$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/85DwQV2UvwL3dZlAVPUnhl2KgvM.roa File: 85DwQV2UvwL3dZlAVPUnhl2KgvM.roa (raw, json) Hash identifier: ZcRyVGxaGJAamDrub1rqxl7FSKYNJISY0NrWYTnHm14= Subject key identifier: F3:90:F0:41:5D:94:BF:02:F7:75:99:40:54:F5:27:86:5D:8A:82:F3 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1252 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/85DwQV2UvwL3dZlAVPUnhl2KgvM.roa Signing time: Mon 26 Aug 2024 05:24:53 +0000 ROA not before: Mon 26 Aug 2024 05:24:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 202.145.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4690 (0x1252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:53 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F390F0415D94BF02F775994054F527865D8A82F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:cf:5c:45:51:c9:4b:b6:8b:32:f8:16:f8: 11:bf:6e:0f:71:2a:2c:21:f6:51:b1:73:fa:61:b3: a2:06:5c:f9:62:e2:da:81:51:0a:15:ee:74:a8:d1: 12:1c:5a:0b:ae:f9:60:7a:3d:9d:10:fa:94:e4:19: 0b:04:8e:e6:cc:93:d8:73:13:9e:ae:75:88:53:f4: 59:e2:18:97:21:0d:50:76:6c:3c:0e:f8:55:b5:1d: c1:ea:f2:29:a7:e4:26:37:46:7a:7a:75:9f:5d:6d: 54:1b:a7:cd:75:57:60:4f:54:62:c4:ab:6a:b0:05: 59:cd:a9:f4:21:f7:8d:52:a5:84:81:0b:4f:80:4b: a3:97:ee:c4:99:10:c6:58:d6:66:19:6e:5e:c3:a7: 8d:61:de:36:ec:ba:c5:a4:5d:24:76:ee:de:2e:3c: 38:58:b0:5e:6d:77:4c:29:32:53:c6:84:ac:63:27: e0:a2:06:60:df:1c:f0:06:17:e8:1b:f9:6a:6f:6e: 14:8a:d2:77:db:37:89:92:c8:7b:fb:97:7c:de:f3: 90:f2:8f:d5:26:d4:0a:13:ae:4c:3b:13:31:ca:7f: 80:62:06:da:c9:39:cf:06:6d:73:c8:7d:4b:15:b0: a2:21:a4:18:14:22:eb:af:24:a1:93:1f:51:83:0a: c8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:90:F0:41:5D:94:BF:02:F7:75:99:40:54:F5:27:86:5D:8A:82:F3 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/85DwQV2UvwL3dZlAVPUnhl2KgvM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.145.64.0/18 Signature Algorithm: sha256WithRSAEncryption 89:c6:91:78:ff:0f:ec:f1:8e:03:27:a6:8d:4e:0d:45:3a:d0: a8:02:95:6e:27:f8:d2:27:19:4f:e2:f5:c2:da:61:9a:d3:ab: 43:b1:74:09:0f:81:18:60:c5:98:f2:b6:a3:fa:fb:b1:f6:80: 19:7d:29:1a:02:3d:f9:fd:b0:f2:10:80:08:e4:48:ef:e5:1c: 36:f2:c7:b3:1f:2d:db:4c:8f:e9:48:9a:91:9a:9f:d1:6c:f3: d2:69:5e:56:ee:46:c2:fe:70:54:93:b6:d8:be:4a:c8:11:e2: 67:0f:66:bc:5e:65:ec:2e:ec:cc:bc:ae:3e:08:e8:b8:b0:34: 06:7e:5c:38:7a:22:13:b8:7a:c2:40:9a:92:56:d8:c6:eb:91: a1:18:b1:ef:85:90:54:21:26:2c:4b:93:6e:fa:bd:2e:b8:a7: e5:46:a5:78:db:51:12:73:79:3b:61:bf:2a:2f:e9:67:38:53: f6:b5:7f:0e:a2:b8:b7:69:37:81:f6:26:64:a8:a8:fc:cf:c3: 18:62:08:98:df:39:28:fd:18:cb:50:3b:eb:39:b2:ec:1f:71: 84:e7:bc:a0:6c:23:a1:36:2f:13:39:1f:d5:e7:d6:04:c0:80: 7c:43:5d:a6:f9:a4:10:cd:f9:f0:61:96:f7:78:20:10:0a:83: f1:8f:70:ae -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICElIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYzOTBGMDQxNUQ5NEJG MDJGNzc1OTk0MDU0RjUyNzg2NUQ4QTgyRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDBgs9cRVHJS7aLMvgW+BG/bg9xKiwh9lGxc/phs6IGXPli4tqB UQoV7nSo0RIcWguu+WB6PZ0Q+pTkGQsEjubMk9hzE56udYhT9FniGJchDVB2bDwO +FW1HcHq8imn5CY3Rnp6dZ9dbVQbp811V2BPVGLEq2qwBVnNqfQh941SpYSBC0+A S6OX7sSZEMZY1mYZbl7Dp41h3jbsusWkXSR27t4uPDhYsF5td0wpMlPGhKxjJ+Ci BmDfHPAGF+gb+WpvbhSK0nfbN4mSyHv7l3ze85Dyj9Um1AoTrkw7EzHKf4BiBtrJ Oc8GbXPIfUsVsKIhpBgUIuuvJKGTH1GDCsgTAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU85DwQV2UvwL3dZlAVPUnhl2KgvMwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvODVEd1FWMlV2d0wzZFps QVZQVW5obDJLZ3ZNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BsqRQDANBgkqhkiG9w0BAQsFAAOCAQEAicaReP8P7PGOAyemjU4NRTrQqAKVbif4 0icZT+L1wtphmtOrQ7F0CQ+BGGDFmPK2o/r7sfaAGX0pGgI9+f2w8hCACORI7+Uc NvLHsx8t20yP6UiakZqf0Wzz0mleVu5Gwv5wVJO22L5KyBHiZw9mvF5l7C7szLyu PgjouLA0Bn5cOHoiE7h6wkCaklbYxuuRoRix74WQVCEmLEuTbvq9Lrin5UaleNtR EnN5O2G/Ki/pZzhT9rV/DqK4t2k3gfYmZKio/M/DGGIImN85KP0Yy1A76zmy7B9x hOe8oGwjoTYvEzkf1efWBMCAfENdpvmkEM358GGW93ggEAqD8Y9wrg== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:43 2024 by rpki-client on console-fra.rpki-client.org