$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yousDbyHyhRjbApCI0-uBmsq3dE.roa File: yousDbyHyhRjbApCI0-uBmsq3dE.roa (raw, json) Hash identifier: pyfseLi2h9+VRP9ffsGPy25DzRu7GlojMb1nY/6/iJU= Subject key identifier: CA:8B:AC:0D:BC:87:CA:14:63:6C:0A:42:23:4F:AE:06:6B:2A:DD:D1 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1245 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yousDbyHyhRjbApCI0-uBmsq3dE.roa Signing time: Mon 26 Aug 2024 05:24:50 +0000 ROA not before: Mon 26 Aug 2024 05:24:50 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 43.240.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4677 (0x1245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 26 05:24:50 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=CA8BAC0DBC87CA14636C0A42234FAE066B2ADDD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2d:d2:9a:52:c4:dd:c7:02:29:6d:34:25:4e: 97:c8:c8:a6:e9:a1:53:3e:b2:77:cc:c5:68:18:27: 98:42:c8:f9:bf:3e:ff:ea:5c:d8:26:a1:76:4b:60: ac:a5:39:b1:b0:2a:e7:b1:53:e0:46:f9:d4:65:aa: e9:b2:b7:10:3e:59:6e:2e:66:c4:06:0e:14:a5:cb: 5e:32:78:70:21:5e:06:e2:2f:94:c1:ea:02:12:95: 42:48:da:b9:99:8d:13:50:7e:51:a5:7d:6f:86:45: 25:5d:ec:94:69:0d:f1:78:bc:6c:d8:ee:a1:82:5e: f4:15:72:41:3b:04:c8:2d:fe:86:73:d2:6d:00:99: c6:dc:c2:7a:c2:27:06:f1:34:e3:bb:bc:bd:d6:a7: 0c:8d:da:ed:01:6d:16:12:20:d9:26:be:27:8e:7b: a9:0d:51:99:c3:07:75:78:d2:48:3d:99:e6:8b:f5: 63:b7:e8:49:dd:9e:9a:5f:67:a8:ba:53:f4:50:86: 1c:23:bb:3e:f4:7b:39:63:11:46:34:84:7f:ec:b4: e2:7b:27:80:c3:0d:85:0d:d5:0d:a4:f9:e5:bc:43: 9d:db:63:d6:c5:c0:f7:8a:40:39:c8:63:5e:c5:1f: fb:6d:b3:75:4b:13:69:c9:f1:1f:35:0e:0d:99:2a: b2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8B:AC:0D:BC:87:CA:14:63:6C:0A:42:23:4F:AE:06:6B:2A:DD:D1 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/yousDbyHyhRjbApCI0-uBmsq3dE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.240.24.0/22 Signature Algorithm: sha256WithRSAEncryption 31:3b:51:94:9b:0d:9f:43:c4:ae:0b:7f:e7:f3:3a:22:52:c9: 39:cc:e3:3e:d4:97:39:23:e8:7a:1f:f0:8f:4f:7f:7b:d2:bc: ff:2d:22:ac:6b:ef:1f:2f:ef:67:52:1e:1f:1b:68:5b:b8:0d: e9:6d:e3:43:4b:df:f8:4a:40:4b:b9:86:9f:ce:51:d1:88:f2: a5:4c:9a:b8:67:3b:10:d7:78:7f:d9:38:d9:f4:82:65:66:80: cf:2e:69:5e:00:71:3c:6d:9a:76:96:4d:b7:fc:3e:12:24:a0: 83:fb:62:ee:ca:cc:d6:7d:33:92:1f:06:87:4e:40:93:84:60: a8:33:3a:68:e1:65:45:23:69:41:fa:34:bf:2e:4a:de:75:a2: 79:e2:c0:7d:4a:c9:74:59:2d:86:b2:1f:c9:62:7a:0d:bf:fb: 81:88:fa:0e:ab:9b:78:0a:d3:5c:35:39:16:5d:01:ad:72:51: bd:c3:92:4f:3c:ae:dc:6e:c3:9a:a3:44:78:fa:28:c3:a6:44: 1d:d7:6a:29:7e:2d:c7:de:16:4f:f0:a7:b2:49:dd:b2:7a:de: 3b:53:0d:a9:38:72:b0:5b:c6:8f:9d:3a:8b:cc:12:99:65:ad: 49:17:5e:73:8d:10:c1:f1:ed:20:53:ad:46:43:07:04:5f:61: 4d:04:25:e6 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEkUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNDA4MjYw NTI0NTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENBOEJBQzBEQkM4N0NB MTQ2MzZDMEE0MjIzNEZBRTA2NkIyQURERDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDjLdKaUsTdxwIpbTQlTpfIyKbpoVM+snfMxWgYJ5hCyPm/Pv/q XNgmoXZLYKylObGwKuexU+BG+dRlqumytxA+WW4uZsQGDhSly14yeHAhXgbiL5TB 6gISlUJI2rmZjRNQflGlfW+GRSVd7JRpDfF4vGzY7qGCXvQVckE7BMgt/oZz0m0A mcbcwnrCJwbxNOO7vL3WpwyN2u0BbRYSINkmvieOe6kNUZnDB3V40kg9meaL9WO3 6EndnppfZ6i6U/RQhhwjuz70ezljEUY0hH/stOJ7J4DDDYUN1Q2k+eW8Q53bY9bF wPeKQDnIY17FH/tts3VLE2nJ8R81Dg2ZKrLxAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUyousDbyHyhRjbApCI0+uBmsq3dEwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQveW91c0RieUh5aFJqYkFw Q0kwLXVCbXNxM2RFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AivwGDANBgkqhkiG9w0BAQsFAAOCAQEAMTtRlJsNn0PErgt/5/M6IlLJOczjPtSX OSPoeh/wj09/e9K8/y0irGvvHy/vZ1IeHxtoW7gN6W3jQ0vf+EpAS7mGn85R0Yjy pUyauGc7ENd4f9k42fSCZWaAzy5pXgBxPG2adpZNt/w+EiSgg/ti7srM1n0zkh8G h05Ak4RgqDM6aOFlRSNpQfo0vy5K3nWieeLAfUrJdFkthrIfyWJ6Db/7gYj6Dqub eArTXDU5Fl0BrXJRvcOSTzyu3G7DmqNEePoow6ZEHddqKX4tx94WT/Cnskndsnre O1MNqThysFvGj506i8wSmWWtSRdec40QwfHtIFOtRkMHBF9hTQQl5g== -----END CERTIFICATE-----Generated at Mon Nov 25 16:43:43 2024 by rpki-client on console-fra.rpki-client.org