$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cwLqPrKGVWItRkjBO3RHctvDViI.roa File: cwLqPrKGVWItRkjBO3RHctvDViI.roa (raw, json) Hash identifier: Z6bzZwsu++YCnZf+R8Ivmz360sXiwqjoEfL1vBFtGZ4= Subject key identifier: 73:02:EA:3E:B2:86:55:62:2D:46:48:C1:3B:74:47:72:DB:C3:56:22 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0FE2 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cwLqPrKGVWItRkjBO3RHctvDViI.roa Signing time: Fri 01 Sep 2023 09:37:24 +0000 ROA not before: Fri 01 Sep 2023 09:37:24 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24163 IP address blocks: 60.198.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4066 (0xfe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:24 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7302EA3EB28655622D4648C13B744772DBC35622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:74:ff:aa:72:5f:ec:c5:6b:6e:cc:25:00:bc: 19:45:d4:32:73:43:66:44:4d:52:d5:99:3d:64:87: d1:53:64:6f:60:8b:dd:e4:51:26:8d:3b:d1:a0:ad: f8:40:ed:9c:7c:f6:ec:38:73:3a:78:85:31:ab:5b: 88:07:db:21:d1:7d:8b:30:b8:72:fd:f6:ec:d3:ac: d0:9e:b7:05:89:81:60:f2:a1:07:70:8c:dd:43:a4: 40:bc:21:b0:3a:c9:51:5a:55:db:43:a9:38:d6:fa: ed:af:d3:b4:52:4e:a0:77:89:5c:68:b9:f9:c0:d6: 82:f8:f3:bc:eb:2f:91:99:a0:d7:69:1b:c3:be:d4: e3:ea:eb:0a:ca:18:62:30:0d:64:92:64:97:60:8b: ef:c5:f3:00:90:c0:5d:10:ac:cf:94:48:88:54:9d: f9:ee:f7:f5:f6:6b:19:42:2d:dd:5e:af:d5:2e:37: f0:06:b4:1c:83:d4:9a:5e:cc:04:be:ed:4b:81:6a: ec:72:08:3a:9c:70:fa:97:db:fa:f4:c9:56:85:37: e6:46:45:8e:22:ed:87:b8:a8:b3:b6:a6:ba:d2:9c: 42:04:5e:b0:fc:5e:f1:44:e4:3c:6d:b0:77:1b:85: 3b:8e:3e:b2:72:ef:b8:ef:00:86:d2:f1:c7:86:79: 5a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:02:EA:3E:B2:86:55:62:2D:46:48:C1:3B:74:47:72:DB:C3:56:22 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/cwLqPrKGVWItRkjBO3RHctvDViI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.198.32.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:21:9f:c9:fa:ea:ab:ce:90:ed:83:2c:1b:55:97:c7:ab:84: d1:f5:c0:ab:da:75:6e:07:7a:4b:2b:8a:5d:a1:aa:16:09:5e: ae:dd:c8:7d:e5:95:26:5c:88:c4:40:68:95:1b:21:89:e9:19: 53:72:65:29:ab:68:2e:7d:b0:85:27:f4:f9:bd:82:c8:44:79: 77:2b:21:37:c4:a3:f3:28:b5:41:a8:ae:5d:7d:7c:78:32:29: 08:18:1d:05:73:eb:86:98:af:5d:d5:43:f8:4d:8a:86:9d:b1: 41:43:28:2a:4f:c2:48:71:94:cb:d2:80:59:2a:e0:99:c9:a9: a9:fb:96:a6:ad:22:9b:9f:06:70:29:6b:30:ef:93:bd:6d:46: 93:3a:bc:a5:58:c4:80:14:57:a0:01:a1:af:f3:06:03:6c:3f: ef:33:00:2b:85:06:d4:68:ef:f7:18:71:6d:89:07:d5:58:32: 3a:cf:75:b3:61:b3:0f:69:c8:7b:4a:2f:d6:f5:1b:f0:87:4a: a9:76:cd:20:46:3a:ce:8e:38:87:91:17:37:4e:65:e2:86:17: b7:06:55:f6:86:b7:f0:8f:e0:ac:2a:40:67:05:65:49:dd:f0: 4f:46:04:f3:7a:96:3f:a8:17:14:2e:91:0b:fa:91:02:5c:cd: d3:62:83:70 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD+IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDczMDJFQTNFQjI4NjU1 NjIyRDQ2NDhDMTNCNzQ0NzcyREJDMzU2MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDAdP+qcl/sxWtuzCUAvBlF1DJzQ2ZETVLVmT1kh9FTZG9gi93k USaNO9GgrfhA7Zx89uw4czp4hTGrW4gH2yHRfYswuHL99uzTrNCetwWJgWDyoQdw jN1DpEC8IbA6yVFaVdtDqTjW+u2v07RSTqB3iVxoufnA1oL487zrL5GZoNdpG8O+ 1OPq6wrKGGIwDWSSZJdgi+/F8wCQwF0QrM+USIhUnfnu9/X2axlCLd1er9UuN/AG tByD1JpezAS+7UuBauxyCDqccPqX2/r0yVaFN+ZGRY4i7Ye4qLO2prrSnEIEXrD8 XvFE5DxtsHcbhTuOPrJy77jvAIbS8ceGeVrNAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUcwLqPrKGVWItRkjBO3RHctvDViIwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvY3dMcVByS0dWV0l0Umtq Qk8zUkhjdHZEVmlJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ATzGIDANBgkqhkiG9w0BAQsFAAOCAQEAKyGfyfrqq86Q7YMsG1WXx6uE0fXAq9p1 bgd6SyuKXaGqFglert3IfeWVJlyIxEBolRshiekZU3JlKatoLn2whSf0+b2CyER5 dyshN8Sj8yi1QaiuXX18eDIpCBgdBXPrhpivXdVD+E2Khp2xQUMoKk/CSHGUy9KA WSrgmcmpqfuWpq0im58GcClrMO+TvW1Gkzq8pVjEgBRXoAGhr/MGA2w/7zMAK4UG 1Gjv9xhxbYkH1VgyOs91s2GzD2nIe0ov1vUb8IdKqXbNIEY6zo44h5EXN05l4oYX twZV9oa38I/grCpAZwVlSd3wT0YE83qWP6gXFC6RC/qRAlzN02KDcA== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org