$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7o5BNIP1m7RgsyyzZeQHFOzQbTo.roa File: 7o5BNIP1m7RgsyyzZeQHFOzQbTo.roa (raw, json) Hash identifier: +hAneV2k9frxQcvy3pLSWgFsVHJFWAOLApESAc2wzzQ= Subject key identifier: EE:8E:41:34:83:F5:9B:B4:60:B3:2C:B3:65:E4:07:14:EC:D0:6D:3A Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1372 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7o5BNIP1m7RgsyyzZeQHFOzQbTo.roa Signing time: Mon 10 Feb 2025 14:09:27 +0000 ROA not before: Mon 10 Feb 2025 14:09:27 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 60.199.140.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4978 (0x1372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:09:27 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=EE8E413483F59BB460B32CB365E40714ECD06D3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:45:3f:49:0e:40:d8:d9:e4:0c:92:bc:1d: af:4a:f0:5f:c8:89:17:81:05:06:56:47:36:e1:36: 02:76:67:33:a4:02:81:17:f1:3c:6f:7f:46:74:4f: d6:20:a9:79:ec:e0:97:5b:f5:6e:e6:77:75:00:ea: 6c:85:fe:7f:ba:07:de:8d:a9:8d:2d:fc:f6:cf:e4: 81:35:7f:13:bc:27:1b:28:9b:8d:a4:b0:7c:8f:c4: 7c:8a:ed:7e:d4:64:d7:05:d3:bb:1c:74:de:63:8d: c3:ef:62:9f:4a:04:b7:7b:2a:91:7b:78:85:03:5c: 97:79:1b:54:06:7c:fe:87:74:86:b8:b2:e9:3e:c7: fa:f3:42:76:aa:d1:72:a5:e0:62:06:5b:10:fd:52: d6:7d:c0:33:48:7d:8f:05:09:4c:d6:f5:9c:4d:99: 38:b6:60:14:85:7c:b5:9e:c6:6b:ee:d3:93:1f:06: b2:13:0b:b9:a8:28:e6:1a:c2:f9:fa:31:44:0e:ec: aa:4c:8a:20:0a:b4:d9:08:5b:0e:cd:1e:d9:cd:3f: 61:2f:1c:6e:43:66:0a:d2:25:68:64:6f:61:0c:ea: 51:a0:b2:70:00:f5:97:02:19:9e:c8:57:50:d3:eb: 19:bf:93:63:45:02:15:db:2d:c0:b8:56:a6:81:9f: a8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8E:41:34:83:F5:9B:B4:60:B3:2C:B3:65:E4:07:14:EC:D0:6D:3A X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/7o5BNIP1m7RgsyyzZeQHFOzQbTo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.199.140.0/24 Signature Algorithm: sha256WithRSAEncryption 18:74:d5:03:8f:f6:4b:2f:ae:17:c4:f6:a6:db:18:2c:b4:5f: 05:f8:ae:b5:01:9a:ee:93:82:73:55:84:41:46:ff:09:77:58: 1f:81:4a:b6:46:7c:4f:a8:9c:b7:08:db:3d:06:5f:55:fc:ef: 84:13:88:28:95:40:4e:59:1e:84:a4:c0:02:ee:0a:22:9e:9f: 49:ad:3c:ed:39:52:93:87:8a:5c:23:16:3f:6e:e8:6c:87:66: 2c:e6:2d:97:6b:ce:43:c8:81:76:ed:53:a3:96:0d:fe:37:b5: 88:2a:db:5a:3a:cd:9b:d2:a7:13:3c:f7:12:79:48:3e:4f:40: ce:db:9e:5b:3a:02:e5:8d:ee:30:3a:50:cb:f3:ca:0e:b7:7d: ec:f9:de:c1:1c:a4:df:a6:f4:06:59:9e:97:95:2f:da:dd:84: 32:79:0c:4f:3f:e1:33:d7:69:96:40:ed:82:b4:7e:63:46:ef: bd:e1:23:31:c1:45:b9:43:23:71:fb:09:cb:36:bf:b3:4b:90: 70:43:3c:5b:94:4e:39:3b:c8:3d:ff:07:62:83:90:d0:76:c0: 1e:4f:d3:19:7e:64:e1:68:0b:ff:78:68:3e:d7:75:b7:90:c1: 76:c7:9d:b2:4a:ee:13:f7:06:74:27:7a:05:54:a1:02:1c:1b: 7a:8f:89:a9 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICE3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA5MjdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVFOEU0MTM0ODNGNTlC QjQ2MEIzMkNCMzY1RTQwNzE0RUNEMDZEM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnqEU/SQ5A2NnkDJK8Ha9K8F/IiReBBQZWRzbhNgJ2ZzOkAoEX 8Txvf0Z0T9YgqXns4Jdb9W7md3UA6myF/n+6B96NqY0t/PbP5IE1fxO8Jxsom42k sHyPxHyK7X7UZNcF07scdN5jjcPvYp9KBLd7KpF7eIUDXJd5G1QGfP6HdIa4suk+ x/rzQnaq0XKl4GIGWxD9UtZ9wDNIfY8FCUzW9ZxNmTi2YBSFfLWexmvu05MfBrIT C7moKOYawvn6MUQO7KpMiiAKtNkIWw7NHtnNP2EvHG5DZgrSJWhkb2EM6lGgsnAA 9ZcCGZ7IV1DT6xm/k2NFAhXbLcC4VqaBn6j1AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU7o5BNIP1m7RgsyyzZeQHFOzQbTowHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvN281Qk5JUDFtN1Jnc3l5 elplUUhGT3pRYlRvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ADzHjDANBgkqhkiG9w0BAQsFAAOCAQEAGHTVA4/2Sy+uF8T2ptsYLLRfBfiutQGa 7pOCc1WEQUb/CXdYH4FKtkZ8T6ictwjbPQZfVfzvhBOIKJVATlkehKTAAu4KIp6f Sa087TlSk4eKXCMWP27obIdmLOYtl2vOQ8iBdu1To5YN/je1iCrbWjrNm9KnEzz3 EnlIPk9AztueWzoC5Y3uMDpQy/PKDrd97PnewRyk36b0Blmel5Uv2t2EMnkMTz/h M9dplkDtgrR+Y0bvveEjMcFFuUMjcfsJyza/s0uQcEM8W5ROOTvIPf8HYoOQ0HbA Hk/TGX5k4WgL/3hoPtd1t5DBdsedskruE/cGdCd6BVShAhwbeo+JqQ== -----END CERTIFICATE-----Generated at Mon Apr 7 02:00:10 2025 by rpki-client