$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/57WnyDUqvjanYJmf6vaTc88vO9U.roa File: 57WnyDUqvjanYJmf6vaTc88vO9U.roa (raw, json) Hash identifier: 1n8FxUz9jirUb60cqTNIgaQU3fW2UV699Y6rfDkpVIo= Subject key identifier: E7:B5:A7:C8:35:2A:BE:36:A7:60:99:9F:EA:F6:93:73:CF:2F:3B:D5 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 123F Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/57WnyDUqvjanYJmf6vaTc88vO9U.roa Signing time: Mon 26 Aug 2024 05:24:49 +0000 ROA not before: Mon 26 Aug 2024 05:24:49 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 124.12.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4671 (0x123f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:49 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=E7B5A7C8352ABE36A760999FEAF69373CF2F3BD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:51:2b:c1:1d:19:6f:f2:e8:ba:2c:be:12: 64:88:61:61:ad:2f:d0:93:7d:e9:9f:ef:63:30:0c: eb:91:a9:e9:d6:6b:03:b0:96:f6:d7:f4:5a:87:75: e0:4a:92:24:b2:ca:7e:03:3b:84:56:60:23:64:0a: c8:6c:aa:e4:e5:13:c5:a4:ae:08:d6:53:68:6d:cb: c2:30:d6:f3:b0:95:52:f0:5e:9d:10:20:e5:e4:1c: ee:54:b0:03:e6:cc:88:0c:5f:b2:31:cf:7a:a3:7c: c7:b1:60:f9:e0:6b:e4:27:e1:8c:09:ba:b1:9b:fb: 66:0d:f3:40:cb:b8:ba:6a:98:6b:14:b1:fc:73:a0: 51:b6:57:3c:9a:78:0a:4c:7b:e1:f1:78:a6:2b:c9: 73:25:96:ed:6e:ae:4c:b2:31:24:36:ec:3a:63:4a: 03:c9:69:5a:e2:fc:b9:89:92:f3:7a:50:72:c8:3b: 1c:c7:80:ab:f5:18:e6:4e:5c:49:0f:42:e3:ce:ab: 93:51:e3:a2:a1:6b:62:70:ee:4a:37:60:6a:14:45: ef:47:61:6c:58:9e:eb:50:eb:ab:36:7c:6e:ef:2c: e7:f7:e8:4e:d9:9f:41:51:9e:c4:fd:fe:8c:ac:c6: 64:a9:14:0f:92:cf:46:40:8a:3b:b1:43:33:b4:b4: ba:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B5:A7:C8:35:2A:BE:36:A7:60:99:9F:EA:F6:93:73:CF:2F:3B:D5 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/57WnyDUqvjanYJmf6vaTc88vO9U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.12.0.0/16 Signature Algorithm: sha256WithRSAEncryption 17:6b:04:6d:11:a4:c5:82:84:67:8f:5e:d5:28:bf:80:09:84: fa:b6:bf:cd:4c:37:7d:70:70:72:e2:2d:8e:2a:32:7f:85:12: e5:eb:20:d4:06:01:34:1c:1d:f1:9d:ff:f0:50:d0:0e:25:8a: ee:e0:eb:26:71:8c:d8:24:55:32:b9:1f:e2:b6:12:d1:30:e7: b7:91:5a:34:3d:54:d5:aa:0e:38:b5:7b:3d:b0:12:d8:cf:53: 8b:fc:73:82:47:b3:c2:06:c6:9d:4c:45:18:a0:b1:60:5d:86: 71:60:c1:b5:73:79:bd:ef:8d:7f:9c:e7:a6:48:1d:a6:82:c1: 0d:fa:37:bb:65:be:d3:2e:cd:54:16:11:d2:b7:db:c8:f0:82: f3:04:a3:ef:14:5e:2a:81:f8:ef:82:f0:1a:08:f6:45:01:13: 72:33:cc:eb:35:2d:79:c5:ef:36:59:c7:27:cd:aa:84:e7:7c: 80:eb:ff:4d:56:0d:a9:f4:eb:0d:26:98:dd:f3:08:cd:e9:af: 16:90:d8:f3:84:9e:fa:91:f2:92:fc:77:ff:62:44:ce:30:ca: 40:11:98:8b:87:ac:e6:54:07:d9:7a:b9:fd:e3:1b:77:3d:71: fd:7f:75:8d:f1:4e:e1:5c:8c:df:ca:01:87:61:63:a2:30:3c: 5e:5e:4b:64 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEj8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0NDlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU3QjVBN0M4MzUyQUJF MzZBNzYwOTk5RkVBRjY5MzczQ0YyRjNCRDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7NlErwR0Zb/Louiy+EmSIYWGtL9CTfemf72MwDOuRqenWawOw lvbX9FqHdeBKkiSyyn4DO4RWYCNkCshsquTlE8WkrgjWU2hty8Iw1vOwlVLwXp0Q IOXkHO5UsAPmzIgMX7Ixz3qjfMexYPnga+Qn4YwJurGb+2YN80DLuLpqmGsUsfxz oFG2VzyaeApMe+HxeKYryXMllu1urkyyMSQ27DpjSgPJaVri/LmJkvN6UHLIOxzH gKv1GOZOXEkPQuPOq5NR46Kha2Jw7ko3YGoURe9HYWxYnutQ66s2fG7vLOf36E7Z n0FRnsT9/oysxmSpFA+Sz0ZAijuxQzO0tLqvAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQU57WnyDUqvjanYJmf6vaTc88vO9UwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvNTdXbnlEVXF2amFuWUpt ZjZ2YVRjODh2TzlVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AHwMMA0GCSqGSIb3DQEBCwUAA4IBAQAXawRtEaTFgoRnj17VKL+ACYT6tr/NTDd9 cHBy4i2OKjJ/hRLl6yDUBgE0HB3xnf/wUNAOJYru4OsmcYzYJFUyuR/ithLRMOe3 kVo0PVTVqg44tXs9sBLYz1OL/HOCR7PCBsadTEUYoLFgXYZxYMG1c3m9741/nOem SB2mgsEN+je7Zb7TLs1UFhHSt9vI8ILzBKPvFF4qgfjvgvAaCPZFARNyM8zrNS15 xe82WccnzaqE53yA6/9NVg2p9OsNJpjd8wjN6a8WkNjzhJ76kfKS/Hf/YkTOMMpA EZiLh6zmVAfZern94xt3PXH9f3WN8U7hXIzfygGHYWOiMDxeXktk -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:43 2024 by rpki-client on console-fra.rpki-client.org