$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/b7wDRTebcnFhyB1sY-w5lleyrQs.roa File: b7wDRTebcnFhyB1sY-w5lleyrQs.roa (raw, json) Hash identifier: 8HAhY8tuBHNhYBywBSvmZblRdxiTo4otrK88gPDJKG4= Subject key identifier: 6F:BC:03:45:37:9B:72:71:61:C8:1D:6C:63:EC:39:96:57:B2:AD:0B Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1211 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/b7wDRTebcnFhyB1sY-w5lleyrQs.roa Signing time: Mon 26 Aug 2024 05:24:40 +0000 ROA not before: Mon 26 Aug 2024 05:24:40 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 20940 IP address blocks: 2001:4546:1003::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4625 (0x1211) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:40 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6FBC0345379B727161C81D6C63EC399657B2AD0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:1d:dd:f7:1e:1b:25:d6:da:70:d7:ba:b9: 1b:b2:23:31:90:38:e2:a6:95:97:b9:43:3e:8a:b3: 44:60:95:9f:52:6d:70:b3:ac:98:64:52:7b:54:5a: e3:9e:7c:ec:ac:62:25:ea:41:7e:78:06:da:5d:b2: 12:35:ab:c6:5f:81:ed:fd:cf:a2:2b:8b:ce:53:32: a8:28:92:80:29:9b:bb:2b:19:ce:00:33:9c:37:24: 8f:5c:05:e8:26:19:fa:6f:49:d3:61:6f:6d:2c:98: d5:a7:2f:72:29:0b:3e:3b:1f:50:8f:2b:f3:2a:10: 15:31:50:c5:15:c4:d7:c0:74:39:ba:60:02:8b:58: 58:d8:9a:4b:42:2b:b9:35:5f:36:81:39:13:a4:b7: 45:25:a9:c4:a3:61:71:0d:65:7b:81:3c:e3:0a:65: f3:33:39:ec:01:de:8f:72:7e:fc:7e:94:c5:19:1d: 39:cb:60:01:a9:b3:61:51:ca:c2:e6:5a:c1:3e:5a: 82:f4:7e:f2:95:f6:6f:5e:68:94:24:cb:53:fe:f4: cc:17:b5:f7:f4:70:69:81:b8:c9:35:e7:82:bd:4e: 23:f8:df:f3:a7:37:19:ef:9f:ee:ce:f2:78:63:33: 2c:af:9c:ff:51:ef:f0:77:27:14:ee:b9:ba:16:2a: 67:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BC:03:45:37:9B:72:71:61:C8:1D:6C:63:EC:39:96:57:B2:AD:0B X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/b7wDRTebcnFhyB1sY-w5lleyrQs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:4546:1003::/48 Signature Algorithm: sha256WithRSAEncryption 18:e4:df:9e:c9:0f:e4:5a:65:43:35:f0:f4:f5:6b:f0:0a:cb: 2a:95:48:7e:40:00:71:ff:2a:f7:9b:ac:e6:3a:34:f7:62:f8: 28:dc:84:b1:8c:d3:0c:d2:fd:26:89:8d:78:73:c7:7e:29:a1: 0a:0f:2a:b8:2c:60:48:b0:9f:82:d9:c7:6e:23:5d:64:3c:09: ad:28:22:96:a9:59:30:c0:41:29:93:be:39:5b:da:8a:04:61: f8:6d:c0:4b:9a:c4:ad:5d:81:77:d3:d0:22:bf:8a:ad:75:c2: 13:a3:a0:6f:ad:38:84:9d:22:6f:53:cc:f9:d4:58:a0:06:2d: e0:b0:fa:be:ad:b4:cb:5f:da:8c:03:99:2b:cb:9e:24:eb:58: 0f:6f:9d:32:02:35:16:db:08:ca:75:ad:4a:80:5e:80:ed:12: c7:cc:40:dd:b1:73:3e:b1:15:44:fa:59:8f:32:4f:48:16:b7: 5a:c6:88:c1:2f:2f:1b:2e:40:96:8c:65:e9:94:82:d2:c0:2d: 77:f8:d5:8b:78:49:f5:13:e1:3d:c2:a9:76:03:48:e2:21:6d: 8b:62:c4:40:4e:e2:94:c0:98:bb:7c:fe:28:b8:58:ff:bb:9c: 64:4f:2b:56:fd:01:af:3d:cf:c8:a9:62:a5:fd:f7:2d:eb:1f: a4:5f:5b:9e -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICEhEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0NDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGQkMwMzQ1Mzc5Qjcy NzE2MUM4MUQ2QzYzRUMzOTk2NTdCMkFEMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvDR3d9x4bJdbacNe6uRuyIzGQOOKmlZe5Qz6Ks0RglZ9SbXCz rJhkUntUWuOefOysYiXqQX54BtpdshI1q8Zfge39z6Iri85TMqgokoApm7srGc4A M5w3JI9cBegmGfpvSdNhb20smNWnL3IpCz47H1CPK/MqEBUxUMUVxNfAdDm6YAKL WFjYmktCK7k1XzaBOROkt0UlqcSjYXENZXuBPOMKZfMzOewB3o9yfvx+lMUZHTnL YAGps2FRysLmWsE+WoL0fvKV9m9eaJQky1P+9MwXtff0cGmBuMk154K9TiP43/On Nxnvn+7O8nhjMyyvnP9R7/B3JxTuuboWKmetAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUb7wDRTebcnFhyB1sY+w5lleyrQswHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvYjd3RFJUZWJjbkZoeUIx c1ktdzVsbGV5clFzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACABRUYQAzANBgkqhkiG9w0BAQsFAAOCAQEAGOTfnskP5FplQzXw9PVr8ArLKpVI fkAAcf8q95us5jo092L4KNyEsYzTDNL9JomNeHPHfimhCg8quCxgSLCfgtnHbiNd ZDwJrSgilqlZMMBBKZO+OVvaigRh+G3AS5rErV2Bd9PQIr+KrXXCE6Ogb604hJ0i b1PM+dRYoAYt4LD6vq20y1/ajAOZK8ueJOtYD2+dMgI1FtsIynWtSoBegO0Sx8xA 3bFzPrEVRPpZjzJPSBa3WsaIwS8vGy5Aloxl6ZSC0sAtd/jVi3hJ9RPhPcKpdgNI 4iFti2LEQE7ilMCYu3z+KLhY/7ucZE8rVv0Brz3PyKlipf33LesfpF9bng== -----END CERTIFICATE-----Generated at Fri Nov 22 00:59:11 2024 by rpki-client on console-fra.rpki-client.org