$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cAgTlpOSdcnifHI8AjaIMknY6MA.roa File: cAgTlpOSdcnifHI8AjaIMknY6MA.roa (raw, json) Hash identifier: 8DFq4gSVIxb5IPQE4scpFjqieSDs/N/X5qMNJuyMtlA= Subject key identifier: 70:08:13:96:93:92:75:C9:E2:7C:72:3C:02:36:88:32:49:D8:E8:C0 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0F76 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cAgTlpOSdcnifHI8AjaIMknY6MA.roa Signing time: Fri 01 Sep 2023 09:36:52 +0000 ROA not before: Fri 01 Sep 2023 09:36:52 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131597 IP address blocks: 219.86.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3958 (0xf76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:36:52 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=70081396939275C9E27C723C0236883249D8E8C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ca:db:a6:bb:66:1e:2d:2c:0b:c0:18:30:b6: f5:87:cd:52:7f:ba:90:0a:03:03:5f:b2:45:51:7f: 2c:4c:79:26:1a:22:52:71:02:f0:dd:df:06:f0:d8: 4d:24:f5:4f:96:1c:66:3c:3f:e7:d0:90:7f:c3:4e: 23:7c:3b:6f:2a:35:de:34:e0:6d:04:33:b5:ed:f4: 1e:ab:86:37:d6:cc:71:f7:4b:3b:85:e4:7f:fe:2d: a1:34:be:09:40:07:9e:cb:4f:f2:05:27:19:84:a4: a4:0c:2f:5b:11:30:2f:c6:8a:72:e1:84:eb:76:ca: dc:9e:ca:d6:d5:52:11:ab:25:bb:ab:a1:d1:5f:c5: a7:2e:b2:2b:05:7c:1a:67:35:e4:59:9c:de:dd:1e: b3:7e:42:ef:ac:9e:5c:44:68:6a:5b:0e:50:4a:ca: 94:3b:9f:3a:97:ca:02:a0:5b:54:8c:3f:de:7d:f4: 83:6a:6d:ba:ac:1b:d7:00:e0:3f:ec:f8:d9:56:28: 12:ac:3c:8c:b4:f6:36:20:52:5d:a8:4a:e9:d8:e3: 28:05:d7:2e:70:9e:72:ce:e6:29:40:75:6f:c6:f4: 05:0f:e2:03:cc:54:63:fb:69:57:32:26:da:aa:4a: e5:8e:da:3c:66:f4:d4:b8:2d:e6:13:ec:71:35:b7: b5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:08:13:96:93:92:75:C9:E2:7C:72:3C:02:36:88:32:49:D8:E8:C0 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cAgTlpOSdcnifHI8AjaIMknY6MA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.86.64.0/21 Signature Algorithm: sha256WithRSAEncryption 7c:82:16:38:84:ff:82:5f:32:71:66:01:d8:ff:f1:fa:9f:c8: 63:bb:5a:21:29:3d:8f:3a:82:5b:d3:e2:a5:5b:f5:41:4a:d2: 7d:af:bc:02:85:af:fe:50:0b:cb:96:53:4a:27:d3:62:1e:ea: a9:09:eb:0f:cd:24:6e:4d:fb:4f:34:c4:6d:c5:37:7f:fc:9c: 99:6a:10:f3:d0:fd:37:24:5c:e7:51:33:2c:ef:15:a0:c8:9f: 88:77:59:da:57:5b:ce:85:32:32:77:b9:3f:c5:52:7f:6b:f5: 16:d4:53:98:9f:58:b4:c1:a4:ba:92:df:67:fe:87:d4:87:e1: bf:b2:02:6c:71:47:29:e5:86:64:4e:00:ac:4c:1c:60:f1:e8: 1d:80:b8:80:7c:b8:d7:ed:eb:3d:07:25:b5:57:9b:c4:d3:2d: 97:e6:38:aa:1f:10:87:79:1a:53:6d:58:a6:5b:12:75:5c:e4: ec:61:4b:6b:66:df:76:d0:28:99:27:f5:a7:1d:af:3d:9b:5b: 0e:59:5c:88:c5:e8:f9:9e:ab:83:e5:69:e2:be:03:91:dc:c3: 91:25:71:de:00:5e:0a:81:a4:63:f3:4a:44:b3:ba:bb:0d:ac: f0:47:bb:2b:2e:a1:28:93:82:8d:2b:96:fb:86:b5:ff:81:0d: b1:42:81:b5 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD3YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM2NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcwMDgxMzk2OTM5Mjc1 QzlFMjdDNzIzQzAyMzY4ODMyNDlEOEU4QzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwytumu2YeLSwLwBgwtvWHzVJ/upAKAwNfskVRfyxMeSYaIlJx AvDd3wbw2E0k9U+WHGY8P+fQkH/DTiN8O28qNd404G0EM7Xt9B6rhjfWzHH3SzuF 5H/+LaE0vglAB57LT/IFJxmEpKQML1sRMC/GinLhhOt2ytyeytbVUhGrJburodFf xacusisFfBpnNeRZnN7dHrN+Qu+snlxEaGpbDlBKypQ7nzqXygKgW1SMP9599INq bbqsG9cA4D/s+NlWKBKsPIy09jYgUl2oSunY4ygF1y5wnnLO5ilAdW/G9AUP4gPM VGP7aVcyJtqqSuWO2jxm9NS4LeYT7HE1t7XTAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUcAgTlpOSdcnifHI8AjaIMknY6MAwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvY0FnVGxwT1NkY25pZkhJ OEFqYUlNa25ZNk1BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME A9tWQDANBgkqhkiG9w0BAQsFAAOCAQEAfIIWOIT/gl8ycWYB2P/x+p/IY7taISk9 jzqCW9PipVv1QUrSfa+8AoWv/lALy5ZTSifTYh7qqQnrD80kbk37TzTEbcU3f/yc mWoQ89D9NyRc51EzLO8VoMifiHdZ2ldbzoUyMne5P8VSf2v1FtRTmJ9YtMGkupLf Z/6H1Ifhv7ICbHFHKeWGZE4ArEwcYPHoHYC4gHy41+3rPQcltVebxNMtl+Y4qh8Q h3kaU21YplsSdVzk7GFLa2bfdtAomSf1px2vPZtbDllciMXo+Z6rg+Vp4r4DkdzD kSVx3gBeCoGkY/NKRLO6uw2s8Ee7Ky6hKJOCjSuW+4a1/4ENsUKBtQ== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org