$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZBlJOYaEzahvooEARFrVzca8YrU.roa File: ZBlJOYaEzahvooEARFrVzca8YrU.roa (raw, json) Hash identifier: qLkSROpqbnQYADMECalwf35ae7KoMWMN3wTuSUsMjSI= Subject key identifier: 64:19:49:39:86:84:CD:A8:6F:A2:81:00:44:5A:D5:CD:C6:BC:62:B5 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11E0 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZBlJOYaEzahvooEARFrVzca8YrU.roa Signing time: Mon 26 Aug 2024 05:24:29 +0000 ROA not before: Mon 26 Aug 2024 05:24:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24158 IP address blocks: 175.97.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4576 (0x11e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:29 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=641949398684CDA86FA28100445AD5CDC6BC62B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5a:8c:52:3e:f9:0f:1f:dc:8f:6a:1c:a9:32: 88:5f:d7:3e:31:58:a5:ba:58:6c:cb:01:fa:23:7f: 78:1d:db:b1:cd:39:ae:39:c6:09:47:ef:f6:b1:d8: 12:1e:b8:02:cd:09:28:b1:39:a5:bb:45:eb:6f:20: bd:f1:dd:ec:34:cc:a9:0c:9d:1b:e8:4b:38:1a:e3: 56:e7:4f:d3:92:06:fe:6f:fa:da:01:52:7f:6c:16: 08:c6:8d:c6:85:ff:b1:bc:1d:68:46:69:32:72:c9: 70:57:01:46:1e:ae:cc:d1:eb:69:3a:b0:c7:ad:25: 10:38:8d:14:c9:12:32:14:d5:a8:66:8f:06:14:68: 69:06:49:4e:0e:01:df:1f:19:6a:46:f5:bb:61:be: fb:36:cf:fe:23:5b:d9:a4:ee:23:bc:ff:41:af:25: 1e:f7:d0:d1:1b:3e:17:bd:f5:86:6a:4b:a8:46:d5: 68:a4:a5:c8:17:1b:24:5c:87:40:ea:4f:67:bc:d2: 6c:e5:8d:33:5a:08:4b:35:2b:a2:0f:dd:06:a4:1f: bf:ce:7d:f4:b5:54:a7:a6:90:b8:77:f6:4e:73:4c: 78:7f:4f:9e:99:cc:a0:b2:1e:74:98:23:31:ab:8e: 53:96:b2:6d:9c:f6:46:d0:b3:0b:ff:e1:19:3a:a1: c5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:19:49:39:86:84:CD:A8:6F:A2:81:00:44:5A:D5:CD:C6:BC:62:B5 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ZBlJOYaEzahvooEARFrVzca8YrU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.97.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4e:e9:b0:48:7c:2d:24:89:15:ea:f3:0d:fd:fd:7c:1f:5b:da: 46:d8:7a:48:df:f7:6d:8e:5b:3a:b2:83:df:81:d0:3f:93:d7: f1:5b:92:da:10:3a:a3:4f:61:05:68:cf:1c:dc:50:c1:ae:89: d9:c9:37:5f:d2:44:00:e6:c5:57:68:64:5b:45:fb:9b:4f:ba: 0b:f1:a4:71:37:2c:0d:cf:9c:3a:fa:2e:29:7f:3e:bc:4b:04: e6:b5:30:14:2e:db:b4:24:2a:d2:21:2a:bc:e0:66:8a:e9:bf: 04:87:3e:aa:b3:26:a6:a1:8e:6d:1f:0e:c2:60:76:18:0b:f3: 7c:95:40:61:3f:3a:44:4f:0d:23:de:3c:82:6e:92:dc:29:8b: ab:95:fa:a2:43:fc:37:d4:be:f9:98:78:90:6a:0a:12:96:b9: ce:ed:d2:65:b8:77:a4:f0:80:fa:05:64:91:37:02:af:e3:6a: ed:b9:b3:39:fd:e9:29:f7:0c:70:a1:7f:18:7c:f7:2d:72:6d: 59:74:89:b1:18:c8:c2:14:2c:a4:0a:14:2f:25:30:3d:c9:a4: 21:cd:de:2b:9f:13:31:64:3b:cb:44:07:95:60:ca:85:d3:93: eb:a7:c2:e4:76:66:61:3e:12:e8:6a:2a:6a:53:c0:5e:da:52: 61:6c:30:4c -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY0MTk0OTM5ODY4NENE QTg2RkEyODEwMDQ0NUFENUNEQzZCQzYyQjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTWoxSPvkPH9yPahypMohf1z4xWKW6WGzLAfojf3gd27HNOa45 xglH7/ax2BIeuALNCSixOaW7RetvIL3x3ew0zKkMnRvoSzga41bnT9OSBv5v+toB Un9sFgjGjcaF/7G8HWhGaTJyyXBXAUYerszR62k6sMetJRA4jRTJEjIU1ahmjwYU aGkGSU4OAd8fGWpG9bthvvs2z/4jW9mk7iO8/0GvJR730NEbPhe99YZqS6hG1Wik pcgXGyRch0DqT2e80mzljTNaCEs1K6IP3QakH7/OffS1VKemkLh39k5zTHh/T56Z zKCyHnSYIzGrjlOWsm2c9kbQswv/4Rk6ocW7AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUZBlJOYaEzahvooEARFrVzca8YrUwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvWkJsSk9ZYUV6YWh2b29F QVJGclZ6Y2E4WXJVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AK9hMA0GCSqGSIb3DQEBCwUAA4IBAQBO6bBIfC0kiRXq8w39/XwfW9pG2HpI3/dt jls6soPfgdA/k9fxW5LaEDqjT2EFaM8c3FDBronZyTdf0kQA5sVXaGRbRfubT7oL 8aRxNywNz5w6+i4pfz68SwTmtTAULtu0JCrSISq84GaK6b8Ehz6qsyamoY5tHw7C YHYYC/N8lUBhPzpETw0j3jyCbpLcKYurlfqiQ/w31L75mHiQagoSlrnO7dJluHek 8ID6BWSRNwKv42rtubM5/ekp9wxwoX8YfPctcm1ZdImxGMjCFCykChQvJTA9yaQh zd4rnxMxZDvLRAeVYMqF05Prp8LkdmZhPhLoaipqU8Be2lJhbDBM -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:43 2024 by rpki-client on console-fra.rpki-client.org