$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cgu5_50N2lqLj7SmocciZk4sL_Q.roa File: cgu5_50N2lqLj7SmocciZk4sL_Q.roa (raw, json) Hash identifier: zJ5fZJay2+f34Ev6Ar5c4ZrG5tFCgYnSc77RYBmv4jA= Subject key identifier: 72:0B:B9:FF:9D:0D:DA:5A:8B:8F:B4:A6:A1:C7:22:66:4E:2C:2F:F4 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0F9E Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cgu5_50N2lqLj7SmocciZk4sL_Q.roa Signing time: Fri 01 Sep 2023 09:37:04 +0000 ROA not before: Fri 01 Sep 2023 09:37:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 4662 IP address blocks: 203.65.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3998 (0xf9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=720BB9FF9D0DDA5A8B8FB4A6A1C722664E2C2FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a2:d9:64:15:c5:69:f9:9b:af:da:5e:12:76: b0:d4:da:8e:7d:02:60:f2:4a:bf:ae:74:9e:12:f7: d8:1f:9c:46:68:41:3a:e9:bf:e0:d1:fd:ee:07:8e: 44:48:3c:53:e0:9f:1c:ec:7a:e9:b0:4e:60:69:5b: d3:ae:49:fe:84:27:77:60:8f:a9:08:fd:c3:71:b2: 94:0f:54:cf:f2:a5:8c:84:7d:08:50:f5:fa:58:f3: fa:d9:e4:46:43:c9:7e:4a:20:f5:0a:51:c0:bc:60: 1d:ca:05:0d:43:e0:0c:5b:6a:4e:38:61:22:5d:c5: 32:55:c8:67:29:3c:ac:d8:07:80:f8:0a:76:60:31: 32:79:24:1c:2d:19:0c:a0:7a:76:f6:34:0e:2f:a3: ac:aa:9b:b5:32:1d:16:fa:7e:b8:d4:de:fb:45:5e: c3:84:cc:3f:2e:3d:a1:18:e1:1e:87:c8:2a:6f:5e: 42:36:a0:a2:1c:86:3f:c3:fe:1c:14:b5:a8:b2:2a: 69:96:37:e6:9b:06:84:83:aa:c9:32:ca:54:fa:61: d3:d6:b5:78:f1:18:9a:19:a9:31:55:14:ea:40:f8: ec:51:88:60:98:f9:1f:74:6d:d0:06:37:2e:de:76: 07:27:77:ef:3b:f4:8f:e4:cf:52:d2:57:89:5d:cc: 40:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0B:B9:FF:9D:0D:DA:5A:8B:8F:B4:A6:A1:C7:22:66:4E:2C:2F:F4 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cgu5_50N2lqLj7SmocciZk4sL_Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.65.160.0/19 Signature Algorithm: sha256WithRSAEncryption 69:91:57:a6:8f:69:99:f7:fa:c0:8e:ee:44:5d:33:ec:3e:b8: 17:e0:8a:58:27:a7:9d:f5:dc:ae:89:43:ff:4b:ce:82:c8:93: 35:e5:36:73:55:aa:90:3a:37:b1:5c:18:8e:5d:f3:c7:31:4f: ba:cc:54:9f:6e:07:fd:8d:2d:13:35:2c:71:f4:e9:8e:4d:b8: 7f:f8:12:ab:e3:46:c8:2f:83:0f:7d:70:d7:9d:04:54:8f:99: 19:96:0a:90:4f:95:85:f4:45:3d:14:43:94:3d:24:96:f2:45: 0b:8a:c2:dc:aa:c7:f4:19:0d:68:dd:f4:1e:a9:a0:8b:08:c7: b5:bf:68:7a:6e:37:ae:70:a9:73:ce:60:6c:96:d7:30:fc:a5: 14:72:d6:4c:ce:46:67:88:92:7d:e4:82:9e:5c:e4:33:b5:71: 1a:84:69:a2:32:36:0f:85:be:14:62:6f:a2:3a:9b:91:09:a9: e5:4e:1d:fe:3c:f6:6e:d6:07:d1:1a:78:ed:cb:45:b8:97:2b: 51:a0:8f:af:3f:88:1f:a4:86:45:90:1a:4f:dc:b4:99:c4:cd: b4:45:32:f5:5e:73:e0:79:85:72:27:ad:a9:18:6c:1d:dc:08: ce:ea:78:09:55:eb:78:b3:f3:bc:93:0f:dc:1b:20:9b:5f:16: 3d:52:19:fb -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD54wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcyMEJCOUZGOUQwRERB NUE4QjhGQjRBNkExQzcyMjY2NEUyQzJGRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDfotlkFcVp+Zuv2l4SdrDU2o59AmDySr+udJ4S99gfnEZoQTrp v+DR/e4HjkRIPFPgnxzseumwTmBpW9OuSf6EJ3dgj6kI/cNxspQPVM/ypYyEfQhQ 9fpY8/rZ5EZDyX5KIPUKUcC8YB3KBQ1D4Axbak44YSJdxTJVyGcpPKzYB4D4CnZg MTJ5JBwtGQygenb2NA4vo6yqm7UyHRb6frjU3vtFXsOEzD8uPaEY4R6HyCpvXkI2 oKIchj/D/hwUtaiyKmmWN+abBoSDqskyylT6YdPWtXjxGJoZqTFVFOpA+OxRiGCY +R90bdAGNy7edgcnd+879I/kz1LSV4ldzECRAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUcgu5/50N2lqLj7SmocciZk4sL/QwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvY2d1NV81ME4ybHFMajdT bW9jY2laazRzTF9RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BctBoDANBgkqhkiG9w0BAQsFAAOCAQEAaZFXpo9pmff6wI7uRF0z7D64F+CKWCen nfXcrolD/0vOgsiTNeU2c1WqkDo3sVwYjl3zxzFPusxUn24H/Y0tEzUscfTpjk24 f/gSq+NGyC+DD31w150EVI+ZGZYKkE+VhfRFPRRDlD0klvJFC4rC3KrH9BkNaN30 HqmgiwjHtb9oem43rnCpc85gbJbXMPylFHLWTM5GZ4iSfeSCnlzkM7VxGoRpojI2 D4W+FGJvojqbkQmp5U4d/jz2btYH0Rp47ctFuJcrUaCPrz+IH6SGRZAaT9y0mcTN tEUy9V5z4HmFcietqRhsHdwIzup4CVXreLPzvJMP3Bsgm18WPVIZ+w== -----END CERTIFICATE-----Generated at Mon Jun 3 02:57:42 2024 by rpki-client on console-fra.rpki-client.org