$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RXRyBG0BUyVhrVlMJ-aIRbz8pi8.roa File: RXRyBG0BUyVhrVlMJ-aIRbz8pi8.roa (raw, json) Hash identifier: UOZ7Q+e82rHqrTbMAFVtJ+spssx/qmaSElLkfpTneE4= Subject key identifier: 45:74:72:04:6D:01:53:25:61:AD:59:4C:27:E6:88:45:BC:FC:A6:2F Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0FF0 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RXRyBG0BUyVhrVlMJ-aIRbz8pi8.roa Signing time: Fri 01 Sep 2023 09:37:32 +0000 ROA not before: Fri 01 Sep 2023 09:37:32 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 203.77.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4080 (0xff0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:32 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=457472046D01532561AD594C27E68845BCFCA62F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:12:7e:1a:99:3b:b3:9c:6e:70:71:e9:ac: 1e:18:fa:44:04:00:93:85:45:84:76:6f:67:11:24: 13:29:87:3d:b2:21:9e:0b:6f:31:1b:89:2f:b9:6f: 52:98:d7:aa:e7:84:84:11:2b:7e:34:e3:bf:ae:01: 86:6c:14:9f:9b:0c:1a:d5:ca:5f:ac:67:01:7f:a4: 7d:57:c7:28:1b:2a:a5:75:37:0d:03:d5:d0:d5:12: cc:e6:81:93:91:2e:bb:49:94:99:e7:20:c3:e0:c6: ef:32:57:42:66:ed:f1:9d:50:da:e4:4c:5e:ab:fb: 09:61:cb:12:d2:27:58:a7:57:af:93:af:15:16:6b: 24:be:93:c8:56:b9:36:19:76:50:68:2d:3e:08:b1: 64:28:bd:e2:36:2b:c0:af:e9:6c:6c:27:86:c6:66: ec:bf:63:9e:b2:25:50:0f:4a:74:b8:23:a7:6b:37: a8:b1:cf:b4:e4:63:92:e3:74:bb:8f:83:6e:10:e7: f4:58:18:52:c1:04:a4:5d:69:3c:61:f8:59:3e:aa: 78:35:37:e0:b7:31:b5:97:53:bb:b9:c9:48:22:fa: e9:31:99:77:30:a7:ce:be:68:90:f8:b5:99:42:c1: 49:28:51:34:c3:62:97:0f:46:71:5b:2d:cd:9e:4a: a9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:74:72:04:6D:01:53:25:61:AD:59:4C:27:E6:88:45:BC:FC:A6:2F X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RXRyBG0BUyVhrVlMJ-aIRbz8pi8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.50.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:df:6f:c4:44:ad:5c:20:0b:a2:42:5a:e8:e1:74:9c:a4:b8: d4:af:19:47:5d:3d:47:07:94:78:21:3e:5e:70:1f:3e:80:9e: 28:0b:12:c1:09:40:70:38:63:f7:75:32:56:40:89:9e:8a:23: e4:b2:70:da:c0:72:0a:34:3b:0d:d6:ca:e5:7b:c3:45:80:b8: ac:cf:3e:92:23:2f:69:66:91:d1:b9:f8:01:12:9d:dc:3c:79: 34:4b:26:a7:44:b2:c7:3c:5a:57:64:a7:e2:ef:96:57:d0:74: e3:12:90:ba:51:a3:c7:7e:02:40:93:9e:28:c1:87:05:4d:cf: ad:38:99:6d:4c:14:f7:49:7c:41:3c:86:9f:77:fa:a1:53:a9: 5b:51:87:0a:25:f4:ce:e8:bb:53:f6:03:95:78:10:8a:38:ba: 0b:07:3d:d5:78:09:4a:fa:15:ed:5b:dd:ad:81:75:88:12:a3: 1d:40:a5:be:b8:e7:f3:ac:39:5a:c6:ca:98:de:ef:72:b7:39: c6:5c:f1:cd:86:52:a0:ae:e2:48:08:d1:bf:5f:bc:58:14:95: 43:3b:37:ab:58:69:f7:1c:cd:d7:a6:e2:87:08:06:83:b1:e6: 31:43:a4:c5:62:08:9b:e6:0e:f1:50:54:48:9b:b2:06:62:bc: 8e:8f:9d:a5 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD/AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MzJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ1NzQ3MjA0NkQwMTUz MjU2MUFENTk0QzI3RTY4ODQ1QkNGQ0E2MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5BxJ+Gpk7s5xucHHprB4Y+kQEAJOFRYR2b2cRJBMphz2yIZ4L bzEbiS+5b1KY16rnhIQRK34047+uAYZsFJ+bDBrVyl+sZwF/pH1XxygbKqV1Nw0D 1dDVEszmgZORLrtJlJnnIMPgxu8yV0Jm7fGdUNrkTF6r+wlhyxLSJ1inV6+TrxUW ayS+k8hWuTYZdlBoLT4IsWQoveI2K8Cv6WxsJ4bGZuy/Y56yJVAPSnS4I6drN6ix z7TkY5LjdLuPg24Q5/RYGFLBBKRdaTxh+Fk+qng1N+C3MbWXU7u5yUgi+ukxmXcw p86+aJD4tZlCwUkoUTTDYpcPRnFbLc2eSqkBAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQURXRyBG0BUyVhrVlMJ+aIRbz8pi8wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUlhSeUJHMEJVeVZoclZs TUotYUlSYno4cGk4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AMtNMjANBgkqhkiG9w0BAQsFAAOCAQEAit9vxEStXCALokJa6OF0nKS41K8ZR109 RweUeCE+XnAfPoCeKAsSwQlAcDhj93UyVkCJnooj5LJw2sByCjQ7DdbK5XvDRYC4 rM8+kiMvaWaR0bn4ARKd3Dx5NEsmp0SyxzxaV2Sn4u+WV9B04xKQulGjx34CQJOe KMGHBU3PrTiZbUwU90l8QTyGn3f6oVOpW1GHCiX0zui7U/YDlXgQiji6Cwc91XgJ SvoV7VvdrYF1iBKjHUClvrjn86w5WsbKmN7vcrc5xlzxzYZSoK7iSAjRv1+8WBSV Qzs3q1hp9xzN16bihwgGg7HmMUOkxWIIm+YO8VBUSJuyBmK8jo+dpQ== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org