$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7C1uaSL2L71EI1GdJVqcwebpXI.roa File: I7C1uaSL2L71EI1GdJVqcwebpXI.roa (raw, json) Hash identifier: BKLKCp2ZtlwNa6taFKDAUKwnsk7iIrgihYZdWd0WiVk= Subject key identifier: 23:B0:B5:B9:A4:8B:D8:BE:F5:10:8D:46:74:95:6A:73:07:9B:A5:72 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1209 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7C1uaSL2L71EI1GdJVqcwebpXI.roa Signing time: Mon 26 Aug 2024 05:24:38 +0000 ROA not before: Mon 26 Aug 2024 05:24:38 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 175.99.72.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4617 (0x1209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:38 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=23B0B5B9A48BD8BEF5108D4674956A73079BA572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6c:af:34:21:3b:4c:8e:f5:39:e7:4b:07:20: 99:69:e0:b1:33:3c:4f:6f:97:5a:16:5c:1c:99:86: 13:81:84:3d:5c:0b:5b:0c:29:5a:9a:cc:63:26:cb: 29:40:b0:06:c5:55:22:2d:7d:a1:21:4f:90:ef:57: 0e:94:d9:50:a2:be:4e:6e:3a:a4:10:00:6a:61:ee: 4f:8b:af:fe:da:b4:c0:b5:c1:d7:26:12:49:9d:00: 61:04:87:f7:ce:b1:3a:20:3a:ed:0c:42:0f:7a:83: 48:86:f5:6f:63:66:4b:73:e0:7f:ce:bb:0d:7e:7b: c9:50:b8:10:00:9a:57:89:00:87:d4:11:08:d6:6d: 16:8e:ee:10:01:17:0a:61:fe:ac:f8:41:87:3f:7b: f8:8f:a0:48:05:81:98:6f:72:fe:c2:34:07:34:78: e4:68:c4:42:a5:08:99:03:ba:df:3f:29:d8:d0:0f: d0:c1:0e:84:36:be:23:64:49:6c:de:9d:d6:ae:9b: 14:9f:d1:33:47:f8:2a:a6:aa:70:5e:df:91:b4:7f: 9c:39:ed:df:8b:07:c9:c0:ff:8f:fc:50:a2:72:9b: b2:c7:74:bf:8f:22:9f:b1:76:42:3e:c1:3e:35:c5: 25:8c:32:30:45:8b:53:35:25:cf:e5:a7:6a:b9:9f: aa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:B0:B5:B9:A4:8B:D8:BE:F5:10:8D:46:74:95:6A:73:07:9B:A5:72 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/I7C1uaSL2L71EI1GdJVqcwebpXI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.99.72.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:5f:e0:b4:31:78:e7:be:30:aa:8b:9f:86:dc:b6:ae:16:ab: b4:c2:b1:7e:e7:1b:e6:a6:64:b4:1a:ae:8d:0b:ac:05:3b:c8: 50:fc:36:d2:0a:a7:51:fc:df:86:e3:d4:76:b5:5e:98:c6:10: 7b:b8:8e:f7:30:a2:45:0b:9a:cc:4a:a7:e1:29:2a:72:49:de: 45:48:9e:4e:77:5d:95:1d:7e:d9:85:f7:c2:a1:e6:e3:dd:9f: 02:c6:b7:82:82:75:11:ed:72:24:56:c1:7f:83:40:ce:45:ac: 17:18:0d:b5:db:f9:a5:4d:58:ff:e9:a1:e4:11:f7:f9:12:5b: 32:68:1e:85:f1:19:20:fc:29:26:ce:64:9e:71:4a:ea:0d:cd: bb:21:14:d7:99:2e:0d:cc:8c:9e:0c:69:25:0f:c7:bf:a8:a7: c1:7c:52:a9:b4:ec:70:2f:ca:db:a0:7c:bf:61:48:41:9b:4e: 72:cb:d9:1e:ed:36:cf:f0:1b:69:4c:0e:c5:0a:28:ae:6d:4b: d9:94:82:0c:2d:4b:a3:b2:7e:55:07:1a:41:c8:64:92:9a:79: cf:34:1d:d9:59:9e:74:b9:3b:cb:27:69:e4:d2:76:7b:80:aa: ef:c8:44:9c:9f:5b:3b:79:70:d7:88:06:db:04:e4:aa:73:21: 6e:71:e4:f9 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIzQjBCNUI5QTQ4QkQ4 QkVGNTEwOEQ0Njc0OTU2QTczMDc5QkE1NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtbK80ITtMjvU550sHIJlp4LEzPE9vl1oWXByZhhOBhD1cC1sM KVqazGMmyylAsAbFVSItfaEhT5DvVw6U2VCivk5uOqQQAGph7k+Lr/7atMC1wdcm EkmdAGEEh/fOsTogOu0MQg96g0iG9W9jZktz4H/Ouw1+e8lQuBAAmleJAIfUEQjW bRaO7hABFwph/qz4QYc/e/iPoEgFgZhvcv7CNAc0eORoxEKlCJkDut8/KdjQD9DB DoQ2viNkSWzendaumxSf0TNH+CqmqnBe35G0f5w57d+LB8nA/4/8UKJym7LHdL+P Ip+xdkI+wT41xSWMMjBFi1M1Jc/lp2q5n6qNAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUI7C1uaSL2L71EI1GdJVqcwebpXIwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvSTdDMXVhU0wyTDcxRUkx R2RKVnFjd2VicFhJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AK9jSDANBgkqhkiG9w0BAQsFAAOCAQEAi1/gtDF4574wqoufhty2rhartMKxfucb 5qZktBqujQusBTvIUPw20gqnUfzfhuPUdrVemMYQe7iO9zCiRQuazEqn4Skqckne RUieTnddlR1+2YX3wqHm492fAsa3goJ1Ee1yJFbBf4NAzkWsFxgNtdv5pU1Y/+mh 5BH3+RJbMmgehfEZIPwpJs5knnFK6g3NuyEU15kuDcyMngxpJQ/Hv6inwXxSqbTs cC/K26B8v2FIQZtOcsvZHu02z/AbaUwOxQoorm1L2ZSCDC1Lo7J+VQcaQchkkpp5 zzQd2VmedLk7yydp5NJ2e4Cq78hEnJ9bO3lw14gG2wTkqnMhbnHk+Q== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org