:54:64:ef:25:ed:24:85:bf:e3: 58:86:a6:ab:a2:f5:63:a7:13:4e:ce:69:93:0c:df: d0:f3:2e:90:14:e9:07:cd:f3:e3:6c:10:62:af:a8: 08:70:13:66:4c:c3:e2:e7:ed:ac:f2:6b:e7:49:4b: 78:3b:06:23:c5:e6:44:36:db:90:53:27:9a:6a:fb: 44:d8:83:5a:1d:40:69:05:99:fa:28:91:c8:4b:5e: 75:a8:f6:7e:7e:d9:72:b3:82:36:f0:ee:b5:c8:31: f1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:70:F3:B9:01:19:C0:52:BE:43:E4:94:56:4B:D3:36:69:EB:89:65 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/03DzuQEZwFK-Q-SUVkvTNmnriWU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.72.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:d2:c4:c9:7a:5b:bb:44:98:18:df:7d:4e:5c:f0:88:a1:28: 8c:b3:52:18:74:07:19:43:02:fd:c6:23:1e:54:59:e5:d1:b7: 85:15:9c:35:ac:d2:42:f0:83:6e:15:0c:a2:21:5f:0c:ff:b0: 1e:d5:ee:87:52:07:85:b0:50:80:0b:8f:99:bc:34:31:13:41: f8:d0:99:ea:a8:d0:d3:a4:e4:9d:cc:e6:fa:bc:a6:4d:46:72: 04:a3:21:b4:d2:b9:3f:4e:9b:28:b0:53:fc:3b:be:ae:7f:74: 1f:7b:ed:7d:5a:c2:fd:ff:3c:d9:bb:88:a0:ca:cc:f0:9f:6e: e4:6e:44:4b:50:73:5a:d5:34:e4:1a:71:86:7c:96:2b:80:2e: 8f:44:6e:a6:0f:54:35:f1:f1:3c:c4:48:ee:44:c2:5d:25:86: bf:d1:3e:b2:50:8d:a0:ec:f3:80:19:0c:bc:44:fc:4e:fb:0e: 2c:e9:bc:38:f8:ea:7b:84:34:60:b6:17:b2:bb:f1:e7:02:c0: 52:be:a8:f1:aa:5b:bd:0f:e1:5d:89:a1:0d:e1:3a:5a:0b:ba: 07:80:2e:27:25:6c:45:72:12:ef:a0:12:ae:a5:cc:49:f4:28: a3:77:be:fb:26:99:b8:81:59:0f:57:d9:95:08:5b:70:ee:c2: 90:0b:94:98 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQzNzBGM0I5MDExOUMw NTJCRTQzRTQ5NDU2NEJEMzM2NjlFQjg5NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1o4RtUUMcKEfu+N1aiAzValod9P87EdaSa4oABXZjSoh/LR8J 6DXYSssaNqbaAgSZNkuZeqtPwiy4UELLR6RvJiwfskLCg4tGoJcVo3uF3Jl9UfFU hCMNAj9bLhyRGZB6odJ3UIOcirZm0kSacNNcN2sshGah2scPym5SG4b9u6tLDq2D 3acAsc9ddNgNlYWAgHmF/qig8acFb1Rk7yXtJIW/41iGpqui9WOnE07OaZMM39Dz LpAU6QfN8+NsEGKvqAhwE2ZMw+Ln7azya+dJS3g7BiPF5kQ225BTJ5pq+0TYg1od QGkFmfookchLXnWo9n5+2XKzgjbw7rXIMfF3AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU03DzuQEZwFK+Q+SUVkvTNmnriWUwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvMDNEenVRRVp3RkstUS1T VVZrdlRObW5yaVdVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIRSDANBgkqhkiG9w0BAQsFAAOCAQEAOtLEyXpbu0SYGN99TlzwiKEojLNSGHQH GUMC/cYjHlRZ5dG3hRWcNazSQvCDbhUMoiFfDP+wHtXuh1IHhbBQgAuPmbw0MRNB +NCZ6qjQ06Tknczm+rymTUZyBKMhtNK5P06bKLBT/Du+rn90H3vtfVrC/f882buI oMrM8J9u5G5ES1BzWtU05BpxhnyWK4Auj0Rupg9UNfHxPMRI7kTCXSWGv9E+slCN oOzzgBkMvET8TvsOLOm8OPjqe4Q0YLYXsrvx5wLAUr6o8apbvQ/hXYmhDeE6Wgu6 B4AuJyVsRXIS76ASrqXMSfQoo3e++yaZuIFZD1fZlQhbcO7CkAuUmA== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:43 2024 by rpki-client on console-fra.rpki-client.org