$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/f8h7Oj0WVGvb-qlBDySFSEFG4N0.roa File: f8h7Oj0WVGvb-qlBDySFSEFG4N0.roa (raw, json) Hash identifier: Ms2IUGO5/t1+eTaCg2NOZkRtvDlaIgckQHhGC75zl1U= Subject key identifier: 7F:C8:7B:3A:3D:16:54:6B:DB:FA:A9:41:0F:24:85:48:41:46:E0:DD Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11C9 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/f8h7Oj0WVGvb-qlBDySFSEFG4N0.roa Signing time: Mon 26 Aug 2024 05:24:23 +0000 ROA not before: Mon 26 Aug 2024 05:24:23 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24158 IP address blocks: 203.105.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4553 (0x11c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:23 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=7FC87B3A3D16546BDBFAA9410F2485484146E0DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:e4:52:00:a3:72:b6:c5:a8:12:01:29:18: 1d:51:5f:47:87:8f:97:7a:60:13:76:5c:a4:5b:96: f6:66:49:e8:6c:83:52:12:d5:ba:c7:00:4f:04:25: 7c:0d:9f:72:ae:7c:cd:2d:8e:78:74:e1:91:16:da: f5:cf:88:bb:99:a4:c3:b4:db:a0:78:70:98:cf:33: 44:19:2d:b5:61:8c:11:2f:66:ab:c0:08:2e:9a:f1: 41:a0:81:ff:76:8f:5c:6c:c2:c4:74:e9:bc:84:ba: 77:6c:be:3a:6b:dc:de:ed:66:a3:ba:6b:b9:5c:f2: 8a:6f:f1:78:34:5f:c9:36:fa:96:e5:f7:76:b3:0e: e0:36:82:79:6e:d8:37:e5:5b:79:3e:5d:06:99:ca: 59:c7:0d:3d:fa:26:63:41:dc:7f:be:af:9c:a0:29: 1b:cf:d6:07:00:e0:c6:d2:d9:d0:74:ee:9a:b7:11: 76:a5:b1:4a:16:ed:03:4c:ca:33:e0:4e:37:db:7d: 18:bc:bd:5a:08:1f:99:37:cb:d4:3d:be:ae:30:e0: b0:40:21:bd:ab:86:42:52:03:dd:ce:49:b6:65:f7: 1e:5e:8d:14:46:a6:3c:37:73:e8:f1:e4:dd:81:9c: 4a:68:1d:ee:a1:e5:be:85:fb:c5:3f:7f:d6:d1:d0: 20:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C8:7B:3A:3D:16:54:6B:DB:FA:A9:41:0F:24:85:48:41:46:E0:DD X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/f8h7Oj0WVGvb-qlBDySFSEFG4N0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.105.239.0/24 Signature Algorithm: sha256WithRSAEncryption 68:36:a9:3b:5f:c8:89:55:9f:40:7d:a8:79:1a:6c:b9:2f:49: 74:65:f7:d7:8c:85:b1:9b:39:46:ea:76:6a:27:7f:57:6c:99: 55:10:a6:e4:0b:30:63:1f:48:97:83:db:13:d0:f8:66:28:98: 6a:9c:b4:56:fb:d8:89:24:85:32:ee:11:53:17:64:9f:65:a3: 4b:77:79:6a:43:fd:27:de:33:cb:9e:56:01:3d:de:b4:f6:c5: c5:7c:69:d7:25:d4:4d:70:4b:a3:5d:3a:0e:bc:31:af:ec:35: 91:48:7d:82:4e:c0:11:90:5d:38:03:f9:72:98:92:dd:d8:ed: f8:c9:4a:90:e6:b5:4c:2b:42:3e:cd:1f:e3:4c:d4:55:a3:a9: 6a:a4:3f:b8:d0:4f:81:76:ed:71:a6:3b:93:83:09:4b:d5:7e: d8:1a:ee:40:f4:c7:6c:7f:91:d3:0b:df:48:d1:1d:c8:10:94: b4:af:78:e3:90:5d:42:2d:6f:c9:b5:a2:90:00:1d:cd:99:e5: 79:2d:94:4d:c3:42:ed:a8:3b:ee:a0:41:33:03:2d:ca:0b:36: 0f:ec:c7:27:e3:a9:6f:f8:1e:78:1f:ef:da:1f:c3:ab:51:0d: 86:15:c6:ad:44:cb:c4:d4:63:03:9e:5e:97:d4:f4:8b:e6:13: d1:01:9a:32 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDdGQzg3QjNBM0QxNjU0 NkJEQkZBQTk0MTBGMjQ4NTQ4NDE0NkUwREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCqrORSAKNytsWoEgEpGB1RX0eHj5d6YBN2XKRblvZmSehsg1IS 1brHAE8EJXwNn3KufM0tjnh04ZEW2vXPiLuZpMO026B4cJjPM0QZLbVhjBEvZqvA CC6a8UGggf92j1xswsR06byEundsvjpr3N7tZqO6a7lc8opv8Xg0X8k2+pbl93az DuA2gnlu2DflW3k+XQaZylnHDT36JmNB3H++r5ygKRvP1gcA4MbS2dB07pq3EXal sUoW7QNMyjPgTjfbfRi8vVoIH5k3y9Q9vq4w4LBAIb2rhkJSA93OSbZl9x5ejRRG pjw3c+jx5N2BnEpoHe6h5b6F+8U/f9bR0CB7AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUf8h7Oj0WVGvb+qlBDySFSEFG4N0wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvZjhoN09qMFdWR3ZiLXFs QkR5U0ZTRUZHNE4wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AMtp7zANBgkqhkiG9w0BAQsFAAOCAQEAaDapO1/IiVWfQH2oeRpsuS9JdGX314yF sZs5Rup2aid/V2yZVRCm5AswYx9Il4PbE9D4ZiiYapy0VvvYiSSFMu4RUxdkn2Wj S3d5akP9J94zy55WAT3etPbFxXxp1yXUTXBLo106Drwxr+w1kUh9gk7AEZBdOAP5 cpiS3djt+MlKkOa1TCtCPs0f40zUVaOpaqQ/uNBPgXbtcaY7k4MJS9V+2BruQPTH bH+R0wvfSNEdyBCUtK9445BdQi1vybWikAAdzZnleS2UTcNC7ag77qBBMwMtygs2 D+zHJ+Opb/geeB/v2h/Dq1ENhhXGrUTLxNRjA55el9T0i+YT0QGaMg== -----END CERTIFICATE-----Generated at Fri Nov 22 10:15:34 2024 by rpki-client on console-ams.rpki-client.org