$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KGFI7R1JDXQgr0piA4Qvve6yDRo.roa File: KGFI7R1JDXQgr0piA4Qvve6yDRo.roa (raw, json) Hash identifier: HtYqNQUsZ9cKVqOMXnJW8Q6R75bKZE/Ca3wD4guyO0E= Subject key identifier: 28:61:48:ED:1D:49:0D:74:20:AF:4A:62:03:84:2F:BD:EE:B2:0D:1A Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1004 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KGFI7R1JDXQgr0piA4Qvve6yDRo.roa Signing time: Fri 01 Sep 2023 09:37:37 +0000 ROA not before: Fri 01 Sep 2023 09:37:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24158 IP address blocks: 49.216.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4100 (0x1004) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=286148ED1D490D7420AF4A6203842FBDEEB20D1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:90:6f:29:32:2f:5e:16:70:7d:3f:58:b6: 99:e1:2c:9d:c5:80:5d:c2:0a:17:b9:a6:fb:e7:76: ba:cf:c9:c2:f9:e4:8d:14:1a:e3:ac:85:38:92:f6: 5d:47:f7:2a:34:d2:d1:94:f4:72:59:0f:e1:e1:02: f7:5d:33:89:77:ae:8b:cc:05:c0:ff:36:6d:e0:e0: 30:9a:06:f2:56:dd:71:31:f7:87:b8:ae:9f:5d:65: dc:0a:23:3e:82:93:84:b8:70:5c:ad:eb:82:1e:bd: cc:bc:51:3b:15:5f:3b:67:66:df:73:e4:94:14:a3: bd:fc:a2:95:16:9d:d3:f5:5f:7f:23:a5:ec:8b:9b: 0e:2f:b0:2c:ce:99:54:bd:d5:03:ab:dd:d1:c3:62: fa:ef:a6:7d:27:75:45:f2:6c:07:f7:cb:a4:3e:4b: 00:6c:e5:26:33:13:92:67:da:58:af:f9:9e:1d:75: 05:56:1f:66:79:5a:59:fc:74:e6:78:20:a3:18:e5: ba:7e:f5:4d:b5:8a:85:e3:bd:e8:44:9c:10:62:e3: 3e:ff:98:80:58:9b:96:32:8c:f8:82:cc:59:c3:6b: 7b:54:e3:60:94:19:b8:97:06:56:7c:aa:5f:74:2c: 7f:da:2a:64:bf:77:58:00:59:da:a3:f1:ad:70:16: a8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:61:48:ED:1D:49:0D:74:20:AF:4A:62:03:84:2F:BD:EE:B2:0D:1A X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KGFI7R1JDXQgr0piA4Qvve6yDRo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.216.0.0/14 Signature Algorithm: sha256WithRSAEncryption 74:b2:a2:3f:39:24:e1:91:5b:85:da:4e:ac:4a:5b:07:49:de: b5:a3:70:a7:b9:6f:00:be:ba:66:c7:1e:97:16:86:57:b3:18: 5b:6e:d9:c5:bc:ac:b2:e9:b0:b2:4e:10:9e:45:ec:12:5d:01: bc:d6:b0:dd:b9:3e:ae:da:2a:7e:09:54:d2:af:13:02:d0:d3: 7d:95:60:d3:c8:7b:95:9f:82:ef:75:f2:43:dd:9b:85:fb:d0: 12:26:36:b8:5e:a4:78:f5:fc:33:c3:de:10:6d:b2:07:5c:2b: ea:dc:07:87:c8:a2:47:1a:fe:ee:7e:3e:49:83:0a:14:ec:f5: cf:ac:7f:70:13:2f:f2:74:96:f3:0c:19:4f:a9:61:c2:26:47: 6b:5b:db:1c:20:a8:25:f9:03:47:8a:db:f1:c1:67:f7:b9:83: 94:f8:17:4a:19:0d:f9:6e:08:a7:16:49:9e:0c:17:fb:9e:0c: b0:e1:64:8a:46:ad:5f:87:7d:28:32:6f:d5:86:6e:f0:75:b9: 32:70:b3:4b:5b:86:94:97:c4:3a:58:b4:19:ad:9a:f9:8f:2c: a0:99:47:e3:b1:59:f3:10:1b:b5:fe:84:49:6b:96:b1:e9:e4: 65:11:5f:a5:77:e3:9f:3e:31:1b:62:3a:d2:5a:c1:de:ce:6c: dd:4c:36:db -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEAQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI4NjE0OEVEMUQ0OTBE NzQyMEFGNEE2MjAzODQyRkJERUVCMjBEMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJSJBvKTIvXhZwfT9YtpnhLJ3FgF3CChe5pvvndrrPycL55I0U GuOshTiS9l1H9yo00tGU9HJZD+HhAvddM4l3rovMBcD/Nm3g4DCaBvJW3XEx94e4 rp9dZdwKIz6Ck4S4cFyt64Ievcy8UTsVXztnZt9z5JQUo738opUWndP1X38jpeyL mw4vsCzOmVS91QOr3dHDYvrvpn0ndUXybAf3y6Q+SwBs5SYzE5Jn2liv+Z4ddQVW H2Z5Wln8dOZ4IKMY5bp+9U21ioXjvehEnBBi4z7/mIBYm5YyjPiCzFnDa3tU42CU GbiXBlZ8ql90LH/aKmS/d1gAWdqj8a1wFqipAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUKGFI7R1JDXQgr0piA4Qvve6yDRowHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvS0dGSTdSMUpEWFFncjBw aUE0UXZ2ZTZ5RFJvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AjHYMA0GCSqGSIb3DQEBCwUAA4IBAQB0sqI/OSThkVuF2k6sSlsHSd61o3CnuW8A vrpmxx6XFoZXsxhbbtnFvKyy6bCyThCeRewSXQG81rDduT6u2ip+CVTSrxMC0NN9 lWDTyHuVn4LvdfJD3ZuF+9ASJja4XqR49fwzw94QbbIHXCvq3AeHyKJHGv7ufj5J gwoU7PXPrH9wEy/ydJbzDBlPqWHCJkdrW9scIKgl+QNHitvxwWf3uYOU+BdKGQ35 bginFkmeDBf7ngyw4WSKRq1fh30oMm/Vhm7wdbkycLNLW4aUl8Q6WLQZrZr5jyyg mUfjsVnzEBu1/oRJa5ax6eRlEV+ld+OfPjEbYjrSWsHezmzdTDbb -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org