$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/VOy7hwDAbbVwfc8lIoPl8M_66xQ.roa File: VOy7hwDAbbVwfc8lIoPl8M_66xQ.roa (raw, json) Hash identifier: 6RkdA+tSdanFDO6W8hdcaiA+QEyeM8fCGWmPoKcP3Q4= Subject key identifier: 54:EC:BB:87:00:C0:6D:B5:70:7D:CF:25:22:83:E5:F0:CF:FA:EB:14 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11DF Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/VOy7hwDAbbVwfc8lIoPl8M_66xQ.roa Signing time: Mon 26 Aug 2024 05:24:28 +0000 ROA not before: Mon 26 Aug 2024 05:24:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 210.17.104.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4575 (0x11df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=54ECBB8700C06DB5707DCF252283E5F0CFFAEB14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:f5:2f:b4:ee:98:23:db:45:03:fb:86:b8: d7:6f:e0:b0:2d:60:5e:73:c9:15:62:ba:37:13:11: f7:96:19:f6:82:88:40:df:57:38:c0:e7:93:96:18: 74:fe:db:fb:30:89:85:2f:bf:f0:93:9c:22:6d:58: 8f:63:93:06:92:96:0a:b2:fa:dc:1b:e2:53:59:4d: 06:db:1e:50:fd:b0:38:05:70:db:24:15:f6:ed:36: 1f:1a:3f:f9:96:4e:ec:5d:1f:09:de:d9:c4:84:5a: 04:dc:f0:62:ed:03:4e:1f:05:d4:f8:c5:2b:48:04: bf:8d:6b:07:91:8a:1c:2a:26:8e:74:4b:61:37:1c: e5:2a:b3:a4:d7:27:eb:04:2a:0d:7b:25:6c:f7:db: cd:db:0b:a1:a8:14:f0:f4:fd:c2:fc:eb:57:43:76: 79:4a:a3:82:6a:6f:6f:65:c2:6f:d8:b3:32:89:dc: 6f:4e:1d:30:fe:e9:50:66:b8:51:66:a0:04:df:0d: 28:e7:28:08:12:57:e9:2b:7d:23:49:1f:97:25:df: a1:bd:66:eb:aa:2e:21:03:4d:22:74:02:7f:0d:7b: a6:8a:eb:de:e6:8c:a8:32:cc:10:6e:44:c4:f3:0a: 5f:63:85:81:2a:f2:c3:62:a3:66:dd:57:96:c4:5a: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EC:BB:87:00:C0:6D:B5:70:7D:CF:25:22:83:E5:F0:CF:FA:EB:14 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/VOy7hwDAbbVwfc8lIoPl8M_66xQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.104.0/21 Signature Algorithm: sha256WithRSAEncryption 03:44:13:6f:14:0a:7c:95:d2:17:f3:74:d7:96:fd:88:41:70: ff:58:0f:b6:88:0f:21:03:e7:f5:fc:ea:21:08:50:2a:cb:a8: a3:7b:34:03:fc:63:60:01:c2:da:81:10:ae:d9:5a:4b:f8:ee: dc:33:28:35:1f:2d:9c:86:36:5a:e6:68:68:fd:65:57:dd:bf: 05:63:26:49:25:5b:c8:cd:1a:84:8a:bf:ae:a7:36:15:08:10: f7:0a:86:9c:62:35:09:28:ad:18:df:30:23:dc:70:48:67:63: 3f:53:ed:0a:f0:ba:68:25:6d:2d:62:c3:95:3b:7f:d5:d0:08: dc:2e:47:03:d9:78:58:d6:53:13:ba:e2:55:0f:ed:4c:a3:77: 6e:0b:bd:fb:ae:68:09:52:c7:b2:21:c5:ef:6f:42:45:f2:96: 01:8d:56:74:f0:c2:e3:87:65:89:65:4a:29:ad:9b:cd:44:ca: e8:63:7f:cd:42:49:ab:ea:40:cb:3d:0a:ca:63:da:f4:cc:5b: 8f:86:b0:7f:ec:63:e2:9c:20:41:8a:81:47:91:72:2f:da:2f: fc:7b:58:9d:b4:32:0a:29:2f:70:86:15:16:ea:22:f5:1c:12: 36:c8:e0:f7:9b:74:28:85:e9:fd:86:fa:83:02:69:ea:78:9d: 38:48:71:db -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEd8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU0RUNCQjg3MDBDMDZE QjU3MDdEQ0YyNTIyODNFNUYwQ0ZGQUVCMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC8OPUvtO6YI9tFA/uGuNdv4LAtYF5zyRViujcTEfeWGfaCiEDf VzjA55OWGHT+2/swiYUvv/CTnCJtWI9jkwaSlgqy+twb4lNZTQbbHlD9sDgFcNsk FfbtNh8aP/mWTuxdHwne2cSEWgTc8GLtA04fBdT4xStIBL+NaweRihwqJo50S2E3 HOUqs6TXJ+sEKg17JWz3283bC6GoFPD0/cL861dDdnlKo4Jqb29lwm/YszKJ3G9O HTD+6VBmuFFmoATfDSjnKAgSV+krfSNJH5cl36G9ZuuqLiEDTSJ0An8Ne6aK697m jKgyzBBuRMTzCl9jhYEq8sNio2bdV5bEWsLZAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUVOy7hwDAbbVwfc8lIoPl8M/66xQwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvVk95N2h3REFiYlZ3ZmM4 bElvUGw4TV82NnhRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME A9IRaDANBgkqhkiG9w0BAQsFAAOCAQEAA0QTbxQKfJXSF/N015b9iEFw/1gPtogP IQPn9fzqIQhQKsuoo3s0A/xjYAHC2oEQrtlaS/ju3DMoNR8tnIY2WuZoaP1lV92/ BWMmSSVbyM0ahIq/rqc2FQgQ9wqGnGI1CSitGN8wI9xwSGdjP1PtCvC6aCVtLWLD lTt/1dAI3C5HA9l4WNZTE7riVQ/tTKN3bgu9+65oCVLHsiHF729CRfKWAY1WdPDC 44dliWVKKa2bzUTK6GN/zUJJq+pAyz0KymPa9Mxbj4awf+xj4pwgQYqBR5FyL9ov /HtYnbQyCikvcIYVFuoi9RwSNsjg95t0KIXp/Yb6gwJp6nidOEhx2w== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:43 2024 by rpki-client on console-fra.rpki-client.org