$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GOFrp5ConygKTqqvgnPUA85bl4A.roa File: GOFrp5ConygKTqqvgnPUA85bl4A.roa (raw, json) Hash identifier: NKu5gQ1MRdQqFDEJYOYq1ZLDv/Oj6DHZa0wwrXPdGnU= Subject key identifier: 18:E1:6B:A7:90:A8:9F:28:0A:4E:AA:AF:82:73:D4:03:CE:5B:97:80 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1206 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GOFrp5ConygKTqqvgnPUA85bl4A.roa Signing time: Mon 26 Aug 2024 05:24:37 +0000 ROA not before: Mon 26 Aug 2024 05:24:37 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 210.17.51.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4614 (0x1206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:37 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=18E16BA790A89F280A4EAAAF8273D403CE5B9780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4e:05:82:ea:b3:7f:f7:76:3b:f8:57:46:f4: 23:dd:61:9b:de:a5:13:ae:54:6c:20:04:f6:7d:61: 17:32:f4:01:b7:4f:c6:98:db:b8:cc:f3:de:68:05: 84:59:b2:20:7d:ea:45:29:c0:a5:e0:41:d3:29:dd: ef:f4:4b:78:7a:24:6b:c0:c9:12:3b:60:35:dd:39: c4:ed:12:23:7d:60:91:6a:f7:2a:48:76:63:12:02: 87:11:81:9b:ae:fc:04:2b:8a:4e:42:b0:fc:46:c5: 4e:2c:0e:7f:c0:bb:52:a4:ec:13:2e:98:8e:dd:67: fb:58:63:25:89:fc:b5:d2:b9:fa:bb:3f:e5:32:94: e9:68:e7:47:42:84:15:9a:4f:67:9f:93:25:e8:f8: 08:4d:81:23:a0:e7:aa:f2:2b:15:57:da:eb:8a:ed: 50:01:36:58:cd:ee:40:b9:a5:95:fe:53:b5:ce:d9: 79:30:88:af:15:04:de:20:9b:a4:e4:48:cb:d9:e8: 77:35:90:2e:d8:5f:15:80:f5:4b:c0:ee:0b:8e:7d: 70:a0:d9:b6:97:49:bf:01:cf:75:a0:76:df:2d:d4: 9f:85:33:bb:f8:32:ce:ea:b8:af:0f:81:37:46:4b: 45:c1:5c:33:6b:c1:1b:7f:1e:6e:21:c8:59:ff:f3: 6b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E1:6B:A7:90:A8:9F:28:0A:4E:AA:AF:82:73:D4:03:CE:5B:97:80 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GOFrp5ConygKTqqvgnPUA85bl4A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.51.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:d6:43:15:fc:cc:75:3f:91:64:ef:f6:1f:0e:e7:70:dc:21: c0:98:54:3d:4e:48:80:fa:84:53:21:5e:1e:08:c3:c5:91:84: 09:52:59:4a:0f:f9:23:e1:d7:a0:9d:31:55:3f:fa:f1:47:34: cb:bb:75:97:ad:68:ca:ed:6d:d5:90:ac:99:99:cf:a8:41:9e: a4:29:84:df:d5:6f:1d:24:98:1e:33:79:10:23:c3:dd:4c:cc: e3:29:55:59:43:ca:14:a0:51:b0:39:42:56:c5:40:8c:38:30: 78:4a:85:a3:40:b1:02:a6:05:d5:f3:cb:76:3c:de:eb:ba:11: 21:9a:e2:8f:07:eb:60:71:56:5c:57:c7:20:98:97:0b:6f:9b: 0a:8b:e4:59:37:b5:75:5f:8b:25:3d:64:4f:d1:91:8e:7d:a7: f9:a0:10:8c:d5:f4:cd:fd:58:bc:23:e0:73:4d:0e:69:52:df: d1:41:eb:bb:7c:35:a2:b6:ea:32:f5:ad:8a:3a:ea:9c:33:19: 1e:e0:ec:2c:28:74:7a:84:34:c2:65:8b:96:51:cb:30:42:58: 34:b3:02:c1:53:7c:2f:5f:c3:76:dc:25:27:a2:10:4c:a6:87: 7c:76:07:a9:0c:6e:a6:5e:44:77:26:5b:f1:c7:8e:24:18:8e: fa:34:d5:20 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEgYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE4RTE2QkE3OTBBODlG MjgwQTRFQUFBRjgyNzNENDAzQ0U1Qjk3ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDETgWC6rN/93Y7+FdG9CPdYZvepROuVGwgBPZ9YRcy9AG3T8aY 27jM895oBYRZsiB96kUpwKXgQdMp3e/0S3h6JGvAyRI7YDXdOcTtEiN9YJFq9ypI dmMSAocRgZuu/AQrik5CsPxGxU4sDn/Au1Kk7BMumI7dZ/tYYyWJ/LXSufq7P+Uy lOlo50dChBWaT2efkyXo+AhNgSOg56ryKxVX2uuK7VABNljN7kC5pZX+U7XO2Xkw iK8VBN4gm6TkSMvZ6Hc1kC7YXxWA9UvA7guOfXCg2baXSb8Bz3Wgdt8t1J+FM7v4 Ms7quK8PgTdGS0XBXDNrwRt/Hm4hyFn/82vJAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUGOFrp5ConygKTqqvgnPUA85bl4AwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvR09GcnA1Q29ueWdLVHFx dmduUFVBODVibDRBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIRMzANBgkqhkiG9w0BAQsFAAOCAQEAjtZDFfzMdT+RZO/2Hw7ncNwhwJhUPU5I gPqEUyFeHgjDxZGECVJZSg/5I+HXoJ0xVT/68Uc0y7t1l61oyu1t1ZCsmZnPqEGe pCmE39VvHSSYHjN5ECPD3UzM4ylVWUPKFKBRsDlCVsVAjDgweEqFo0CxAqYF1fPL djze67oRIZrijwfrYHFWXFfHIJiXC2+bCovkWTe1dV+LJT1kT9GRjn2n+aAQjNX0 zf1YvCPgc00OaVLf0UHru3w1orbqMvWtijrqnDMZHuDsLCh0eoQ0wmWLllHLMEJY NLMCwVN8L1/DdtwlJ6IQTKaHfHYHqQxupl5EdyZb8ceOJBiO+jTVIA== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org