$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IfCQElDXarhwJAdI9wy22gAbu2Y.roa File: IfCQElDXarhwJAdI9wy22gAbu2Y.roa (raw, json) Hash identifier: 4sy9HnwHLy37Mkw1ed0IE87RcgipN/B5XCdAQk+MOoA= Subject key identifier: 21:F0:90:12:50:D7:6A:B8:70:24:07:48:F7:0C:B6:DA:00:1B:BB:66 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1342 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IfCQElDXarhwJAdI9wy22gAbu2Y.roa Signing time: Mon 10 Feb 2025 14:09:17 +0000 ROA not before: Mon 10 Feb 2025 14:09:17 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 49.214.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4930 (0x1342) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:09:17 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=21F0901250D76AB870240748F70CB6DA001BBB66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:62:ad:28:ec:a5:ca:d1:3b:45:b0:5e:6d:36: b0:0e:9f:39:dd:76:85:8a:fb:56:62:43:1e:bb:ae: 1b:31:16:ff:16:11:7e:44:25:1a:a9:49:7a:02:48: a7:26:81:27:37:ad:c8:b7:45:6e:43:13:ae:4a:a2: ce:1f:a1:5e:6a:03:b4:d7:18:61:7f:a0:ce:da:b0: 3d:e2:af:de:ad:f8:e6:52:b9:ce:12:ce:2f:8f:7a: 2a:d9:6c:d5:9c:81:c1:5a:f2:a5:da:f6:1b:5b:96: ba:87:65:f6:0f:58:12:e1:5b:0a:88:fe:76:86:60: 4a:82:5c:0b:b0:c8:5e:22:4f:13:39:52:1a:2c:27: 44:fa:d8:94:9f:71:ff:e7:57:d7:ca:c6:b4:49:ce: 1d:8c:f1:7c:ef:46:44:40:6b:5a:5e:2d:aa:45:7a: 98:87:df:fa:ee:84:cb:96:11:a3:9e:d3:fa:b8:05: 43:de:01:5b:05:f9:bd:b5:38:ec:dd:f8:60:03:42: 21:7d:81:3c:f2:e9:0c:52:03:ac:c2:26:8e:bf:93: 6e:d1:7c:24:d9:a4:12:82:36:87:c8:ec:f7:fd:2f: f1:e3:a4:b0:87:c4:61:50:63:3c:56:c4:a0:a0:37: 1f:dc:ef:59:fa:64:3b:cb:8d:ac:2d:d8:b1:27:4d: 9f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F0:90:12:50:D7:6A:B8:70:24:07:48:F7:0C:B6:DA:00:1B:BB:66 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IfCQElDXarhwJAdI9wy22gAbu2Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 49.214.0.0/15 Signature Algorithm: sha256WithRSAEncryption 65:73:8a:be:fe:4b:90:aa:0d:22:f6:fe:0d:8b:9d:bb:77:aa: 63:a9:ec:07:ed:43:e8:24:db:be:68:be:6d:cb:42:70:55:4a: 8a:4f:c6:43:45:eb:8d:00:52:60:c4:16:2c:9d:26:fc:4a:3a: 68:9d:dd:2d:4d:86:85:bf:3b:e1:b3:40:ef:0c:d2:db:d3:16: d3:60:e1:86:35:14:f2:93:b6:e6:ff:07:b1:94:a2:15:bf:de: 57:a1:5e:be:1a:40:82:93:4f:ad:a2:ef:64:a6:f5:52:bf:9e: d1:b7:2b:31:fc:78:d5:82:7c:bd:c0:28:82:2c:da:9d:fb:e9: ef:ac:a2:80:17:01:f0:07:86:47:5f:e1:14:02:54:9d:2d:ac: 64:15:4f:84:b5:5b:b0:24:ec:4b:fa:66:c0:6e:64:3b:4b:f3: 76:ad:76:dd:0f:ba:69:83:f2:bd:32:c3:8f:37:72:ce:f1:4b: ec:6b:f3:71:4d:e0:5a:f6:02:e8:25:68:b3:4b:22:7f:2c:13: 3e:58:0f:b3:b3:b4:11:59:fc:39:4b:8b:b3:ce:b8:e5:bb:0b: e6:44:af:75:15:f3:37:7d:cb:a1:a2:de:58:a5:46:f1:22:50: cf:14:f5:2f:78:70:ff:85:23:30:fe:2c:76:13:6f:ef:10:a4: 84:8c:50:35 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICE0IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA5MTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIxRjA5MDEyNTBENzZB Qjg3MDI0MDc0OEY3MENCNkRBMDAxQkJCNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCmYq0o7KXK0TtFsF5tNrAOnznddoWK+1ZiQx67rhsxFv8WEX5E JRqpSXoCSKcmgSc3rci3RW5DE65Kos4foV5qA7TXGGF/oM7asD3ir96t+OZSuc4S zi+PeirZbNWcgcFa8qXa9htblrqHZfYPWBLhWwqI/naGYEqCXAuwyF4iTxM5Uhos J0T62JSfcf/nV9fKxrRJzh2M8XzvRkRAa1peLapFepiH3/ruhMuWEaOe0/q4BUPe AVsF+b21OOzd+GADQiF9gTzy6QxSA6zCJo6/k27RfCTZpBKCNofI7Pf9L/HjpLCH xGFQYzxWxKCgNx/c71n6ZDvLjawt2LEnTZ/tAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUIfCQElDXarhwJAdI9wy22gAbu2YwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvSWZDUUVsRFhhcmh3SkFk STl3eTIyZ0FidTJZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD ATHWMA0GCSqGSIb3DQEBCwUAA4IBAQBlc4q+/kuQqg0i9v4Ni527d6pjqewH7UPo JNu+aL5ty0JwVUqKT8ZDReuNAFJgxBYsnSb8Sjpond0tTYaFvzvhs0DvDNLb0xbT YOGGNRTyk7bm/wexlKIVv95XoV6+GkCCk0+tou9kpvVSv57Rtysx/HjVgny9wCiC LNqd++nvrKKAFwHwB4ZHX+EUAlSdLaxkFU+EtVuwJOxL+mbAbmQ7S/N2rXbdD7pp g/K9MsOPN3LO8Uvsa/NxTeBa9gLoJWizSyJ/LBM+WA+zs7QRWfw5S4uzzrjluwvm RK91FfM3fcuhot5YpUbxIlDPFPUveHD/hSMw/ix2E2/vEKSEjFA1 -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:42 2025 by rpki-client on console.sobornost.net