$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MbBZLKEfn1u-dx8Ds1byo1NPib8.roa File: MbBZLKEfn1u-dx8Ds1byo1NPib8.roa (raw, json) Hash identifier: Ee3aKN8GAogt+u9LZ0UiPEZZ3m1nuRqJT9x5rm/tRlU= Subject key identifier: 31:B0:59:2C:A1:1F:9F:5B:BE:77:1F:03:B3:56:F2:A3:53:4F:89:BF Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0F8B Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MbBZLKEfn1u-dx8Ds1byo1NPib8.roa Signing time: Fri 01 Sep 2023 09:37:00 +0000 ROA not before: Fri 01 Sep 2023 09:37:00 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 219.80.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3979 (0xf8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:00 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=31B0592CA11F9F5BBE771F03B356F2A3534F89BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:45:95:e0:04:86:ab:ac:16:89:39:1a:ac:ea: 0a:5b:d3:d7:64:c0:b2:43:eb:29:0c:b9:5b:d4:bf: 00:8c:9e:a5:6d:06:6d:de:7c:8f:92:36:b3:c1:55: a6:8d:79:95:6c:10:63:e8:32:b2:6b:07:8f:bb:ad: ad:bb:10:4e:e4:2f:94:72:82:7d:a2:c3:77:6b:36: 36:99:3a:eb:a7:9d:71:a1:06:3e:77:22:74:10:21: 9a:99:30:72:15:93:81:11:87:9a:a7:00:9b:c2:06: 96:55:7b:4b:64:ac:3b:8b:b9:57:a3:12:33:fc:f4: 77:13:b3:77:a8:4a:e2:aa:8f:9c:c3:33:f6:1b:df: 81:0b:da:cb:4d:b6:f2:a7:ea:3e:1d:d5:26:41:28: be:3f:ec:ef:96:e8:ab:bb:af:64:69:4e:7e:ea:01: 6d:c9:b0:f3:5d:fb:ef:69:b8:90:da:46:17:15:90: 25:6a:96:e9:9a:cd:74:72:35:a1:01:a2:2e:5a:2c: 1d:33:6a:96:8f:d3:68:a2:58:a0:5a:15:ac:ea:a7: ac:4c:f5:90:0d:3d:4d:18:92:75:4b:7c:b5:d2:26: 66:f6:83:c6:89:0a:86:65:54:0e:65:c5:ec:90:5f: 49:3c:df:bb:00:58:7f:8a:ad:73:d1:c0:31:e5:cd: 5a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B0:59:2C:A1:1F:9F:5B:BE:77:1F:03:B3:56:F2:A3:53:4F:89:BF X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MbBZLKEfn1u-dx8Ds1byo1NPib8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.80.0.0/16 Signature Algorithm: sha256WithRSAEncryption 51:81:86:75:aa:44:3c:c9:9c:a1:a0:0b:5d:61:cb:1e:62:e5: 43:62:1d:82:5b:d3:91:c7:70:c5:24:c7:fb:dc:b4:43:45:c1: e3:44:3e:31:f3:de:e5:95:c4:9e:33:43:33:b1:cd:db:53:64: 83:ec:5f:aa:21:d7:ff:10:66:10:08:e2:11:b4:40:5b:24:c4: 69:d0:fd:86:7a:2c:a2:63:9c:a4:52:30:cc:fa:de:6e:87:a9: 1e:5f:6d:bb:9f:7d:96:69:9f:99:86:e1:f9:9e:89:d6:cd:a4: 50:8d:a7:24:83:59:1b:64:61:0b:15:b8:00:fc:9d:91:4c:82: 6d:4b:f7:2f:97:30:de:e1:7f:51:cc:3b:1e:3d:f3:22:02:2f: 5b:2f:61:42:f2:b0:ef:9c:c6:56:fb:81:70:4f:d4:12:2c:0d: 69:00:b9:09:ab:b8:19:6f:3c:c6:d9:ab:1f:58:cc:d6:69:c9: 25:af:6d:e6:62:28:77:37:e7:d8:1d:aa:e6:05:28:4b:a6:44: 71:5f:b1:28:da:e8:02:3f:db:61:33:fa:71:c9:1c:23:b1:26: 24:47:33:9b:8f:b2:33:ef:82:fd:d5:3c:dc:8c:2c:6e:75:09: 9e:03:1c:27:1e:50:15:da:09:56:c2:c2:a6:7a:85:12:ac:34: 74:fd:fa:9c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICD4swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMxQjA1OTJDQTExRjlG NUJCRTc3MUYwM0IzNTZGMkEzNTM0Rjg5QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChRZXgBIarrBaJORqs6gpb09dkwLJD6ykMuVvUvwCMnqVtBm3e fI+SNrPBVaaNeZVsEGPoMrJrB4+7ra27EE7kL5Rygn2iw3drNjaZOuunnXGhBj53 InQQIZqZMHIVk4ERh5qnAJvCBpZVe0tkrDuLuVejEjP89HcTs3eoSuKqj5zDM/Yb 34EL2stNtvKn6j4d1SZBKL4/7O+W6Ku7r2RpTn7qAW3JsPNd++9puJDaRhcVkCVq lumazXRyNaEBoi5aLB0zapaP02iiWKBaFazqp6xM9ZANPU0YknVLfLXSJmb2g8aJ CoZlVA5lxeyQX0k837sAWH+KrXPRwDHlzVqHAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUMbBZLKEfn1u+dx8Ds1byo1NPib8wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTWJCWkxLRWZuMXUtZHg4 RHMxYnlvMU5QaWI4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD ANtQMA0GCSqGSIb3DQEBCwUAA4IBAQBRgYZ1qkQ8yZyhoAtdYcseYuVDYh2CW9OR x3DFJMf73LRDRcHjRD4x897llcSeM0Mzsc3bU2SD7F+qIdf/EGYQCOIRtEBbJMRp 0P2GeiyiY5ykUjDM+t5uh6keX227n32WaZ+ZhuH5nonWzaRQjackg1kbZGELFbgA /J2RTIJtS/cvlzDe4X9RzDsePfMiAi9bL2FC8rDvnMZW+4FwT9QSLA1pALkJq7gZ bzzG2asfWMzWacklr23mYih3N+fYHarmBShLpkRxX7Eo2ugCP9thM/pxyRwjsSYk RzObj7Iz74L91TzcjCxudQmeAxwnHlAV2glWwsKmeoUSrDR0/fqc -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:02 2024 by rpki-client on console-fra.rpki-client.org