$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4zQtYvZbynG9FpdsqMCeFTvbozc.roa File: 4zQtYvZbynG9FpdsqMCeFTvbozc.roa (raw, json) Hash identifier: 0AlpqIGcJIBZuGhWmcwMTLaxihDzaZSbgFNC4wkKhx0= Subject key identifier: E3:34:2D:62:F6:5B:CA:71:BD:16:97:6C:A8:C0:9E:15:3B:DB:A3:37 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11D5 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4zQtYvZbynG9FpdsqMCeFTvbozc.roa Signing time: Mon 26 Aug 2024 05:24:25 +0000 ROA not before: Mon 26 Aug 2024 05:24:25 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 219.80.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4565 (0x11d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:25 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E3342D62F65BCA71BD16976CA8C09E153BDBA337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:54:50:a5:a3:20:f1:0b:36:ba:8c:66:b3:d2: 74:cb:41:f5:ec:c8:4c:b1:15:d0:e4:0c:a1:b9:9e: 5e:6f:3e:94:cf:31:04:a6:e4:08:c4:93:74:1a:2c: 7f:76:1e:3c:e6:65:5b:9d:1c:75:57:00:76:51:b7: f0:09:94:e6:23:04:df:9f:81:96:55:ec:d5:2e:31: 70:e1:ac:f5:13:34:f2:d4:90:4d:12:a6:e1:06:38: c9:7d:64:64:78:ca:2e:50:79:de:e7:f2:50:34:bc: fc:71:9c:eb:13:80:a9:8a:8b:80:44:21:5e:28:bd: 44:79:dc:e6:21:c1:27:3a:e0:2b:1a:22:01:33:f6: 47:98:7f:25:48:d0:c8:a1:ec:4e:8e:42:ba:41:48: 39:c1:bd:02:4a:52:a4:c9:17:4f:33:3c:cc:e9:bb: 46:74:d3:be:c2:b7:1b:69:ab:ad:af:5b:cd:42:70: 7f:fc:6b:f3:66:59:c9:ba:f6:4d:fe:39:9e:40:43: d7:58:63:eb:fe:61:a4:42:29:de:d4:98:44:04:cd: f0:f2:66:73:dd:1c:8c:cb:c3:96:58:45:7c:76:83: c1:82:62:b4:cc:56:97:f0:29:a0:98:53:6a:86:2d: a5:31:3e:79:67:81:80:1c:07:a0:f2:c1:be:c1:6f: 4d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:34:2D:62:F6:5B:CA:71:BD:16:97:6C:A8:C0:9E:15:3B:DB:A3:37 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/4zQtYvZbynG9FpdsqMCeFTvbozc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.80.0.0/16 Signature Algorithm: sha256WithRSAEncryption 57:28:5b:e8:34:91:cb:74:13:ad:80:37:51:3b:44:3b:d2:9b: 1f:9f:cc:26:0e:62:db:b7:73:c4:4c:31:e1:22:29:9c:5c:49: fa:c1:5d:79:23:23:38:3a:8e:3a:ca:16:5e:55:de:3f:2d:80: 1b:dd:a1:af:e7:74:95:f3:7c:fe:12:47:a7:43:f0:26:3f:cb: d1:85:a6:72:80:3d:d7:c3:07:9b:d7:ec:13:b7:6f:99:d7:1c: a2:da:26:3c:2f:83:fe:11:55:e3:4c:99:31:dd:f2:3a:18:e4: ea:67:b4:e5:b5:c5:99:7b:0d:f1:3b:7b:19:e5:6b:22:12:f9: c2:a5:50:3b:2c:cd:eb:66:c5:ee:80:43:73:dd:64:dc:bf:dc: 86:df:ab:a2:6e:89:6d:82:84:14:f9:26:77:1a:62:dd:ce:82: 17:2a:98:c6:72:2a:c7:34:38:0d:57:f4:a4:1b:8d:4e:27:bf: 03:b7:4b:fc:e2:55:27:b3:d1:88:2a:50:b7:c4:2e:6f:f6:25: 01:c4:4b:61:ea:85:17:e1:02:66:c5:ca:dc:77:be:f2:0e:bd: 57:9d:f7:8e:09:21:c8:b3:c6:ec:56:9c:04:65:dc:d1:13:ad: 6e:75:1a:97:37:1e:bc:1e:1b:60:24:c8:50:9f:90:93:53:df: 30:fb:d2:c7 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEdUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MjVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUzMzQyRDYyRjY1QkNB NzFCRDE2OTc2Q0E4QzA5RTE1M0JEQkEzMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWVFCloyDxCza6jGaz0nTLQfXsyEyxFdDkDKG5nl5vPpTPMQSm 5AjEk3QaLH92HjzmZVudHHVXAHZRt/AJlOYjBN+fgZZV7NUuMXDhrPUTNPLUkE0S puEGOMl9ZGR4yi5Qed7n8lA0vPxxnOsTgKmKi4BEIV4ovUR53OYhwSc64CsaIgEz 9keYfyVI0Mih7E6OQrpBSDnBvQJKUqTJF08zPMzpu0Z0077Ctxtpq62vW81CcH/8 a/NmWcm69k3+OZ5AQ9dYY+v+YaRCKd7UmEQEzfDyZnPdHIzLw5ZYRXx2g8GCYrTM VpfwKaCYU2qGLaUxPnlngYAcB6Dywb7Bb00jAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU4zQtYvZbynG9FpdsqMCeFTvbozcwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvNHpRdFl2WmJ5bkc5RnBk c3FNQ2VGVHZib3pjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD ANtQMA0GCSqGSIb3DQEBCwUAA4IBAQBXKFvoNJHLdBOtgDdRO0Q70psfn8wmDmLb t3PETDHhIimcXEn6wV15IyM4Oo46yhZeVd4/LYAb3aGv53SV83z+EkenQ/AmP8vR haZygD3Xwweb1+wTt2+Z1xyi2iY8L4P+EVXjTJkx3fI6GOTqZ7TltcWZew3xO3sZ 5WsiEvnCpVA7LM3rZsXugENz3WTcv9yG36uiboltgoQU+SZ3GmLdzoIXKpjGcirH NDgNV/SkG41OJ78Dt0v84lUns9GIKlC3xC5v9iUBxEth6oUX4QJmxcrcd77yDr1X nfeOCSHIs8bsVpwEZdzRE61udRqXNx68HhtgJMhQn5CTU98w+9LH -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:43 2024 by rpki-client on console-fra.rpki-client.org