$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Sboek66OeJmFN3qVTqmACWORL_c.roa File: Sboek66OeJmFN3qVTqmACWORL_c.roa (raw, json) Hash identifier: Q/9lgpo0ayV1fBwfw8bEnYUegx4URa4hMwSVLBKtUOg= Subject key identifier: 49:BA:1E:93:AE:8E:78:99:85:37:7A:95:4E:A9:80:09:63:91:2F:F7 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11FD Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Sboek66OeJmFN3qVTqmACWORL_c.roa Signing time: Mon 26 Aug 2024 05:24:35 +0000 ROA not before: Mon 26 Aug 2024 05:24:35 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 211.78.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4605 (0x11fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:35 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=49BA1E93AE8E789985377A954EA9800963912FF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:48:ce:7e:69:da:27:8d:ed:c5:f3:45:05: 66:98:df:21:5d:b6:49:af:71:dd:ea:74:4e:03:cf: 71:2a:09:ab:e8:35:1b:e6:8d:3e:76:8b:64:57:b3: 73:00:aa:4d:7c:6e:cf:d5:e7:dd:2c:f1:87:b0:40: 96:ba:7d:25:a6:d6:b9:6a:90:67:a4:c0:f6:4d:f4: 56:a2:25:66:e7:b4:40:8d:50:16:2f:5c:b0:5f:2d: 92:94:1f:c8:8d:3f:44:e8:c6:43:31:4a:63:e8:f7: 41:81:1e:3c:d0:a6:4e:2f:52:db:c8:67:7f:de:53: 4b:37:07:f3:3c:e0:f7:36:4f:e9:d3:26:a5:ea:af: 5f:77:19:93:bb:a2:10:e6:9e:bf:38:f7:10:f4:d7: 85:24:b3:a9:16:4e:c5:7b:4e:a9:3e:40:be:b7:1a: e2:7e:13:d2:fe:3d:d6:c7:2f:97:91:63:a7:0b:d3: 9a:b1:c9:66:e3:16:96:99:b7:15:4b:50:23:a4:ae: 91:28:52:69:fd:f6:18:dc:ab:a2:cb:9f:0c:12:f5: ab:ab:f0:51:c3:de:2a:8d:3e:b3:cf:f2:34:95:c3: ad:89:0f:b3:65:bf:67:48:1a:04:65:59:00:7c:a7: 4b:89:2d:e3:0c:11:d8:27:7f:07:14:62:9a:d3:da: fc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BA:1E:93:AE:8E:78:99:85:37:7A:95:4E:A9:80:09:63:91:2F:F7 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Sboek66OeJmFN3qVTqmACWORL_c.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.78.208.0/20 Signature Algorithm: sha256WithRSAEncryption 2f:35:0e:2b:5b:56:f1:fe:89:b4:33:cd:55:61:a8:3a:d3:37: 11:f7:16:d6:05:84:8e:22:b2:52:78:2a:0f:e9:9c:74:6c:50: a3:e5:26:74:6e:74:f3:fd:50:b2:5c:1a:cf:7a:2f:d8:2f:9f: 96:7c:d8:61:34:1b:11:a0:84:c9:bf:a3:a0:e2:36:25:1e:2d: ca:a6:55:fd:d1:a2:aa:3c:8a:68:56:8f:63:5a:af:ef:9f:9c: 8b:29:69:05:5c:a6:18:78:67:5c:72:05:de:ba:2e:af:2e:4b: 03:3a:f9:fb:2f:3c:e1:52:d3:25:c9:c8:70:69:58:8f:97:2a: e5:6c:43:3f:b4:98:eb:8d:78:92:08:b8:56:ce:34:25:88:b3: 9c:ea:00:2a:e4:fc:19:ba:c1:65:b5:62:c8:fa:d0:89:12:16: 6a:5a:ca:44:97:15:90:9b:20:12:1c:0e:d4:28:ab:30:9d:3a: 3d:e0:c9:bc:8f:a2:0c:a8:0c:d7:6f:e3:78:94:e8:a2:9d:33: 9d:ef:4b:61:ba:07:bb:fa:25:62:37:cc:a2:d4:5f:de:e2:b9: f6:36:d8:2e:78:2c:81:1f:bd:9e:b1:34:9e:95:20:bb:9a:75: d0:f2:5a:84:c2:c4:23:73:96:f3:6e:87:ab:7b:82:02:90:28: 96:15:b9:c3 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEf0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ5QkExRTkzQUU4RTc4 OTk4NTM3N0E5NTRFQTk4MDA5NjM5MTJGRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxQEjOfmnaJ43txfNFBWaY3yFdtkmvcd3qdE4Dz3EqCavoNRvm jT52i2RXs3MAqk18bs/V590s8YewQJa6fSWm1rlqkGekwPZN9FaiJWbntECNUBYv XLBfLZKUH8iNP0ToxkMxSmPo90GBHjzQpk4vUtvIZ3/eU0s3B/M84Pc2T+nTJqXq r193GZO7ohDmnr849xD014Uks6kWTsV7Tqk+QL63GuJ+E9L+PdbHL5eRY6cL05qx yWbjFpaZtxVLUCOkrpEoUmn99hjcq6LLnwwS9aur8FHD3iqNPrPP8jSVw62JD7Nl v2dIGgRlWQB8p0uJLeMMEdgnfwcUYprT2vzFAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUSboek66OeJmFN3qVTqmACWORL/cwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvU2JvZWs2Nk9lSm1GTjNx VlRxbUFDV09STF9jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BNNO0DANBgkqhkiG9w0BAQsFAAOCAQEALzUOK1tW8f6JtDPNVWGoOtM3EfcW1gWE jiKyUngqD+mcdGxQo+UmdG508/1Qslwaz3ov2C+flnzYYTQbEaCEyb+joOI2JR4t yqZV/dGiqjyKaFaPY1qv75+ciylpBVymGHhnXHIF3roury5LAzr5+y884VLTJcnI cGlYj5cq5WxDP7SY6414kgi4Vs40JYiznOoAKuT8GbrBZbViyPrQiRIWalrKRJcV kJsgEhwO1CirMJ06PeDJvI+iDKgM12/jeJToop0zne9LYboHu/olYjfMotRf3uK5 9jbYLngsgR+9nrE0npUgu5p10PJahMLEI3OW826Hq3uCApAolhW5ww== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:13 2024 by rpki-client on console-ams.rpki-client.org