$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8umjHPQVInPoAkFeI-pcKl5qZvw.roa File: 8umjHPQVInPoAkFeI-pcKl5qZvw.roa (raw, json) Hash identifier: Fo2+r3BoQG2zLusQEdLs0Jrxl+I4/ZlMHR9kFVrFUZ4= Subject key identifier: F2:E9:A3:1C:F4:15:22:73:E8:02:41:5E:23:EA:5C:2A:5E:6A:66:FC Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1321 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8umjHPQVInPoAkFeI-pcKl5qZvw.roa Signing time: Mon 10 Feb 2025 14:09:07 +0000 ROA not before: Mon 10 Feb 2025 14:09:07 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 210.62.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4897 (0x1321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:09:07 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=F2E9A31CF4152273E802415E23EA5C2A5E6A66FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:c5:ad:bd:b0:33:b7:ac:3d:f8:a5:4f:10: 80:65:11:d5:0b:19:41:f2:e0:d6:bb:58:dd:ff:e1: db:a7:6f:52:d4:cc:4f:4c:ad:19:6c:bf:27:83:31: 54:c9:7d:dc:fa:be:66:f1:5f:93:66:e3:88:12:21: ba:fb:73:b3:48:da:69:0d:18:15:9e:4b:f3:82:06: d8:d0:ca:7a:2f:b0:c9:de:ae:3b:67:09:ef:c9:8c: 41:2f:51:89:8d:96:e2:43:4c:14:ae:d5:92:03:3d: 0f:48:4f:d4:6a:49:97:a0:5b:3f:19:12:bb:39:2a: 6e:3f:f9:0e:fc:31:50:b6:9c:90:31:fd:d3:d1:c9: 2a:08:bb:0c:49:e3:14:96:8b:25:18:49:3c:05:9c: b6:27:29:93:59:f5:50:33:a3:b7:a7:99:49:73:86: 73:3f:c5:4a:71:af:92:9b:30:41:73:f9:b9:9d:55: 8e:d7:c7:30:c5:fa:8a:2c:35:71:a3:28:9c:be:49: 0e:65:2b:59:cb:a3:2f:96:1a:43:4b:7e:62:01:28: 3c:66:5f:74:56:a1:3f:7e:87:3c:84:2c:56:a1:1e: f9:ce:0c:0e:2f:57:9c:42:1f:81:49:9c:2f:81:15: f4:5d:c8:2e:43:b6:31:ac:e5:fb:da:9d:9e:1d:45: 8a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E9:A3:1C:F4:15:22:73:E8:02:41:5E:23:EA:5C:2A:5E:6A:66:FC X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/8umjHPQVInPoAkFeI-pcKl5qZvw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.192.0/19 Signature Algorithm: sha256WithRSAEncryption 1c:5f:a0:fd:be:1d:07:62:bb:87:07:0f:3c:fa:15:f5:94:90: f8:60:9c:f5:57:d9:0f:98:3c:82:b1:e9:fc:da:37:b7:b4:1b: 95:38:3a:81:af:54:c7:67:2b:0b:6e:b4:6f:02:5d:aa:e9:2f: 41:1b:55:7e:45:5f:fd:b5:1a:cf:0d:fe:06:e9:29:a5:4e:85: ae:1b:b8:eb:dc:7f:39:46:71:79:2f:7a:65:8d:1f:e2:74:ba: aa:f2:4d:ed:3a:b2:35:a4:ee:30:80:08:05:64:70:b2:71:2b: 7d:1f:b4:c3:6c:17:50:3e:be:ce:55:62:05:19:90:b2:05:15: 8d:4b:42:77:df:1b:48:da:0d:fd:1d:60:32:f3:ce:c9:c6:34: fb:98:ca:0c:be:44:fb:e1:93:0d:e0:3e:46:65:44:8e:34:46: 5a:64:3f:cc:bd:46:4a:1b:0c:5e:e0:c6:39:5b:ed:f8:89:49: dd:16:4d:0e:02:98:3a:71:90:3a:9d:03:87:9b:8a:f5:3b:1f: 95:a2:6b:ee:90:b7:c5:c2:da:e1:d6:32:c7:bc:5e:b8:66:98: 84:32:33:6a:d7:e3:32:ce:53:1e:fe:0c:63:95:7f:c6:19:e6: d7:a4:83:4d:4b:fb:32:09:f9:2c:ad:34:10:af:30:41:2f:0c: 6d:70:cb:d1 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEyEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA5MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYyRTlBMzFDRjQxNTIy NzNFODAyNDE1RTIzRUE1QzJBNUU2QTY2RkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQClRMWtvbAzt6w9+KVPEIBlEdULGUHy4Na7WN3/4dunb1LUzE9M rRlsvyeDMVTJfdz6vmbxX5Nm44gSIbr7c7NI2mkNGBWeS/OCBtjQynovsMnerjtn Ce/JjEEvUYmNluJDTBSu1ZIDPQ9IT9RqSZegWz8ZErs5Km4/+Q78MVC2nJAx/dPR ySoIuwxJ4xSWiyUYSTwFnLYnKZNZ9VAzo7enmUlzhnM/xUpxr5KbMEFz+bmdVY7X xzDF+oosNXGjKJy+SQ5lK1nLoy+WGkNLfmIBKDxmX3RWoT9+hzyELFahHvnODA4v V5xCH4FJnC+BFfRdyC5DtjGs5fvanZ4dRYo3AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU8umjHPQVInPoAkFeI+pcKl5qZvwwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvOHVtakhQUVZJblBvQWtG ZUktcGNLbDVxWnZ3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BdI+wDANBgkqhkiG9w0BAQsFAAOCAQEAHF+g/b4dB2K7hwcPPPoV9ZSQ+GCc9VfZ D5g8grHp/No3t7QblTg6ga9Ux2crC260bwJdqukvQRtVfkVf/bUazw3+BukppU6F rhu469x/OUZxeS96ZY0f4nS6qvJN7TqyNaTuMIAIBWRwsnErfR+0w2wXUD6+zlVi BRmQsgUVjUtCd98bSNoN/R1gMvPOycY0+5jKDL5E++GTDeA+RmVEjjRGWmQ/zL1G ShsMXuDGOVvt+IlJ3RZNDgKYOnGQOp0Dh5uK9TsflaJr7pC3xcLa4dYyx7xeuGaY hDIzatfjMs5THv4MY5V/xhnm16SDTUv7Mgn5LK00EK8wQS8MbXDL0Q== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:42 2025 by rpki-client on console.sobornost.net