$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sQ1MfJVN7f7KOUCztz7cvYcUFJo.roa File: sQ1MfJVN7f7KOUCztz7cvYcUFJo.roa (raw, json) Hash identifier: K1CGH9oLidzHC1ZccHETPcGAaHllcT2vxUjZQoXn9Tk= Subject key identifier: B1:0D:4C:7C:95:4D:ED:FE:CA:39:40:B3:B7:3E:DC:BD:87:14:14:9A Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0F79 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sQ1MfJVN7f7KOUCztz7cvYcUFJo.roa Signing time: Fri 01 Sep 2023 09:36:53 +0000 ROA not before: Fri 01 Sep 2023 09:36:53 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 24158 IP address blocks: 203.105.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3961 (0xf79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:36:53 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=B10D4C7C954DEDFECA3940B3B73EDCBD8714149A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:f2:0c:d6:19:67:8e:62:f0:28:3d:cc:e5: 02:ab:a7:bd:17:de:9a:f8:51:4a:ac:82:4d:d8:88: d9:11:45:9c:9e:1c:86:54:09:39:63:fb:0e:fb:16: c2:ca:11:a0:cc:15:e3:2f:cc:04:b7:a7:dd:72:c9: 67:91:41:52:48:79:10:23:4f:c9:20:cc:6a:5d:6c: 1a:b1:21:35:34:5a:52:0c:c5:92:7a:3f:eb:d1:ab: c9:1a:8f:80:d6:26:db:84:f4:ca:5e:2d:e9:34:a6: 8d:52:f4:d4:9b:a1:d5:48:24:95:34:d7:2a:0c:6e: 48:2f:f7:1e:e0:e7:56:ae:f7:d2:90:f7:3a:5f:d7: 6b:3c:8e:01:0b:5d:ea:d1:3b:22:21:02:6b:f1:68: 88:37:3a:d8:01:0b:8a:fc:e6:1d:9e:e5:4c:88:9f: 53:74:dc:9a:bd:6b:82:31:0b:cc:f9:13:83:db:74: 97:7b:26:11:d9:e8:0c:84:32:a9:3c:34:3d:91:da: 2c:9f:53:95:31:4c:63:f5:43:45:62:91:03:fd:08: 0f:ee:4a:66:62:a6:b2:2c:d6:c1:36:44:55:8f:49: b3:38:f4:64:18:04:19:f9:d9:7d:d7:6b:56:28:60: c4:bc:96:91:9f:ca:c3:2a:4b:df:49:40:41:40:40: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0D:4C:7C:95:4D:ED:FE:CA:39:40:B3:B7:3E:DC:BD:87:14:14:9A X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sQ1MfJVN7f7KOUCztz7cvYcUFJo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.105.224.0/24 Signature Algorithm: sha256WithRSAEncryption 68:49:61:8f:47:00:64:93:fd:2c:35:24:49:33:2d:7f:08:57: 07:05:78:68:ba:80:c3:b4:23:1f:73:15:74:6e:27:d1:f0:8a: 0b:12:1d:bb:86:68:08:e8:ca:e4:91:34:cb:da:77:f8:f7:a4: 75:36:ec:95:33:f2:b3:2d:f0:f8:05:62:74:b3:b4:85:87:3f: b0:08:c6:e2:b3:57:7f:73:0f:48:fc:fd:7e:9f:9b:25:f2:6c: 77:61:65:93:bb:24:ca:70:8f:68:39:7d:20:b3:1d:da:ea:18: bb:eb:a4:97:15:c0:85:85:da:6c:a1:6e:34:5a:45:44:9c:25: 69:42:13:0e:11:e0:2a:81:1d:4b:8f:b0:26:c5:d8:65:25:70: 6a:c8:9e:78:7d:66:25:fc:7c:c5:a0:33:5d:ae:91:09:a7:d9: 29:f4:81:c3:9b:32:97:83:c6:66:91:85:18:94:5f:bd:43:ab: f1:1c:13:07:39:da:71:28:0d:c3:fd:68:42:5f:d9:86:82:94: 84:8f:7b:96:94:bf:49:49:13:c4:1f:d3:3b:93:94:76:5e:f1: 68:8c:3d:00:a1:7f:fe:43:e1:b3:21:79:eb:41:12:e0:1a:49: 5e:97:6d:96:29:08:8c:0e:72:c5:5e:29:87:52:ec:c1:c8:0b: b1:e1:78:92 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM2NTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIxMEQ0QzdDOTU0REVE RkVDQTM5NDBCM0I3M0VEQ0JEODcxNDE0OUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCjKvIM1hlnjmLwKD3M5QKrp70X3pr4UUqsgk3YiNkRRZyeHIZU CTlj+w77FsLKEaDMFeMvzAS3p91yyWeRQVJIeRAjT8kgzGpdbBqxITU0WlIMxZJ6 P+vRq8kaj4DWJtuE9MpeLek0po1S9NSbodVIJJU01yoMbkgv9x7g51au99KQ9zpf 12s8jgELXerROyIhAmvxaIg3OtgBC4r85h2e5UyIn1N03Jq9a4IxC8z5E4PbdJd7 JhHZ6AyEMqk8ND2R2iyfU5UxTGP1Q0VikQP9CA/uSmZiprIs1sE2RFWPSbM49GQY BBn52X3Xa1YoYMS8lpGfysMqS99JQEFAQMEBAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUsQ1MfJVN7f7KOUCztz7cvYcUFJowHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvc1ExTWZKVk43ZjdLT1VD enR6N2N2WWNVRkpvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AMtp4DANBgkqhkiG9w0BAQsFAAOCAQEAaElhj0cAZJP9LDUkSTMtfwhXBwV4aLqA w7QjH3MVdG4n0fCKCxIdu4ZoCOjK5JE0y9p3+PekdTbslTPysy3w+AVidLO0hYc/ sAjG4rNXf3MPSPz9fp+bJfJsd2Flk7skynCPaDl9ILMd2uoYu+uklxXAhYXabKFu NFpFRJwlaUITDhHgKoEdS4+wJsXYZSVwasieeH1mJfx8xaAzXa6RCafZKfSBw5sy l4PGZpGFGJRfvUOr8RwTBznacSgNw/1oQl/ZhoKUhI97lpS/SUkTxB/TO5OUdl7x aIw9AKF//kPhsyF560ES4BpJXpdtlikIjA5yxV4ph1LswcgLseF4kg== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org