$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/z_Mz8P9UUYv8qldQoiH-PqDeaa0.roa File: z_Mz8P9UUYv8qldQoiH-PqDeaa0.roa (raw, json) Hash identifier: 51h43OLF8MCkxsmoNceeMm9/x3QuUI3/3ZWpEBlDwaA= Subject key identifier: CF:F3:33:F0:FF:54:51:8B:FC:AA:57:50:A2:21:FE:3E:A0:DE:69:AD Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1000 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/z_Mz8P9UUYv8qldQoiH-PqDeaa0.roa Signing time: Fri 01 Sep 2023 09:37:37 +0000 ROA not before: Fri 01 Sep 2023 09:37:37 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131628 IP address blocks: 175.97.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4096 (0x1000) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:37 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CFF333F0FF54518BFCAA5750A221FE3EA0DE69AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d1:fb:95:b3:39:4d:7f:99:76:e6:18:fb:b3: 84:d4:a5:38:d4:0c:38:48:88:94:f9:1b:eb:3e:a4: fe:2c:3c:65:59:be:8c:d1:ec:d6:5a:75:42:f6:48: 2d:e7:92:24:ed:96:88:ac:34:29:4a:f9:11:19:a6: 8f:49:e3:a4:f3:ca:2a:7b:ab:6c:8e:6f:bf:0d:35: c6:05:45:5f:b7:fe:fb:08:6e:76:5d:0e:24:cc:13: 50:24:d4:20:5c:77:eb:f7:79:05:84:b3:3d:18:93: ac:1f:f4:b6:d9:23:d5:c0:19:a7:1f:57:4e:69:a4: 85:c8:66:fd:26:d6:cf:a2:54:d8:76:16:d6:4a:37: 59:a2:d6:07:c6:ec:46:74:c4:d2:64:eb:5e:00:57: 07:c4:3a:d1:a8:68:ba:24:c0:8f:0b:cf:5b:58:63: 49:4e:14:74:0f:6b:db:24:91:64:c6:c7:29:fd:9f: 98:ff:33:95:a4:dc:cb:9e:c3:5a:aa:62:6f:18:c9: 1a:24:d7:9f:9b:b8:e3:c8:20:6a:f7:2f:a9:a9:ca: a7:56:14:d0:cd:17:28:b7:2e:3e:06:b5:36:19:27: 58:69:0c:5e:0a:59:10:9f:f6:4f:b0:78:f2:99:c3: bb:c0:71:9e:3a:9a:ca:99:25:0f:08:54:10:37:8b: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F3:33:F0:FF:54:51:8B:FC:AA:57:50:A2:21:FE:3E:A0:DE:69:AD X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/z_Mz8P9UUYv8qldQoiH-PqDeaa0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.97.192.0/20 Signature Algorithm: sha256WithRSAEncryption 87:c1:40:7c:52:1a:6c:ef:3d:96:a7:4b:38:f7:e1:0d:a0:33: 6b:3b:da:6d:5d:b6:2a:da:83:64:af:52:9b:5f:9d:89:ab:6e: c7:cd:81:24:5f:ae:12:c4:e4:14:64:40:85:82:0e:98:79:49: 35:77:fc:eb:0e:c7:59:9f:6a:09:93:97:1d:a1:8e:a4:6b:68: 6d:a4:a5:16:c0:89:c9:10:52:37:91:cc:a7:f4:dd:93:81:c4: 4d:0e:9f:6c:24:3b:11:63:73:36:59:40:47:8f:74:61:ea:03: a8:55:40:a2:27:f9:09:5e:1e:90:0e:d2:a9:70:a9:85:d5:22: 45:25:a8:18:38:d1:76:19:7b:02:4f:fc:e8:f2:88:7e:e5:95: 52:f3:db:16:37:d6:23:41:51:98:bc:a8:4e:c4:23:d8:04:62: d2:56:86:fa:1e:5d:0b:28:76:4f:5a:92:8e:ab:9d:ec:07:6a: 1b:ba:70:71:be:0a:c6:05:ae:21:e9:02:d3:d3:24:bf:ae:2d: f8:ae:f9:e2:a6:71:cc:35:ba:74:66:b0:d2:ec:af:91:4b:cb: 0b:58:64:1c:7d:03:e8:47:80:68:8b:ec:ce:77:29:a5:51:aa: f8:19:89:41:ac:be:28:e5:31:18:d6:38:87:7a:c7:ec:33:2d: 60:1a:da:11 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MzdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENGRjMzM0YwRkY1NDUx OEJGQ0FBNTc1MEEyMjFGRTNFQTBERTY5QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDx0fuVszlNf5l25hj7s4TUpTjUDDhIiJT5G+s+pP4sPGVZvozR 7NZadUL2SC3nkiTtloisNClK+REZpo9J46Tzyip7q2yOb78NNcYFRV+3/vsIbnZd DiTME1Ak1CBcd+v3eQWEsz0Yk6wf9LbZI9XAGacfV05ppIXIZv0m1s+iVNh2FtZK N1mi1gfG7EZ0xNJk614AVwfEOtGoaLokwI8Lz1tYY0lOFHQPa9skkWTGxyn9n5j/ M5Wk3Muew1qqYm8YyRok15+buOPIIGr3L6mpyqdWFNDNFyi3Lj4GtTYZJ1hpDF4K WRCf9k+wePKZw7vAcZ46msqZJQ8IVBA3i1aRAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUz/Mz8P9UUYv8qldQoiH+PqDeaa0wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvel9NejhQOVVVWXY4cWxk UW9pSC1QcURlYWEwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BK9hwDANBgkqhkiG9w0BAQsFAAOCAQEAh8FAfFIabO89lqdLOPfhDaAzazvabV22 KtqDZK9Sm1+diatux82BJF+uEsTkFGRAhYIOmHlJNXf86w7HWZ9qCZOXHaGOpGto baSlFsCJyRBSN5HMp/Tdk4HETQ6fbCQ7EWNzNllAR490YeoDqFVAoif5CV4ekA7S qXCphdUiRSWoGDjRdhl7Ak/86PKIfuWVUvPbFjfWI0FRmLyoTsQj2ARi0laG+h5d Cyh2T1qSjqud7AdqG7pwcb4KxgWuIekC09Mkv64t+K754qZxzDW6dGaw0uyvkUvL C1hkHH0D6EeAaIvszncppVGq+BmJQay+KOUxGNY4h3rH7DMtYBraEQ== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org