$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1cjHcJVDkeMus0o5qcl5Xl6e5Yk.roa File: 1cjHcJVDkeMus0o5qcl5Xl6e5Yk.roa (raw, json) Hash identifier: 9Wu0CTD5lpe/iVf92hanEyUKh7tTsDseZcFPHcvMbtM= Subject key identifier: D5:C8:C7:70:95:43:91:E3:2E:B3:4A:39:A9:C9:79:5E:5E:9E:E5:89 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 12F1 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1cjHcJVDkeMus0o5qcl5Xl6e5Yk.roa Signing time: Mon 10 Feb 2025 14:08:55 +0000 ROA not before: Mon 10 Feb 2025 14:08:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 60.199.107.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4849 (0x12f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:08:55 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=D5C8C770954391E32EB34A39A9C9795E5E9EE589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:db:83:83:d4:39:59:26:82:0c:21:aa:a3:74: e5:b1:87:6b:c4:f6:75:25:d9:aa:9c:70:7f:ae:72: af:34:41:10:b5:c8:3e:94:40:77:e1:1b:f5:e8:c9: 47:f5:58:27:97:fd:10:81:a4:f6:94:cf:24:7c:17: d8:76:57:01:a8:8a:24:f6:b3:6e:62:42:d3:d1:72: ea:c2:58:ce:03:8c:8f:c4:74:4b:a7:bc:2b:36:c3: 52:aa:38:07:81:82:e9:bc:e8:e1:22:9a:92:71:1d: ba:c6:c7:98:15:26:48:90:1b:dc:c4:17:03:4c:fa: 1b:b6:2c:18:75:f5:ee:89:24:f1:42:52:d5:74:00: 6c:a0:fe:28:74:24:2c:80:0a:aa:e3:ee:3b:31:74: b5:21:4f:3c:20:04:16:45:e5:d6:cd:a1:22:7c:09: c5:73:f9:18:a7:f1:cd:3f:48:6a:e5:45:d9:a3:ee: b0:cf:c5:a5:0d:4c:e5:f0:24:59:b8:69:c9:63:27: c8:b9:cc:f9:9c:94:00:2e:ef:ed:50:bc:78:f7:f0: 7c:a7:ec:0b:8c:e7:d1:43:e1:d5:4d:08:49:44:34: dc:f9:f3:dd:c7:8b:af:0c:3d:5e:8a:e0:8d:5b:46: 31:4f:8e:a8:27:b2:0b:5e:13:a9:8d:99:31:52:67: 87:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C8:C7:70:95:43:91:E3:2E:B3:4A:39:A9:C9:79:5E:5E:9E:E5:89 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1cjHcJVDkeMus0o5qcl5Xl6e5Yk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.199.107.0/24 Signature Algorithm: sha256WithRSAEncryption 31:92:de:f3:b1:72:4a:33:a7:32:56:de:3b:a0:ca:c4:94:d8: 26:f5:d9:09:c9:42:4b:8c:54:70:d6:be:01:57:68:31:97:81: 40:0a:47:7e:36:76:f1:59:3a:27:1b:d5:c8:34:c3:f7:cb:10: 16:e4:e7:a2:30:6d:cd:62:14:cb:9e:ef:1e:35:34:40:d7:e0: 4f:a8:5e:8c:c9:ff:79:1a:cf:99:bf:5d:35:24:74:29:a0:68: 43:92:37:0c:80:1d:f0:b9:e2:c9:57:cf:ad:77:9e:9d:b4:71: 6e:9f:c7:2f:f5:42:34:83:ca:84:05:21:88:e5:f2:93:b1:60: 33:fa:12:db:99:c9:13:2c:53:c0:41:5b:96:d2:2a:2d:ea:3a: 5b:20:06:b7:68:43:b8:fb:66:8c:eb:e5:24:75:6d:2e:f8:87: 33:84:a1:96:90:56:24:0e:56:ee:be:4a:40:a1:d8:cc:d1:02: 9b:a9:d7:ca:9f:8e:49:f0:b5:27:64:e1:ab:d9:40:19:bd:15: f8:25:bb:89:7b:56:07:e2:21:09:51:b6:e8:3a:1a:c2:fe:6d: f6:53:59:a3:84:29:2b:ab:b5:de:70:20:ef:8d:83:7c:df:c7: af:4d:7c:b1:22:4c:56:c0:3d:c8:fd:d3:b5:8f:24:0d:92:77: 3c:87:5a:ef -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEvEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA4NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1QzhDNzcwOTU0Mzkx RTMyRUIzNEEzOUE5Qzk3OTVFNUU5RUU1ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDg24OD1DlZJoIMIaqjdOWxh2vE9nUl2aqccH+ucq80QRC1yD6U QHfhG/XoyUf1WCeX/RCBpPaUzyR8F9h2VwGoiiT2s25iQtPRcurCWM4DjI/EdEun vCs2w1KqOAeBgum86OEimpJxHbrGx5gVJkiQG9zEFwNM+hu2LBh19e6JJPFCUtV0 AGyg/ih0JCyACqrj7jsxdLUhTzwgBBZF5dbNoSJ8CcVz+Rin8c0/SGrlRdmj7rDP xaUNTOXwJFm4acljJ8i5zPmclAAu7+1QvHj38Hyn7AuM59FD4dVNCElENNz5893H i68MPV6K4I1bRjFPjqgnsgteE6mNmTFSZ4elAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU1cjHcJVDkeMus0o5qcl5Xl6e5YkwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvMWNqSGNKVkRrZU11czBv NXFjbDVYbDZlNVlrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ADzHazANBgkqhkiG9w0BAQsFAAOCAQEAMZLe87FySjOnMlbeO6DKxJTYJvXZCclC S4xUcNa+AVdoMZeBQApHfjZ28Vk6JxvVyDTD98sQFuTnojBtzWIUy57vHjU0QNfg T6hejMn/eRrPmb9dNSR0KaBoQ5I3DIAd8LniyVfPrXeenbRxbp/HL/VCNIPKhAUh iOXyk7FgM/oS25nJEyxTwEFbltIqLeo6WyAGt2hDuPtmjOvlJHVtLviHM4ShlpBW JA5W7r5KQKHYzNECm6nXyp+OSfC1J2Thq9lAGb0V+CW7iXtWB+IhCVG26Doawv5t 9lNZo4QpK6u13nAg742DfN/Hr018sSJMVsA9yP3TtY8kDZJ3PIda7w== -----END CERTIFICATE-----Generated at Mon Apr 7 01:57:51 2025 by rpki-client