$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sZ5-k7--gkpCISwoFg_vTFfNiX8.roa File: sZ5-k7--gkpCISwoFg_vTFfNiX8.roa (raw, json) Hash identifier: SCklYZ8k62Ohr94eZYUWnf79zbOmXxPX6hijB8FxsK0= Subject key identifier: B1:9E:7E:93:BF:BE:82:4A:42:21:2C:28:16:0F:EF:4C:57:CD:89:7F Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11E8 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sZ5-k7--gkpCISwoFg_vTFfNiX8.roa Signing time: Mon 26 Aug 2024 05:24:30 +0000 ROA not before: Mon 26 Aug 2024 05:24:30 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 219.81.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4584 (0x11e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:30 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B19E7E93BFBE824A42212C28160FEF4C57CD897F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0d:da:2a:42:54:c3:a4:b2:3a:f6:21:8e:5e: 90:e0:c9:ed:e1:cb:05:d2:07:17:58:68:9e:3b:7d: 7b:c4:fb:14:18:16:ef:e8:93:37:1a:62:82:bb:28: 36:90:75:31:31:f2:ad:27:80:6a:be:ed:ad:be:07: 94:cd:6d:9e:d4:5e:15:ff:61:34:a9:31:6c:02:45: fc:a4:5c:ed:b6:a9:04:4c:da:59:fc:7a:ed:3a:78: a0:db:c4:76:c1:56:5c:6d:cd:b0:b7:70:92:23:e7: c8:52:13:15:d9:6d:c9:5b:98:0e:a3:ba:0d:b1:00: e4:13:f6:34:b6:57:d5:b8:15:c0:4c:75:77:42:fc: 99:cc:0d:d1:dd:67:bd:7b:3d:ff:f1:9e:90:2e:5c: 8d:cf:64:09:68:26:cf:83:99:e3:27:cb:6c:19:45: 65:20:1e:e6:54:32:cb:2f:bb:92:34:a0:56:8c:51: 9f:ef:1d:15:b4:f7:3d:c1:1b:7d:af:bc:c7:00:d1: 03:26:39:92:2e:e6:ef:18:50:3b:e6:87:1d:23:8b: 74:e8:42:fe:94:c9:62:8e:59:02:b0:17:65:02:1b: e1:e2:53:44:e9:14:f1:b0:a3:e5:44:71:47:51:2b: f0:fb:ee:24:ca:90:f2:c4:89:c0:1e:f2:ea:df:51: 85:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9E:7E:93:BF:BE:82:4A:42:21:2C:28:16:0F:EF:4C:57:CD:89:7F X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/sZ5-k7--gkpCISwoFg_vTFfNiX8.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 219.81.0.0/16 Signature Algorithm: sha256WithRSAEncryption 12:b1:4f:bc:ec:9a:5f:d5:ea:44:d5:04:77:2b:1f:c2:fa:06: 46:39:aa:70:1a:2c:05:c5:d2:fa:b2:2a:00:1a:9d:51:63:df: 16:76:7d:bb:78:c6:a7:88:9e:47:fe:27:a8:27:27:f8:a7:c9: 8f:c9:3a:68:4e:7d:a1:d2:01:fc:ab:55:33:86:9f:f9:27:83: 1f:7e:4c:da:83:ae:bb:52:41:77:97:d6:4a:1d:6c:5e:b6:67: 5d:ac:16:6c:05:bd:7d:8a:db:44:e8:7f:37:45:72:8a:89:1d: 83:a3:30:95:77:1a:4b:2c:57:21:d7:e5:a7:86:26:15:dc:6b: da:6a:61:00:0e:ad:02:c9:83:56:48:70:e6:a4:1a:3f:45:d2: 28:55:11:5b:18:c5:4d:48:6e:5f:1d:92:51:fc:be:66:1f:bd: 00:e9:a6:88:f6:05:13:10:f3:20:85:ec:11:b0:bf:5a:5a:72: 6c:b8:e6:ee:28:ac:e7:42:06:21:3f:ab:a8:d4:4a:96:ba:1c: be:a9:23:6f:e5:c3:92:43:5c:6a:56:0a:af:07:36:f8:c5:7b: 2c:62:7e:e7:e0:19:81:84:fb:ee:3e:fe:66:a4:54:dc:10:a9: b3:dd:2b:7b:21:db:77:62:ca:a8:1f:5b:0d:b5:ad:ed:30:5c: 51:56:e4:63 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MzBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIxOUU3RTkzQkZCRTgy NEE0MjIxMkMyODE2MEZFRjRDNTdDRDg5N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDgDdoqQlTDpLI69iGOXpDgye3hywXSBxdYaJ47fXvE+xQYFu/o kzcaYoK7KDaQdTEx8q0ngGq+7a2+B5TNbZ7UXhX/YTSpMWwCRfykXO22qQRM2ln8 eu06eKDbxHbBVlxtzbC3cJIj58hSExXZbclbmA6jug2xAOQT9jS2V9W4FcBMdXdC /JnMDdHdZ717Pf/xnpAuXI3PZAloJs+DmeMny2wZRWUgHuZUMssvu5I0oFaMUZ/v HRW09z3BG32vvMcA0QMmOZIu5u8YUDvmhx0ji3ToQv6UyWKOWQKwF2UCG+HiU0Tp FPGwo+VEcUdRK/D77iTKkPLEicAe8urfUYWLAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUsZ5+k7++gkpCISwoFg/vTFfNiX8wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvc1o1LWs3LS1na3BDSVN3 b0ZnX3ZURmZOaVg4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD ANtRMA0GCSqGSIb3DQEBCwUAA4IBAQASsU+87Jpf1epE1QR3Kx/C+gZGOapwGiwF xdL6sioAGp1RY98Wdn27eManiJ5H/ieoJyf4p8mPyTpoTn2h0gH8q1Uzhp/5J4Mf fkzag667UkF3l9ZKHWxetmddrBZsBb19ittE6H83RXKKiR2DozCVdxpLLFch1+Wn hiYV3GvaamEADq0CyYNWSHDmpBo/RdIoVRFbGMVNSG5fHZJR/L5mH70A6aaI9gUT EPMghewRsL9aWnJsuObuKKznQgYhP6uo1EqWuhy+qSNv5cOSQ1xqVgqvBzb4xXss Yn7n4BmBhPvuPv5mpFTcEKmz3St7Idt3YsqoH1sNta3tMFxRVuRj -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org