$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/aSy42SBlxYgd7N-QWa1SkITiRMs.roa File: aSy42SBlxYgd7N-QWa1SkITiRMs.roa (raw, json) Hash identifier: RCyCxy186W7X2UdW5XYpYAOhXet39toeBRO/lql+eII= Subject key identifier: 69:2C:B8:D9:20:65:C5:88:1D:EC:DF:90:59:AD:52:90:84:E2:44:CB Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11C8 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/aSy42SBlxYgd7N-QWa1SkITiRMs.roa Signing time: Mon 26 Aug 2024 05:24:22 +0000 ROA not before: Mon 26 Aug 2024 05:24:22 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4662 IP address blocks: 210.62.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4552 (0x11c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:22 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=692CB8D92065C5881DECDF9059AD529084E244CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:c7:d9:cd:74:d6:84:79:9d:0d:ed:8c:c1: 95:82:3b:05:96:c2:f1:eb:77:3e:ad:07:59:34:93: 83:b3:39:c9:f5:61:eb:87:71:0b:fa:90:f5:fe:f0: 3b:2d:bc:7d:08:df:fa:46:72:b6:c5:c3:b7:21:db: 04:cb:a2:d3:48:96:7e:75:da:4a:c1:3f:f7:de:3c: 65:4c:44:c4:44:d4:18:8d:ee:d6:b3:ee:6f:06:d9: ce:d6:4e:ef:dd:ae:3c:4c:12:78:97:9d:51:f1:0a: 2c:c4:3b:c1:f8:ad:7d:4c:35:1d:8a:6b:8d:03:51: 08:98:9c:53:fb:73:7a:4a:4d:65:18:29:07:a3:9e: 3c:cc:16:cc:46:b1:89:5e:9a:af:1a:61:0c:0e:54: 74:86:0e:db:3b:59:53:78:19:38:0e:39:da:56:ef: c6:bc:82:25:b2:4a:03:6d:ea:25:b3:d2:b9:f4:ae: d7:56:c2:61:2c:1a:cd:25:4f:5f:71:2f:c6:0b:63: bd:43:e9:3a:9d:2f:c8:9a:1f:04:c8:dc:50:9a:15: 78:9f:59:c3:1e:81:ea:dc:c8:d8:1f:85:0f:e0:76: c2:1a:e1:d3:9f:da:cb:b7:ef:0b:5a:02:81:26:9d: 39:58:71:af:23:fb:78:80:c8:92:6b:8b:ea:86:9f: 1b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2C:B8:D9:20:65:C5:88:1D:EC:DF:90:59:AD:52:90:84:E2:44:CB X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/aSy42SBlxYgd7N-QWa1SkITiRMs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.0.0/18 Signature Algorithm: sha256WithRSAEncryption 41:4c:67:39:45:27:84:8f:0f:49:ac:50:ca:47:32:66:16:38: 25:64:27:8e:84:a0:49:c8:7d:ac:b8:3a:49:78:5e:b5:14:52: 39:fd:dc:04:b5:fd:3d:17:9c:db:88:6a:17:f1:fd:2b:9b:53: 18:06:34:c9:dc:10:45:bb:38:3e:5d:8a:56:8a:87:f3:7a:7c: 1a:6c:be:57:9b:1b:ab:df:9c:70:7b:6e:1f:0f:0d:55:30:91: 8d:63:35:5e:87:c0:8c:6e:93:1b:4a:1d:5d:9e:76:1e:f5:32: 80:a0:85:6f:9d:84:0c:3a:7f:c4:67:39:9c:49:75:c5:52:98: 37:d0:9b:e2:8b:18:49:72:89:2e:1a:6a:3d:b4:2f:62:ef:f8: fe:70:72:fc:7d:d7:c8:11:34:88:60:f4:47:e4:2f:c5:af:87: c5:2f:67:d0:f5:7c:6d:e5:46:de:31:27:92:2c:60:2f:5f:39: b0:fd:78:c5:59:79:ce:f7:9e:42:1a:36:be:a1:fb:69:52:6c: fe:e1:c0:c7:c2:ea:2d:38:36:12:57:b3:11:bc:33:42:25:45: 60:e4:f1:97:89:3b:6e:b0:0f:6e:52:a8:d5:74:d3:38:21:2f: 77:27:a8:d0:9c:69:cd:9c:d5:03:0f:d0:e7:50:83:ee:ef:86: 3a:1b:60:01 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEcgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDY5MkNCOEQ5MjA2NUM1 ODgxREVDREY5MDU5QUQ1MjkwODRFMjQ0Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC91MfZzXTWhHmdDe2MwZWCOwWWwvHrdz6tB1k0k4OzOcn1YeuH cQv6kPX+8DstvH0I3/pGcrbFw7ch2wTLotNIln512krBP/fePGVMRMRE1BiN7taz 7m8G2c7WTu/drjxMEniXnVHxCizEO8H4rX1MNR2Ka40DUQiYnFP7c3pKTWUYKQej njzMFsxGsYlemq8aYQwOVHSGDts7WVN4GTgOOdpW78a8giWySgNt6iWz0rn0rtdW wmEsGs0lT19xL8YLY71D6TqdL8iaHwTI3FCaFXifWcMegercyNgfhQ/gdsIa4dOf 2su37wtaAoEmnTlYca8j+3iAyJJri+qGnxtXAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUaSy42SBlxYgd7N+QWa1SkITiRMswHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvYVN5NDJTQmx4WWdkN04t UVdhMVNrSVRpUk1zLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BtI+ADANBgkqhkiG9w0BAQsFAAOCAQEAQUxnOUUnhI8PSaxQykcyZhY4JWQnjoSg Sch9rLg6SXhetRRSOf3cBLX9PRec24hqF/H9K5tTGAY0ydwQRbs4Pl2KVoqH83p8 Gmy+V5sbq9+ccHtuHw8NVTCRjWM1XofAjG6TG0odXZ52HvUygKCFb52EDDp/xGc5 nEl1xVKYN9Cb4osYSXKJLhpqPbQvYu/4/nBy/H3XyBE0iGD0R+Qvxa+HxS9n0PV8 beVG3jEnkixgL185sP14xVl5zveeQho2vqH7aVJs/uHAx8LqLTg2ElezEbwzQiVF YOTxl4k7brAPblKo1XTTOCEvdyeo0JxpzZzVAw/Q51CD7u+GOhtgAQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org