$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/y3-ybr-9e6GzB2w2xd4pv18p_oA.roa File: y3-ybr-9e6GzB2w2xd4pv18p_oA.roa (raw, json) Hash identifier: TAY+uZ2y/7817Gb+0+0dflxppqBcthCHZQuSdUoM9zY= Subject key identifier: CB:7F:B2:6E:BF:BD:7B:A1:B3:07:6C:36:C5:DE:29:BF:5F:29:FE:80 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0FCB Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/y3-ybr-9e6GzB2w2xd4pv18p_oA.roa Signing time: Fri 01 Sep 2023 09:37:17 +0000 ROA not before: Fri 01 Sep 2023 09:37:17 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 103.224.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4043 (0xfcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:17 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CB7FB26EBFBD7BA1B3076C36C5DE29BF5F29FE80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:42:57:e9:83:ae:6f:bf:ef:37:12:b3:9a: 70:7b:85:42:3f:1f:07:f7:5d:be:48:b0:55:db:5d: c6:0f:23:32:5c:a2:9e:6f:d5:cf:e9:aa:17:a7:99: 0a:e9:cd:81:2f:b1:3e:ed:87:86:a9:fb:4a:da:da: a1:1b:0f:e4:db:e0:a0:58:f9:9a:fb:11:04:2e:0e: d6:1c:34:39:0b:2a:a2:d9:60:12:53:c6:63:12:ab: 19:1a:01:eb:2b:c4:a5:6e:49:b8:16:59:47:57:65: e7:ba:76:fe:25:9c:49:a3:b8:93:1b:5b:89:25:c8: 80:a9:f7:82:1b:49:83:23:e3:c2:e6:d6:72:8a:7c: 1b:2a:6a:09:df:01:30:68:d2:53:8d:78:13:22:8a: 36:81:ae:d4:ba:da:44:ef:f2:c2:ea:68:ae:6d:d6: a2:cb:b9:ab:7f:af:8c:cc:83:1c:d4:e2:58:26:5d: 55:8e:82:81:37:45:68:1a:76:4e:52:55:1a:9b:5b: e3:69:a1:8a:ae:18:2a:26:e9:2b:72:44:53:f8:b8: b4:a5:06:5b:25:1e:de:fd:63:51:9a:fb:17:65:a6: 4b:9e:22:92:22:3e:95:c1:d2:b3:2b:c2:4f:ec:3c: 0f:26:ac:0d:e6:39:3c:a9:57:10:10:4a:7c:92:45: 93:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7F:B2:6E:BF:BD:7B:A1:B3:07:6C:36:C5:DE:29:BF:5F:29:FE:80 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/y3-ybr-9e6GzB2w2xd4pv18p_oA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.224.132.0/22 Signature Algorithm: sha256WithRSAEncryption 36:f3:b6:eb:de:4a:a1:b6:c1:11:4e:7c:26:65:d3:66:ec:64: 1a:e4:63:60:6f:3b:59:86:20:42:2d:34:59:71:6a:48:d6:c9: 49:2a:bc:7d:d6:c6:a0:b1:b4:d7:cd:ec:bb:f8:1c:7f:78:99: 0f:0b:6e:b3:e7:08:20:bd:62:0a:76:63:d0:32:2b:ec:ab:99: 31:f0:a8:51:b3:59:5f:07:0b:11:40:97:fc:44:42:f0:44:b3: 7d:06:80:55:43:47:47:06:5a:b5:b6:a2:93:d3:56:2f:70:5f: 08:1d:2f:96:18:b7:61:28:9d:a8:4b:36:bd:db:87:5e:78:8f: 06:f3:ba:05:c1:0e:6b:9e:45:6e:5d:26:6a:54:f2:0b:ef:20: 6b:ab:b1:f4:76:e5:eb:fd:04:86:38:c5:23:c8:13:d7:79:ec: 94:1b:e8:ca:4e:66:e9:46:e8:b9:80:79:54:a9:72:a2:1b:5c: 27:4b:2e:9f:4b:1f:17:4b:d8:a2:9b:2f:83:b6:d2:7d:32:a7: 35:cf:4b:8a:b5:a3:ea:e2:32:7b:bd:6c:e0:a7:5d:62:ff:5e: 6e:86:75:60:23:f6:f2:d8:ef:63:10:9a:f9:8d:20:e5:08:8e: 84:d2:8d:f6:aa:a1:b0:5d:d4:60:79:fa:2b:9e:29:f8:c3:86: 39:ae:b6:76 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENCN0ZCMjZFQkZCRDdC QTFCMzA3NkMzNkM1REUyOUJGNUYyOUZFODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2AEJX6YOub7/vNxKzmnB7hUI/Hwf3Xb5IsFXbXcYPIzJcop5v 1c/pqhenmQrpzYEvsT7th4ap+0ra2qEbD+Tb4KBY+Zr7EQQuDtYcNDkLKqLZYBJT xmMSqxkaAesrxKVuSbgWWUdXZee6dv4lnEmjuJMbW4klyICp94IbSYMj48Lm1nKK fBsqagnfATBo0lONeBMiijaBrtS62kTv8sLqaK5t1qLLuat/r4zMgxzU4lgmXVWO goE3RWgadk5SVRqbW+NpoYquGCom6StyRFP4uLSlBlslHt79Y1Ga+xdlpkueIpIi PpXB0rMrwk/sPA8mrA3mOTypVxAQSnySRZObAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUy3+ybr+9e6GzB2w2xd4pv18p/oAwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQveTMteWJyLTllNkd6QjJ3 MnhkNHB2MThwX29BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AmfghDANBgkqhkiG9w0BAQsFAAOCAQEANvO2695KobbBEU58JmXTZuxkGuRjYG87 WYYgQi00WXFqSNbJSSq8fdbGoLG0183su/gcf3iZDwtus+cIIL1iCnZj0DIr7KuZ MfCoUbNZXwcLEUCX/ERC8ESzfQaAVUNHRwZatbaik9NWL3BfCB0vlhi3YSidqEs2 vduHXniPBvO6BcEOa55Fbl0malTyC+8ga6ux9Hbl6/0EhjjFI8gT13nslBvoyk5m 6UbouYB5VKlyohtcJ0sun0sfF0vYopsvg7bSfTKnNc9LirWj6uIye71s4KddYv9e boZ1YCP28tjvYxCa+Y0g5QiOhNKN9qqhsF3UYHn6K54p+MOGOa62dg== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org