$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cH2B0HiZejAbL4PxCwKfHOFEPFM.roa File: cH2B0HiZejAbL4PxCwKfHOFEPFM.roa (raw, json) Hash identifier: tFHp0sZPyrzdsFumR+rSL9B7ih9lGGpKaAxrb4oHEaQ= Subject key identifier: 70:7D:81:D0:78:99:7A:30:1B:2F:83:F1:0B:02:9F:1C:E1:44:3C:53 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0F94 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cH2B0HiZejAbL4PxCwKfHOFEPFM.roa Signing time: Fri 01 Sep 2023 09:37:02 +0000 ROA not before: Fri 01 Sep 2023 09:37:02 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131597 IP address blocks: 175.98.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3988 (0xf94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:02 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=707D81D078997A301B2F83F10B029F1CE1443C53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:e1:48:46:2d:9e:99:e9:44:15:dc:20:41: 7d:58:20:07:42:cc:27:11:a6:5b:cd:83:12:ea:f0: 9f:fd:36:75:4b:a0:c1:a7:97:7d:94:16:9c:78:5d: 4a:e6:da:7f:3e:9b:a2:1e:a3:58:2c:89:83:f4:05: 1c:d4:96:0a:e8:62:be:af:35:0b:df:cb:6b:d1:6d: eb:c8:c1:51:f6:87:68:50:dc:93:8b:0d:a2:a0:b8: 74:85:88:9d:7f:16:67:c0:bf:e5:fd:4f:50:41:6b: 04:fa:5d:43:02:cd:40:66:b1:cb:2d:da:2c:bb:09: b4:b1:25:fd:3d:0e:b0:4b:c9:a5:7a:87:bb:35:ac: 4b:b8:6f:2c:b7:62:b9:58:23:53:f2:cc:64:48:09: 65:e2:ae:43:7a:dc:1e:2c:5c:48:5e:a3:d9:28:32: 1e:3a:1f:51:25:6f:47:3d:44:0f:89:a7:a5:15:37: 76:5f:08:a6:85:31:91:41:5f:4c:d4:b6:31:32:d5: a9:1c:36:a0:83:d7:f4:8d:bc:29:ee:00:fd:b4:39: f0:d0:fe:e2:a8:4f:15:9a:5e:eb:53:c2:5d:e6:ac: be:4b:35:58:56:94:f9:3d:69:b9:6c:72:8d:71:0d: 4b:ab:38:f0:d5:39:97:61:de:a7:36:68:0c:f8:7a: 8c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7D:81:D0:78:99:7A:30:1B:2F:83:F1:0B:02:9F:1C:E1:44:3C:53 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cH2B0HiZejAbL4PxCwKfHOFEPFM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.98.208.0/20 Signature Algorithm: sha256WithRSAEncryption 53:a8:0b:8f:2b:c7:49:80:cc:cc:28:b4:4f:b3:76:d2:a2:fd: 3f:75:fc:89:fa:93:75:15:17:0b:74:0f:94:c6:25:fa:fb:ed: 7d:16:a3:5a:93:b5:28:56:ad:28:c9:9e:d3:ac:2f:d8:c3:c1: bf:ce:1f:c1:39:b7:92:84:57:50:43:b9:e8:f1:d6:dc:d5:6a: a3:59:9b:85:f6:d0:95:a3:8f:4b:e2:81:ad:70:9e:ad:26:57: 3b:8c:49:7b:ad:b1:08:db:67:7f:99:f8:ce:3a:e7:48:ab:ac: 8f:d7:ea:ca:eb:80:0a:3b:1c:3b:8d:48:45:91:43:26:80:4c: b8:38:0e:70:de:be:ba:5a:11:20:a8:8f:e8:d4:32:ea:42:c2: 3e:f6:39:f8:08:56:ae:fe:30:60:55:72:c5:48:9c:cd:ca:b6: af:7e:48:00:09:ae:48:52:4c:81:07:62:10:63:bf:da:9e:bc: da:ef:c4:81:f3:c1:a4:43:85:d0:e6:2b:e6:17:24:22:d8:21: 36:cd:ac:31:b3:6d:7f:08:8f:15:3a:65:52:dc:8f:53:fb:5f: 42:33:2e:54:44:8b:e5:9a:e3:72:bf:97:ed:71:22:88:a3:a5: 5c:63:6f:72:46:08:aa:71:dd:18:4a:5c:6f:a1:4e:2f:ae:32: 57:f0:11:39 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD5QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcwN0Q4MUQwNzg5OTdB MzAxQjJGODNGMTBCMDI5RjFDRTE0NDNDNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7x+FIRi2emelEFdwgQX1YIAdCzCcRplvNgxLq8J/9NnVLoMGn l32UFpx4XUrm2n8+m6Ieo1gsiYP0BRzUlgroYr6vNQvfy2vRbevIwVH2h2hQ3JOL DaKguHSFiJ1/FmfAv+X9T1BBawT6XUMCzUBmscst2iy7CbSxJf09DrBLyaV6h7s1 rEu4byy3YrlYI1PyzGRICWXirkN63B4sXEheo9koMh46H1Elb0c9RA+Jp6UVN3Zf CKaFMZFBX0zUtjEy1akcNqCD1/SNvCnuAP20OfDQ/uKoTxWaXutTwl3mrL5LNVhW lPk9ablsco1xDUurOPDVOZdh3qc2aAz4eozrAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUcH2B0HiZejAbL4PxCwKfHOFEPFMwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvY0gyQjBIaVplakFiTDRQ eEN3S2ZIT0ZFUEZNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BK9i0DANBgkqhkiG9w0BAQsFAAOCAQEAU6gLjyvHSYDMzCi0T7N20qL9P3X8ifqT dRUXC3QPlMYl+vvtfRajWpO1KFatKMme06wv2MPBv84fwTm3koRXUEO56PHW3NVq o1mbhfbQlaOPS+KBrXCerSZXO4xJe62xCNtnf5n4zjrnSKusj9fqyuuACjscO41I RZFDJoBMuDgOcN6+uloRIKiP6NQy6kLCPvY5+AhWrv4wYFVyxUiczcq2r35IAAmu SFJMgQdiEGO/2p682u/EgfPBpEOF0OYr5hckItghNs2sMbNtfwiPFTplUtyPU/tf QjMuVESL5Zrjcr+X7XEiiKOlXGNvckYIqnHdGEpcb6FOL64yV/AROQ== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org