$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QJIcGUegxuMPsLv2EMhNDluad1U.roa File: QJIcGUegxuMPsLv2EMhNDluad1U.roa (raw, json) Hash identifier: zGhheKDspkS7zjqlYeMGV+PGwKYbxEI2jkjz1sHndFI= Subject key identifier: 40:92:1C:19:47:A0:C6:E3:0F:B0:BB:F6:10:C8:4D:0E:5B:9A:77:55 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0F99 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QJIcGUegxuMPsLv2EMhNDluad1U.roa Signing time: Fri 01 Sep 2023 09:37:03 +0000 ROA not before: Fri 01 Sep 2023 09:37:03 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 210.17.7.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3993 (0xf99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:03 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=40921C1947A0C6E30FB0BBF610C84D0E5B9A7755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ff:fd:59:4e:2f:65:d0:d3:39:3e:70:75:e6: 40:0c:68:2c:c4:ce:f3:37:b3:a8:6e:84:93:eb:b4: b0:67:b9:6c:4d:d2:a1:63:71:9c:62:5a:71:f8:47: ec:32:17:46:88:19:67:af:71:c9:86:fc:bf:e9:fe: 20:81:27:6a:1c:91:bb:38:7d:c7:dd:50:54:00:c7: fb:ed:9d:3d:fe:e1:53:0e:39:68:ae:7b:4f:75:6e: 51:a5:d0:ab:cc:24:70:d3:0f:86:42:58:87:5a:fc: 47:e9:fa:95:5a:7e:c4:ba:94:7d:fb:a3:d6:50:42: de:1e:49:5b:e4:56:d8:85:44:ee:e1:cf:fd:99:97: 1c:09:4d:f2:89:01:8f:76:27:d1:d1:28:15:44:62: 4a:85:6e:18:5c:7e:da:0d:a9:b3:4a:9c:51:fb:09: a2:a4:14:7c:87:ea:56:50:7e:83:e1:be:ce:61:bf: ee:53:54:4c:15:52:3b:aa:84:14:89:c2:6b:42:d1: 9d:9b:8e:dc:b9:a0:5d:8f:6a:b5:45:86:36:74:1f: 8b:2b:84:3c:d4:e8:c4:fb:bc:e3:42:b7:e2:b5:17: 0e:67:9f:65:5e:e3:8b:36:12:d5:d2:61:c0:0c:2a: e0:5a:76:e1:20:3f:e8:25:e7:63:34:d4:4f:10:0e: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:92:1C:19:47:A0:C6:E3:0F:B0:BB:F6:10:C8:4D:0E:5B:9A:77:55 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QJIcGUegxuMPsLv2EMhNDluad1U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.7.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:34:c2:c1:42:4b:71:b1:64:39:c1:0e:88:c7:86:65:6a:be: 1c:e5:73:57:2c:c9:f0:9d:88:3b:55:ff:45:48:ff:df:25:02: a0:5b:64:65:62:61:4a:64:0a:a2:53:54:09:47:50:15:f0:10: cb:e8:ca:7e:5a:9b:c1:d2:6c:69:7e:ea:0d:e6:52:38:08:a8: 15:98:54:98:77:b1:f2:c1:92:a8:d6:5c:00:00:a5:3f:fc:e2: 40:bc:30:e5:96:3b:7f:92:2e:d5:fc:e7:68:4a:6f:5e:1d:66: 39:88:e6:c3:f4:79:7c:97:94:01:d8:59:1c:41:ef:92:91:3b: b3:9a:4f:4a:81:75:9c:18:84:9e:a2:85:cf:d6:92:10:72:56: e6:4c:0f:17:99:07:3d:c9:14:ab:ed:16:06:07:44:d5:6b:1c: d5:50:1f:e2:79:24:90:29:34:e3:0b:29:bf:d4:c2:1f:6a:ff: 57:2c:c1:23:2a:07:35:e0:86:4d:6d:74:e1:05:05:cf:6a:e8: e1:d3:65:97:c3:6b:01:30:13:80:d4:24:49:11:1d:3b:57:a4: 4f:74:df:a1:a8:47:42:53:fd:f9:94:ca:37:f9:ef:23:fa:cb: 89:50:43:8b:fb:bb:a2:2a:13:68:7f:31:7d:d1:30:11:a9:4b: 5c:07:4e:22 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD5kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQwOTIxQzE5NDdBMEM2 RTMwRkIwQkJGNjEwQzg0RDBFNUI5QTc3NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDT//1ZTi9l0NM5PnB15kAMaCzEzvM3s6huhJPrtLBnuWxN0qFj cZxiWnH4R+wyF0aIGWevccmG/L/p/iCBJ2ockbs4fcfdUFQAx/vtnT3+4VMOOWiu e091blGl0KvMJHDTD4ZCWIda/Efp+pVafsS6lH37o9ZQQt4eSVvkVtiFRO7hz/2Z lxwJTfKJAY92J9HRKBVEYkqFbhhcftoNqbNKnFH7CaKkFHyH6lZQfoPhvs5hv+5T VEwVUjuqhBSJwmtC0Z2bjty5oF2ParVFhjZ0H4srhDzU6MT7vONCt+K1Fw5nn2Ve 44s2EtXSYcAMKuBaduEgP+gl52M01E8QDhABAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUQJIcGUegxuMPsLv2EMhNDluad1UwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUUpJY0dVZWd4dU1Qc0x2 MkVNaE5EbHVhZDFVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIRBzANBgkqhkiG9w0BAQsFAAOCAQEAjTTCwUJLcbFkOcEOiMeGZWq+HOVzVyzJ 8J2IO1X/RUj/3yUCoFtkZWJhSmQKolNUCUdQFfAQy+jKflqbwdJsaX7qDeZSOAio FZhUmHex8sGSqNZcAAClP/ziQLww5ZY7f5Iu1fznaEpvXh1mOYjmw/R5fJeUAdhZ HEHvkpE7s5pPSoF1nBiEnqKFz9aSEHJW5kwPF5kHPckUq+0WBgdE1Wsc1VAf4nkk kCk04wspv9TCH2r/VyzBIyoHNeCGTW104QUFz2ro4dNll8NrATATgNQkSREdO1ek T3TfoahHQlP9+ZTKN/nvI/rLiVBDi/u7oioTaH8xfdEwEalLXAdOIg== -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:02 2024 by rpki-client on console-fra.rpki-client.org