$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/0TYftRU56oBwM-UWFn4ToKuXVFw.roa File: 0TYftRU56oBwM-UWFn4ToKuXVFw.roa (raw, json) Hash identifier: bexIw3GD+vxMMj9dGzMYM9yVloDGH6BawzBXZ0KqGvk= Subject key identifier: D1:36:1F:B5:15:39:EA:80:70:33:E5:16:16:7E:13:A0:AB:97:54:5C Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0FE7 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/0TYftRU56oBwM-UWFn4ToKuXVFw.roa Signing time: Fri 01 Sep 2023 09:37:30 +0000 ROA not before: Fri 01 Sep 2023 09:37:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 17213 IP address blocks: 60.198.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4071 (0xfe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=D1361FB51539EA807033E516167E13A0AB97545C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a3:c2:42:54:c2:43:9c:57:42:36:0c:22:c3: a8:02:be:35:1a:80:17:65:4d:eb:f0:92:9f:f1:10: 97:c9:d9:c8:03:b0:3b:4e:94:cc:04:99:11:9d:35: b9:d2:36:72:62:02:b5:f3:bd:ed:7a:ac:af:24:92: 47:49:b6:7d:e0:64:92:b5:22:43:a2:5d:ba:c6:59: 4e:a3:e6:c6:da:d2:15:0f:0f:23:71:ce:57:c1:58: 3f:c8:63:68:56:40:f8:81:53:af:2d:0d:e2:d8:60: 16:c9:eb:33:9e:3f:0f:f2:66:4c:42:39:70:57:52: 99:e4:93:52:1e:73:e5:87:2d:1c:e5:12:5e:e4:50: 99:a7:fe:88:85:f5:4a:46:4d:51:fa:4c:e0:0f:18: 93:7c:c0:f8:0d:77:71:7a:22:ac:eb:96:b5:63:db: 8a:cf:b1:f3:a0:ea:a0:49:c1:7a:5c:f2:0e:ea:36: b3:47:9e:a3:d5:05:13:0b:05:af:59:2c:d9:32:bd: 4c:42:ab:dd:f0:96:52:7f:1c:bc:07:6c:c4:50:92: 3c:6e:f1:34:d7:19:4f:f7:44:35:b4:5d:f4:bd:80: f3:a5:22:d4:3e:73:18:48:e4:54:7f:78:b8:fd:e1: 6d:fa:7b:53:96:6d:db:a0:06:0c:ff:84:1f:a1:e4: 5f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:36:1F:B5:15:39:EA:80:70:33:E5:16:16:7E:13:A0:AB:97:54:5C X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/0TYftRU56oBwM-UWFn4ToKuXVFw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.198.159.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:53:57:c1:af:9b:66:03:c5:b5:3b:03:6c:43:be:11:f0:51: 25:d7:aa:66:9d:9d:ef:4d:d7:7b:b2:ba:c9:c4:cd:3f:c9:c9: 19:db:0f:b8:48:c2:f6:a6:11:29:a7:95:aa:e6:b2:62:24:37: 12:93:73:25:dd:87:d4:31:d3:fc:67:b2:5e:64:25:5f:e9:22: 02:3e:93:d6:c6:5d:95:25:ca:ee:bd:15:e3:bc:29:89:99:cd: 38:ea:16:f1:1a:de:66:b8:6a:ac:ef:10:df:2c:42:5c:42:91: 4a:a3:32:03:c6:30:85:74:5d:fb:0f:53:6f:fc:5e:16:fa:31: c2:34:a9:d6:0f:03:f8:c8:ca:c0:92:40:42:9f:97:9c:44:e5: a1:2d:70:95:f6:a4:43:01:c6:d5:ca:70:1f:13:e2:f4:3d:e4: c6:a8:84:29:3d:68:43:10:93:f5:1e:ea:60:e9:dc:b5:0a:18: 92:c4:98:7f:16:41:be:b8:d4:61:ab:a1:79:73:cc:58:2a:81: fc:de:c9:08:4e:04:e8:df:00:02:1c:4c:b7:c3:29:92:87:d0: 40:be:63:aa:83:60:fd:1c:c3:b4:c7:c7:73:ba:6e:25:0c:23: 85:99:26:cc:39:9f:3d:44:0d:44:26:24:22:6b:d9:4f:47:14: ef:64:30:ba -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD+cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQxMzYxRkI1MTUzOUVB ODA3MDMzRTUxNjE2N0UxM0EwQUI5NzU0NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDno8JCVMJDnFdCNgwiw6gCvjUagBdlTevwkp/xEJfJ2cgDsDtO lMwEmRGdNbnSNnJiArXzve16rK8kkkdJtn3gZJK1IkOiXbrGWU6j5sba0hUPDyNx zlfBWD/IY2hWQPiBU68tDeLYYBbJ6zOePw/yZkxCOXBXUpnkk1Iec+WHLRzlEl7k UJmn/oiF9UpGTVH6TOAPGJN8wPgNd3F6IqzrlrVj24rPsfOg6qBJwXpc8g7qNrNH nqPVBRMLBa9ZLNkyvUxCq93wllJ/HLwHbMRQkjxu8TTXGU/3RDW0XfS9gPOlItQ+ cxhI5FR/eLj94W36e1OWbdugBgz/hB+h5F8lAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU0TYftRU56oBwM+UWFn4ToKuXVFwwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvMFRZZnRSVTU2b0J3TS1V V0ZuNFRvS3VYVkZ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ADzGnzANBgkqhkiG9w0BAQsFAAOCAQEAbVNXwa+bZgPFtTsDbEO+EfBRJdeqZp2d 703Xe7K6ycTNP8nJGdsPuEjC9qYRKaeVquayYiQ3EpNzJd2H1DHT/GeyXmQlX+ki Aj6T1sZdlSXK7r0V47wpiZnNOOoW8RreZrhqrO8Q3yxCXEKRSqMyA8YwhXRd+w9T b/xeFvoxwjSp1g8D+MjKwJJAQp+XnETloS1wlfakQwHG1cpwHxPi9D3kxqiEKT1o QxCT9R7qYOnctQoYksSYfxZBvrjUYauheXPMWCqB/N7JCE4E6N8AAhxMt8MpkofQ QL5jqoNg/RzDtMfHc7puJQwjhZkmzDmfPUQNRCYkImvZT0cU72Qwug== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org