$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/M8x02d_aKgD12lQWdDnOwyLnlxA.roa File: M8x02d_aKgD12lQWdDnOwyLnlxA.roa (raw, json) Hash identifier: Efxdk25guQBKs531/O1J3At1Fw5THSt2c/KPXsBvvj0= Subject key identifier: 33:CC:74:D9:DF:DA:2A:00:F5:DA:54:16:74:39:CE:C3:22:E7:97:10 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11F8 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/M8x02d_aKgD12lQWdDnOwyLnlxA.roa Signing time: Mon 26 Aug 2024 05:24:34 +0000 ROA not before: Mon 26 Aug 2024 05:24:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 203.77.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4600 (0x11f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:34 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=33CC74D9DFDA2A00F5DA54167439CEC322E79710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:32:06:05:e6:23:3e:6d:e5:83:ea:4e:dd: 7f:8d:a8:7a:08:d4:a2:01:9d:97:f0:5d:0a:00:8b: b9:f8:e7:d6:dd:91:56:f8:14:e7:7b:ce:a9:98:41: 40:78:72:20:af:ab:13:fa:e4:29:08:45:bd:e3:82: 6e:ba:38:f0:6a:67:47:70:0f:da:95:87:31:cf:e4: aa:a9:85:e5:85:0f:92:05:53:9e:f9:f6:c4:15:ad: 1e:a5:56:fa:43:95:92:e3:16:76:3a:00:5d:d9:f2: 2a:e6:8c:39:92:c9:4f:2b:0d:60:62:7a:60:48:67: 17:94:23:a1:ee:3e:70:90:84:43:8f:4c:04:10:0b: c2:23:63:9e:86:27:95:61:02:f7:5f:41:1d:3a:e8: 89:da:bd:80:00:c6:b5:be:ff:e1:ee:d1:d1:7f:43: e7:94:e0:fe:99:d4:00:8a:49:03:75:35:df:f0:ac: 5b:b4:f4:ca:da:bf:ba:d2:75:52:6f:ca:4a:9f:bc: 27:dc:47:83:a7:7a:cd:3a:40:ad:58:49:1a:7d:cb: ca:31:31:11:3f:16:ee:d9:18:6d:1e:a3:14:eb:54: 87:3c:4e:e4:1c:4c:18:71:ec:e0:cb:97:59:39:65: 08:38:bc:29:89:25:e1:3f:ec:42:36:85:bd:9a:ee: d2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CC:74:D9:DF:DA:2A:00:F5:DA:54:16:74:39:CE:C3:22:E7:97:10 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/M8x02d_aKgD12lQWdDnOwyLnlxA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.38.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:b9:86:64:13:8a:12:48:51:60:b3:0d:79:f8:a4:08:87:63: 01:db:ce:eb:38:0b:97:70:92:ef:85:05:5e:ea:40:b7:35:fd: 64:d7:a6:57:85:bb:d6:cc:b8:51:e4:4d:fc:f1:89:78:a3:57: 38:75:a1:4b:3d:69:e9:f6:f3:f0:f5:27:6e:19:13:e3:71:08: 72:f3:44:a9:97:8d:71:87:32:70:b5:25:4e:62:e2:f4:2c:ba: 18:f9:00:60:ec:af:4a:c5:74:53:4f:b8:00:8e:e9:b0:22:3e: 6e:b4:ee:b9:18:db:2b:d7:e6:8e:89:d5:25:e5:74:05:5c:26: 5e:cb:ce:f0:a8:6a:83:b3:9f:34:ff:ba:3a:ea:1c:70:1a:3b: 06:ee:73:b2:11:5e:02:a5:62:23:f0:a4:a2:68:a8:51:9e:82: 52:33:b6:66:85:e0:ac:73:99:61:30:23:1d:88:41:25:25:d0: 8b:3f:14:0d:f7:7f:5c:5e:8b:09:d5:71:e0:82:af:73:d6:41: f0:15:8b:c2:ea:ef:e2:3b:30:3f:eb:5a:57:6e:1e:98:7a:fb: a6:34:44:50:4f:3a:33:ac:30:8c:a1:bc:47:f8:41:6a:48:da: a3:fa:15:dc:4f:29:1f:87:11:9d:fa:51:c3:a1:a6:90:85:87: 65:76:67:b9 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMzQ0M3NEQ5REZEQTJB MDBGNURBNTQxNjc0MzlDRUMzMjJFNzk3MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkgTIGBeYjPm3lg+pO3X+NqHoI1KIBnZfwXQoAi7n459bdkVb4 FOd7zqmYQUB4ciCvqxP65CkIRb3jgm66OPBqZ0dwD9qVhzHP5KqpheWFD5IFU575 9sQVrR6lVvpDlZLjFnY6AF3Z8irmjDmSyU8rDWBiemBIZxeUI6HuPnCQhEOPTAQQ C8IjY56GJ5VhAvdfQR066InavYAAxrW+/+Hu0dF/Q+eU4P6Z1ACKSQN1Nd/wrFu0 9Mrav7rSdVJvykqfvCfcR4Ones06QK1YSRp9y8oxMRE/Fu7ZGG0eoxTrVIc8TuQc TBhx7ODLl1k5ZQg4vCmJJeE/7EI2hb2a7tLLAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUM8x02d/aKgD12lQWdDnOwyLnlxAwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTTh4MDJkX2FLZ0QxMmxR V2REbk93eUxubHhBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ActNJjANBgkqhkiG9w0BAQsFAAOCAQEAC7mGZBOKEkhRYLMNefikCIdjAdvO6zgL l3CS74UFXupAtzX9ZNemV4W71sy4UeRN/PGJeKNXOHWhSz1p6fbz8PUnbhkT43EI cvNEqZeNcYcycLUlTmLi9Cy6GPkAYOyvSsV0U0+4AI7psCI+brTuuRjbK9fmjonV JeV0BVwmXsvO8Khqg7OfNP+6OuoccBo7Bu5zshFeAqViI/CkomioUZ6CUjO2ZoXg rHOZYTAjHYhBJSXQiz8UDfd/XF6LCdVx4IKvc9ZB8BWLwurv4jswP+taV24emHr7 pjREUE86M6wwjKG8R/hBakjao/oV3E8pH4cRnfpRw6GmkIWHZXZnuQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org