$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yVXmF_FxdFBNOjF3vErllv-zRgI.roa File: yVXmF_FxdFBNOjF3vErllv-zRgI.roa (raw, json) Hash identifier: lNGRGy5RQwxw3Tj9n7KKJasEDN4dvIv7tNnLJId8HNg= Subject key identifier: C9:55:E6:17:F1:71:74:50:4D:3A:31:77:BC:4A:E5:96:FF:B3:46:02 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1366 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yVXmF_FxdFBNOjF3vErllv-zRgI.roa Signing time: Mon 10 Feb 2025 14:09:26 +0000 ROA not before: Mon 10 Feb 2025 14:09:26 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 203.105.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4966 (0x1366) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:09:26 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C955E617F17174504D3A3177BC4AE596FFB34602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:6c:c0:25:97:31:3c:0a:3d:91:ea:c1:bf: 1f:b8:60:75:32:42:cc:4d:e0:05:f4:d0:b2:06:28: e4:31:29:2e:a4:2b:6e:af:76:96:a4:4d:68:99:9e: 68:1f:0a:e6:38:a9:1b:22:7d:fe:31:56:76:ec:47: da:b6:d5:4b:65:a8:d6:62:3f:d7:83:70:91:29:2e: b0:3f:5d:72:21:c3:5d:f5:0d:c7:ac:7d:e6:2d:2f: 92:33:3b:c2:dd:19:28:73:d9:c5:1d:1c:46:93:7c: dd:ca:73:a9:5e:89:85:75:6e:0c:15:3a:23:68:ac: 31:0d:63:e9:6d:80:88:de:a0:c9:30:f8:a5:21:e6: c5:33:cb:4f:64:f2:58:18:58:fe:ed:ae:51:79:9f: f8:bf:7b:b4:d6:18:70:1b:f6:04:d4:71:9f:2c:b9: 76:c6:77:40:79:3a:23:b4:41:95:eb:d5:0e:a0:e2: ce:45:fe:01:31:38:c8:bf:1e:53:94:87:c8:2c:d7: 84:df:b2:fb:bc:3c:fa:50:0e:da:fb:3a:21:8b:2f: b8:28:8e:c2:f0:41:f7:f4:60:90:02:6f:7f:5c:5c: b5:13:1c:28:c8:55:1b:c9:a7:e7:4e:99:64:1a:19: 7e:73:97:49:ba:9a:78:9a:af:ea:82:44:93:cc:c0: 8d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:55:E6:17:F1:71:74:50:4D:3A:31:77:BC:4A:E5:96:FF:B3:46:02 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yVXmF_FxdFBNOjF3vErllv-zRgI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.105.224.0/19 Signature Algorithm: sha256WithRSAEncryption 5a:2e:42:af:1e:89:01:66:c6:10:1a:ee:49:0b:89:ad:a4:ae: 1e:6f:f1:3f:20:74:ad:75:dc:25:00:1d:e7:3e:53:55:d7:29: 10:82:2d:c3:14:cd:30:2b:ee:ef:50:67:76:3b:8c:f9:8e:44: b0:80:64:77:30:95:11:02:ce:d1:b7:fa:48:bb:ed:32:1f:db: 3b:96:dd:38:0c:e9:28:8e:97:36:26:aa:a6:3a:41:02:06:ad: 75:80:cd:ea:1b:da:a2:5e:ef:bc:d4:33:3c:67:89:fb:49:95: 81:23:36:86:b6:88:22:fc:6f:65:ad:42:48:c9:ca:9f:fb:06: e1:a9:33:ee:8b:cb:35:f7:ae:b0:8c:d5:62:87:e8:39:52:78: 26:96:08:58:7a:4f:b6:c4:41:6e:95:1a:e3:7d:a6:d3:db:20: 12:e4:0d:1d:1c:da:17:75:45:e4:eb:f5:71:6e:b1:83:8d:0e: 6d:b8:17:49:ad:d1:5b:da:43:78:76:be:fe:ef:9f:23:b4:50: 54:f6:07:d1:ac:0e:d4:f0:13:1a:5b:b6:03:4a:f1:50:c1:3d: b9:2b:4e:9a:d6:b4:8d:4e:64:06:55:3c:ec:ad:10:42:1c:fb: ad:6f:37:f4:27:c6:cd:64:1b:46:68:92:2f:50:8f:00:0f:23: aa:70:bc:70 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICE2YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA5MjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM5NTVFNjE3RjE3MTc0 NTA0RDNBMzE3N0JDNEFFNTk2RkZCMzQ2MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/7mzAJZcxPAo9kerBvx+4YHUyQsxN4AX00LIGKOQxKS6kK26v dpakTWiZnmgfCuY4qRsiff4xVnbsR9q21UtlqNZiP9eDcJEpLrA/XXIhw131Dces feYtL5IzO8LdGShz2cUdHEaTfN3Kc6leiYV1bgwVOiNorDENY+ltgIjeoMkw+KUh 5sUzy09k8lgYWP7trlF5n/i/e7TWGHAb9gTUcZ8suXbGd0B5OiO0QZXr1Q6g4s5F /gExOMi/HlOUh8gs14Tfsvu8PPpQDtr7OiGLL7gojsLwQff0YJACb39cXLUTHCjI VRvJp+dOmWQaGX5zl0m6mniar+qCRJPMwI2jAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUyVXmF/FxdFBNOjF3vErllv+zRgIwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQveVZYbUZfRnhkRkJOT2pG M3ZFcmxsdi16UmdJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Bctp4DANBgkqhkiG9w0BAQsFAAOCAQEAWi5Crx6JAWbGEBruSQuJraSuHm/xPyB0 rXXcJQAd5z5TVdcpEIItwxTNMCvu71BndjuM+Y5EsIBkdzCVEQLO0bf6SLvtMh/b O5bdOAzpKI6XNiaqpjpBAgatdYDN6hvaol7vvNQzPGeJ+0mVgSM2hraIIvxvZa1C SMnKn/sG4akz7ovLNfeusIzVYofoOVJ4JpYIWHpPtsRBbpUa432m09sgEuQNHRza F3VF5Ov1cW6xg40ObbgXSa3RW9pDeHa+/u+fI7RQVPYH0awO1PATGlu2A0rxUME9 uStOmta0jU5kBlU87K0QQhz7rW839CfGzWQbRmiSL1CPAA8jqnC8cA== -----END CERTIFICATE-----Generated at Mon Apr 7 01:57:37 2025 by rpki-client