$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UP-h4FxZv-dksCmyydQ08eqBRU8.roa File: UP-h4FxZv-dksCmyydQ08eqBRU8.roa (raw, json) Hash identifier: +/7ZrGKyrz0IOcAJlh0zQ4ZOxZrxvgHVJpRix1BmdJQ= Subject key identifier: 50:FF:A1:E0:5C:59:BF:E7:64:B0:29:B2:C9:D4:34:F1:EA:81:45:4F Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11EC Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UP-h4FxZv-dksCmyydQ08eqBRU8.roa Signing time: Mon 26 Aug 2024 05:24:31 +0000 ROA not before: Mon 26 Aug 2024 05:24:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24165 IP address blocks: 203.77.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4588 (0x11ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:31 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=50FFA1E05C59BFE764B029B2C9D434F1EA81454F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:61:a4:39:82:62:08:b7:60:88:8f:09:83:59: a0:48:83:d1:1a:76:c3:47:ae:70:d4:57:0c:9f:95: e4:03:b9:20:92:08:d8:f1:5d:55:c9:06:fa:77:d5: b2:9c:35:29:fd:52:d8:6e:61:ae:f7:bb:d3:aa:19: d7:f5:1f:41:e3:b0:30:b1:7b:d5:3c:e7:0f:72:8c: b5:39:69:34:0c:05:48:34:af:2e:8e:d4:a3:48:d3: 6f:16:ea:1f:82:25:db:87:86:f0:a0:25:a8:4c:f6: 0f:17:ac:72:1d:4f:6a:0e:19:7f:dd:02:1e:ef:61: 65:18:e8:23:57:6d:b1:3d:6c:4a:38:f1:19:a8:14: fb:e1:b1:5e:c3:3a:86:2e:e2:8e:50:bc:77:b3:1c: 69:6f:59:e3:67:94:98:80:a8:b8:e5:52:31:22:82: 5b:24:73:20:94:92:d5:21:e1:a5:f1:e4:03:30:8d: c1:30:12:bd:e1:34:26:0c:59:92:c6:52:de:9e:c2: 89:d7:80:0c:2d:fc:41:72:16:b1:65:ba:9b:92:18: ab:51:4c:e9:89:36:89:b0:89:ed:b6:0d:ac:08:49: c2:76:40:07:8f:40:97:e0:d7:6b:e8:b6:e5:c8:82: 21:d6:6f:ce:38:44:bf:01:ab:f9:af:f8:f3:5a:55: 9f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:FF:A1:E0:5C:59:BF:E7:64:B0:29:B2:C9:D4:34:F1:EA:81:45:4F X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/UP-h4FxZv-dksCmyydQ08eqBRU8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.40.0/22 Signature Algorithm: sha256WithRSAEncryption 12:73:37:65:e7:f5:a6:2a:e1:5c:6b:28:d1:a2:dc:53:95:4d: 43:f4:26:83:77:2a:ef:97:d9:7f:f1:ed:c7:75:0a:86:56:16: e8:2c:14:e6:06:90:69:c0:49:36:fd:cb:c5:b0:fc:30:f8:cb: bf:f0:cc:98:95:c5:43:71:cc:42:f8:78:2e:8a:4e:43:72:85: e5:fd:32:25:d5:93:ce:5c:0f:f5:cb:f0:00:f3:fe:62:2d:8d: cc:d9:0d:eb:16:ac:fe:db:4c:57:da:40:e4:c7:30:6b:61:a8: 9c:2f:ce:e6:6f:18:5e:1b:35:66:1f:ea:c9:13:33:18:db:38: 9b:6a:1e:0e:2c:3b:08:47:a5:c1:01:79:17:f8:9b:02:70:83: 55:36:35:3e:8c:99:ab:a9:fd:59:fa:51:86:a8:7a:8c:c4:fa: f7:0b:24:7c:32:7a:1a:43:42:b2:ff:6f:c9:16:f4:b2:89:74: 2a:9e:2a:0a:ef:da:44:5b:45:88:d6:18:f8:a4:4e:0b:e4:ad: 8a:ed:82:e2:48:81:c8:ff:f4:ad:a2:7f:d4:49:8d:ed:56:45: 29:c4:8d:c2:ee:9a:74:9d:36:6b:bc:6c:d6:12:c0:66:22:1d: 07:a1:7b:3b:b5:46:47:bb:98:2f:0f:18:5b:bb:f7:3a:f9:06: 0a:99:00:74 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEewwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUwRkZBMUUwNUM1OUJG RTc2NEIwMjlCMkM5RDQzNEYxRUE4MTQ1NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjYaQ5gmIIt2CIjwmDWaBIg9EadsNHrnDUVwyfleQDuSCSCNjx XVXJBvp31bKcNSn9UthuYa73u9OqGdf1H0HjsDCxe9U85w9yjLU5aTQMBUg0ry6O 1KNI028W6h+CJduHhvCgJahM9g8XrHIdT2oOGX/dAh7vYWUY6CNXbbE9bEo48Rmo FPvhsV7DOoYu4o5QvHezHGlvWeNnlJiAqLjlUjEiglskcyCUktUh4aXx5AMwjcEw Er3hNCYMWZLGUt6ewonXgAwt/EFyFrFlupuSGKtRTOmJNomwie22DawIScJ2QAeP QJfg12votuXIgiHWb844RL8Bq/mv+PNaVZ8jAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUUP+h4FxZv+dksCmyydQ08eqBRU8wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvVVAtaDRGeFp2LWRrc0Nt eXlkUTA4ZXFCUlU4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AstNKDANBgkqhkiG9w0BAQsFAAOCAQEAEnM3Zef1pirhXGso0aLcU5VNQ/Qmg3cq 75fZf/Htx3UKhlYW6CwU5gaQacBJNv3LxbD8MPjLv/DMmJXFQ3HMQvh4LopOQ3KF 5f0yJdWTzlwP9cvwAPP+Yi2NzNkN6xas/ttMV9pA5Mcwa2GonC/O5m8YXhs1Zh/q yRMzGNs4m2oeDiw7CEelwQF5F/ibAnCDVTY1PoyZq6n9WfpRhqh6jMT69wskfDJ6 GkNCsv9vyRb0sol0Kp4qCu/aRFtFiNYY+KROC+Stiu2C4kiByP/0raJ/1EmN7VZF KcSNwu6adJ02a7xs1hLAZiIdB6F7O7VGR7uYLw8YW7v3OvkGCpkAdA== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:43 2024 by rpki-client on console-fra.rpki-client.org