$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PGGIKOxsj8uQ8yTDEC7EIoxxeu8.roa File: PGGIKOxsj8uQ8yTDEC7EIoxxeu8.roa (raw, json) Hash identifier: 0OXNH/yNICWEmLk4dZWzCsxPLVIq9MwUR8GPjdsQ0Oo= Subject key identifier: 3C:61:88:28:EC:6C:8F:CB:90:F3:24:C3:10:2E:C4:22:8C:71:7A:EF Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1003 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PGGIKOxsj8uQ8yTDEC7EIoxxeu8.roa Signing time: Fri 01 Sep 2023 09:37:37 +0000 ROA not before: Fri 01 Sep 2023 09:37:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 210.17.20.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4099 (0x1003) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=3C618828EC6C8FCB90F324C3102EC4228C717AEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:50:9b:25:6f:99:c8:fa:07:f0:9d:ec:0e:c6: 53:0c:89:af:74:28:25:80:f1:8e:10:35:be:c9:19: 05:73:18:26:40:67:15:bc:75:87:ee:72:58:4c:9d: a7:f5:3a:75:02:7f:ff:71:37:d7:ad:dd:e7:5f:69: fe:9c:b4:4e:ca:50:75:57:79:b0:00:46:f8:0d:19: 06:40:d9:be:3b:c2:38:30:5f:16:17:31:4f:b5:4c: 7f:6d:af:e8:91:1d:4e:6f:ad:6e:e6:d5:fa:b4:24: 5b:75:e3:91:6d:fd:5b:b4:2d:7b:fd:b0:70:77:ad: 99:85:65:75:66:cd:c2:f9:66:7b:f5:f5:14:d9:75: 05:e2:dc:78:28:c2:29:e5:68:2a:17:2b:a7:81:45: 88:19:28:08:3d:63:47:f4:1d:f3:6f:82:db:79:79: 8b:83:3b:71:64:fb:20:a6:b2:9e:a0:dd:5a:e7:93: 74:5c:c7:ca:42:12:66:ee:9f:bf:c5:88:0d:de:3a: f3:20:15:17:79:a0:13:2e:eb:28:e7:be:2b:8f:d8: 0a:7d:e1:f9:e2:ba:b0:89:a7:06:51:bc:30:d9:95: 6d:fe:2c:33:6e:75:1b:b5:fd:d4:42:a2:1c:7f:e1: a2:fc:f7:0c:3e:a7:d3:d0:57:03:de:ea:11:f9:b1: a9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:61:88:28:EC:6C:8F:CB:90:F3:24:C3:10:2E:C4:22:8C:71:7A:EF X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PGGIKOxsj8uQ8yTDEC7EIoxxeu8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.20.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:bf:da:f4:bb:29:4b:25:a3:09:8b:7b:f8:ea:2c:b7:9f:25: 70:1b:9f:34:5b:9f:1d:39:ad:59:8c:a9:68:e0:ac:46:1a:22: ac:b3:e2:9a:14:40:16:9b:4a:ad:e1:bc:41:68:c2:e6:c2:f7: b0:90:11:0e:36:7a:65:20:da:e0:24:2e:35:6f:fe:d4:25:9b: df:84:46:b6:23:c0:92:f6:44:d7:43:cf:41:a8:4b:fa:fb:5b: 25:0b:5c:fe:9b:06:3e:43:2e:49:16:95:94:0e:83:9a:5e:0f: 5d:18:4d:7a:10:57:8e:05:45:7b:8b:c2:78:79:51:6b:7f:d6: 20:91:6d:05:e1:ca:75:27:45:b4:47:de:73:a5:bd:5e:71:45: 11:95:c9:b9:f0:d0:bb:8d:a8:b9:ef:c0:87:4b:36:75:55:9d: b4:dc:73:cc:27:2d:ed:2e:66:9d:bc:dc:19:da:ef:d5:21:d2: 20:ef:cd:54:d5:d0:f7:bf:19:f1:62:88:8b:4d:02:1b:05:d9: d5:cc:90:a5:5e:16:da:21:83:db:56:e4:df:d8:fd:85:64:44: 9a:03:d8:59:1b:95:42:7e:5c:24:20:5d:67:fe:42:01:78:bb: f1:fb:f6:07:79:31:a2:72:77:f5:be:09:cd:a1:fb:ea:95:6e: 39:0d:21:6c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEAMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDNDNjE4ODI4RUM2QzhG Q0I5MEYzMjRDMzEwMkVDNDIyOEM3MTdBRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfUJslb5nI+gfwnewOxlMMia90KCWA8Y4QNb7JGQVzGCZAZxW8 dYfuclhMnaf1OnUCf/9xN9et3edfaf6ctE7KUHVXebAARvgNGQZA2b47wjgwXxYX MU+1TH9tr+iRHU5vrW7m1fq0JFt145Ft/Vu0LXv9sHB3rZmFZXVmzcL5Znv19RTZ dQXi3HgowinlaCoXK6eBRYgZKAg9Y0f0HfNvgtt5eYuDO3Fk+yCmsp6g3Vrnk3Rc x8pCEmbun7/FiA3eOvMgFRd5oBMu6yjnviuP2Ap94fniurCJpwZRvDDZlW3+LDNu dRu1/dRCohx/4aL89ww+p9PQVwPe6hH5sanpAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUPGGIKOxsj8uQ8yTDEC7EIoxxeu8wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUEdHSUtPeHNqOHVROHlU REVDN0VJb3h4ZXU4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIRFDANBgkqhkiG9w0BAQsFAAOCAQEAPL/a9LspSyWjCYt7+Oost58lcBufNFuf HTmtWYypaOCsRhoirLPimhRAFptKreG8QWjC5sL3sJARDjZ6ZSDa4CQuNW/+1CWb 34RGtiPAkvZE10PPQahL+vtbJQtc/psGPkMuSRaVlA6Dml4PXRhNehBXjgVFe4vC eHlRa3/WIJFtBeHKdSdFtEfec6W9XnFFEZXJufDQu42oue/Ah0s2dVWdtNxzzCct 7S5mnbzcGdrv1SHSIO/NVNXQ978Z8WKIi00CGwXZ1cyQpV4W2iGD21bk39j9hWRE mgPYWRuVQn5cJCBdZ/5CAXi78fv2B3kxonJ39b4JzaH76pVuOQ0hbA== -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:42 2024 by rpki-client on console-fra.rpki-client.org