$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8exa7LX7grD_D5c0wUNNQqRJaDA.roa File: 8exa7LX7grD_D5c0wUNNQqRJaDA.roa (raw, json) Hash identifier: 1h0kIRfsiguwlZ8KoT8EqvoGb/8jw/CvFhuKJ45KI/E= Subject key identifier: F1:EC:5A:EC:B5:FB:82:B0:FF:0F:97:34:C1:43:4D:42:A4:49:68:30 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0F74 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8exa7LX7grD_D5c0wUNNQqRJaDA.roa Signing time: Fri 01 Sep 2023 09:36:51 +0000 ROA not before: Fri 01 Sep 2023 09:36:51 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 210.17.100.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3956 (0xf74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:36:51 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F1EC5AECB5FB82B0FF0F9734C1434D42A4496830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5a:71:a5:bc:2c:d6:4d:b5:4f:93:9a:42:2b: 5f:55:44:e6:00:d4:06:0c:1e:92:cd:6b:bc:11:5d: 3f:89:1e:fe:3e:84:f1:4f:18:55:be:5a:ef:02:c4: d9:ca:84:7f:e8:85:a0:c6:ec:a1:fd:e7:35:ed:37: 33:5b:ac:77:51:4d:1e:17:ef:14:ab:76:82:de:6f: a1:c7:15:a2:30:cc:b3:b9:87:ef:0e:e5:f6:dd:68: ae:0b:39:c3:71:07:c9:ee:cf:4d:18:54:06:49:1c: 2e:88:94:cf:28:9b:b7:cd:8c:1c:f6:d4:e6:d7:b6: b5:e4:2d:0e:f3:56:95:75:e0:b9:c3:42:17:6d:2e: c9:5d:84:4f:5f:3e:1d:b6:92:06:cf:66:0a:74:ab: f9:2f:90:3e:ab:ea:94:ab:49:1b:6f:01:80:bc:8b: a6:2e:1c:e8:0b:e8:87:7f:65:6e:dc:80:1f:99:10: 82:9d:83:c7:93:fc:95:ff:aa:a8:71:8a:90:e0:99: 56:30:14:65:d5:93:74:e5:c2:c8:98:59:10:da:2f: 1e:7d:0b:47:a8:b3:8e:e1:53:7c:03:f8:19:a2:fb: e8:79:ce:bd:81:3e:ca:43:9f:2a:db:10:a7:9b:9d: 57:c1:da:71:44:7c:85:fc:23:3b:d4:50:68:ac:19: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EC:5A:EC:B5:FB:82:B0:FF:0F:97:34:C1:43:4D:42:A4:49:68:30 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8exa7LX7grD_D5c0wUNNQqRJaDA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.100.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:24:5e:80:a2:94:42:37:40:cf:78:6e:dc:09:fb:ea:73:b7: 52:35:f8:1d:8d:15:b0:63:98:cd:34:0c:a7:4c:5b:c6:e1:df: 23:b1:9e:66:f4:4a:9b:ca:9e:3c:d9:80:ac:4f:85:f9:03:2b: ed:b1:39:c9:ec:87:4a:5f:30:84:44:e4:72:ba:5e:c7:01:b8: 32:f7:73:b7:b6:e4:81:46:b0:59:2d:ee:cb:bb:ae:ba:ca:7f: bb:8a:9f:0e:a4:7a:1a:db:8d:68:0a:8c:dd:a9:4d:83:24:5c: a4:ee:eb:e3:34:66:fd:b3:27:44:98:b0:53:ea:81:bd:13:33: 38:5b:67:b3:5d:58:0c:ad:1f:d2:30:26:76:f7:42:15:64:2a: 44:ce:c7:b0:49:61:6a:ad:24:4a:7f:18:af:a2:a5:96:9a:38: c9:c3:41:76:ff:88:aa:b1:30:e5:50:28:29:03:1e:9d:e8:85: a9:57:13:10:65:e0:cb:9c:6b:ab:6b:78:8a:0e:df:87:bf:c6: 46:b6:63:00:e0:74:9d:9a:39:8b:39:6e:d7:f2:75:7b:79:12: e9:ea:1a:48:ee:bc:23:77:70:ac:15:79:9f:de:43:f6:9b:30: b5:84:53:41:13:68:3f:43:ec:4a:84:65:dd:0d:37:f8:56:c6: 0c:8e:2c:5c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM2NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYxRUM1QUVDQjVGQjgy QjBGRjBGOTczNEMxNDM0RDQyQTQ0OTY4MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6WnGlvCzWTbVPk5pCK19VROYA1AYMHpLNa7wRXT+JHv4+hPFP GFW+Wu8CxNnKhH/ohaDG7KH95zXtNzNbrHdRTR4X7xSrdoLeb6HHFaIwzLO5h+8O 5fbdaK4LOcNxB8nuz00YVAZJHC6IlM8om7fNjBz21ObXtrXkLQ7zVpV14LnDQhdt LsldhE9fPh22kgbPZgp0q/kvkD6r6pSrSRtvAYC8i6YuHOgL6Id/ZW7cgB+ZEIKd g8eT/JX/qqhxipDgmVYwFGXVk3TlwsiYWRDaLx59C0eos47hU3wD+Bmi++h5zr2B PspDnyrbEKebnVfB2nFEfIX8IzvUUGisGYJnAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU8exa7LX7grD/D5c0wUNNQqRJaDAwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvOGV4YTdMWDdnckRfRDVj MHdVTk5RcVJKYURBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AdIRZDANBgkqhkiG9w0BAQsFAAOCAQEAfyRegKKUQjdAz3hu3An76nO3UjX4HY0V sGOYzTQMp0xbxuHfI7GeZvRKm8qePNmArE+F+QMr7bE5yeyHSl8whETkcrpexwG4 Mvdzt7bkgUawWS3uy7uuusp/u4qfDqR6GtuNaAqM3alNgyRcpO7r4zRm/bMnRJiw U+qBvRMzOFtns11YDK0f0jAmdvdCFWQqRM7HsElhaq0kSn8Yr6Kllpo4ycNBdv+I qrEw5VAoKQMeneiFqVcTEGXgy5xrq2t4ig7fh7/GRrZjAOB0nZo5izlu1/J1e3kS 6eoaSO68I3dwrBV5n95D9pswtYRTQRNoP0PsSoRl3Q03+FbGDI4sXA== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:02 2024 by rpki-client on console-fra.rpki-client.org