$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cfp37eepcqKDMqgSVrmm5rvsABo.roa File: cfp37eepcqKDMqgSVrmm5rvsABo.roa (raw, json) Hash identifier: 3bfKU5HnkafW18Tl2jDwJtpeSPcTh4ZnUrMUyQjbqDc= Subject key identifier: 71:FA:77:ED:E7:A9:72:A2:83:32:A8:12:56:B9:A6:E6:BB:EC:00:1A Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0FFF Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cfp37eepcqKDMqgSVrmm5rvsABo.roa Signing time: Fri 01 Sep 2023 09:37:36 +0000 ROA not before: Fri 01 Sep 2023 09:37:36 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24164 IP address blocks: 203.77.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4095 (0xfff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:36 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=71FA77EDE7A972A28332A81256B9A6E6BBEC001A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:96:c6:c1:a0:f7:b4:44:fc:54:6e:fe:92: 17:cc:1c:65:13:ff:b1:4f:a5:67:2b:af:13:80:bb: d5:ae:ad:87:b6:a4:ac:76:ce:82:6f:91:3e:f6:70: 18:6c:1d:c7:aa:c8:e8:b9:8a:ba:b4:d9:f2:19:a5: ba:9d:60:5e:84:3f:91:45:69:cc:a8:1b:16:f4:ef: 99:2b:03:57:4f:36:84:ab:b4:e3:ab:74:85:15:e5: 65:ea:e9:6e:e7:e8:4d:ec:d1:da:43:ad:e2:1d:c4: c0:f9:0a:3a:44:13:4b:00:3c:ff:d0:38:fa:ae:73: 86:c0:73:28:e7:12:b2:e6:2f:03:54:43:46:4d:8c: a7:45:b5:b3:b0:bd:39:c6:9b:9d:2c:7b:d6:c1:a1: 93:b3:a8:63:d5:4c:86:16:f1:79:13:37:ca:28:a7: 12:43:c9:b6:c9:2f:5e:8b:fa:16:b8:37:be:ab:78: 70:74:44:85:19:55:e7:1f:57:a5:f3:9c:6c:06:4b: ae:63:fc:fc:e9:75:46:de:56:f5:3c:b3:e7:a8:ef: 89:19:ec:10:bf:0c:a9:5f:f4:f4:ee:a5:f4:02:b0: 89:28:f4:22:ad:fe:9f:41:08:b9:61:c1:9d:39:f4: b4:82:bd:06:c5:31:26:f7:c7:39:0f:49:fc:28:b7: 9e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FA:77:ED:E7:A9:72:A2:83:32:A8:12:56:B9:A6:E6:BB:EC:00:1A X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cfp37eepcqKDMqgSVrmm5rvsABo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.32.0/22 Signature Algorithm: sha256WithRSAEncryption 19:82:6c:9b:2d:e1:49:f8:b5:aa:85:ff:4b:03:d0:58:2e:25: aa:15:e6:be:69:2c:e6:1c:16:8b:61:ff:0c:bf:0b:db:f3:15: 15:1b:77:14:27:3e:27:89:ca:06:5d:01:84:36:d8:8a:ec:ba: 16:e5:4a:18:3c:aa:ed:31:e1:33:75:94:e5:db:bc:85:f6:aa: 42:f4:41:73:63:0d:46:9d:41:6b:8b:51:5d:63:a4:8e:fd:f6: ed:c7:98:53:ef:f8:e7:89:05:e8:b7:2c:c4:a4:ab:9e:02:b0: dc:b5:87:c4:b2:33:c7:66:bb:a3:9d:66:07:6c:0d:6b:45:98: 9e:02:b4:4a:11:04:80:93:be:b4:24:e6:50:d3:00:6d:ea:60: 05:1d:e4:ab:9b:3e:8c:85:b4:84:00:07:11:71:00:52:c0:38: 39:e5:3c:43:60:8d:1c:7f:59:81:0c:01:42:b1:0c:8a:2f:e4: e1:20:96:fe:b0:28:64:9e:bb:98:4f:72:5f:49:a8:2d:50:78: 21:8d:f5:8d:11:0f:6d:81:dc:f9:de:41:48:5b:74:16:d6:8c: 80:16:ff:69:c0:79:93:35:a6:61:12:f8:49:3c:ae:e5:0f:69: bc:81:50:fd:e9:4c:b5:f9:b6:d0:6c:08:8e:b3:93:a8:9a:af: c7:21:9d:40 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD/8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MzZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcxRkE3N0VERTdBOTcy QTI4MzMyQTgxMjU2QjlBNkU2QkJFQzAwMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNKZbGwaD3tET8VG7+khfMHGUT/7FPpWcrrxOAu9WurYe2pKx2 zoJvkT72cBhsHceqyOi5irq02fIZpbqdYF6EP5FFacyoGxb075krA1dPNoSrtOOr dIUV5WXq6W7n6E3s0dpDreIdxMD5CjpEE0sAPP/QOPquc4bAcyjnErLmLwNUQ0ZN jKdFtbOwvTnGm50se9bBoZOzqGPVTIYW8XkTN8oopxJDybbJL16L+ha4N76reHB0 RIUZVecfV6XznGwGS65j/PzpdUbeVvU8s+eo74kZ7BC/DKlf9PTupfQCsIko9CKt /p9BCLlhwZ059LSCvQbFMSb3xzkPSfwot56vAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUcfp37eepcqKDMqgSVrmm5rvsABowHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvY2ZwMzdlZXBjcUtETXFn U1ZybW01cnZzQUJvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AstNIDANBgkqhkiG9w0BAQsFAAOCAQEAGYJsmy3hSfi1qoX/SwPQWC4lqhXmvmks 5hwWi2H/DL8L2/MVFRt3FCc+J4nKBl0BhDbYiuy6FuVKGDyq7THhM3WU5du8hfaq QvRBc2MNRp1Ba4tRXWOkjv327ceYU+/454kF6LcsxKSrngKw3LWHxLIzx2a7o51m B2wNa0WYngK0ShEEgJO+tCTmUNMAbepgBR3kq5s+jIW0hAAHEXEAUsA4OeU8Q2CN HH9ZgQwBQrEMii/k4SCW/rAoZJ67mE9yX0moLVB4IY31jREPbYHc+d5BSFt0FtaM gBb/acB5kzWmYRL4STyu5Q9pvIFQ/elMtfm20GwIjrOTqJqvxyGdQA== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org