$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zq6OqGrWNoLDa63eZd-IZnBPL70.roa File: zq6OqGrWNoLDa63eZd-IZnBPL70.roa (raw, json) Hash identifier: stZmue8kL14Td0ND5LCcc31JwpGVOR2SHVc6U6Il0t8= Subject key identifier: CE:AE:8E:A8:6A:D6:36:82:C3:6B:AD:DE:65:DF:88:66:70:4F:2F:BD Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0FEB Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zq6OqGrWNoLDa63eZd-IZnBPL70.roa Signing time: Fri 01 Sep 2023 09:37:31 +0000 ROA not before: Fri 01 Sep 2023 09:37:31 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 13335 IP address blocks: 210.17.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 12:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4075 (0xfeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:31 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=CEAE8EA86AD63682C36BADDE65DF8866704F2FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:98:be:f6:5e:39:0b:07:6a:36:27:43:e7: dd:b3:5b:c5:18:d6:b8:e8:f1:3f:bb:b5:32:b8:4e: 24:dc:df:52:d5:b1:06:43:9a:ad:ea:15:8f:e8:e0: e0:85:55:2a:65:f2:6a:ec:58:02:42:e0:5d:84:fa: b8:fc:ec:a7:aa:97:17:7b:ce:a7:06:01:48:90:7b: 46:97:b0:ac:2f:de:65:1c:eb:8c:14:03:b4:92:d8: f4:2f:01:3f:e1:c8:c4:3b:90:a3:99:f0:73:fa:87: bd:c1:cb:ea:8f:8e:c7:0c:72:a2:08:7f:0a:33:66: 29:06:b5:dc:e1:be:ee:1f:db:41:84:4c:c3:8e:15: 60:60:6a:b8:f1:5e:bb:cf:b5:8d:74:07:dd:ed:e5: 4b:63:44:48:08:3e:8a:57:fa:5a:49:59:b3:b1:ad: cb:6b:94:96:bf:98:7b:9f:8d:6a:98:e5:11:76:eb: 54:fa:bd:76:28:07:ca:72:0b:56:be:90:b2:2e:e9: 04:25:8e:20:04:29:78:53:b1:63:d3:5e:66:72:68: cf:8c:67:b8:a7:fe:a9:57:05:34:9a:b2:c1:e6:48: 72:dc:81:6b:c8:d9:4e:79:a1:6c:36:b4:68:28:40: c5:06:63:fb:7c:f1:10:ea:8e:d5:92:83:52:5e:77: e3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AE:8E:A8:6A:D6:36:82:C3:6B:AD:DE:65:DF:88:66:70:4F:2F:BD X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zq6OqGrWNoLDa63eZd-IZnBPL70.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.44.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:33:ce:08:5a:ce:9a:28:16:ad:ad:0f:66:cc:25:b0:cd:a1: 03:c1:95:f5:25:da:f9:d6:d3:2f:d6:16:a5:e9:52:18:ba:4b: a3:bd:5f:af:15:19:83:5d:69:a3:fa:7c:90:03:0c:18:51:79: 9a:ce:f4:0b:69:aa:a0:ad:e3:6b:0c:8e:26:9d:49:2a:5c:91: 03:bb:45:ac:3e:50:a3:ee:73:23:18:ea:8b:7a:79:cf:fd:6a: 9e:f7:c8:97:d2:b8:18:15:de:bc:86:e1:04:66:10:cc:9e:a1: ad:13:02:b1:ed:92:39:7c:6b:af:ee:9b:09:10:7a:61:0b:34: b4:66:18:af:ed:7b:ae:fe:ce:92:fc:40:20:dd:45:b0:c1:bc: 2c:c4:38:f6:3d:59:9a:77:3d:50:99:a4:11:2b:11:29:91:4b: d3:8c:ec:c2:91:6b:e1:fb:2a:b5:58:a1:b3:9b:5f:91:5b:4b: f4:ff:07:92:c9:e4:8a:c7:21:2a:cf:0d:ad:1b:24:40:53:ff: 1d:af:f1:7d:33:92:bd:aa:49:4f:9c:2d:20:7a:b4:2c:47:87: a2:d4:b8:55:7a:2c:e6:53:e3:41:4e:f1:26:fc:a7:ce:01:09: 5a:9b:b5:af:6e:e1:8f:b5:70:8c:0c:1a:93:b3:6e:51:fb:cc: 3c:e7:ab:4d -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD+swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKENFQUU4RUE4NkFENjM2 ODJDMzZCQURERTY1REY4ODY2NzA0RjJGQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC0eJi+9l45CwdqNidD592zW8UY1rjo8T+7tTK4TiTc31LVsQZD mq3qFY/o4OCFVSpl8mrsWAJC4F2E+rj87Keqlxd7zqcGAUiQe0aXsKwv3mUc64wU A7SS2PQvAT/hyMQ7kKOZ8HP6h73By+qPjscMcqIIfwozZikGtdzhvu4f20GETMOO FWBgarjxXrvPtY10B93t5UtjREgIPopX+lpJWbOxrctrlJa/mHufjWqY5RF261T6 vXYoB8pyC1a+kLIu6QQljiAEKXhTsWPTXmZyaM+MZ7in/qlXBTSassHmSHLcgWvI 2U55oWw2tGgoQMUGY/t88RDqjtWSg1Jed+MpAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUzq6OqGrWNoLDa63eZd+IZnBPL70wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvenE2T3FHcldOb0xEYTYz ZVpkLUlabkJQTDcwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIRLDANBgkqhkiG9w0BAQsFAAOCAQEAPzPOCFrOmigWra0PZswlsM2hA8GV9SXa +dbTL9YWpelSGLpLo71frxUZg11po/p8kAMMGFF5ms70C2mqoK3jawyOJp1JKlyR A7tFrD5Qo+5zIxjqi3p5z/1qnvfIl9K4GBXevIbhBGYQzJ6hrRMCse2SOXxrr+6b CRB6YQs0tGYYr+17rv7OkvxAIN1FsMG8LMQ49j1Zmnc9UJmkESsRKZFL04zswpFr 4fsqtVihs5tfkVtL9P8HksnkischKs8NrRskQFP/Ha/xfTOSvapJT5wtIHq0LEeH otS4VXos5lPjQU7xJvynzgEJWpu1r27hj7VwjAwak7NuUfvMPOerTQ== -----END CERTIFICATE-----Generated at Sun May 12 00:44:21 2024 by rpki-client on console-fra.rpki-client.org