$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/FJ0KlN2XR5ODSnqqkxzWxywtXHc.roa File: FJ0KlN2XR5ODSnqqkxzWxywtXHc.roa (raw, json) Hash identifier: rRJfPpkJjt6MGQb5ud2GXtISLA3LyZTXdMk+sbFkgQI= Subject key identifier: 14:9D:0A:94:DD:97:47:93:83:4A:7A:AA:93:1C:D6:C7:2C:2D:5C:77 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1315 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/FJ0KlN2XR5ODSnqqkxzWxywtXHc.roa Signing time: Mon 10 Feb 2025 14:09:04 +0000 ROA not before: Mon 10 Feb 2025 14:09:04 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 2001:c50::/32 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4885 (0x1315) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:09:04 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=149D0A94DD974793834A7AAA931CD6C72C2D5C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7a:ce:78:5b:d1:40:34:26:e1:fd:98:29:fb: 99:6c:5e:b4:91:dd:1f:e4:cd:34:2e:bf:cd:2c:a3: 98:f2:d0:32:91:4a:f3:1b:62:19:70:7c:d4:19:5b: 1a:9e:9a:57:b0:b7:39:c4:b8:b0:f6:d9:39:ae:68: 6f:c4:0a:35:b9:40:81:8a:34:0e:75:f8:24:8a:90: 61:f7:d3:cc:f4:da:3e:32:86:8f:83:00:10:4a:3a: 80:2d:94:a9:49:e9:78:94:a7:0b:e2:7c:24:44:92: df:87:62:ea:83:19:4d:6b:4e:d3:62:61:b8:ca:1d: 54:e5:0b:73:43:93:d3:50:21:fc:b3:53:49:c4:80: 86:9d:f9:95:c4:78:bd:93:24:10:2c:b7:4a:a0:94: ef:58:5e:c7:5f:e9:7f:a9:e6:2b:6b:cb:7d:a4:81: f8:83:fd:d2:70:77:83:37:ea:e7:b6:a5:cc:01:43: e8:0b:c8:62:1b:8d:49:ea:4a:ab:94:28:c1:84:8e: 65:43:fb:e4:b9:97:a3:f4:53:e3:2f:3f:93:9d:a6: 3b:61:e6:af:66:dc:8e:1a:f0:a5:8c:ee:ed:24:6f: de:b7:e4:63:80:0a:1b:3c:34:e3:fe:a6:3d:84:69: c5:79:6b:d6:27:8a:66:79:aa:82:b6:79:60:57:5a: 39:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9D:0A:94:DD:97:47:93:83:4A:7A:AA:93:1C:D6:C7:2C:2D:5C:77 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/FJ0KlN2XR5ODSnqqkxzWxywtXHc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:c50::/32 Signature Algorithm: sha256WithRSAEncryption 2f:0c:de:1e:8e:53:04:10:87:e2:9e:56:dc:ad:1e:fa:66:c7: a3:22:7b:47:f0:d9:a9:1c:8a:16:8c:74:fd:1b:b9:fe:ef:cd: 8e:12:d2:04:34:11:34:64:9b:e5:0d:17:f0:f5:dc:2f:c0:8e: f1:e4:ac:e0:73:93:42:54:af:c6:8c:0c:7d:3e:9c:3f:f4:a2: 6c:51:90:29:27:e3:0c:7b:c2:b4:0b:b1:e9:b5:31:8d:1e:44: 4a:18:7e:a1:35:0c:ce:7e:51:08:a7:59:c6:e9:b5:42:06:c6: 6d:1b:ae:e3:7a:da:c2:36:fc:57:50:b2:cb:4f:f4:22:60:5f: bb:80:4b:40:cd:0d:fa:5a:88:ad:66:09:55:bf:a1:71:2d:7f: 60:95:c8:3a:df:b5:f2:36:8b:7d:63:e3:45:c0:f7:c4:21:cb: 01:b1:e0:c2:db:33:ff:c6:80:22:1f:5c:a1:5c:84:b7:1f:c7: d1:01:4f:ed:5b:d1:03:00:47:00:1e:b4:0b:c7:98:58:be:6e: fa:94:cf:b3:f4:dc:96:a6:91:3b:78:4c:72:4c:97:0e:cc:33: ea:03:99:32:28:41:ae:4d:7c:e4:39:48:67:48:c7:6f:fa:39: 42:72:de:04:90:96:db:54:fa:ef:c9:93:f6:6c:2e:1b:01:22: d7:4e:ec:30 -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICExUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA5MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE0OUQwQTk0REQ5NzQ3 OTM4MzRBN0FBQTkzMUNENkM3MkMyRDVDNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDies54W9FANCbh/Zgp+5lsXrSR3R/kzTQuv80so5jy0DKRSvMb YhlwfNQZWxqemlewtznEuLD22TmuaG/ECjW5QIGKNA51+CSKkGH308z02j4yho+D ABBKOoAtlKlJ6XiUpwvifCREkt+HYuqDGU1rTtNiYbjKHVTlC3NDk9NQIfyzU0nE gIad+ZXEeL2TJBAst0qglO9YXsdf6X+p5itry32kgfiD/dJwd4M36ue2pcwBQ+gL yGIbjUnqSquUKMGEjmVD++S5l6P0U+MvP5Odpjth5q9m3I4a8KWM7u0kb9635GOA Chs8NOP+pj2EacV5a9YnimZ5qoK2eWBXWjnDAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUFJ0KlN2XR5ODSnqqkxzWxywtXHcwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvRkowS2xOMlhSNU9EU25x cWt4eld4eXd0WEhjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF ACABDFAwDQYJKoZIhvcNAQELBQADggEBAC8M3h6OUwQQh+KeVtytHvpmx6Mie0fw 2akcihaMdP0buf7vzY4S0gQ0ETRkm+UNF/D13C/AjvHkrOBzk0JUr8aMDH0+nD/0 omxRkCkn4wx7wrQLsem1MY0eREoYfqE1DM5+UQinWcbptUIGxm0bruN62sI2/FdQ sstP9CJgX7uAS0DNDfpaiK1mCVW/oXEtf2CVyDrftfI2i31j40XA98QhywGx4MLb M//GgCIfXKFchLcfx9EBT+1b0QMARwAetAvHmFi+bvqUz7P03JamkTt4THJMlw7M M+oDmTIoQa5NfOQ5SGdIx2/6OUJy3gSQlttU+u/Jk/ZsLhsBItdO7DA= -----END CERTIFICATE-----Generated at Mon Apr 7 01:50:43 2025 by rpki-client