$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WQY6SSHImyybZV5XLtz8oJyMxpM.roa File: WQY6SSHImyybZV5XLtz8oJyMxpM.roa (raw, json) Hash identifier: qIi/M3KlCdvdOILKpQm6Cz36HpaYLzXBQ3/BKPRrYBo= Subject key identifier: 59:06:3A:49:21:C8:9B:2C:9B:65:5E:57:2E:DC:FC:A0:9C:8C:C6:93 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 122D Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WQY6SSHImyybZV5XLtz8oJyMxpM.roa Signing time: Mon 26 Aug 2024 05:24:46 +0000 ROA not before: Mon 26 Aug 2024 05:24:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 60.199.193.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4653 (0x122d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:46 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=59063A4921C89B2C9B655E572EDCFCA09C8CC693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:18:1e:54:06:d4:ab:d5:b6:72:7d:ce:bd:04: 88:6a:d9:f8:4c:9c:24:cf:f1:ee:6c:cc:13:13:81: 47:89:e3:6b:d3:34:b6:0d:13:70:58:a7:2e:5c:f9: 8d:cb:32:70:56:9d:aa:18:ae:99:97:f4:41:8d:aa: ce:6f:1b:5e:ab:24:91:ba:85:b4:66:0c:78:eb:f2: f8:54:c0:7c:72:61:41:ee:a5:b2:b0:3d:5d:4c:6d: 37:28:82:9c:fb:b7:9a:94:22:a7:1d:bf:2f:0f:d6: 68:fc:2f:54:67:86:55:38:1a:b1:cf:ff:d8:39:d3: 74:ec:83:95:a6:ee:5c:89:36:7f:8f:f8:92:75:e0: f9:bf:a6:85:10:06:74:c8:16:5b:6c:8e:7c:bf:3c: aa:f2:e9:58:9b:54:78:b6:8e:3a:e5:2c:23:2e:21: 02:ea:ff:55:9d:b2:80:89:a5:ff:e8:2e:7c:bf:45: 67:52:6b:55:53:58:f0:2d:8f:39:ca:bc:cc:1f:4f: db:a4:df:3f:b4:dd:f3:e6:9b:bf:3f:4f:89:1b:f5: 9e:f2:15:9a:4d:02:67:e8:0f:a0:32:03:bf:cb:e9: 9c:a2:0b:c3:a4:39:a0:44:72:17:cd:8b:c3:55:68: a1:4d:25:95:74:41:f8:7f:cb:15:33:b1:15:30:bb: 8b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:06:3A:49:21:C8:9B:2C:9B:65:5E:57:2E:DC:FC:A0:9C:8C:C6:93 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WQY6SSHImyybZV5XLtz8oJyMxpM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.199.193.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:36:17:97:4c:b6:28:72:e8:87:d0:a8:61:42:96:39:9a:67: 8f:36:79:79:bb:e8:ed:ee:1d:09:7f:f7:dd:39:36:f4:e9:63: 41:2b:29:cd:1c:fa:c4:e1:32:6f:c9:05:5e:f1:48:4a:b3:7b: 44:c0:6d:a6:89:4e:c4:9e:ef:e4:ae:80:11:b2:f1:02:a5:47: 6d:7d:ea:3b:a4:d8:0f:de:dc:68:c3:0f:07:aa:24:5a:ce:95: ea:d5:e3:7c:08:85:28:1f:c5:64:19:7f:52:1b:c5:48:21:9e: f4:24:5c:ba:9b:b8:e5:e1:da:bd:cb:cb:7c:1e:ac:e1:12:17: 68:98:35:a5:34:8b:73:bf:d5:69:93:6e:f7:2c:08:42:fc:65: 8e:9b:2f:95:ac:26:49:02:05:d7:1b:49:07:89:ff:37:e3:73: 43:7b:a9:3e:93:35:0c:82:92:46:f0:57:59:67:3b:82:96:78: 47:19:ac:61:f4:dd:5d:56:a6:3a:89:72:f1:99:a9:78:7c:d0: 57:a9:44:1e:2e:2c:14:24:3a:4a:99:90:41:59:ce:dd:10:bc: 7e:c8:68:ff:e4:c2:c1:04:d1:2b:39:19:46:91:48:be:3c:e3: 68:e3:fb:7c:29:5a:45:0c:be:1b:d2:60:70:d3:43:a7:43:bb: da:3a:ad:e7 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEi0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0NDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU5MDYzQTQ5MjFDODlC MkM5QjY1NUU1NzJFRENGQ0EwOUM4Q0M2OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQD1GB5UBtSr1bZyfc69BIhq2fhMnCTP8e5szBMTgUeJ42vTNLYN E3BYpy5c+Y3LMnBWnaoYrpmX9EGNqs5vG16rJJG6hbRmDHjr8vhUwHxyYUHupbKw PV1MbTcogpz7t5qUIqcdvy8P1mj8L1RnhlU4GrHP/9g503Tsg5Wm7lyJNn+P+JJ1 4Pm/poUQBnTIFltsjny/PKry6VibVHi2jjrlLCMuIQLq/1WdsoCJpf/oLny/RWdS a1VTWPAtjznKvMwfT9uk3z+03fPmm78/T4kb9Z7yFZpNAmfoD6AyA7/L6ZyiC8Ok OaBEchfNi8NVaKFNJZV0Qfh/yxUzsRUwu4utAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUWQY6SSHImyybZV5XLtz8oJyMxpMwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvV1FZNlNTSElteXliWlY1 WEx0ejhvSnlNeHBNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ADzHwTANBgkqhkiG9w0BAQsFAAOCAQEAjzYXl0y2KHLoh9CoYUKWOZpnjzZ5ebvo 7e4dCX/33Tk29OljQSspzRz6xOEyb8kFXvFISrN7RMBtpolOxJ7v5K6AEbLxAqVH bX3qO6TYD97caMMPB6okWs6V6tXjfAiFKB/FZBl/UhvFSCGe9CRcupu45eHavcvL fB6s4RIXaJg1pTSLc7/VaZNu9ywIQvxljpsvlawmSQIF1xtJB4n/N+NzQ3upPpM1 DIKSRvBXWWc7gpZ4RxmsYfTdXVamOoly8ZmpeHzQV6lEHi4sFCQ6SpmQQVnO3RC8 fsho/+TCwQTRKzkZRpFIvjzjaOP7fClaRQy+G9JgcNNDp0O72jqt5w== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org