$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/x5uj7O8Z_1v7lBNWUdkEkhmFnzc.roa File: x5uj7O8Z_1v7lBNWUdkEkhmFnzc.roa (raw, json) Hash identifier: fM/dlsQd0NuDNi+rCtaHdnuufMBfIoOZr/fYUi0OtbY= Subject key identifier: C7:9B:A3:EC:EF:19:FF:5B:FB:94:13:56:51:D9:04:92:19:85:9F:37 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 11ED Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/x5uj7O8Z_1v7lBNWUdkEkhmFnzc.roa Signing time: Mon 26 Aug 2024 05:24:31 +0000 ROA not before: Mon 26 Aug 2024 05:24:31 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 210.17.73.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4589 (0x11ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:31 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C79BA3ECEF19FF5BFB94135651D9049219859F37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4d:05:de:cc:d5:eb:16:28:5b:8d:38:9b:d6: 4a:15:95:57:78:ab:99:5c:7b:31:52:a6:de:74:21: dc:70:5c:c7:dc:fc:5a:70:a4:c4:91:91:db:2c:4e: 13:43:ff:76:4a:c2:a5:8c:93:34:d0:a2:0d:8d:91: 08:27:a4:ca:bf:7b:11:ac:3a:3b:47:f5:44:89:40: 35:93:9b:a7:b3:97:13:eb:b0:cc:f6:75:bf:01:73: 17:7b:bd:90:e2:70:d4:ac:a0:55:54:46:db:87:0e: 12:a9:d3:d7:e7:15:00:4a:d2:67:83:26:b6:d9:b3: 09:2f:ad:7c:0e:9e:51:9d:2f:6f:0b:4d:1d:28:bb: 14:cc:5a:65:96:08:b3:37:51:6a:2a:bb:5b:b3:f7: 70:93:b8:74:02:06:d5:fe:4d:5e:af:b9:f7:e2:57: a9:f8:fc:0b:c6:35:ad:18:f7:c9:b4:13:c1:af:1f: 0f:6a:34:f5:e5:6d:54:0c:d2:0d:41:6f:0d:ee:43: ca:80:bf:fe:cf:4c:ef:8e:aa:e3:ed:47:1f:13:08: a8:d4:fd:06:f8:1e:29:05:19:36:66:99:63:7d:3c: 3a:f2:b6:40:ce:90:41:00:21:0e:32:f9:2c:85:d6: 18:2e:7b:9c:ba:1e:ba:78:6d:21:d9:51:1b:20:c2: 47:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9B:A3:EC:EF:19:FF:5B:FB:94:13:56:51:D9:04:92:19:85:9F:37 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/x5uj7O8Z_1v7lBNWUdkEkhmFnzc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.73.0/24 Signature Algorithm: sha256WithRSAEncryption 19:99:c3:e5:24:90:af:b6:7b:d3:a3:4d:c1:dc:c5:b1:7f:2b: 81:1a:f7:23:8c:75:88:b3:f3:18:d5:2a:a6:e8:da:d0:a8:62: 08:a3:50:4f:d0:8e:3c:38:26:d6:ca:34:be:95:44:b8:2a:d3: 85:60:b4:d9:24:78:4f:78:8a:6c:c0:df:72:f2:c2:b2:45:22: 78:05:15:45:ca:04:d2:76:a2:48:c5:ca:02:92:57:95:ec:4f: e4:c0:87:34:d6:39:2c:d8:b1:93:05:37:56:8b:82:0b:86:16: d8:11:a7:30:2c:bd:d2:58:c8:0f:7b:5b:37:d0:68:3f:a2:a3: 07:fa:86:d4:5d:be:83:84:da:72:07:c0:cf:db:62:b4:ad:20: 73:58:60:0f:52:b9:4f:86:af:67:c6:67:1e:ca:fb:74:8f:65: 68:7f:72:34:67:3f:88:ca:c6:e0:ae:53:92:6c:79:92:8e:db: a8:2f:62:57:82:33:79:18:fd:53:dc:73:f6:eb:9a:68:3f:ee: 8e:68:e6:72:54:98:d9:54:3f:aa:62:f0:5c:2b:62:fc:34:f2: e4:47:62:16:10:82:2e:0e:5f:ce:e0:09:4e:9c:f9:07:30:67: ae:d4:6c:68:8c:1c:d3:ab:be:c6:09:ef:f0:92:8b:c4:42:5a: 2d:eb:dc:57 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEe0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0MzFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM3OUJBM0VDRUYxOUZG NUJGQjk0MTM1NjUxRDkwNDkyMTk4NTlGMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDUTQXezNXrFihbjTib1koVlVd4q5lcezFSpt50IdxwXMfc/Fpw pMSRkdssThND/3ZKwqWMkzTQog2NkQgnpMq/exGsOjtH9USJQDWTm6ezlxPrsMz2 db8Bcxd7vZDicNSsoFVURtuHDhKp09fnFQBK0meDJrbZswkvrXwOnlGdL28LTR0o uxTMWmWWCLM3UWoqu1uz93CTuHQCBtX+TV6vuffiV6n4/AvGNa0Y98m0E8GvHw9q NPXlbVQM0g1Bbw3uQ8qAv/7PTO+OquPtRx8TCKjU/Qb4HikFGTZmmWN9PDrytkDO kEEAIQ4y+SyF1hgue5y6Hrp4bSHZURsgwkdxAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUx5uj7O8Z/1v7lBNWUdkEkhmFnzcwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQveDV1ajdPOFpfMXY3bEJO V1Vka0VraG1GbnpjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIRSTANBgkqhkiG9w0BAQsFAAOCAQEAGZnD5SSQr7Z706NNwdzFsX8rgRr3I4x1 iLPzGNUqpuja0KhiCKNQT9COPDgm1so0vpVEuCrThWC02SR4T3iKbMDfcvLCskUi eAUVRcoE0naiSMXKApJXlexP5MCHNNY5LNixkwU3VouCC4YW2BGnMCy90ljID3tb N9BoP6KjB/qG1F2+g4TacgfAz9titK0gc1hgD1K5T4avZ8ZnHsr7dI9laH9yNGc/ iMrG4K5Tkmx5ko7bqC9iV4IzeRj9U9xz9uuaaD/ujmjmclSY2VQ/qmLwXCti/DTy 5EdiFhCCLg5fzuAJTpz5BzBnrtRsaIwc06u+xgnv8JKLxEJaLevcVw== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:53 2024 by rpki-client on console-fra.rpki-client.org