$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/aX5itu0sQ_VCj5BcgeHFUowp3xk.roa File: aX5itu0sQ_VCj5BcgeHFUowp3xk.roa (raw, json) Hash identifier: AMHBCwQqYg21z9Vsjc/iOmS+Y+wQi436KMBbgckUdjU= Subject key identifier: 69:7E:62:B6:ED:2C:43:F5:42:8F:90:5C:81:E1:C5:52:8C:29:DF:19 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0FBD Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/aX5itu0sQ_VCj5BcgeHFUowp3xk.roa Signing time: Fri 01 Sep 2023 09:37:13 +0000 ROA not before: Fri 01 Sep 2023 09:37:13 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131597 IP address blocks: 60.198.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4029 (0xfbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:13 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=697E62B6ED2C43F5428F905C81E1C5528C29DF19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:88:76:a5:93:83:d0:2c:cb:9f:d1:8c:78: aa:41:69:1e:7c:ff:b3:ab:29:64:3c:75:11:10:48: 1d:a9:a0:59:3b:67:23:95:5c:ab:53:f7:ba:3b:1b: 8b:57:b9:bd:4d:6e:f5:5e:d0:cf:c0:91:c2:9f:f7: 48:aa:78:54:3f:0b:33:88:2e:7d:7d:f1:10:96:0b: 19:34:84:ed:30:4b:5b:3d:0d:9d:f5:e9:5e:bd:23: 59:b0:9e:49:41:b2:5f:02:9d:a6:18:9d:8a:00:cf: 7e:cb:4c:d2:0c:9b:4f:b4:56:aa:84:66:e9:9d:bb: a2:6a:98:b6:25:ec:37:00:a2:fc:44:fe:ed:f2:b4: c5:f5:a2:e3:8e:be:af:2b:4c:ed:b5:c3:42:51:12: ab:b2:83:b9:1c:7b:bc:ac:17:66:43:69:0e:87:56: 93:51:af:d6:56:63:c7:1c:a4:2e:45:44:0d:20:c5: 5a:7c:b4:28:4d:57:1c:ae:88:cd:e4:36:9c:80:4c: 33:77:f0:48:4c:f4:e6:52:92:f4:ea:61:87:ba:ec: 00:04:79:9f:aa:00:4f:fc:15:15:ed:08:60:59:e5: 5f:f2:87:20:f8:82:1d:29:77:ce:b2:d1:4b:d8:2b: c4:d3:ac:45:0e:6a:23:79:d9:01:66:52:8b:28:72: 26:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7E:62:B6:ED:2C:43:F5:42:8F:90:5C:81:E1:C5:52:8C:29:DF:19 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/aX5itu0sQ_VCj5BcgeHFUowp3xk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.198.48.0/20 Signature Algorithm: sha256WithRSAEncryption 2f:7e:d2:22:db:27:d9:c6:e6:9a:8e:e9:f1:04:02:1b:82:a5: 35:ce:88:12:fa:ac:59:cf:a8:33:4c:d0:ca:b5:db:83:a9:be: cf:21:86:e3:70:aa:9d:48:15:3b:17:af:e6:f6:a0:52:f3:e1: 8d:6d:97:e8:8b:c9:ce:2e:58:b0:c1:7a:a9:47:2f:65:25:4c: 8a:cf:b0:4b:c9:30:d0:11:83:70:03:e1:96:87:c0:62:30:1c: c7:3e:10:f2:0b:23:e5:05:af:86:9c:54:a1:fc:1d:91:d7:84: f4:21:d4:44:c1:cb:1f:1f:7d:55:22:92:92:59:57:90:6b:0f: 06:9c:f9:8e:fa:17:35:05:bb:f9:29:8e:cd:4d:6c:1e:d8:4f: 16:6c:2b:27:5c:5c:e0:95:11:11:64:31:6f:ff:cb:82:39:bd: f2:5a:57:3c:81:5d:8e:0b:a7:c5:74:45:98:47:22:f8:8c:f1: 00:21:10:cf:c3:5e:67:ba:d5:1c:06:c0:06:90:3c:44:54:24: 74:56:41:4b:59:2b:2d:84:15:89:1c:4c:fc:a3:ec:aa:b9:90: 4d:9b:2c:52:45:d0:70:70:ab:23:bf:6b:e6:1b:63:ba:c2:ca: fc:7f:a9:b5:34:32:81:e9:bf:f6:4f:99:19:31:f1:8d:f3:02: 17:f9:01:3a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD70wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY5N0U2MkI2RUQyQzQz RjU0MjhGOTA1QzgxRTFDNTUyOEMyOURGMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9e4h2pZOD0CzLn9GMeKpBaR58/7OrKWQ8dREQSB2poFk7ZyOV XKtT97o7G4tXub1NbvVe0M/AkcKf90iqeFQ/CzOILn198RCWCxk0hO0wS1s9DZ31 6V69I1mwnklBsl8CnaYYnYoAz37LTNIMm0+0VqqEZumdu6JqmLYl7DcAovxE/u3y tMX1ouOOvq8rTO21w0JREquyg7kce7ysF2ZDaQ6HVpNRr9ZWY8ccpC5FRA0gxVp8 tChNVxyuiM3kNpyATDN38EhM9OZSkvTqYYe67AAEeZ+qAE/8FRXtCGBZ5V/yhyD4 gh0pd86y0UvYK8TTrEUOaiN52QFmUosocib7AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUaX5itu0sQ/VCj5BcgeHFUowp3xkwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvYVg1aXR1MHNRX1ZDajVC Y2dlSEZVb3dwM3hrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BDzGMDANBgkqhkiG9w0BAQsFAAOCAQEAL37SItsn2cbmmo7p8QQCG4KlNc6IEvqs Wc+oM0zQyrXbg6m+zyGG43CqnUgVOxev5vagUvPhjW2X6IvJzi5YsMF6qUcvZSVM is+wS8kw0BGDcAPhlofAYjAcxz4Q8gsj5QWvhpxUofwdkdeE9CHURMHLHx99VSKS kllXkGsPBpz5jvoXNQW7+SmOzU1sHthPFmwrJ1xc4JUREWQxb//Lgjm98lpXPIFd jgunxXRFmEci+IzxACEQz8NeZ7rVHAbABpA8RFQkdFZBS1krLYQViRxM/KPsqrmQ TZssUkXQcHCrI79r5htjusLK/H+ptTQygem/9k+ZGTHxjfMCF/kBOg== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org