$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nIvSiW4kSXbof4pZgA8SQmW_aVc.roa File: nIvSiW4kSXbof4pZgA8SQmW_aVc.roa (raw, json) Hash identifier: ngm6/cvMee4WIQMjmJJ53bQFAMl2BMS3AswvIuscakY= Subject key identifier: 9C:8B:D2:89:6E:24:49:76:E8:7F:8A:59:80:0F:12:42:65:BF:69:57 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 121D Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nIvSiW4kSXbof4pZgA8SQmW_aVc.roa Signing time: Mon 26 Aug 2024 05:24:42 +0000 ROA not before: Mon 26 Aug 2024 05:24:42 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 203.77.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4637 (0x121d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:42 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9C8BD2896E244976E87F8A59800F124265BF6957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:fd:8b:3b:5b:2d:78:c3:9c:98:17:53:4e: 09:99:1c:35:a0:04:ec:6e:0d:c0:f6:df:dc:cb:11: 26:5c:ee:46:29:1b:d8:89:fe:e2:a8:06:48:7f:06: 41:1e:ed:18:e2:a6:8c:77:0f:24:2c:b5:90:81:44: 36:2b:a1:f9:eb:74:a9:d8:b9:9e:8b:ee:3c:fd:4f: ee:b2:6f:61:0a:85:7b:3a:15:3e:04:2e:57:46:8d: ab:3f:75:49:7c:f9:45:91:64:cb:de:75:3f:a6:dc: 5e:e1:cc:9c:b7:41:60:65:50:b5:55:82:e4:e9:61: 47:10:bd:4d:e0:96:66:9f:a3:b2:b3:a1:e1:f1:f3: a7:6f:1b:b6:75:8a:c1:26:68:cb:af:c2:5d:3c:a9: 36:a1:b8:02:44:2a:ec:0d:d6:c2:da:a1:d2:dc:0e: 2c:22:91:22:1f:f9:da:99:c2:ab:b4:df:06:cc:9e: 0a:e4:ae:83:42:34:62:49:68:c3:45:c1:54:de:2f: 69:16:ab:d2:12:b8:f0:e3:a7:9a:61:d9:7d:c8:35: 50:f9:05:7d:0c:c3:c1:44:bd:84:cd:a9:ff:cb:0a: 93:63:03:cd:66:1a:18:41:fa:49:58:8e:14:5b:ac: fe:ff:60:57:2a:49:4d:61:9c:9a:5a:11:e7:5f:8b: 55:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8B:D2:89:6E:24:49:76:E8:7F:8A:59:80:0F:12:42:65:BF:69:57 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/nIvSiW4kSXbof4pZgA8SQmW_aVc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.32.0/19 Signature Algorithm: sha256WithRSAEncryption 73:ae:f0:b1:a5:2f:19:e8:00:f3:55:f7:a6:d9:bf:4e:cd:25: b7:16:05:15:58:e6:45:71:43:bc:7f:10:9c:13:87:2e:c5:59: c2:9d:c5:c6:44:01:61:45:40:0a:65:7f:4b:c0:9d:69:09:3b: aa:dc:47:dc:aa:14:13:f9:07:d9:ff:4c:79:e4:39:e6:8a:eb: c9:2f:e4:71:3c:0e:e5:8c:8c:48:bc:45:d1:b2:42:7c:e2:41: 6a:45:65:90:c1:83:1b:82:0c:af:ac:b4:1e:5a:3b:34:7a:bf: 44:d5:50:74:d2:f4:ba:2c:e2:9c:35:f8:7d:d5:66:b0:2f:a6: 34:46:1b:31:6a:6c:64:54:cd:82:5e:c1:a9:82:e2:65:f4:c1: 2b:ec:83:db:e9:32:ac:66:62:c8:f3:2c:99:de:0c:82:73:58: 5f:2b:58:0f:8f:a5:26:9a:ca:21:da:c4:3c:fd:5c:b0:4f:82: 36:42:16:ea:1b:cd:66:b3:0b:04:31:ef:27:dd:16:8f:f2:ec: a1:77:c8:2c:4d:1a:ff:4d:10:ea:bd:9f:7b:f9:ae:50:9b:2d: e1:27:6b:01:ec:1a:0d:ae:ca:9c:99:1e:0e:ac:94:83:46:4f: f0:0f:a3:83:5f:23:c7:77:b6:6b:25:d8:e6:ce:34:24:70:6a: a1:41:87:6e -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0NDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlDOEJEMjg5NkUyNDQ5 NzZFODdGOEE1OTgwMEYxMjQyNjVCRjY5NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCuQf2LO1steMOcmBdTTgmZHDWgBOxuDcD239zLESZc7kYpG9iJ /uKoBkh/BkEe7Rjipox3DyQstZCBRDYrofnrdKnYuZ6L7jz9T+6yb2EKhXs6FT4E LldGjas/dUl8+UWRZMvedT+m3F7hzJy3QWBlULVVguTpYUcQvU3glmafo7KzoeHx 86dvG7Z1isEmaMuvwl08qTahuAJEKuwN1sLaodLcDiwikSIf+dqZwqu03wbMngrk roNCNGJJaMNFwVTeL2kWq9ISuPDjp5ph2X3INVD5BX0Mw8FEvYTNqf/LCpNjA81m GhhB+klYjhRbrP7/YFcqSU1hnJpaEedfi1UVAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUnIvSiW4kSXbof4pZgA8SQmW/aVcwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvbkl2U2lXNGtTWGJvZjRw WmdBOFNRbVdfYVZjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BctNIDANBgkqhkiG9w0BAQsFAAOCAQEAc67wsaUvGegA81X3ptm/Ts0ltxYFFVjm RXFDvH8QnBOHLsVZwp3FxkQBYUVACmV/S8CdaQk7qtxH3KoUE/kH2f9MeeQ55orr yS/kcTwO5YyMSLxF0bJCfOJBakVlkMGDG4IMr6y0Hlo7NHq/RNVQdNL0uizinDX4 fdVmsC+mNEYbMWpsZFTNgl7BqYLiZfTBK+yD2+kyrGZiyPMsmd4MgnNYXytYD4+l JprKIdrEPP1csE+CNkIW6hvNZrMLBDHvJ90Wj/LsoXfILE0a/00Q6r2fe/muUJst 4SdrAewaDa7KnJkeDqyUg0ZP8A+jg18jx3e2ayXY5s40JHBqoUGHbg== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org