$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/3d3Hm4FpIWGbO9OVP0yIwT_NrsM.roa File: 3d3Hm4FpIWGbO9OVP0yIwT_NrsM.roa (raw, json) Hash identifier: F2JIrFG5MgtmwUuL5kOS9fHNIUcLWCijCQHNxRPfMNE= Subject key identifier: DD:DD:C7:9B:81:69:21:61:9B:3B:D3:95:3F:4C:88:C1:3F:CD:AE:C3 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0FFD Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/3d3Hm4FpIWGbO9OVP0yIwT_NrsM.roa Signing time: Fri 01 Sep 2023 09:37:36 +0000 ROA not before: Fri 01 Sep 2023 09:37:36 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 210.17.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4093 (0xffd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:36 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=DDDDC79B816921619B3BD3953F4C88C13FCDAEC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:32:d4:70:e9:35:52:2b:a3:90:10:f1:54:7e: 58:f6:c4:bb:0b:c7:a8:0b:78:e5:19:a6:c1:e2:4c: b5:28:cd:aa:e8:b4:5d:32:99:6d:e0:aa:ea:cc:3b: 7d:dd:37:fe:86:b7:fa:e7:53:c1:be:21:58:95:f7: 52:d0:ac:43:91:70:4e:96:0f:c4:5c:62:59:47:38: 40:15:fc:39:09:01:b2:03:f9:a2:a1:77:4c:cf:59: 24:28:de:6e:c1:ce:9a:58:84:e3:42:8c:d9:78:77: 91:92:6e:a8:11:a2:24:ab:da:3f:0e:6d:70:8c:1d: b1:e8:5e:17:89:0e:64:64:4b:38:8b:37:c7:87:eb: 30:9c:d1:cd:5c:d2:fb:3d:02:4b:aa:3c:53:28:98: 8a:ea:1a:c1:ce:61:2d:5f:9f:a8:49:00:49:58:56: fa:70:f7:a5:d7:02:f9:68:3d:07:1e:01:12:0f:54: 41:63:08:40:ab:48:db:86:4d:e3:86:7f:cb:f4:ef: 80:7a:5e:e4:06:61:63:de:f1:43:d4:6b:aa:05:6c: 01:19:ed:12:8a:68:8b:29:8b:31:65:90:0d:3c:bb: d9:63:a4:dc:4a:2b:cb:1f:f1:46:4d:6e:c7:a9:16: ad:64:0f:f3:e7:cc:9b:fc:60:f4:92:8e:99:1a:28: c1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DD:C7:9B:81:69:21:61:9B:3B:D3:95:3F:4C:88:C1:3F:CD:AE:C3 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/3d3Hm4FpIWGbO9OVP0yIwT_NrsM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.0.0/17 Signature Algorithm: sha256WithRSAEncryption 13:d0:aa:31:e6:56:9a:9f:04:7f:e4:f9:75:42:e4:32:bc:09: 01:c0:7a:36:65:a8:83:5f:7d:60:96:22:cb:d4:7f:02:35:02: 19:17:47:39:c7:39:57:8f:90:85:3a:c2:68:98:8f:89:0b:81: d1:d9:ce:f6:53:2c:c8:f8:08:ec:0f:3b:76:a8:c2:01:a5:c4: 11:1f:41:25:52:dd:89:c2:e3:9c:c7:79:15:1e:7f:c9:fb:09: 9d:80:04:33:73:ab:cf:b9:5d:15:98:52:0c:77:c3:be:9e:fc: 54:d8:b0:aa:e4:06:f5:20:2d:88:23:f6:61:41:dd:77:8c:af: de:1f:9b:08:bb:29:f9:17:2e:67:e3:1b:00:70:98:be:be:98: 9b:70:88:bc:83:b3:4f:2b:e1:35:8a:77:2d:76:55:28:b0:73: b7:b8:89:0e:b4:8b:52:ff:23:fd:2c:44:1d:ef:a4:2d:3e:1d: 13:b9:06:56:26:30:5c:46:88:44:c6:6e:9e:5b:c7:2f:44:42: 73:47:d1:4f:89:a1:46:cb:5c:d0:b4:8e:41:e0:51:71:9a:a6: c2:b8:02:ba:9c:6a:f8:36:a0:72:1c:ea:2e:eb:77:ed:a9:ba: 74:85:ee:9c:be:c5:7d:e8:5b:91:e1:98:6e:a4:04:c6:15:e9: 66:ba:b6:f5 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD/0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKERERERDNzlCODE2OTIx NjE5QjNCRDM5NTNGNEM4OEMxM0ZDREFFQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtMtRw6TVSK6OQEPFUflj2xLsLx6gLeOUZpsHiTLUozarotF0y mW3gqurMO33dN/6Gt/rnU8G+IViV91LQrEORcE6WD8RcYllHOEAV/DkJAbID+aKh d0zPWSQo3m7BzppYhONCjNl4d5GSbqgRoiSr2j8ObXCMHbHoXheJDmRkSziLN8eH 6zCc0c1c0vs9AkuqPFMomIrqGsHOYS1fn6hJAElYVvpw96XXAvloPQceARIPVEFj CECrSNuGTeOGf8v074B6XuQGYWPe8UPUa6oFbAEZ7RKKaIspizFlkA08u9ljpNxK K8sf8UZNbsepFq1kD/PnzJv8YPSSjpkaKMFzAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU3d3Hm4FpIWGbO9OVP0yIwT/NrsMwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvM2QzSG00RnBJV0diTzlP VlAweUl3VF9OcnNNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME B9IRADANBgkqhkiG9w0BAQsFAAOCAQEAE9CqMeZWmp8Ef+T5dULkMrwJAcB6NmWo g199YJYiy9R/AjUCGRdHOcc5V4+QhTrCaJiPiQuB0dnO9lMsyPgI7A87dqjCAaXE ER9BJVLdicLjnMd5FR5/yfsJnYAEM3Orz7ldFZhSDHfDvp78VNiwquQG9SAtiCP2 YUHdd4yv3h+bCLsp+RcuZ+MbAHCYvr6Ym3CIvIOzTyvhNYp3LXZVKLBzt7iJDrSL Uv8j/SxEHe+kLT4dE7kGViYwXEaIRMZunlvHL0RCc0fRT4mhRstc0LSOQeBRcZqm wrgCupxq+DagchzqLut37am6dIXunL7FfehbkeGYbqQExhXpZrq29Q== -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:42 2024 by rpki-client on console-fra.rpki-client.org