$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ssT9KTy5FD6LslwJ8Sxy4DKx7oc.roa File: ssT9KTy5FD6LslwJ8Sxy4DKx7oc.roa (raw, json) Hash identifier: ConnyrFLl1AZF3uHaxCpPWDywB415sEKJn6AqT7Jt10= Subject key identifier: B2:C4:FD:29:3C:B9:14:3E:8B:B2:5C:09:F1:2C:72:E0:32:B1:EE:87 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11DE Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ssT9KTy5FD6LslwJ8Sxy4DKx7oc.roa Signing time: Mon 26 Aug 2024 05:24:28 +0000 ROA not before: Mon 26 Aug 2024 05:24:28 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 203.77.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4574 (0x11de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:28 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=B2C4FD293CB9143E8BB25C09F12C72E032B1EE87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:29:75:40:9a:75:58:62:9b:fe:1d:64:9e:f8: 9d:2d:db:0e:c9:2f:d7:28:80:70:d1:08:68:ca:c5: 45:ad:ac:25:1e:03:0d:9a:62:6e:25:44:2f:d7:46: cd:97:71:37:b0:56:ad:c1:89:24:85:4e:d9:23:f7: 88:64:6c:22:34:94:fe:64:57:1f:7c:80:bb:8f:b8: 75:63:bc:87:fb:27:a6:fb:11:32:4a:33:35:84:d3: 23:77:23:b0:ab:9e:29:c9:29:87:0b:f9:5f:81:bd: da:c0:66:28:30:18:52:1a:56:70:ee:29:c5:ea:26: 3f:5d:5d:9c:12:f2:01:28:a3:2f:45:74:e0:41:5e: a6:4f:4d:38:a4:af:8d:64:43:93:45:78:6b:3a:d3: 2a:65:a9:33:8d:04:52:bf:10:c7:ef:76:18:df:6b: 6b:61:22:8d:72:1d:a6:37:c9:08:4f:0c:96:01:1e: df:c7:87:27:ef:f1:34:fd:43:a0:ed:ee:2c:56:c1: 82:f8:78:75:71:55:96:bb:31:4a:c4:09:73:25:83: 0d:bd:aa:0f:b1:b8:2a:ff:1d:76:fb:91:a2:f0:48: 72:a7:a3:3f:6c:f6:02:aa:36:85:11:12:90:c8:61: c8:8e:32:a7:5c:2a:7d:f3:18:ed:d7:3c:39:21:63: eb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C4:FD:29:3C:B9:14:3E:8B:B2:5C:09:F1:2C:72:E0:32:B1:EE:87 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ssT9KTy5FD6LslwJ8Sxy4DKx7oc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.51.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:f5:23:b6:29:bc:bf:00:5d:ad:32:57:73:25:fe:7f:f6:ac: 25:a5:03:db:cb:10:49:b5:4e:77:3e:28:7a:2c:01:d1:5a:03: c2:72:74:b4:6f:3b:ef:b2:90:f7:01:a6:91:73:4e:f6:ca:42: 58:e9:d3:ac:4b:db:67:57:bd:be:7b:c7:8f:62:2b:bf:df:07: 07:99:af:e5:27:84:4a:31:c2:93:bf:1f:50:e5:d4:51:f4:ba: c6:4e:4f:52:91:d3:ef:fd:6a:7b:22:ba:1a:52:04:37:c5:ff: 74:8e:b1:67:bd:e3:da:a0:b4:e4:7c:e1:00:4c:42:0b:00:f3: c1:7a:65:e9:73:2c:c4:94:86:21:7c:fd:32:21:cb:6f:ea:c7: 0d:57:27:e3:cf:1c:f8:72:d3:e2:dc:c6:aa:60:de:bf:d0:f8: d6:32:75:6e:ff:74:6f:6d:87:73:e0:bf:84:33:c8:93:52:7b: a6:9c:4f:0e:e1:7d:d6:42:fa:89:2e:67:63:19:35:5d:b6:f5: 8d:38:ad:94:ba:9b:dd:e8:69:a6:da:38:63:10:a3:c0:9f:0f: 86:af:a3:f1:7f:52:ac:96:c8:7c:0a:dd:56:45:55:98:df:cd: 18:b5:03:84:9a:97:8a:3c:9c:6a:57:28:66:5c:12:08:95:ab: 24:12:1e:19 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIyQzRGRDI5M0NCOTE0 M0U4QkIyNUMwOUYxMkM3MkUwMzJCMUVFODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDpKXVAmnVYYpv+HWSe+J0t2w7JL9cogHDRCGjKxUWtrCUeAw2a Ym4lRC/XRs2XcTewVq3BiSSFTtkj94hkbCI0lP5kVx98gLuPuHVjvIf7J6b7ETJK MzWE0yN3I7CrninJKYcL+V+BvdrAZigwGFIaVnDuKcXqJj9dXZwS8gEooy9FdOBB XqZPTTikr41kQ5NFeGs60yplqTONBFK/EMfvdhjfa2thIo1yHaY3yQhPDJYBHt/H hyfv8TT9Q6Dt7ixWwYL4eHVxVZa7MUrECXMlgw29qg+xuCr/HXb7kaLwSHKnoz9s 9gKqNoUREpDIYciOMqdcKn3zGO3XPDkhY+sFAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUssT9KTy5FD6LslwJ8Sxy4DKx7ocwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvc3NUOUtUeTVGRDZMc2x3 SjhTeHk0REt4N29jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AMtNMzANBgkqhkiG9w0BAQsFAAOCAQEAC/Ujtim8vwBdrTJXcyX+f/asJaUD28sQ SbVOdz4oeiwB0VoDwnJ0tG8777KQ9wGmkXNO9spCWOnTrEvbZ1e9vnvHj2Irv98H B5mv5SeESjHCk78fUOXUUfS6xk5PUpHT7/1qeyK6GlIEN8X/dI6xZ73j2qC05Hzh AExCCwDzwXpl6XMsxJSGIXz9MiHLb+rHDVcn488c+HLT4tzGqmDev9D41jJ1bv90 b22Hc+C/hDPIk1J7ppxPDuF91kL6iS5nYxk1Xbb1jTitlLqb3ehppto4YxCjwJ8P hq+j8X9SrJbIfArdVkVVmN/NGLUDhJqXijycalcoZlwSCJWrJBIeGQ== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:43 2024 by rpki-client on console-fra.rpki-client.org