$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/hQ1cKeUSq0QomQsLR561Cdo2uBo.roa File: hQ1cKeUSq0QomQsLR561Cdo2uBo.roa (raw, json) Hash identifier: ajoQLi95Qv/q9OfoYbzXvUef5bbqfCMfuck081e/1EE= Subject key identifier: 85:0D:5C:29:E5:12:AB:44:28:99:0B:0B:47:9E:B5:09:DA:36:B8:1A Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0FFC Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/hQ1cKeUSq0QomQsLR561Cdo2uBo.roa Signing time: Fri 01 Sep 2023 09:37:35 +0000 ROA not before: Fri 01 Sep 2023 09:37:35 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24158 IP address blocks: 175.96.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4092 (0xffc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:35 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=850D5C29E512AB4428990B0B479EB509DA36B81A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:c6:81:1d:c8:ee:c9:0e:47:9e:83:64:07: 29:b7:6e:df:7e:3a:01:ee:f0:76:74:fd:42:2e:d2: 90:d4:1a:78:61:c5:1d:c1:c9:06:18:c9:d3:ad:bc: 84:b0:38:83:82:5b:3e:8f:bc:ea:04:bf:82:22:96: f5:b5:d1:ef:6e:8d:68:de:41:e9:0e:ec:88:a4:83: 95:0e:52:4f:f1:e1:e2:4a:12:8b:85:00:5e:81:77: 37:66:67:5a:d9:25:34:a8:c5:7a:7c:3e:fe:0e:af: 14:6e:8f:88:ae:ec:c0:3c:a8:dc:00:27:7d:bf:f1: 5d:75:21:6c:20:b4:f9:bb:f9:f4:21:0e:1e:5c:4b: 69:92:d6:92:9d:56:81:e6:47:f1:70:d2:68:63:50: 55:56:31:75:69:f2:e9:c2:04:8c:08:3f:32:bd:6d: 13:fe:fa:71:71:98:97:72:16:b3:e9:75:10:53:b3: 27:a1:c9:e7:38:f9:8b:fc:6f:a4:0f:5a:8a:78:83: 58:89:d4:18:e3:4a:d2:5f:83:6d:c5:bb:6c:68:6c: 95:c8:6a:55:a2:ad:7f:38:8c:0a:23:43:ec:ae:11: a9:bb:86:a0:70:bf:8e:ed:1b:3f:b5:9c:e0:ba:8d: 49:31:a9:40:6a:50:a7:e7:db:1e:a4:56:31:75:ea: db:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0D:5C:29:E5:12:AB:44:28:99:0B:0B:47:9E:B5:09:DA:36:B8:1A X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/hQ1cKeUSq0QomQsLR561Cdo2uBo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.96.0.0/16 Signature Algorithm: sha256WithRSAEncryption 68:4c:04:d2:fb:d8:f4:d6:de:a4:b7:31:59:90:ea:59:1a:bd: ba:ed:d2:1e:58:42:67:04:de:44:67:ad:d8:2b:3d:71:95:26: b8:b9:71:3e:9b:9e:92:8f:97:dd:3c:1b:13:af:a1:5f:81:e8: 8c:0d:0d:f1:c4:51:58:04:c4:b8:fd:99:4b:94:12:bf:0d:0f: ac:fa:39:20:cb:d1:ac:62:70:8a:03:de:d0:f1:81:77:9e:00: 3b:ac:e6:4a:00:0c:b4:bc:cc:17:c4:7f:af:4e:ee:b9:d6:9d: ce:a8:80:e1:a3:bf:91:a0:5b:8e:44:dd:c4:d0:98:da:fa:43: b5:39:1a:64:8b:b6:b9:75:67:a0:6d:87:db:49:c4:fb:bc:34: e6:3d:17:cd:b3:61:14:49:2f:82:2a:ca:b8:63:50:73:0b:5a: 98:16:95:81:d2:2d:31:90:ca:5b:bc:36:75:78:bd:01:6c:fb: 63:bc:2d:14:1f:bc:e5:ea:eb:d9:21:ec:c9:70:e0:17:10:27: f8:2d:61:e1:9e:e3:e5:15:f1:c7:55:fa:b3:d8:e3:91:4c:93: 10:5e:9f:06:7e:8a:65:c7:8c:23:a6:3f:71:dd:da:69:55:72: eb:96:b6:d2:4a:31:6d:11:77:97:c8:9e:5f:aa:f7:c1:be:cd: b0:6a:97:ed -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICD/wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg1MEQ1QzI5RTUxMkFC NDQyODk5MEIwQjQ3OUVCNTA5REEzNkI4MUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3ucaBHcjuyQ5HnoNkBym3bt9+OgHu8HZ0/UIu0pDUGnhhxR3B yQYYydOtvISwOIOCWz6PvOoEv4IilvW10e9ujWjeQekO7Iikg5UOUk/x4eJKEouF AF6BdzdmZ1rZJTSoxXp8Pv4OrxRuj4iu7MA8qNwAJ32/8V11IWwgtPm7+fQhDh5c S2mS1pKdVoHmR/Fw0mhjUFVWMXVp8unCBIwIPzK9bRP++nFxmJdyFrPpdRBTsyeh yec4+Yv8b6QPWop4g1iJ1BjjStJfg23Fu2xobJXIalWirX84jAojQ+yuEam7hqBw v47tGz+1nOC6jUkxqUBqUKfn2x6kVjF16tt9AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUhQ1cKeUSq0QomQsLR561Cdo2uBowHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvaFExY0tlVVNxMFFvbVFz TFI1NjFDZG8ydUJvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AK9gMA0GCSqGSIb3DQEBCwUAA4IBAQBoTATS+9j01t6ktzFZkOpZGr267dIeWEJn BN5EZ63YKz1xlSa4uXE+m56Sj5fdPBsTr6FfgeiMDQ3xxFFYBMS4/ZlLlBK/DQ+s +jkgy9GsYnCKA97Q8YF3ngA7rOZKAAy0vMwXxH+vTu651p3OqIDho7+RoFuORN3E 0Jja+kO1ORpki7a5dWegbYfbScT7vDTmPRfNs2EUSS+CKsq4Y1BzC1qYFpWB0i0x kMpbvDZ1eL0BbPtjvC0UH7zl6uvZIezJcOAXECf4LWHhnuPlFfHHVfqz2OORTJMQ Xp8Gfoplx4wjpj9x3dppVXLrlrbSSjFtEXeXyJ5fqvfBvs2wapft -----END CERTIFICATE-----Generated at Mon Jun 3 12:44:02 2024 by rpki-client on console-fra.rpki-client.org