$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ei6yQqeb16Z0TljBIlyW4SNqvsI.roa File: Ei6yQqeb16Z0TljBIlyW4SNqvsI.roa (raw, json) Hash identifier: hEHKGiKuw63QIW22mEsTbT4Q7pbPjVI6G84SKG7t1ek= Subject key identifier: 12:2E:B2:42:A7:9B:D7:A6:74:4E:58:C1:22:5C:96:E1:23:6A:BE:C2 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0FD5 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ei6yQqeb16Z0TljBIlyW4SNqvsI.roa Signing time: Fri 01 Sep 2023 09:37:20 +0000 ROA not before: Fri 01 Sep 2023 09:37:20 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4662 IP address blocks: 203.77.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4053 (0xfd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:20 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=122EB242A79BD7A6744E58C1225C96E1236ABEC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:e8:db:58:0d:ed:0c:ef:cc:e7:38:11:b1: dc:85:80:1f:21:e9:0f:f3:78:16:58:ed:f4:3a:9f: c4:24:ac:90:eb:6b:4f:a1:3d:8f:5f:6c:c7:42:4e: 8e:55:9e:00:5c:8d:a8:af:b8:31:63:10:33:cc:d8: 88:bb:ee:e9:a7:9a:8a:d9:2e:49:ee:85:f7:78:93: cc:18:62:d7:9e:e2:cf:0a:04:91:60:55:04:04:04: b4:6f:d7:28:a8:e5:4b:53:2b:40:16:e5:42:3c:9b: c9:0d:b4:cf:0d:bf:49:b0:ab:4a:69:d2:bc:28:81: ea:be:bd:39:64:e8:75:30:d8:3f:71:99:97:3f:99: fe:e2:f9:cf:93:f6:ba:00:39:51:ad:c3:e0:fd:f5: 0b:a3:1d:75:ef:c3:ec:a0:e9:7c:c3:b1:b3:14:c7: 27:f8:81:1a:a6:84:be:02:69:31:8b:b1:48:fc:9b: 9d:8e:d5:61:40:12:79:8c:ed:3e:30:b8:55:02:4d: 18:49:89:98:7b:92:b1:f2:12:84:d8:87:77:a1:85: ff:02:8c:f4:15:c4:ba:d6:a3:ef:b7:aa:ee:7b:1f: 66:86:c2:90:f0:0e:3c:a7:4c:95:4f:28:c8:d6:74: 09:2f:51:c9:2d:94:00:b9:f7:d3:11:77:4c:55:7a: eb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2E:B2:42:A7:9B:D7:A6:74:4E:58:C1:22:5C:96:E1:23:6A:BE:C2 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ei6yQqeb16Z0TljBIlyW4SNqvsI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.64.0/18 Signature Algorithm: sha256WithRSAEncryption 22:42:fa:79:db:fa:28:d1:1f:cf:01:78:f2:3f:1f:3e:73:b1: 7a:7f:45:91:a8:1d:21:9f:a7:5f:fc:72:9b:9a:27:db:86:a5: b2:6c:59:b4:10:47:58:02:1c:b9:70:72:5c:c6:d0:0a:35:3c: 2f:38:e7:70:5c:10:9b:f1:de:20:74:e4:62:88:02:97:95:84: 50:b5:ad:a4:4a:20:cc:4b:e7:89:f3:af:52:06:d8:0f:f6:81: ce:74:af:89:2e:6d:25:ec:80:7e:df:a3:fe:c9:b3:75:51:52: 24:9c:7e:1e:15:1c:fb:98:5f:bd:1f:31:54:9b:f1:5e:8c:89: 54:20:fa:69:62:ea:6d:9f:92:d2:c4:53:b1:40:fe:1e:39:c0: 35:8b:54:76:48:fc:0d:97:94:7b:f7:9b:86:04:30:73:7f:30: b3:b8:13:4f:9b:9c:57:d9:43:01:d8:4c:63:24:e1:f5:16:e2: 60:ff:41:d1:bc:82:30:73:be:3b:c6:a3:aa:2f:64:55:8f:f0: 30:c1:a9:3d:c4:3a:7c:38:69:47:d5:83:8c:3d:30:99:22:15: 0a:3e:49:a4:01:c8:9e:45:a2:a8:cd:42:95:61:fe:5f:bf:00: 4f:a4:3c:ac:6a:00:9f:c5:c2:26:6a:16:7b:fc:e6:b2:d5:bd: d5:d1:bd:70 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDEyMkVCMjQyQTc5QkQ3 QTY3NDRFNThDMTIyNUM5NkUxMjM2QUJFQzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCl0OjbWA3tDO/M5zgRsdyFgB8h6Q/zeBZY7fQ6n8QkrJDra0+h PY9fbMdCTo5VngBcjaivuDFjEDPM2Ii77umnmorZLknuhfd4k8wYYtee4s8KBJFg VQQEBLRv1yio5UtTK0AW5UI8m8kNtM8Nv0mwq0pp0rwogeq+vTlk6HUw2D9xmZc/ mf7i+c+T9roAOVGtw+D99QujHXXvw+yg6XzDsbMUxyf4gRqmhL4CaTGLsUj8m52O 1WFAEnmM7T4wuFUCTRhJiZh7krHyEoTYh3ehhf8CjPQVxLrWo++3qu57H2aGwpDw DjynTJVPKMjWdAkvUcktlAC599MRd0xVeuu3AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUEi6yQqeb16Z0TljBIlyW4SNqvsIwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvRWk2eVFxZWIxNlowVGxq QklseVc0U05xdnNJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BstNQDANBgkqhkiG9w0BAQsFAAOCAQEAIkL6edv6KNEfzwF48j8fPnOxen9Fkagd IZ+nX/xym5on24alsmxZtBBHWAIcuXByXMbQCjU8LzjncFwQm/HeIHTkYogCl5WE ULWtpEogzEvnifOvUgbYD/aBznSviS5tJeyAft+j/smzdVFSJJx+HhUc+5hfvR8x VJvxXoyJVCD6aWLqbZ+S0sRTsUD+HjnANYtUdkj8DZeUe/ebhgQwc38ws7gTT5uc V9lDAdhMYyTh9RbiYP9B0byCMHO+O8ajqi9kVY/wMMGpPcQ6fDhpR9WDjD0wmSIV Cj5JpAHInkWiqM1ClWH+X78AT6Q8rGoAn8XCJmoWe/zmstW91dG9cA== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:02 2024 by rpki-client on console-fra.rpki-client.org