$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fdbQlLAPjyfUG6a1O10aKXDpvQY.roa File: fdbQlLAPjyfUG6a1O10aKXDpvQY.roa (raw, json) Hash identifier: pfKwqI5M7zndLVR5nj4WCn9txAM4K5mjPLBK7MvGngM= Subject key identifier: 7D:D6:D0:94:B0:0F:8F:27:D4:1B:A6:B5:3B:5D:1A:29:70:E9:BD:06 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0FEC Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fdbQlLAPjyfUG6a1O10aKXDpvQY.roa Signing time: Fri 01 Sep 2023 09:37:31 +0000 ROA not before: Fri 01 Sep 2023 09:37:31 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 210.17.16.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4076 (0xfec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:31 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7DD6D094B00F8F27D41BA6B53B5D1A2970E9BD06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a4:b0:33:ff:10:fa:d7:11:71:90:6e:f1:03: 78:9a:fd:5a:c3:6c:c4:e2:ec:59:10:b1:b1:1c:f0: 65:ac:ba:2c:c3:41:bf:56:d3:9e:cd:b6:bf:0d:1c: 5c:14:91:cc:f9:55:15:f6:46:0a:24:4e:e0:e3:d9: fc:cb:0f:fe:c0:7e:80:6c:82:55:e0:9f:eb:af:32: b2:db:55:d4:ab:58:0f:94:c4:e0:d0:f4:3f:1a:03: 8b:ab:03:3c:54:94:f4:5a:fc:33:bd:7d:b1:68:96: da:2f:5b:14:15:49:80:37:e6:af:1b:1f:4f:1b:b7: 18:84:5c:dd:35:47:63:02:9d:38:55:8b:ff:d0:c6: 59:cd:65:74:4f:f6:52:54:c8:f1:b5:44:1e:ba:d7: dd:fd:73:5d:25:05:11:bc:cf:20:62:ab:21:5a:30: cf:41:04:9e:dc:3f:b7:79:2b:1f:e0:da:c0:83:97: ac:0a:b5:12:36:48:be:87:71:ae:01:1e:f3:f0:9f: 58:33:02:07:91:1d:e3:c7:0e:39:fb:7f:09:71:73: b5:20:cb:85:f5:9c:22:eb:7e:2c:13:e1:d0:8f:4b: 71:64:72:ec:95:7a:7c:60:e9:cd:4c:fc:eb:46:41: 8e:b5:f5:16:fe:c7:4e:de:7b:a6:f8:6c:ec:e1:72: ba:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D6:D0:94:B0:0F:8F:27:D4:1B:A6:B5:3B:5D:1A:29:70:E9:BD:06 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fdbQlLAPjyfUG6a1O10aKXDpvQY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.16.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:3a:ea:cb:ee:84:b2:e9:33:dd:ff:8f:ce:22:55:89:bb:94: 90:6c:1a:38:40:54:ee:e5:f8:78:67:d3:61:b5:4d:97:bf:1d: 2d:2d:9e:2d:de:46:70:80:1f:0d:c1:b6:a0:95:81:5b:87:81: 27:2c:64:40:e9:00:e5:76:49:05:53:e0:c2:19:36:17:33:ec: 92:31:ff:f0:5e:36:72:40:4b:49:bf:d3:7b:a2:ff:15:fd:00: ed:f9:ee:b6:28:6c:2e:a6:ce:11:6e:56:16:73:2a:d4:21:0a: 58:5d:03:a6:d2:0f:62:84:e0:1c:6b:87:78:27:e0:a0:52:6a: f6:34:2a:7c:10:21:f0:a2:3b:1b:74:82:f4:22:70:f2:cf:91: 1e:4e:15:07:92:e3:6f:ae:63:98:1e:46:69:a9:6e:c7:86:5f: 65:2c:c2:db:5c:3d:f9:62:84:9b:f0:23:9e:3a:ac:1f:b3:f1: 2c:ee:56:d3:4a:32:78:99:61:3b:36:4f:9a:a9:25:57:e4:61: 7d:d4:6a:30:30:30:e8:68:77:52:0e:79:da:7b:32:89:f3:e2: 79:d3:02:9a:0b:b4:8b:46:c7:4b:d3:05:87:37:60:a5:80:0f: 11:5e:5d:85:f2:26:23:d0:b1:8f:99:97:3d:7a:64:d7:ef:e5: f8:87:ca:7f -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD+wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdERDZEMDk0QjAwRjhG MjdENDFCQTZCNTNCNUQxQTI5NzBFOUJEMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtpLAz/xD61xFxkG7xA3ia/VrDbMTi7FkQsbEc8GWsuizDQb9W 057Ntr8NHFwUkcz5VRX2RgokTuDj2fzLD/7AfoBsglXgn+uvMrLbVdSrWA+UxODQ 9D8aA4urAzxUlPRa/DO9fbFoltovWxQVSYA35q8bH08btxiEXN01R2MCnThVi//Q xlnNZXRP9lJUyPG1RB661939c10lBRG8zyBiqyFaMM9BBJ7cP7d5Kx/g2sCDl6wK tRI2SL6Hca4BHvPwn1gzAgeRHePHDjn7fwlxc7Ugy4X1nCLrfiwT4dCPS3FkcuyV enxg6c1M/OtGQY619Rb+x07ee6b4bOzhcrqlAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUfdbQlLAPjyfUG6a1O10aKXDpvQYwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvZmRiUWxMQVBqeWZVRzZh MU8xMGFLWERwdlFZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIREDANBgkqhkiG9w0BAQsFAAOCAQEAHzrqy+6Esukz3f+PziJVibuUkGwaOEBU 7uX4eGfTYbVNl78dLS2eLd5GcIAfDcG2oJWBW4eBJyxkQOkA5XZJBVPgwhk2FzPs kjH/8F42ckBLSb/Te6L/Ff0A7fnutihsLqbOEW5WFnMq1CEKWF0DptIPYoTgHGuH eCfgoFJq9jQqfBAh8KI7G3SC9CJw8s+RHk4VB5Ljb65jmB5Gaalux4ZfZSzC21w9 +WKEm/AjnjqsH7PxLO5W00oyeJlhOzZPmqklV+RhfdRqMDAw6Gh3Ug552nsyifPi edMCmgu0i0bHS9MFhzdgpYAPEV5dhfImI9Cxj5mXPXpk1+/l+IfKfw== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org