$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SYm3v3tC0xCRXftbEPKVoiYxrW8.roa File: SYm3v3tC0xCRXftbEPKVoiYxrW8.roa (raw, json) Hash identifier: xXp71ntlWwpzcOgjKWe3TtikIBhO3RvJ+ZYcRf0Xpxw= Subject key identifier: 49:89:B7:BF:7B:42:D3:10:91:5D:FB:5B:10:F2:95:A2:26:31:AD:6F Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1005 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SYm3v3tC0xCRXftbEPKVoiYxrW8.roa Signing time: Fri 01 Sep 2023 09:37:37 +0000 ROA not before: Fri 01 Sep 2023 09:37:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 49.216.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4101 (0x1005) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=4989B7BF7B42D310915DFB5B10F295A22631AD6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9e:b8:b2:a4:11:46:09:b2:1f:88:1a:38:e1: 3f:ab:0f:50:ae:6e:a3:83:b3:ba:61:6c:ca:20:ae: 7b:04:85:68:66:05:0a:6f:98:67:ba:c3:ff:a0:57: be:9a:f0:cd:2f:e6:38:ad:08:0f:36:13:d0:0d:7c: 06:fe:e0:1b:d4:33:5a:6e:a7:83:af:7c:d9:c2:74: c7:1c:53:2a:26:a3:06:eb:67:6f:ad:74:92:38:3f: e4:cf:76:c6:dd:7d:99:35:57:48:b7:ac:0e:dc:33: 65:f5:25:fa:30:a8:01:56:7e:18:b2:3c:6b:d8:1a: b9:64:25:67:bf:a8:9c:e0:18:94:a0:f4:99:b0:51: 65:c3:a7:42:2c:31:69:55:e7:ce:0d:4e:fe:3c:4e: 81:47:0c:b7:7c:9e:06:d2:ec:12:55:5e:51:f1:95: 03:b8:a1:d1:62:53:0d:dd:b5:4b:7d:cd:39:68:50: 38:fe:bd:d7:e2:9a:08:b2:b6:41:a2:d8:39:c1:30: 4f:35:5e:5f:01:23:d3:01:cd:47:de:b9:f7:ba:f1: e5:b0:2d:7f:94:fd:8d:74:fc:c3:98:fd:87:66:6a: 7f:19:db:e9:2c:65:5a:55:30:2b:63:42:09:53:44: 70:32:a3:a6:14:0c:21:06:11:46:e9:0e:73:9c:05: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:89:B7:BF:7B:42:D3:10:91:5D:FB:5B:10:F2:95:A2:26:31:AD:6F X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SYm3v3tC0xCRXftbEPKVoiYxrW8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.216.0.0/14 Signature Algorithm: sha256WithRSAEncryption 51:ff:04:86:a6:d9:ee:a1:84:88:48:35:db:e0:1e:d2:3d:34: 48:40:52:cb:a9:6e:6c:87:52:6c:e6:63:b7:b6:53:eb:65:b8: 32:2a:06:0d:ae:52:45:bc:ad:78:ad:0a:94:f6:3d:9e:d4:40: a2:4c:25:16:13:58:e8:48:c0:bf:7a:74:0b:51:44:c1:79:84: 5b:c2:bc:9c:70:95:6f:63:98:05:3b:c5:2c:e1:d6:1e:48:a4: 32:31:38:2f:76:bf:9d:23:f3:d0:94:c3:6b:92:f0:fe:11:9a: 5f:5d:b0:97:dc:20:48:3f:63:9f:be:fe:6b:48:37:03:3b:99: d1:83:f4:33:ba:ea:2c:76:e2:bf:e3:5a:6a:16:1e:14:5c:6d: ad:f9:93:ef:4a:28:5b:e1:bc:66:7e:23:f7:ab:f2:46:a7:84: 4d:ab:54:7e:7b:bd:1c:e7:48:db:f0:06:4b:4b:a3:fe:f4:8c: c1:f6:fd:0b:f0:1e:db:d3:06:55:de:66:68:ef:74:31:d2:cd: 90:24:e9:0a:4e:2f:f1:08:db:25:ba:03:67:39:a4:6c:d3:c3: 44:f6:2c:a7:4c:16:ea:a3:17:f0:6b:a1:2a:bb:eb:8c:16:65: ce:81:8d:83:4b:88:58:7d:8d:65:39:cb:8b:ca:09:14:e9:09: ce:23:29:a2 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEAUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ5ODlCN0JGN0I0MkQz MTA5MTVERkI1QjEwRjI5NUEyMjYzMUFENkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCynriypBFGCbIfiBo44T+rD1CubqODs7phbMogrnsEhWhmBQpv mGe6w/+gV76a8M0v5jitCA82E9ANfAb+4BvUM1pup4OvfNnCdMccUyomowbrZ2+t dJI4P+TPdsbdfZk1V0i3rA7cM2X1JfowqAFWfhiyPGvYGrlkJWe/qJzgGJSg9Jmw UWXDp0IsMWlV584NTv48ToFHDLd8ngbS7BJVXlHxlQO4odFiUw3dtUt9zTloUDj+ vdfimgiytkGi2DnBME81Xl8BI9MBzUfeufe68eWwLX+U/Y10/MOY/Ydman8Z2+ks ZVpVMCtjQglTRHAyo6YUDCEGEUbpDnOcBVkRAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUSYm3v3tC0xCRXftbEPKVoiYxrW8wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvU1ltM3YzdEMweENSWGZ0 YkVQS1ZvaVl4clc4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AjHYMA0GCSqGSIb3DQEBCwUAA4IBAQBR/wSGptnuoYSISDXb4B7SPTRIQFLLqW5s h1Js5mO3tlPrZbgyKgYNrlJFvK14rQqU9j2e1ECiTCUWE1joSMC/enQLUUTBeYRb wryccJVvY5gFO8Us4dYeSKQyMTgvdr+dI/PQlMNrkvD+EZpfXbCX3CBIP2Ofvv5r SDcDO5nRg/QzuuosduK/41pqFh4UXG2t+ZPvSihb4bxmfiP3q/JGp4RNq1R+e70c 50jb8AZLS6P+9IzB9v0L8B7b0wZV3mZo73Qx0s2QJOkKTi/xCNslugNnOaRs08NE 9iynTBbqoxfwa6Equ+uMFmXOgY2DS4hYfY1lOcuLygkU6QnOIymi -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:02 2024 by rpki-client on console-fra.rpki-client.org