$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GT0cFjc3LEFDU1LkhvwVulqfCiU.roa File: GT0cFjc3LEFDU1LkhvwVulqfCiU.roa (raw, json) Hash identifier: BavdVmYsVfruS7MnIaDfA6wx23Ar6PNs2C57sPya6Dc= Subject key identifier: 19:3D:1C:16:37:37:2C:41:43:53:52:E4:86:FC:15:BA:5A:9F:0A:25 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11C1 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GT0cFjc3LEFDU1LkhvwVulqfCiU.roa Signing time: Mon 26 Aug 2024 05:24:20 +0000 ROA not before: Mon 26 Aug 2024 05:24:20 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 60.199.171.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4545 (0x11c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:20 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=193D1C1637372C41435352E486FC15BA5A9F0A25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:90:73:06:9e:3e:43:9d:0a:3e:82:bf:41: f6:0f:7c:6f:fd:e6:16:65:cd:de:a6:dd:1e:96:8f: 0d:bf:7f:57:7e:7a:cb:51:7d:5a:1e:9e:08:d0:d8: 17:ab:4b:55:63:62:1c:da:38:d3:21:3c:fc:98:33: 56:e2:16:b7:ee:96:11:84:7b:b4:2a:78:5b:f5:92: 4a:a8:3e:8f:ee:3f:ee:c5:4f:9c:f5:e2:13:94:dd: 5a:61:c6:36:ad:39:29:4d:d9:a7:b6:20:0b:15:ea: 0d:2a:bc:27:f5:69:30:45:cf:e0:1a:7d:14:b2:ae: 78:06:7f:a9:a9:01:76:6e:82:09:3a:09:5a:35:17: 3c:6b:8e:3e:ae:13:73:34:75:1b:eb:1e:73:d0:80: 1d:f7:0d:c7:f9:cf:80:61:06:e4:d7:17:4c:6e:50: 2c:b4:a5:d9:3c:73:4b:c3:95:ac:4e:75:1d:4d:d4: 9e:22:18:fd:60:8b:dc:fc:15:01:00:d5:cb:13:76: 41:16:6b:96:4b:11:1b:fe:6c:b2:27:44:47:61:4f: b9:df:0c:a7:77:3b:d6:fc:d7:1c:76:9d:41:82:60: e6:d3:86:e2:58:0c:36:d8:d0:26:8e:01:64:40:f2: 82:3f:5c:af:86:45:46:4e:ad:7e:23:39:1d:d6:ea: bb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3D:1C:16:37:37:2C:41:43:53:52:E4:86:FC:15:BA:5A:9F:0A:25 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GT0cFjc3LEFDU1LkhvwVulqfCiU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.199.171.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:48:2a:21:74:27:56:1b:b1:60:46:1d:d0:75:2c:f3:aa:20: f4:03:f0:ec:f1:3c:ea:ef:5f:e3:d2:e9:f6:3e:c7:a0:92:75: ac:00:86:be:4b:23:18:fc:31:fb:94:05:ad:6d:dc:e8:c4:8b: ab:c0:8b:12:e9:46:8a:db:6c:0d:6d:f6:ca:92:8b:a5:88:a7: c8:57:68:9f:3b:bd:51:0f:0d:61:2b:38:ec:92:62:b0:28:f2: 7d:b1:8e:a0:77:82:f8:d0:8b:4d:a2:82:24:0f:e1:b3:a1:f0: 4f:25:6a:c2:03:69:0d:8c:ab:01:4a:bf:91:f2:21:1b:4b:bd: 76:d5:50:ee:84:6b:3d:11:5b:36:2c:a4:7a:35:6c:4a:93:d9: ef:b9:09:a2:b1:c0:89:18:6c:9b:29:2e:dd:b1:8a:75:02:3a: 12:9c:64:ed:17:85:25:95:08:19:e9:da:d6:8e:8a:81:16:67: 4f:21:aa:27:af:d1:cb:a2:0b:04:a1:f9:3b:e3:10:dd:cb:4a: 81:96:87:3e:21:10:65:10:d7:03:57:e1:fd:bd:15:2c:db:a4: 67:d9:7c:85:79:3f:9c:bd:05:74:bc:72:22:bc:af:c0:39:cf: fe:61:76:24:c9:a7:ed:8b:6a:a1:76:6b:12:7c:bf:6b:b4:5c: 43:ee:90:14 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEcEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE5M0QxQzE2MzczNzJD NDE0MzUzNTJFNDg2RkMxNUJBNUE5RjBBMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0P5BzBp4+Q50KPoK/QfYPfG/95hZlzd6m3R6Wjw2/f1d+estR fVoengjQ2BerS1VjYhzaONMhPPyYM1biFrfulhGEe7QqeFv1kkqoPo/uP+7FT5z1 4hOU3VphxjatOSlN2ae2IAsV6g0qvCf1aTBFz+AafRSyrngGf6mpAXZuggk6CVo1 Fzxrjj6uE3M0dRvrHnPQgB33Dcf5z4BhBuTXF0xuUCy0pdk8c0vDlaxOdR1N1J4i GP1gi9z8FQEA1csTdkEWa5ZLERv+bLInREdhT7nfDKd3O9b81xx2nUGCYObThuJY DDbY0CaOAWRA8oI/XK+GRUZOrX4jOR3W6rtxAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUGT0cFjc3LEFDU1LkhvwVulqfCiUwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvR1QwY0ZqYzNMRUZEVTFM a2h2d1Z1bHFmQ2lVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ADzHqzANBgkqhkiG9w0BAQsFAAOCAQEAPUgqIXQnVhuxYEYd0HUs86og9APw7PE8 6u9f49Lp9j7HoJJ1rACGvksjGPwx+5QFrW3c6MSLq8CLEulGittsDW32ypKLpYin yFdonzu9UQ8NYSs47JJisCjyfbGOoHeC+NCLTaKCJA/hs6HwTyVqwgNpDYyrAUq/ kfIhG0u9dtVQ7oRrPRFbNiykejVsSpPZ77kJorHAiRhsmyku3bGKdQI6Epxk7ReF JZUIGena1o6KgRZnTyGqJ6/Ry6ILBKH5O+MQ3ctKgZaHPiEQZRDXA1fh/b0VLNuk Z9l8hXk/nL0FdLxyIryvwDnP/mF2JMmn7YtqoXZrEny/a7RcQ+6QFA== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org