$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HdzrZhc6PteEuuy3HMHe2Syb0eY.roa File: HdzrZhc6PteEuuy3HMHe2Syb0eY.roa (raw, json) Hash identifier: ZUYw8SjKkY0vSV6IMYjxY1EI7iAY5Tbmi4mLm8EyWPI= Subject key identifier: 1D:DC:EB:66:17:3A:3E:D7:84:BA:EC:B7:1C:C1:DE:D9:2C:9B:D1:E6 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11E3 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HdzrZhc6PteEuuy3HMHe2Syb0eY.roa Signing time: Mon 26 Aug 2024 05:24:29 +0000 ROA not before: Mon 26 Aug 2024 05:24:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131634 IP address blocks: 124.108.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4579 (0x11e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=1DDCEB66173A3ED784BAECB71CC1DED92C9BD1E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b1:df:60:e1:97:06:45:05:2d:80:b4:45:21: 68:3f:e9:c0:68:53:c0:22:3c:e9:28:ba:86:df:35: 0e:6a:7d:d7:c6:22:65:96:4e:c7:13:6e:4a:91:de: 16:6c:f2:a1:0d:89:ce:6b:c6:17:b5:a9:47:cb:b7: a5:47:a4:78:13:dc:2a:a9:75:50:66:7f:26:48:01: 9a:7c:a5:d0:f9:ff:49:71:4f:88:ca:87:98:80:e4: 6e:41:17:d9:18:03:37:c4:34:7c:7d:30:fa:e8:fa: 30:b2:1b:42:9d:05:20:85:22:31:62:96:b0:cf:e0: 1a:80:03:55:8f:52:da:0b:8e:db:d0:e3:86:85:8a: 75:bf:83:e9:9f:4d:0a:c8:0b:d4:bd:59:3b:d7:77: ca:6c:3e:3a:5e:76:32:ae:27:ba:c1:e6:70:16:83: 7a:22:6b:d1:ff:f7:ca:2c:91:df:5a:3c:0e:64:87: a2:41:ba:78:61:34:58:e9:b4:d2:cc:67:df:b9:36: 39:15:d7:38:84:9b:14:0c:8a:e4:0d:62:16:8c:12: 33:17:df:1e:b9:7c:25:94:b7:fc:8f:7f:4a:81:cd: bd:29:32:ae:d2:47:09:6c:38:d5:70:a3:d5:df:8d: 32:68:eb:88:fb:e7:e4:63:e4:f7:47:1f:3a:d4:6a: f2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DC:EB:66:17:3A:3E:D7:84:BA:EC:B7:1C:C1:DE:D9:2C:9B:D1:E6 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HdzrZhc6PteEuuy3HMHe2Syb0eY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.108.149.0/24 Signature Algorithm: sha256WithRSAEncryption 34:1a:d8:13:ac:66:77:80:2d:ac:1d:24:6b:42:cd:c1:6d:3c: 7e:2b:20:26:cf:f3:0c:ec:da:fa:86:22:c6:c2:b7:ad:e2:23: ab:fb:02:12:62:2c:d7:89:f5:b4:68:94:07:b3:f9:94:ec:1c: 7b:f2:4d:2f:e1:8d:d2:31:28:fb:a8:e4:09:3e:17:7e:d8:1b: 0f:a0:69:cf:7e:02:9a:b5:1e:c5:dd:a5:9f:2f:a0:19:91:84: a5:35:03:d5:25:ab:20:9c:15:a5:f8:75:98:21:14:de:eb:ef: 08:c8:36:6b:ff:32:71:6c:5d:2f:da:04:39:a3:03:ed:d3:0d: 60:45:2a:11:39:f0:e2:f6:3b:ad:cc:c4:ce:60:89:43:c2:95: d7:88:bd:e3:28:e0:ab:e3:b4:27:ed:06:d1:dc:c2:bf:52:d9: 1b:b0:f0:0f:15:6a:7c:63:68:e3:4e:89:5d:90:07:dd:7d:a4: 5b:62:28:9d:31:e4:7e:8f:dd:f1:8a:4d:f8:6c:cb:15:51:bd: 88:63:fb:a1:7b:99:2e:3a:92:39:47:13:9f:36:68:ef:7b:ea: bd:6e:ff:e6:71:7f:f6:0f:7f:bc:7e:b9:39:c3:f9:18:b7:9a: e4:bc:5f:bb:a0:83:51:21:d3:1c:f3:6a:2f:92:19:69:8b:64: 6d:2e:35:46 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFERENFQjY2MTczQTNF RDc4NEJBRUNCNzFDQzFERUQ5MkM5QkQxRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCysd9g4ZcGRQUtgLRFIWg/6cBoU8AiPOkouobfNQ5qfdfGImWW TscTbkqR3hZs8qENic5rxhe1qUfLt6VHpHgT3CqpdVBmfyZIAZp8pdD5/0lxT4jK h5iA5G5BF9kYAzfENHx9MPro+jCyG0KdBSCFIjFilrDP4BqAA1WPUtoLjtvQ44aF inW/g+mfTQrIC9S9WTvXd8psPjpedjKuJ7rB5nAWg3oia9H/98oskd9aPA5kh6JB unhhNFjptNLMZ9+5NjkV1ziEmxQMiuQNYhaMEjMX3x65fCWUt/yPf0qBzb0pMq7S RwlsONVwo9XfjTJo64j75+Rj5PdHHzrUavIPAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUHdzrZhc6PteEuuy3HMHe2Syb0eYwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvSGR6clpoYzZQdGVFdXV5 M0hNSGUyU3liMGVZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AHxslTANBgkqhkiG9w0BAQsFAAOCAQEANBrYE6xmd4AtrB0ka0LNwW08fisgJs/z DOza+oYixsK3reIjq/sCEmIs14n1tGiUB7P5lOwce/JNL+GN0jEo+6jkCT4Xftgb D6Bpz34CmrUexd2lny+gGZGEpTUD1SWrIJwVpfh1mCEU3uvvCMg2a/8ycWxdL9oE OaMD7dMNYEUqETnw4vY7rczEzmCJQ8KV14i94yjgq+O0J+0G0dzCv1LZG7DwDxVq fGNo406JXZAH3X2kW2IonTHkfo/d8YpN+GzLFVG9iGP7oXuZLjqSOUcTnzZo73vq vW7/5nF/9g9/vH65OcP5GLea5Lxfu6CDUSHTHPNqL5IZaYtkbS41Rg== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:12 2024 by rpki-client on console-ams.rpki-client.org