$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/b8noBhjtqC5UWU610ADUN4gZo94.roa File: b8noBhjtqC5UWU610ADUN4gZo94.roa (raw, json) Hash identifier: CeKKDnVHsgqdCl+JXAaOc1JYNy+NelXuctxJT8ctCLc= Subject key identifier: 6F:C9:E8:06:18:ED:A8:2E:54:59:4E:B5:D0:00:D4:37:88:19:A3:DE Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1235 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/b8noBhjtqC5UWU610ADUN4gZo94.roa Signing time: Mon 26 Aug 2024 05:24:47 +0000 ROA not before: Mon 26 Aug 2024 05:24:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 203.77.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4661 (0x1235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:47 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6FC9E80618EDA82E54594EB5D000D4378819A3DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:ea:c8:66:d2:0f:56:e8:ac:2b:e8:d3:62: 67:4a:df:f4:04:3b:bf:86:5f:ca:88:d6:3b:0e:e5: a8:53:7b:9e:2e:c6:aa:f9:62:ab:6d:a9:53:f0:7b: a9:49:26:5f:ac:33:1e:08:04:6a:96:40:eb:3d:59: f0:13:6e:fa:ce:d6:f3:6a:1f:f8:59:ae:7d:14:ef: 17:8e:de:bf:67:39:f4:1a:82:0a:b5:46:a3:8f:94: 91:1c:9b:31:49:a8:03:67:40:e2:06:b5:9a:0d:41: 9d:db:a8:50:43:bd:e4:da:88:8b:83:e7:a8:cb:1d: c2:32:78:c2:29:a9:92:10:07:fa:0b:89:52:a0:5c: c9:23:4d:ea:e6:4f:a2:d0:9c:0b:ba:72:86:f0:57: d1:79:b8:bd:90:fc:75:f4:83:0a:0c:f5:82:dc:8a: 7d:d8:ef:cb:d0:cc:a4:2d:0b:c6:35:dc:e7:5b:fa: ec:df:80:c4:94:7a:ae:f9:69:f1:83:5b:62:3e:65: fd:e8:5c:09:6d:6b:11:4e:ac:d8:02:be:80:19:1e: d6:ba:bd:42:94:61:21:4d:3a:17:b7:1e:6d:a6:fd: 03:cb:19:66:95:ba:dc:a4:ab:0e:c9:dc:df:c2:8a: 82:00:5a:9e:f8:d2:cd:a8:aa:bd:b6:d6:01:a4:11: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C9:E8:06:18:ED:A8:2E:54:59:4E:B5:D0:00:D4:37:88:19:A3:DE X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/b8noBhjtqC5UWU610ADUN4gZo94.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.50.0/24 Signature Algorithm: sha256WithRSAEncryption 13:8b:8d:c2:b3:ef:ca:9e:1a:72:ae:ca:ce:9f:22:fd:4a:d0: c6:e2:69:f8:73:d3:9a:27:86:9f:a4:d2:98:70:51:72:e8:98: 8d:fa:f7:51:e6:cc:fb:fb:4a:6e:17:c9:06:56:05:cd:e7:dc: 8d:e2:8d:ae:a7:f9:67:f0:0d:12:3a:f3:83:c8:d3:93:5d:37: 11:d3:83:32:98:76:3e:40:9e:2f:5b:22:cd:41:f7:3c:19:7c: 33:51:96:74:ff:b0:7c:9a:89:16:db:9d:87:1c:5b:7a:15:4f: 3b:a7:2f:41:56:6a:5e:b2:25:2e:de:c5:42:34:10:a5:bf:82: b0:22:b0:e4:52:6f:69:dc:c3:2e:c8:dd:ff:9e:0f:04:36:c5: 81:b7:03:2d:82:bc:8c:94:8c:06:b4:ae:75:2e:5c:04:47:e1: ba:4f:a7:37:2e:2d:2b:bf:4f:e8:f3:7e:83:4e:ad:4a:64:62: 7c:d4:15:9e:59:5d:11:f6:c9:fd:cf:53:a8:65:37:03:57:14: 50:0b:4b:8f:58:c6:05:22:2f:37:24:9a:98:0d:5e:8c:9b:7d: 77:7a:e4:5f:55:8e:45:c8:32:0e:b4:53:0c:5d:11:8c:ba:5b: e8:d5:a9:ec:38:6c:73:a4:41:44:b2:14:97:90:bb:67:b7:f5: 84:6b:77:9e -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEjUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0NDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGQzlFODA2MThFREE4 MkU1NDU5NEVCNUQwMDBENDM3ODgxOUEzREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCx3erIZtIPVuisK+jTYmdK3/QEO7+GX8qI1jsO5ahTe54uxqr5 YqttqVPwe6lJJl+sMx4IBGqWQOs9WfATbvrO1vNqH/hZrn0U7xeO3r9nOfQaggq1 RqOPlJEcmzFJqANnQOIGtZoNQZ3bqFBDveTaiIuD56jLHcIyeMIpqZIQB/oLiVKg XMkjTermT6LQnAu6cobwV9F5uL2Q/HX0gwoM9YLcin3Y78vQzKQtC8Y13Odb+uzf gMSUeq75afGDW2I+Zf3oXAltaxFOrNgCvoAZHta6vUKUYSFNOhe3Hm2m/QPLGWaV utykqw7J3N/CioIAWp740s2oqr221gGkEWynAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUb8noBhjtqC5UWU610ADUN4gZo94wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvYjhub0JoanRxQzVVV1U2 MTBBRFVONGdabzk0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AMtNMjANBgkqhkiG9w0BAQsFAAOCAQEAE4uNwrPvyp4acq7Kzp8i/UrQxuJp+HPT mieGn6TSmHBRcuiYjfr3UebM+/tKbhfJBlYFzefcjeKNrqf5Z/ANEjrzg8jTk103 EdODMph2PkCeL1sizUH3PBl8M1GWdP+wfJqJFtudhxxbehVPO6cvQVZqXrIlLt7F QjQQpb+CsCKw5FJvadzDLsjd/54PBDbFgbcDLYK8jJSMBrSudS5cBEfhuk+nNy4t K79P6PN+g06tSmRifNQVnlldEfbJ/c9TqGU3A1cUUAtLj1jGBSIvNySamA1ejJt9 d3rkX1WORcgyDrRTDF0RjLpb6NWp7Dhsc6RBRLIUl5C7Z7f1hGt3ng== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org