$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vr5odZjUTMv7Yt5u6juuMZ5tOCE.roa File: vr5odZjUTMv7Yt5u6juuMZ5tOCE.roa (raw, json) Hash identifier: C3NZ8T2b3i4htf4oArHWR+ENzWdSmjbtub06ld8XpVw= Subject key identifier: BE:BE:68:75:98:D4:4C:CB:FB:62:DE:6E:EA:3B:AE:31:9E:6D:38:21 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11BC Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vr5odZjUTMv7Yt5u6juuMZ5tOCE.roa Signing time: Mon 26 Aug 2024 05:24:19 +0000 ROA not before: Mon 26 Aug 2024 05:24:19 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131634 IP address blocks: 210.17.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4540 (0x11bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:19 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=BEBE687598D44CCBFB62DE6EEA3BAE319E6D3821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:93:44:cf:ee:da:84:1a:9f:0d:c5:f2:32:aa: 27:88:3b:d4:c2:e7:91:32:b7:38:45:f2:4b:a9:62: 47:21:d9:65:76:be:13:50:1f:b9:a7:eb:65:b6:78: 9e:7d:d8:c9:55:bf:a6:fa:87:f6:2c:28:43:6b:b5: 7b:f4:c0:e3:7b:9c:16:d8:ca:fb:9b:69:36:37:f4: 56:f4:9e:ea:b2:05:f0:5d:3c:74:1f:5c:bc:1e:5a: 85:a0:1a:c1:a7:b7:8b:67:33:d4:e8:47:ea:9c:a3: 18:f7:67:84:ad:76:7a:c7:cc:ac:1f:c2:fa:f6:a6: 88:b7:d1:09:26:e8:e8:60:df:36:a9:70:44:be:1c: 63:52:c3:fb:01:f6:a0:c4:ac:b3:05:35:2f:38:13: c9:bd:e3:6a:c9:90:45:0d:37:9d:81:27:95:c8:1f: 34:9f:45:75:a6:3c:33:f0:71:06:fc:4c:8c:79:3c: 40:04:f0:55:05:0e:75:5f:d5:10:d6:d5:d3:aa:7d: cd:ef:9d:87:93:e1:e5:6d:b1:33:97:92:4d:46:e7: 1e:e7:2b:0d:94:87:7d:2a:26:f3:8f:c9:d8:4a:35: 21:8a:57:bf:78:91:5d:24:bf:74:11:3e:53:20:b1: b1:a8:ba:12:29:17:6b:41:83:f7:ad:7a:7f:17:3b: d0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BE:68:75:98:D4:4C:CB:FB:62:DE:6E:EA:3B:AE:31:9E:6D:38:21 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/vr5odZjUTMv7Yt5u6juuMZ5tOCE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.80.0/24 Signature Algorithm: sha256WithRSAEncryption 52:68:28:7e:b0:af:0d:5c:d7:d6:d4:fb:ab:e7:28:1d:fd:5e: 4b:5f:a7:76:14:73:e8:46:6c:88:b7:bb:5a:c7:e0:0f:16:5c: 97:88:cc:2c:7f:a1:50:ae:26:b2:72:1a:9f:7a:66:3b:1e:1a: cf:6a:75:2b:37:50:49:0b:ab:34:c2:93:08:07:2b:46:4b:8d: a8:c4:18:df:50:83:ed:cd:9b:0f:40:b6:9f:9e:11:ce:4c:89: 64:97:7e:92:b8:23:d2:cb:ad:e5:48:c3:13:6a:5c:19:e8:eb: 68:3c:84:78:25:9d:74:3e:ff:09:b8:18:e7:3c:43:91:0c:bb: 10:59:fa:eb:d4:b0:77:2b:82:37:6b:ca:14:c6:8a:ae:f8:6a: 69:ce:39:9e:1d:b8:d4:89:aa:4e:0e:50:39:59:88:f3:ec:16: 27:3f:27:44:d8:71:e1:73:fb:71:49:2b:71:7f:5d:4f:9e:f2: fd:1f:0e:bd:7c:98:94:33:a8:8a:dc:73:73:63:27:87:54:87: fa:5c:d1:db:8c:27:61:1f:5b:06:ec:02:68:22:13:26:d8:02: 00:ab:a5:48:40:6b:c9:55:85:b0:0c:a8:de:e1:8d:0c:97:05: 6f:eb:e9:d6:49:1d:2d:85:da:d9:cb:6e:f7:98:5e:40:ec:f0: 31:63:f2:ba -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJFQkU2ODc1OThENDRD Q0JGQjYyREU2RUVBM0JBRTMxOUU2RDM4MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmk0TP7tqEGp8NxfIyqieIO9TC55EytzhF8kupYkch2WV2vhNQ H7mn62W2eJ592MlVv6b6h/YsKENrtXv0wON7nBbYyvubaTY39Fb0nuqyBfBdPHQf XLweWoWgGsGnt4tnM9ToR+qcoxj3Z4StdnrHzKwfwvr2poi30Qkm6Ohg3zapcES+ HGNSw/sB9qDErLMFNS84E8m942rJkEUNN52BJ5XIHzSfRXWmPDPwcQb8TIx5PEAE 8FUFDnVf1RDW1dOqfc3vnYeT4eVtsTOXkk1G5x7nKw2Uh30qJvOPydhKNSGKV794 kV0kv3QRPlMgsbGouhIpF2tBg/eten8XO9BpAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUvr5odZjUTMv7Yt5u6juuMZ5tOCEwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvdnI1b2RaalVUTXY3WXQ1 dTZqdXVNWjV0T0NFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIRUDANBgkqhkiG9w0BAQsFAAOCAQEAUmgofrCvDVzX1tT7q+coHf1eS1+ndhRz 6EZsiLe7WsfgDxZcl4jMLH+hUK4msnIan3pmOx4az2p1KzdQSQurNMKTCAcrRkuN qMQY31CD7c2bD0C2n54RzkyJZJd+krgj0sut5UjDE2pcGejraDyEeCWddD7/CbgY 5zxDkQy7EFn669SwdyuCN2vKFMaKrvhqac45nh241ImqTg5QOVmI8+wWJz8nRNhx 4XP7cUkrcX9dT57y/R8OvXyYlDOoitxzc2Mnh1SH+lzR24wnYR9bBuwCaCITJtgC AKulSEBryVWFsAyo3uGNDJcFb+vp1kkdLYXa2ctu95heQOzwMWPyug== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org