$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/b5EuC-TF56OsalEQY_L7YPdmp-0.roa File: b5EuC-TF56OsalEQY_L7YPdmp-0.roa (raw, json) Hash identifier: TGr7tE2OE4a7GQPMrRZsqda/im/63Di3abzyisci3mA= Subject key identifier: 6F:91:2E:0B:E4:C5:E7:A3:AC:6A:51:10:63:F2:FB:60:F7:66:A7:ED Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0FE8 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/b5EuC-TF56OsalEQY_L7YPdmp-0.roa Signing time: Fri 01 Sep 2023 09:37:30 +0000 ROA not before: Fri 01 Sep 2023 09:37:30 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 210.243.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4072 (0xfe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:30 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=6F912E0BE4C5E7A3AC6A511063F2FB60F766A7ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4d:4b:b7:32:bf:9c:52:e7:46:e4:59:ae:d5: a4:7d:6e:fc:af:63:75:dc:b8:70:c3:05:66:59:04: c0:f2:9e:60:53:58:aa:8a:ae:49:e7:29:fb:e3:a7: 12:c9:09:cd:b8:0f:6d:0c:da:45:a1:8a:4b:bf:a6: 88:0a:4c:cf:70:5e:75:f3:ab:85:8b:b9:21:c2:e8: e2:fc:e5:b2:a0:dc:08:53:9b:8a:18:77:75:29:29: 3b:26:88:32:8e:5c:15:39:9a:ef:b2:22:86:d1:e0: d9:a8:e6:77:28:20:fe:df:57:9a:94:01:d8:85:b4: b4:66:75:b2:d6:19:1c:66:42:5d:90:42:b5:13:d9: cf:c7:79:52:58:75:3d:f7:24:26:40:4f:79:bf:fb: f7:ce:c8:94:69:50:3d:fe:d7:ab:f8:4d:2f:90:1d: db:a8:60:cd:aa:16:0e:4a:33:5b:e0:8b:0f:e9:1e: 6e:84:4a:b1:a3:11:d4:a7:79:37:83:07:99:06:3b: 3f:66:57:7e:e2:7b:3e:92:51:6b:3c:05:cc:2d:66: 0e:f7:58:2e:7c:a9:d9:2a:93:4c:69:aa:b7:ec:14: a5:b9:c8:3e:fd:4e:b8:3a:11:74:be:af:15:16:a4: c0:37:15:c9:bc:9f:95:71:77:a4:b5:3c:97:6a:22: ec:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:91:2E:0B:E4:C5:E7:A3:AC:6A:51:10:63:F2:FB:60:F7:66:A7:ED X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/b5EuC-TF56OsalEQY_L7YPdmp-0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.243.96.0/19 Signature Algorithm: sha256WithRSAEncryption 51:d3:8e:c5:ba:d1:d8:e1:ca:3f:2a:58:16:e8:f9:94:36:c0: 5b:08:ae:94:bd:ae:24:60:cf:a8:d2:72:b7:2e:e8:d6:b8:b6: eb:03:d1:21:3c:90:1b:59:87:98:ac:47:6d:66:28:48:18:13: 63:48:fb:c7:2b:41:b0:67:28:5e:44:11:f0:4c:e7:2f:dd:61: 43:4e:17:5f:9a:9a:0f:89:44:de:31:63:50:b7:33:44:40:c7: 6a:97:1d:a2:c6:5f:1e:ef:ac:fc:3b:b6:9c:19:9b:34:21:59: 1f:7a:fa:88:63:4a:27:85:a4:ff:0c:09:ff:a0:09:3a:b2:10: 3b:ab:7d:a3:fe:67:d7:dc:ef:2c:41:5d:7a:eb:70:f9:56:9b: 0e:96:a6:87:77:4b:12:91:ba:b8:03:3d:78:32:ac:10:77:1b: 16:6b:25:85:13:56:78:08:6c:0f:95:e3:ba:59:c2:ed:48:d1: 38:52:9a:ce:52:1d:b7:04:67:e6:d4:15:df:b0:8f:4f:f5:95: 66:4a:bd:ab:c3:a9:52:45:ff:db:e9:c0:d8:b7:21:1a:76:30: 6d:3d:3e:48:55:d9:d1:8d:2f:fc:61:57:d3:a6:ef:c8:26:88: 7e:b5:c3:7e:c6:ad:df:08:73:79:2e:fc:11:a8:d4:46:18:4c: d5:14:47:95 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD+gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZGOTEyRTBCRTRDNUU3 QTNBQzZBNTExMDYzRjJGQjYwRjc2NkE3RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDtTUu3Mr+cUudG5Fmu1aR9bvyvY3XcuHDDBWZZBMDynmBTWKqK rknnKfvjpxLJCc24D20M2kWhiku/pogKTM9wXnXzq4WLuSHC6OL85bKg3AhTm4oY d3UpKTsmiDKOXBU5mu+yIobR4Nmo5ncoIP7fV5qUAdiFtLRmdbLWGRxmQl2QQrUT 2c/HeVJYdT33JCZAT3m/+/fOyJRpUD3+16v4TS+QHduoYM2qFg5KM1vgiw/pHm6E SrGjEdSneTeDB5kGOz9mV37iez6SUWs8BcwtZg73WC58qdkqk0xpqrfsFKW5yD79 Trg6EXS+rxUWpMA3Fcm8n5Vxd6S1PJdqIuwHAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUb5EuC+TF56OsalEQY/L7YPdmp+0wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvYjVFdUMtVEY1Nk9zYWxF UVlfTDdZUGRtcC0wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BdLzYDANBgkqhkiG9w0BAQsFAAOCAQEAUdOOxbrR2OHKPypYFuj5lDbAWwiulL2u JGDPqNJyty7o1ri26wPRITyQG1mHmKxHbWYoSBgTY0j7xytBsGcoXkQR8EznL91h Q04XX5qaD4lE3jFjULczREDHapcdosZfHu+s/Du2nBmbNCFZH3r6iGNKJ4Wk/wwJ /6AJOrIQO6t9o/5n19zvLEFdeutw+VabDpamh3dLEpG6uAM9eDKsEHcbFmslhRNW eAhsD5XjulnC7UjROFKazlIdtwRn5tQV37CPT/WVZkq9q8OpUkX/2+nA2LchGnYw bT0+SFXZ0Y0v/GFX06bvyCaIfrXDfsat3whzeS78EajURhhM1RRHlQ== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org