$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/oY0cYlpO3_1G_AxS82WOj8k1V0s.roa File: oY0cYlpO3_1G_AxS82WOj8k1V0s.roa (raw, json) Hash identifier: f3YQG3dEEAvCIuWpsaBPn8GMFXKTI3ygIHDCJnI/4F0= Subject key identifier: A1:8D:1C:62:5A:4E:DF:FD:46:FC:0C:52:F3:65:8E:8F:C9:35:57:4B Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11BA Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/oY0cYlpO3_1G_AxS82WOj8k1V0s.roa Signing time: Mon 26 Aug 2024 05:24:19 +0000 ROA not before: Mon 26 Aug 2024 05:24:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 203.77.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4538 (0x11ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A18D1C625A4EDFFD46FC0C52F3658E8FC935574B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:fc:a8:3f:fc:bd:61:e4:25:94:c2:4a:f6: 84:bd:5f:61:8c:db:9a:ff:dd:6e:5c:b9:32:6a:82: 75:51:4d:7c:e2:01:30:9a:f5:3d:1a:d7:59:de:26: 79:fd:e9:d4:b4:4c:c6:14:14:40:64:a6:35:85:fc: 03:b1:af:5d:ac:49:74:eb:1d:da:90:b0:59:f8:f0: 27:48:c5:62:6b:13:3a:4c:ed:5e:2f:fc:d8:5b:67: 96:c3:cd:f1:6f:bb:79:75:e1:dd:eb:a4:a5:f8:4b: b6:b2:af:d8:2d:5f:ef:5f:0d:9f:f6:a9:ff:59:e1: 75:bf:22:b9:99:15:df:1d:31:30:dd:36:ff:a0:2c: 17:9e:cd:ed:cf:9c:ff:86:f8:04:94:5f:a3:a6:42: 31:9c:80:4d:12:80:0e:f0:96:6c:a7:e8:8b:bb:87: ee:7a:e0:28:26:2d:ca:78:6f:e3:d2:d0:29:82:06: 68:06:8a:75:63:8f:f7:f6:f7:c7:30:96:04:a7:d1: 5d:a1:d2:e1:a4:da:9a:c1:b6:4a:59:15:b7:5b:96: 0e:0d:34:18:a0:10:22:e2:ca:9c:b4:63:03:e1:c6: cc:a3:d2:bd:a8:5e:e7:35:ee:f4:e7:16:6a:80:09: 28:55:bf:33:20:97:63:78:0c:39:98:78:d4:db:06: c7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8D:1C:62:5A:4E:DF:FD:46:FC:0C:52:F3:65:8E:8F:C9:35:57:4B X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/oY0cYlpO3_1G_AxS82WOj8k1V0s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.64.0/20 Signature Algorithm: sha256WithRSAEncryption 7b:d4:ff:bb:47:8b:4d:f4:aa:ef:4b:d2:57:6a:5f:fd:a5:ac: 9a:1c:1a:8b:da:f2:61:ed:0c:02:ff:f0:3c:0b:65:36:62:88: 19:99:9d:53:f7:27:cb:13:e5:e8:f8:c4:34:01:71:dc:4d:94: da:d2:79:5f:19:4b:6a:93:93:ef:0d:eb:76:83:e1:2a:20:9c: cd:dc:e4:ac:b2:9b:1d:cb:5d:6e:2b:06:35:5d:55:89:97:bb: cb:f0:13:d5:96:3e:70:3e:ff:73:ce:f8:0a:54:42:a5:08:cb: 9e:90:52:db:ff:55:f4:b2:36:a2:e6:21:51:3e:f6:44:ff:06: 3c:83:7b:2f:82:b8:33:6a:eb:ec:81:c0:70:79:b9:39:2d:4b: 11:13:d3:65:40:3e:df:dc:af:b5:9c:c3:33:2c:99:2d:36:68: bc:3a:ab:a1:04:07:cd:47:f2:f9:7f:62:f1:36:40:8e:b4:61: d2:d8:98:d0:02:53:a2:6a:33:e3:bd:3e:6d:a4:1c:03:f9:3e: c3:31:1c:0f:07:25:ad:a2:27:d1:d8:15:ef:eb:bf:c7:2f:38: 63:05:31:3c:a2:bd:ac:56:55:41:06:b4:67:55:d9:09:63:14: a7:89:3f:00:84:7b:82:06:d0:c3:76:30:e6:b5:4b:c1:63:a1: 9c:6f:23:85 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEbowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEExOEQxQzYyNUE0RURG RkQ0NkZDMEM1MkYzNjU4RThGQzkzNTU3NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpmfyoP/y9YeQllMJK9oS9X2GM25r/3W5cuTJqgnVRTXziATCa 9T0a11neJnn96dS0TMYUFEBkpjWF/AOxr12sSXTrHdqQsFn48CdIxWJrEzpM7V4v /NhbZ5bDzfFvu3l14d3rpKX4S7ayr9gtX+9fDZ/2qf9Z4XW/IrmZFd8dMTDdNv+g LBeeze3PnP+G+ASUX6OmQjGcgE0SgA7wlmyn6Iu7h+564CgmLcp4b+PS0CmCBmgG inVjj/f298cwlgSn0V2h0uGk2prBtkpZFbdblg4NNBigECLiypy0YwPhxsyj0r2o Xuc17vTnFmqACShVvzMgl2N4DDmYeNTbBsdVAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUoY0cYlpO3/1G/AxS82WOj8k1V0swHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvb1kwY1lscE8zXzFHX0F4 UzgyV09qOGsxVjBzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BMtNQDANBgkqhkiG9w0BAQsFAAOCAQEAe9T/u0eLTfSq70vSV2pf/aWsmhwai9ry Ye0MAv/wPAtlNmKIGZmdU/cnyxPl6PjENAFx3E2U2tJ5XxlLapOT7w3rdoPhKiCc zdzkrLKbHctdbisGNV1ViZe7y/AT1ZY+cD7/c874ClRCpQjLnpBS2/9V9LI2ouYh UT72RP8GPIN7L4K4M2rr7IHAcHm5OS1LERPTZUA+39yvtZzDMyyZLTZovDqroQQH zUfy+X9i8TZAjrRh0tiY0AJTomoz470+baQcA/k+wzEcDwclraIn0dgV7+u/xy84 YwUxPKK9rFZVQQa0Z1XZCWMUp4k/AIR7ggbQw3Yw5rVLwWOhnG8jhQ== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org