$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Fv2whmrQtZRap49b6xFHgz2kEv0.roa File: Fv2whmrQtZRap49b6xFHgz2kEv0.roa (raw, json) Hash identifier: +1pS537uIAwwQgLLyNI3/uprRw3uez657Ncbs3Vfn20= Subject key identifier: 16:FD:B0:86:6A:D0:B5:94:5A:A7:8F:5B:EB:11:47:83:3D:A4:12:FD Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11EB Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Fv2whmrQtZRap49b6xFHgz2kEv0.roa Signing time: Mon 26 Aug 2024 05:24:30 +0000 ROA not before: Mon 26 Aug 2024 05:24:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 203.77.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4587 (0x11eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:30 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=16FDB0866AD0B5945AA78F5BEB1147833DA412FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:59:d4:67:46:e3:4d:97:90:ec:df:7d:66:a7: 67:d7:00:d2:11:6c:5f:a0:a9:0a:e4:0a:0d:78:b0: 0a:63:92:76:d6:d8:91:3d:91:40:bc:6a:5f:2e:23: 81:1a:cf:9a:cb:b5:df:0c:ce:fd:f3:af:39:e7:ee: 52:9e:62:d4:79:9f:35:ed:60:0f:8e:2b:26:f8:88: 9a:0f:01:4d:af:d8:3a:56:f9:cd:06:b7:cc:9e:6a: 98:88:ea:97:2f:b6:a6:93:08:65:3b:37:1b:4b:2d: 96:fd:c0:be:4f:16:53:15:13:0f:a7:02:20:e4:38: 8c:1a:ea:9c:6d:e6:cb:0d:76:01:82:25:21:a4:56: 86:95:7b:b6:68:e1:16:25:9e:ff:a1:91:41:b4:34: 73:0c:5f:90:83:92:55:bc:aa:15:0b:bf:d7:c3:03: 34:0e:25:01:1c:70:e1:df:6b:5b:95:a3:8a:e8:51: 92:b6:84:17:2e:af:a6:a0:ad:16:48:30:75:5b:f0: 6e:48:d6:a7:09:d7:31:1a:7c:3b:79:ac:de:28:3c: f0:21:e4:7d:f2:ed:c9:84:3d:bd:04:55:ba:e3:ea: a9:ba:b8:d3:19:c2:c7:27:e7:11:98:3c:84:bf:b0: de:dd:d3:cc:54:ee:3c:49:4c:60:99:41:d0:f6:8e: d1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FD:B0:86:6A:D0:B5:94:5A:A7:8F:5B:EB:11:47:83:3D:A4:12:FD X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Fv2whmrQtZRap49b6xFHgz2kEv0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.53.0/24 Signature Algorithm: sha256WithRSAEncryption 34:06:66:ac:34:af:42:eb:30:2e:ec:6f:db:e5:b8:fa:98:99: 8d:67:5e:88:8e:8d:b6:de:a0:e1:d4:b4:32:03:38:ed:79:9e: d8:2f:29:05:07:22:b9:c0:89:7c:08:91:d3:82:66:05:a7:1f: e7:1b:b8:d3:d5:7d:d3:a1:51:99:f7:ce:d6:1b:70:bd:0d:1f: 9e:36:68:8d:fd:b7:43:78:d3:f2:d3:3a:c3:7e:de:98:a7:15: e9:a8:a1:c4:ef:89:21:10:69:50:24:7c:2c:f7:e1:c4:4c:4f: 39:b2:c9:9e:28:e0:71:90:e3:06:ab:ea:4c:5c:81:2f:70:e2: 39:40:c6:ee:07:7c:1f:e7:d8:dc:53:b3:97:4b:fc:8c:d6:2f: 0c:aa:67:9b:93:2e:a2:b4:89:6b:92:2b:7f:70:9d:d0:43:73: 84:32:bc:33:31:38:6b:57:d4:1e:38:2b:33:0e:bc:ba:84:db: cc:f3:50:7f:cb:8c:4b:a3:88:b0:a0:d9:39:73:06:ea:fe:69: 64:f8:2a:de:b3:76:f7:d4:44:43:04:5b:fe:ec:11:ed:08:dc: 9c:a6:f5:fd:cf:85:e7:10:a7:c5:17:ad:a4:e0:bd:dc:de:93: df:a6:3e:23:0d:16:f2:1a:97:a8:bf:33:38:fd:04:62:d5:96: ce:01:b1:05 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEeswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE2RkRCMDg2NkFEMEI1 OTQ1QUE3OEY1QkVCMTE0NzgzM0RBNDEyRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpWdRnRuNNl5Ds331mp2fXANIRbF+gqQrkCg14sApjknbW2JE9 kUC8al8uI4Eaz5rLtd8Mzv3zrznn7lKeYtR5nzXtYA+OKyb4iJoPAU2v2DpW+c0G t8yeapiI6pcvtqaTCGU7NxtLLZb9wL5PFlMVEw+nAiDkOIwa6pxt5ssNdgGCJSGk VoaVe7Zo4RYlnv+hkUG0NHMMX5CDklW8qhULv9fDAzQOJQEccOHfa1uVo4roUZK2 hBcur6agrRZIMHVb8G5I1qcJ1zEafDt5rN4oPPAh5H3y7cmEPb0EVbrj6qm6uNMZ wscn5xGYPIS/sN7d08xU7jxJTGCZQdD2jtF5AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUFv2whmrQtZRap49b6xFHgz2kEv0wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvRnYyd2htclF0WlJhcDQ5 YjZ4RkhnejJrRXYwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AMtNNTANBgkqhkiG9w0BAQsFAAOCAQEANAZmrDSvQuswLuxv2+W4+piZjWdeiI6N tt6g4dS0MgM47Xme2C8pBQciucCJfAiR04JmBacf5xu409V906FRmffO1htwvQ0f njZojf23Q3jT8tM6w37emKcV6aihxO+JIRBpUCR8LPfhxExPObLJnijgcZDjBqvq TFyBL3DiOUDG7gd8H+fY3FOzl0v8jNYvDKpnm5MuorSJa5Irf3Cd0ENzhDK8MzE4 a1fUHjgrMw68uoTbzPNQf8uMS6OIsKDZOXMG6v5pZPgq3rN299REQwRb/uwR7Qjc nKb1/c+F5xCnxRetpOC93N6T36Y+Iw0W8hqXqL8zOP0EYtWWzgGxBQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org