$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/OyjCcm7SKQmxUdj1-lKjmayhz44.roa File: OyjCcm7SKQmxUdj1-lKjmayhz44.roa (raw, json) Hash identifier: U81BvuI2DyZ550cCRAVUj9EAoTMzzFkzMzSvZH4cMAs= Subject key identifier: 3B:28:C2:72:6E:D2:29:09:B1:51:D8:F5:FA:52:A3:99:AC:A1:CF:8E Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11CE Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/OyjCcm7SKQmxUdj1-lKjmayhz44.roa Signing time: Mon 26 Aug 2024 05:24:24 +0000 ROA not before: Mon 26 Aug 2024 05:24:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 203.77.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4558 (0x11ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:24 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3B28C2726ED22909B151D8F5FA52A399ACA1CF8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7a:2b:28:a9:ee:34:47:f3:3b:cd:bb:82:5f: 02:bc:33:3f:09:1b:f4:b9:88:13:b7:0f:81:57:09: 7d:56:a1:f6:52:75:26:bb:e6:53:32:a0:e3:de:46: 85:9d:a2:f3:a6:59:3e:60:33:f3:f0:a4:1f:1e:98: 11:56:77:2f:81:a5:a8:4f:9c:61:1c:b3:ef:d0:98: c6:48:ef:3c:3f:cc:06:23:c2:33:30:14:62:d9:24: c1:f4:1a:a4:c7:f2:bc:db:53:62:c9:34:9c:c9:08: ba:95:96:ae:e6:65:4b:41:c1:df:58:80:99:cc:a2: 6d:6b:ab:37:2b:06:a5:95:47:62:e9:56:08:ef:65: 08:54:ee:0d:57:90:a2:f3:2e:d4:c5:da:f7:0b:e5: 5c:d4:5d:2b:7c:54:8f:d5:72:59:0f:3e:24:9b:16: 9e:fd:e6:23:13:90:c5:e3:c6:b7:19:55:d5:c3:50: 89:07:0e:0a:2c:c9:27:16:e8:e1:ca:ee:03:af:dc: bf:66:0b:e0:59:66:e2:d7:9f:79:8c:7a:e7:38:b2: 38:93:15:67:40:9f:de:31:4c:09:a9:c2:69:7e:85: 89:2c:29:7a:c9:60:08:ef:b7:72:90:17:50:6a:c2: 76:50:9c:e2:b7:64:d1:0c:dc:db:11:b2:51:8a:2f: 4a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:28:C2:72:6E:D2:29:09:B1:51:D8:F5:FA:52:A3:99:AC:A1:CF:8E X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/OyjCcm7SKQmxUdj1-lKjmayhz44.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.56.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:4a:29:7a:bc:e2:2e:a2:46:1c:2d:1b:eb:c5:ab:f6:0b:22: b7:df:46:93:71:f2:dc:da:fe:fb:47:54:13:ca:40:bc:cf:33: 75:e6:b3:5e:57:36:02:1e:65:45:e3:cd:2f:34:57:7e:7a:d3: cc:d5:29:73:a0:d1:ec:24:78:9a:34:49:f0:9f:d0:4b:03:2d: 59:b9:bc:7a:b8:fd:0d:21:d9:e5:16:f8:53:43:b9:17:9f:27: 4c:0c:35:06:ed:22:16:b0:87:b4:7f:46:fb:cc:d3:c7:b2:c2: ff:62:a3:c5:33:e7:05:c5:2c:11:ec:ab:c9:7e:cc:34:0f:36: a7:01:4f:eb:3b:68:e3:91:02:49:3c:cd:ff:67:8e:f3:50:7b: 45:e1:ad:ba:5c:cb:ad:12:04:76:41:0e:01:8b:6e:cf:a8:e9: 4a:37:f7:41:37:94:4e:50:be:ca:a8:a3:2b:b5:2a:0d:b2:fa: fd:68:71:bf:cf:95:02:01:04:9a:ea:64:e0:18:6d:d0:d5:f4: 78:0b:15:0a:57:5f:f4:fe:cf:cc:97:2b:7c:86:26:37:9c:35: 95:b5:36:5e:6e:e5:86:9a:b1:b9:2e:a3:da:e9:e4:c9:a4:fb: be:43:f7:99:1b:a6:75:fd:90:e3:83:3c:0f:43:9f:00:b6:fd: 4b:eb:c7:c9 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNCMjhDMjcyNkVEMjI5 MDlCMTUxRDhGNUZBNTJBMzk5QUNBMUNGOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDMeisoqe40R/M7zbuCXwK8Mz8JG/S5iBO3D4FXCX1WofZSdSa7 5lMyoOPeRoWdovOmWT5gM/PwpB8emBFWdy+BpahPnGEcs+/QmMZI7zw/zAYjwjMw FGLZJMH0GqTH8rzbU2LJNJzJCLqVlq7mZUtBwd9YgJnMom1rqzcrBqWVR2LpVgjv ZQhU7g1XkKLzLtTF2vcL5VzUXSt8VI/VclkPPiSbFp795iMTkMXjxrcZVdXDUIkH DgosyScW6OHK7gOv3L9mC+BZZuLXn3mMeuc4sjiTFWdAn94xTAmpwml+hYksKXrJ YAjvt3KQF1BqwnZQnOK3ZNEM3NsRslGKL0pnAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUOyjCcm7SKQmxUdj1+lKjmayhz44wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvT3lqQ2NtN1NLUW14VWRq MS1sS2ptYXloejQ0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME A8tNODANBgkqhkiG9w0BAQsFAAOCAQEAikoperziLqJGHC0b68Wr9gsit99Gk3Hy 3Nr++0dUE8pAvM8zdeazXlc2Ah5lRePNLzRXfnrTzNUpc6DR7CR4mjRJ8J/QSwMt Wbm8erj9DSHZ5Rb4U0O5F58nTAw1Bu0iFrCHtH9G+8zTx7LC/2KjxTPnBcUsEeyr yX7MNA82pwFP6zto45ECSTzN/2eO81B7ReGtulzLrRIEdkEOAYtuz6jpSjf3QTeU TlC+yqijK7UqDbL6/Whxv8+VAgEEmupk4Bht0NX0eAsVCldf9P7PzJcrfIYmN5w1 lbU2Xm7lhpqxuS6j2unkyaT7vkP3mRumdf2Q44M8D0OfALb9S+vHyQ== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:12 2024 by rpki-client on console-ams.rpki-client.org