$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4mMl6h5MUgfO20VJq7p8Oi03xBg.roa File: 4mMl6h5MUgfO20VJq7p8Oi03xBg.roa (raw, json) Hash identifier: lmVlHrQALpyqsFo7nNJZ93gqaexCNIjoUGyeTg/UXLM= Subject key identifier: E2:63:25:EA:1E:4C:52:07:CE:DB:45:49:AB:BA:7C:3A:2D:37:C4:18 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1302 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4mMl6h5MUgfO20VJq7p8Oi03xBg.roa Signing time: Mon 10 Feb 2025 14:08:59 +0000 ROA not before: Mon 10 Feb 2025 14:08:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 61.57.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4866 (0x1302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:08:59 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E26325EA1E4C5207CEDB4549ABBA7C3A2D37C418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:a0:fb:7d:6e:0d:86:e2:d7:fd:59:88:d9: 15:dd:36:f6:a1:03:01:a9:5e:37:c4:c2:a2:b3:88: fa:cb:f1:be:52:c1:5a:53:6d:6d:10:1c:4d:80:3c: 5a:9b:a1:65:51:57:16:21:94:71:09:4e:43:10:26: 1f:9a:8a:9a:b3:50:98:71:e3:45:49:fc:3b:b5:be: e8:48:59:7f:e1:e1:22:04:c1:36:98:4f:0b:13:d4: a7:de:c8:29:b4:da:34:ef:0c:f6:f3:71:73:60:35: 6c:57:19:17:de:48:19:4d:2e:1a:fd:89:e7:e4:87: 33:3b:27:96:85:6d:b5:4a:cb:27:76:1e:f0:f6:bb: f2:6b:6a:31:47:18:7e:b6:84:f9:79:96:d0:7d:73: c3:b8:45:b1:5c:4a:e5:9c:03:13:b0:bc:bf:d4:14: 17:65:d5:43:32:23:12:81:1b:af:85:88:72:6f:eb: 4a:32:9c:69:2a:fd:13:87:67:31:4a:62:05:27:80: 86:5c:74:cb:d4:ef:49:11:ca:a8:d1:91:ea:f0:ab: 67:84:7b:de:24:05:97:97:0b:e8:2e:22:c4:38:ef: bd:25:c7:99:99:4c:c7:2e:0c:e1:23:2f:de:d6:56: 7c:e9:5a:a4:de:11:37:10:ed:2a:df:56:60:5e:48: 4a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:63:25:EA:1E:4C:52:07:CE:DB:45:49:AB:BA:7C:3A:2D:37:C4:18 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4mMl6h5MUgfO20VJq7p8Oi03xBg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 61.57.0.0/19 Signature Algorithm: sha256WithRSAEncryption 1b:f4:43:2c:30:4d:48:02:75:ba:df:4f:69:0a:51:3c:2f:e6: 8e:5b:15:36:7f:35:c3:81:8b:2d:28:24:68:9c:ab:e7:42:fb: 34:f3:4e:ac:3b:af:63:4a:21:dc:3f:8a:25:1d:10:cd:e6:21: 5f:8f:2d:5c:f2:e1:51:ed:1d:9c:bd:aa:1b:34:6f:09:fc:86: 3f:d9:c7:c3:71:72:3e:f7:b0:bd:d0:49:da:72:57:5b:e8:e6: 26:89:9b:da:a1:48:30:8c:3b:bd:54:95:6c:df:b3:be:77:78: 0e:76:cc:fc:5c:9f:52:31:8f:e0:b7:76:9f:d0:15:0f:e0:36: 6c:6f:15:46:3d:b3:fa:7e:e0:a9:f2:9a:14:52:d3:57:cb:2c: 63:24:ea:85:e4:1f:2a:1e:62:fe:e7:c3:70:9f:0c:9e:c6:47: f9:b8:b2:26:63:92:f3:df:4b:27:38:2a:96:9e:3c:9f:90:59: b5:a2:aa:ab:73:b7:0c:23:05:a5:27:dc:1f:50:36:f0:53:4a: ee:6e:28:a0:f7:b9:47:7f:33:d9:ac:b0:e1:b3:2e:91:b4:b4: b8:f7:ff:0b:58:44:8f:f8:e2:2a:66:57:c4:a4:34:b1:5f:9f: 7d:4e:9f:47:e8:8c:96:30:2f:0c:b3:72:32:f9:e3:e7:7b:d7: 89:b1:a9:d0 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEwIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA4NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUyNjMyNUVBMUU0QzUy MDdDRURCNDU0OUFCQkE3QzNBMkQzN0M0MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/8qD7fW4NhuLX/VmI2RXdNvahAwGpXjfEwqKziPrL8b5SwVpT bW0QHE2APFqboWVRVxYhlHEJTkMQJh+aipqzUJhx40VJ/Du1vuhIWX/h4SIEwTaY TwsT1KfeyCm02jTvDPbzcXNgNWxXGRfeSBlNLhr9iefkhzM7J5aFbbVKyyd2HvD2 u/JrajFHGH62hPl5ltB9c8O4RbFcSuWcAxOwvL/UFBdl1UMyIxKBG6+FiHJv60oy nGkq/ROHZzFKYgUngIZcdMvU70kRyqjRkerwq2eEe94kBZeXC+guIsQ4770lx5mZ TMcuDOEjL97WVnzpWqTeETcQ7SrfVmBeSEqXAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU4mMl6h5MUgfO20VJq7p8Oi03xBgwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvNG1NbDZoNU1VZ2ZPMjBW SnE3cDhPaTAzeEJnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BT05ADANBgkqhkiG9w0BAQsFAAOCAQEAG/RDLDBNSAJ1ut9PaQpRPC/mjlsVNn81 w4GLLSgkaJyr50L7NPNOrDuvY0oh3D+KJR0QzeYhX48tXPLhUe0dnL2qGzRvCfyG P9nHw3FyPvewvdBJ2nJXW+jmJomb2qFIMIw7vVSVbN+zvnd4DnbM/FyfUjGP4Ld2 n9AVD+A2bG8VRj2z+n7gqfKaFFLTV8ssYyTqheQfKh5i/ufDcJ8MnsZH+biyJmOS 899LJzgqlp48n5BZtaKqq3O3DCMFpSfcH1A28FNK7m4ooPe5R38z2ayw4bMukbS0 uPf/C1hEj/jiKmZXxKQ0sV+ffU6fR+iMljAvDLNyMvnj53vXibGp0A== -----END CERTIFICATE-----Generated at Mon Apr 7 02:00:08 2025 by rpki-client