$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ple6lXOpGMXZFwNvop1hdn_N2As.roa File: ple6lXOpGMXZFwNvop1hdn_N2As.roa (raw, json) Hash identifier: nI5cjBb9pubVUpMPtD72NfYgyY1nLJYnPLDnv9UdqCE= Subject key identifier: A6:57:BA:95:73:A9:18:C5:D9:17:03:6F:A2:9D:61:76:7F:CD:D8:0B Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0FA0 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ple6lXOpGMXZFwNvop1hdn_N2As.roa Signing time: Fri 01 Sep 2023 09:37:04 +0000 ROA not before: Fri 01 Sep 2023 09:37:04 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 219.81.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4000 (0xfa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:04 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=A657BA9573A918C5D917036FA29D61767FCDD80B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:51:49:9b:3c:4a:1a:8b:b4:46:36:78:0a:07: d7:36:b5:91:ad:b1:2c:5d:2b:55:69:94:45:5d:d9: 7e:07:b9:61:72:ad:ba:ac:57:59:e4:f2:66:e3:26: f1:21:1b:60:b8:c0:e2:11:f9:b9:1c:ee:50:0d:e0: 8d:ef:d8:be:ee:2d:53:8d:5c:1d:c5:c9:4e:9d:60: d8:b7:ae:e7:f8:99:12:99:4b:96:2f:9b:4a:f4:fd: 74:bf:67:9d:07:92:e1:b3:dc:c7:9a:da:df:8b:41: bd:a7:1b:31:36:a1:62:b5:56:f9:0d:15:f8:43:68: c8:37:62:cc:45:07:35:d4:82:5c:67:81:87:7b:80: 1e:7d:35:11:e1:c4:e1:3c:d9:5a:c4:98:44:78:5c: 26:18:3a:83:81:e4:3e:95:86:a2:f2:88:05:26:9d: ed:0c:41:db:3d:7c:17:f8:4a:a1:82:83:83:aa:6e: f8:aa:99:4b:98:30:0a:a2:d2:7f:48:71:b5:27:3c: 14:42:f6:5b:13:5c:62:f0:f1:ee:fb:30:bf:6a:6c: 81:a6:85:17:41:24:59:dc:53:de:60:17:62:fb:a2: 2a:c0:a9:ef:ec:bc:0f:52:78:63:d1:a0:d7:98:8d: 38:ed:8f:30:9b:ad:06:39:d7:42:bc:bf:95:5c:f9: c2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:57:BA:95:73:A9:18:C5:D9:17:03:6F:A2:9D:61:76:7F:CD:D8:0B X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ple6lXOpGMXZFwNvop1hdn_N2As.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.81.0.0/16 Signature Algorithm: sha256WithRSAEncryption 55:30:0a:4b:91:6f:84:84:04:c0:5a:d5:a1:ac:4c:48:5d:ac: 10:c7:57:69:07:2e:2a:ed:0c:a8:98:d7:e4:e6:d7:bb:7c:3f: a2:72:3f:c0:a9:3a:56:5d:bc:ca:25:d7:4d:23:b5:7d:96:67: 26:2c:43:8c:ba:91:c6:72:8c:45:e7:8c:a9:ce:51:d6:7d:07: 45:c6:5b:1a:41:48:cb:f0:fe:39:b2:b5:08:f6:05:d2:a4:bd: 47:5d:60:84:9f:66:f1:d3:b1:57:7a:19:ae:79:f0:f1:a3:ca: b8:5c:b2:49:23:4b:40:6b:b9:5b:9b:53:b5:89:9f:b0:54:87: f7:0d:69:75:dd:4a:32:8a:cc:6f:01:a8:aa:d8:9f:10:38:f3: b1:06:dd:fe:a3:de:e4:48:d3:69:9d:3c:89:4a:31:c7:ae:b4: ec:b4:41:a3:9f:7d:af:65:1c:74:93:a7:15:e3:8d:de:90:67: 2c:e5:5f:76:98:53:48:b2:a9:8b:29:c4:5c:83:fd:ef:7b:06: e4:75:b3:48:e1:67:c4:b8:10:b5:b4:90:49:e2:13:35:12:c6: 13:ac:2d:fd:2f:c9:b1:e6:9a:0e:5d:bb:b0:33:d9:c7:cf:7e: db:f0:55:0a:e2:f0:c7:bf:ce:cd:8b:c0:e6:cf:dc:2b:3d:ad: a8:f7:a5:96 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICD6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEE2NTdCQTk1NzNBOTE4 QzVEOTE3MDM2RkEyOUQ2MTc2N0ZDREQ4MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkUUmbPEoai7RGNngKB9c2tZGtsSxdK1VplEVd2X4HuWFyrbqs V1nk8mbjJvEhG2C4wOIR+bkc7lAN4I3v2L7uLVONXB3FyU6dYNi3ruf4mRKZS5Yv m0r0/XS/Z50HkuGz3Mea2t+LQb2nGzE2oWK1VvkNFfhDaMg3YsxFBzXUglxngYd7 gB59NRHhxOE82VrEmER4XCYYOoOB5D6VhqLyiAUmne0MQds9fBf4SqGCg4Oqbviq mUuYMAqi0n9IcbUnPBRC9lsTXGLw8e77ML9qbIGmhRdBJFncU95gF2L7oirAqe/s vA9SeGPRoNeYjTjtjzCbrQY510K8v5Vc+cJrAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUple6lXOpGMXZFwNvop1hdn/N2AswHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvcGxlNmxYT3BHTVhaRndO dm9wMWhkbl9OMkFzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD ANtRMA0GCSqGSIb3DQEBCwUAA4IBAQBVMApLkW+EhATAWtWhrExIXawQx1dpBy4q 7QyomNfk5te7fD+icj/AqTpWXbzKJddNI7V9lmcmLEOMupHGcoxF54ypzlHWfQdF xlsaQUjL8P45srUI9gXSpL1HXWCEn2bx07FXehmuefDxo8q4XLJJI0tAa7lbm1O1 iZ+wVIf3DWl13UoyisxvAaiq2J8QOPOxBt3+o97kSNNpnTyJSjHHrrTstEGjn32v ZRx0k6cV443ekGcs5V92mFNIsqmLKcRcg/3vewbkdbNI4WfEuBC1tJBJ4hM1EsYT rC39L8mx5poOXbuwM9nHz37b8FUK4vDHv87Ni8Dmz9wrPa2o96WW -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org