$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PKohzl-5SRMt7CARnmTmjb7zyZY.roa File: PKohzl-5SRMt7CARnmTmjb7zyZY.roa (raw, json) Hash identifier: pWjiG6lvQ44jKvFT89miKYwX+zg4PmGht4bhYPXGOys= Subject key identifier: 3C:AA:21:CE:5F:B9:49:13:2D:EC:20:11:9E:64:E6:8D:BE:F3:C9:96 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 122C Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PKohzl-5SRMt7CARnmTmjb7zyZY.roa Signing time: Mon 26 Aug 2024 05:24:45 +0000 ROA not before: Mon 26 Aug 2024 05:24:45 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 203.77.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4652 (0x122c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:45 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=3CAA21CE5FB949132DEC20119E64E68DBEF3C996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:f5:86:95:ff:e9:02:91:54:4d:ee:57:9c: bc:c1:d4:ce:b9:29:dd:8f:ff:a5:8a:c4:79:57:3c: 6a:98:a9:2a:43:17:da:31:26:f7:09:11:c5:e5:f7: 18:44:db:c1:68:f3:61:e4:a3:a3:04:10:46:2f:d8: e3:6f:5e:7e:2b:7d:82:45:2a:6b:65:66:5c:87:9f: 09:47:a1:31:51:ae:00:f6:e7:67:33:d5:97:13:b5: a4:0a:89:0d:ba:fb:f4:e2:0d:d3:e4:13:9a:21:65: 73:cc:f8:6d:1e:ee:b3:86:b8:df:59:26:67:9a:3a: ae:a5:96:ce:d0:2d:64:77:e0:46:ba:00:94:09:db: f6:e6:dc:38:a0:8e:e1:49:43:21:05:c0:07:55:a4: 4f:d3:16:14:87:e2:3c:ed:45:33:37:55:e0:cb:c5: 05:22:06:67:30:54:64:d5:9d:fe:09:1b:df:cf:90: 6c:3a:ea:25:a6:53:a0:d6:a2:d8:46:38:ad:cc:b8: 22:ab:e9:d5:ee:e6:f1:e2:26:73:ba:3f:a9:26:42: 67:ea:35:b7:6e:cd:83:32:6e:97:d1:98:79:af:79: 15:84:46:16:72:76:b3:dd:5f:4a:20:0d:12:8c:dc: f6:38:2c:a6:ef:70:f6:5c:2d:d4:36:b4:39:d0:38: 5b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AA:21:CE:5F:B9:49:13:2D:EC:20:11:9E:64:E6:8D:BE:F3:C9:96 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/PKohzl-5SRMt7CARnmTmjb7zyZY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.52.0/24 Signature Algorithm: sha256WithRSAEncryption 93:64:a1:fd:07:5c:16:b7:f6:e6:5b:d0:50:ae:06:08:33:7a: 42:78:04:f9:c2:ab:5a:34:25:db:90:53:d7:1c:bf:f9:5a:d8: 1a:76:a6:d4:b6:d2:62:15:07:65:3d:a6:0c:ea:dd:2d:ef:f0: 12:92:2d:2b:e4:37:7b:f5:ed:09:eb:ba:d5:be:ee:c4:65:1c: 89:3a:84:21:3c:e6:15:83:a5:74:2e:33:39:09:1f:07:56:3e: 0a:e9:b8:5c:7b:96:21:ef:ea:08:ca:eb:a0:a1:4f:09:40:66: d3:8b:ae:a9:96:75:ac:0e:e4:7d:67:79:3e:1c:db:12:8c:85: 3e:f7:e3:ca:d0:aa:b0:53:71:e0:66:06:1e:92:19:d3:9d:82: b3:be:02:4f:31:15:97:f5:d4:6b:23:b1:3b:42:e8:56:5b:6f: 00:ff:d9:2c:41:d0:b5:aa:2a:c6:4a:e3:38:66:76:15:2e:6a: 97:b6:f0:74:97:f8:1e:d2:d6:1c:ac:bd:f8:d4:56:f8:7f:a3: 53:c7:3b:a0:c4:3b:dd:df:d3:72:35:d9:5c:cc:b0:6d:84:6f: 73:f7:16:91:b5:29:44:a2:d3:2a:a3:bf:28:60:5e:9c:fc:89: e1:de:2f:cc:f3:29:bf:b4:fa:52:5c:d6:64:90:ce:43:ea:89: 4e:72:cc:0e -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEiwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDQUEyMUNFNUZCOTQ5 MTMyREVDMjAxMTlFNjRFNjhEQkVGM0M5OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHy/WGlf/pApFUTe5XnLzB1M65Kd2P/6WKxHlXPGqYqSpDF9ox JvcJEcXl9xhE28Fo82Hko6MEEEYv2ONvXn4rfYJFKmtlZlyHnwlHoTFRrgD252cz 1ZcTtaQKiQ26+/TiDdPkE5ohZXPM+G0e7rOGuN9ZJmeaOq6lls7QLWR34Ea6AJQJ 2/bm3DigjuFJQyEFwAdVpE/TFhSH4jztRTM3VeDLxQUiBmcwVGTVnf4JG9/PkGw6 6iWmU6DWothGOK3MuCKr6dXu5vHiJnO6P6kmQmfqNbduzYMybpfRmHmveRWERhZy drPdX0ogDRKM3PY4LKbvcPZcLdQ2tDnQOFtvAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUPKohzl+5SRMt7CARnmTmjb7zyZYwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUEtvaHpsLTVTUk10N0NB Um5tVG1qYjd6eVpZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AMtNNDANBgkqhkiG9w0BAQsFAAOCAQEAk2Sh/QdcFrf25lvQUK4GCDN6QngE+cKr WjQl25BT1xy/+VrYGnam1LbSYhUHZT2mDOrdLe/wEpItK+Q3e/XtCeu61b7uxGUc iTqEITzmFYOldC4zOQkfB1Y+Cum4XHuWIe/qCMrroKFPCUBm04uuqZZ1rA7kfWd5 PhzbEoyFPvfjytCqsFNx4GYGHpIZ052Cs74CTzEVl/XUayOxO0LoVltvAP/ZLEHQ taoqxkrjOGZ2FS5ql7bwdJf4HtLWHKy9+NRW+H+jU8c7oMQ73d/TcjXZXMywbYRv c/cWkbUpRKLTKqO/KGBenPyJ4d4vzPMpv7T6UlzWZJDOQ+qJTnLMDg== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:13 2024 by rpki-client on console-ams.rpki-client.org