$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ky0BhiA6OwBEwqhlNjuqu8GD1Hk.roa File: ky0BhiA6OwBEwqhlNjuqu8GD1Hk.roa (raw, json) Hash identifier: BEC5+hb+6/X2bNRnbqRePCkfAhczBA4UhMU4xRxeE14= Subject key identifier: 93:2D:01:86:20:3A:3B:00:44:C2:A8:65:36:3B:AA:BB:C1:83:D4:79 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1222 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ky0BhiA6OwBEwqhlNjuqu8GD1Hk.roa Signing time: Mon 26 Aug 2024 05:24:43 +0000 ROA not before: Mon 26 Aug 2024 05:24:43 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4662 IP address blocks: 210.62.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4642 (0x1222) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:43 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=932D0186203A3B0044C2A865363BAABBC183D479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:42:a5:0a:fe:f2:a9:cf:62:c7:3b:ab:75: fc:7f:4e:98:be:22:30:e1:02:7e:6c:42:3d:b6:7a: a4:bd:e4:94:f1:94:7a:46:ad:3b:e3:1b:4f:31:5a: 37:53:95:e3:d2:13:c1:a6:20:9b:c9:69:e4:57:2a: 94:b1:a6:86:59:55:41:73:f7:65:1e:45:e7:00:82: 47:3b:76:4b:a0:f4:a6:a7:30:e5:7b:0f:81:17:05: 47:d4:12:07:c0:cb:79:ad:53:a3:c8:ba:d9:79:f9: a7:54:50:ab:72:7a:66:09:1c:6e:6d:ae:c9:77:26: 3e:ca:96:4f:82:06:fa:db:a0:64:54:c1:ab:a0:e6: 08:b3:40:cc:71:7f:54:b4:92:4b:0d:83:ad:2f:1f: d2:d9:f0:22:af:fd:08:38:5b:f7:fe:25:30:d5:75: 9e:6a:8e:f1:c1:df:37:74:56:a0:83:16:60:fe:1b: 5b:f2:c6:61:dd:8a:f5:34:f2:ad:dc:f8:65:2e:81: f2:a1:01:34:03:cd:88:c0:a6:e0:cf:72:97:d5:f5: 32:c6:fe:69:af:b9:05:e6:16:bf:42:54:88:4d:66: f9:f0:07:33:84:83:19:ff:0e:56:b1:47:4b:46:69: b0:90:08:a4:b9:0c:cb:53:ed:f5:10:80:da:f6:5b: 2b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2D:01:86:20:3A:3B:00:44:C2:A8:65:36:3B:AA:BB:C1:83:D4:79 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ky0BhiA6OwBEwqhlNjuqu8GD1Hk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.192.0/19 Signature Algorithm: sha256WithRSAEncryption 05:b9:4a:69:cc:aa:bd:c2:d8:88:83:1a:d7:e1:9e:32:5e:65: 92:8d:40:46:4a:0d:23:9f:ad:30:3b:d1:e8:31:d0:dc:93:48: 42:79:0c:af:c1:42:52:60:68:e2:7b:4e:2b:f7:2c:3f:e1:53: 57:37:f2:ce:44:78:15:21:cc:6c:74:b6:7b:b4:a6:55:f5:3d: 20:e2:8f:70:c9:6e:b4:9d:fa:42:d1:7c:c1:13:1c:8f:6b:8c: 07:db:c1:ed:60:5c:bf:db:01:97:18:90:1f:7e:d8:37:77:ec: 58:39:0b:6d:0a:41:01:dc:7d:ff:a7:75:40:12:71:03:73:d6: f1:ed:ae:61:82:42:d5:ea:c8:d1:08:d2:27:11:c6:1e:ff:46: ea:18:35:80:13:25:fe:11:0b:5f:48:c8:99:29:8a:d0:34:8d: f1:f9:02:66:ae:f8:09:d3:6a:ce:5f:41:de:1f:dc:ea:84:05: 06:91:d3:38:17:3c:d7:a7:22:ed:cd:c9:86:4a:74:63:38:39: 6b:85:b3:75:ab:22:e1:a5:69:fd:c5:ba:15:03:53:b2:10:0c: a0:bf:b0:04:20:14:08:3e:ee:52:e7:6d:de:38:6a:b5:9d:2f: 0c:a0:dd:d2:63:2d:10:df:d0:d9:65:57:e3:f3:f3:c6:29:d2: 77:0a:2c:36 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEiIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkzMkQwMTg2MjAzQTNC MDA0NEMyQTg2NTM2M0JBQUJCQzE4M0Q0NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6ukKlCv7yqc9ixzurdfx/Tpi+IjDhAn5sQj22eqS95JTxlHpG rTvjG08xWjdTlePSE8GmIJvJaeRXKpSxpoZZVUFz92UeRecAgkc7dkug9KanMOV7 D4EXBUfUEgfAy3mtU6PIutl5+adUUKtyemYJHG5trsl3Jj7Klk+CBvrboGRUwaug 5gizQMxxf1S0kksNg60vH9LZ8CKv/Qg4W/f+JTDVdZ5qjvHB3zd0VqCDFmD+G1vy xmHdivU08q3c+GUugfKhATQDzYjApuDPcpfV9TLG/mmvuQXmFr9CVIhNZvnwBzOE gxn/DlaxR0tGabCQCKS5DMtT7fUQgNr2WyshAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUky0BhiA6OwBEwqhlNjuqu8GD1HkwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQva3kwQmhpQTZPd0JFd3Fo bE5qdXF1OEdEMUhrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BdI+wDANBgkqhkiG9w0BAQsFAAOCAQEABblKacyqvcLYiIMa1+GeMl5lko1ARkoN I5+tMDvR6DHQ3JNIQnkMr8FCUmBo4ntOK/csP+FTVzfyzkR4FSHMbHS2e7SmVfU9 IOKPcMlutJ36QtF8wRMcj2uMB9vB7WBcv9sBlxiQH37YN3fsWDkLbQpBAdx9/6d1 QBJxA3PW8e2uYYJC1erI0QjSJxHGHv9G6hg1gBMl/hELX0jImSmK0DSN8fkCZq74 CdNqzl9B3h/c6oQFBpHTOBc816ci7c3Jhkp0Yzg5a4Wzdasi4aVp/cW6FQNTshAM oL+wBCAUCD7uUudt3jhqtZ0vDKDd0mMtEN/Q2WVX4/PzxinSdwosNg== -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:13 2024 by rpki-client on console-ams.rpki-client.org