$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Zk8F21u8eDHewCJeJdJkKctuU0Q.roa File: Zk8F21u8eDHewCJeJdJkKctuU0Q.roa (raw, json) Hash identifier: ODE2iLa6BABWOwbCm1Mg0mOEG12iKsbdS7kOw5rwErM= Subject key identifier: 66:4F:05:DB:5B:BC:78:31:DE:C0:22:5E:25:D2:64:29:CB:6E:53:44 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1247 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Zk8F21u8eDHewCJeJdJkKctuU0Q.roa Signing time: Mon 26 Aug 2024 05:24:51 +0000 ROA not before: Mon 26 Aug 2024 05:24:51 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 210.17.20.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4679 (0x1247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:51 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=664F05DB5BBC7831DEC0225E25D26429CB6E5344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4e:ef:41:56:ff:cd:61:74:f0:69:5f:d1:4f: 8e:ad:f7:0a:27:ff:92:88:39:1c:36:91:5e:55:57: 8e:89:f2:6f:db:44:5d:01:bc:17:43:a5:ed:ce:90: 1c:f8:1d:46:fb:6e:66:8d:67:5c:98:fd:a1:13:1e: 31:a5:51:0e:a4:23:76:6a:25:31:3c:1f:fc:5e:a1: 2d:fa:a8:0c:29:0a:65:4a:3d:f5:a1:50:f0:17:b3: a0:84:f2:69:36:4b:66:14:e0:58:88:46:01:2e:89: c1:ad:1a:82:fe:6a:d1:7d:2b:90:09:dd:cd:ac:ee: fb:6a:18:ca:82:07:88:eb:1c:e3:42:52:b0:dd:9e: fd:8c:f2:30:6d:e6:bd:8c:e3:61:e8:a7:d3:4c:c0: 3f:a8:4a:eb:57:3c:b0:8e:9e:62:82:59:e4:bd:43: d2:3e:2b:26:d4:ef:00:aa:ed:2e:24:41:30:d2:88: c7:e0:1d:8c:a4:18:8f:44:c3:c9:2f:0f:11:f0:0d: eb:89:55:95:aa:e6:7f:9e:ec:ee:e1:3c:d9:cc:35: 6e:6d:9e:22:7e:4a:92:a2:ea:0d:63:d0:97:11:4f: e6:6e:29:fe:cd:66:02:c1:55:ce:44:df:39:f3:50: 2c:6d:af:d9:11:c2:1f:85:d4:35:45:79:a9:2d:e9: 06:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4F:05:DB:5B:BC:78:31:DE:C0:22:5E:25:D2:64:29:CB:6E:53:44 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Zk8F21u8eDHewCJeJdJkKctuU0Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.20.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:3c:a6:fd:e9:5b:c2:0f:4c:09:b1:79:74:f7:35:a8:5f:b7: 7f:74:80:ed:5f:af:3a:49:66:5e:7c:c5:e0:19:50:c8:58:12: 27:67:f7:0b:dc:41:46:67:81:83:60:13:a6:8c:98:56:aa:5c: 24:18:9e:8e:5c:cf:5a:ec:5a:47:65:cd:5e:3c:c3:d3:09:93: 1e:54:2c:12:96:e9:ea:ac:0e:1a:c4:57:2e:01:94:f7:30:63: a0:e2:d8:16:73:6f:2d:f2:29:a9:85:10:42:79:77:15:fd:32: 58:0e:84:d5:d5:a9:6d:aa:c6:d7:21:7d:02:dc:12:f2:99:a6: d8:6c:e1:aa:46:61:e0:80:41:27:45:a8:24:df:48:10:c6:39: 27:f6:aa:53:26:37:b9:69:a9:e5:0f:ef:0e:c5:aa:1e:02:02: 81:86:b1:67:96:a9:5b:42:ed:7b:8e:41:72:44:32:ce:16:26: 76:7c:60:1d:76:f2:74:6f:d2:13:6f:a1:72:3c:fe:20:ca:28: 5e:97:25:f8:49:c0:ac:29:9a:33:39:8c:c6:84:43:97:3b:04: fe:ad:60:50:a5:47:34:e0:63:81:f0:f5:6b:0c:08:e6:b9:ae: a1:90:af:31:7b:90:d5:f8:45:ce:c8:9d:92:d5:40:fb:2d:3c: f5:ef:ce:2f -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY2NEYwNURCNUJCQzc4 MzFERUMwMjI1RTI1RDI2NDI5Q0I2RTUzNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDTu9BVv/NYXTwaV/RT46t9won/5KIORw2kV5VV46J8m/bRF0B vBdDpe3OkBz4HUb7bmaNZ1yY/aETHjGlUQ6kI3ZqJTE8H/xeoS36qAwpCmVKPfWh UPAXs6CE8mk2S2YU4FiIRgEuicGtGoL+atF9K5AJ3c2s7vtqGMqCB4jrHONCUrDd nv2M8jBt5r2M42Hop9NMwD+oSutXPLCOnmKCWeS9Q9I+KybU7wCq7S4kQTDSiMfg HYykGI9Ew8kvDxHwDeuJVZWq5n+e7O7hPNnMNW5tniJ+SpKi6g1j0JcRT+ZuKf7N ZgLBVc5E3znzUCxtr9kRwh+F1DVFeakt6QYrAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUZk8F21u8eDHewCJeJdJkKctuU0QwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvWms4RjIxdThlREhld0NK ZUpkSmtLY3R1VTBRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIRFDANBgkqhkiG9w0BAQsFAAOCAQEAKjym/elbwg9MCbF5dPc1qF+3f3SA7V+v OklmXnzF4BlQyFgSJ2f3C9xBRmeBg2ATpoyYVqpcJBiejlzPWuxaR2XNXjzD0wmT HlQsEpbp6qwOGsRXLgGU9zBjoOLYFnNvLfIpqYUQQnl3Ff0yWA6E1dWpbarG1yF9 AtwS8pmm2GzhqkZh4IBBJ0WoJN9IEMY5J/aqUyY3uWmp5Q/vDsWqHgICgYaxZ5ap W0Lte45BckQyzhYmdnxgHXbydG/SE2+hcjz+IMooXpcl+EnArCmaMzmMxoRDlzsE /q1gUKVHNOBjgfD1awwI5rmuoZCvMXuQ1fhFzsidktVA+y089e/OLw== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org