$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/M-YSd6of4rO6tQwjuGAIiVDbk2I.roa File: M-YSd6of4rO6tQwjuGAIiVDbk2I.roa (raw, json) Hash identifier: xJi4WGD4oXCfQceRFizN7CTrH+J39lg/xAOFlU8icZ4= Subject key identifier: 33:E6:12:77:AA:1F:E2:B3:BA:B5:0C:23:B8:60:08:89:50:DB:93:62 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 133E Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/M-YSd6of4rO6tQwjuGAIiVDbk2I.roa Signing time: Mon 10 Feb 2025 14:09:16 +0000 ROA not before: Mon 10 Feb 2025 14:09:16 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 60.198.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4926 (0x133e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:09:16 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=33E61277AA1FE2B3BAB50C23B860088950DB9362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:37:20:ee:89:6f:3b:ad:bb:fd:0f:5f:7c:66: f3:77:4b:f0:1d:c8:2d:1c:33:52:2d:71:75:ab:12: d2:a4:bd:e3:c9:0d:25:f9:65:36:43:b1:bd:e0:8d: fd:65:45:fc:60:80:dc:cd:5e:ff:5a:86:af:da:40: 40:87:9c:98:9d:9b:5f:7f:3d:d4:00:92:90:47:0b: 91:f3:4a:03:28:ad:2a:a6:ad:73:69:e7:82:90:78: 1c:43:23:8f:13:51:bc:c7:bb:07:db:21:5d:36:64: 73:34:45:82:81:aa:a4:fd:e6:97:0d:c1:81:4c:d0: e7:3f:1e:0d:71:1b:6a:b2:5b:d8:86:60:80:c8:0d: 5b:ef:40:f7:1f:d9:3a:a2:23:ba:be:19:d3:fd:f1: bf:f6:74:a7:2e:42:55:88:61:49:8a:6f:4c:e0:1c: d2:c9:dc:8a:ea:f9:49:85:af:7f:7a:8f:e8:31:79: b3:1f:5a:89:8f:82:31:10:20:fc:e7:e1:34:12:8d: 83:87:97:2e:18:9f:3e:e2:bf:61:13:be:53:96:61: 20:a3:16:cf:5f:c2:77:23:34:25:15:c2:83:c9:a9: 1f:cb:e3:49:ae:25:67:d9:60:44:88:64:79:78:dc: 90:d7:ad:e2:52:c0:38:69:56:80:d8:ba:89:80:e9: 98:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E6:12:77:AA:1F:E2:B3:BA:B5:0C:23:B8:60:08:89:50:DB:93:62 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/M-YSd6of4rO6tQwjuGAIiVDbk2I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.198.0.0/16 Signature Algorithm: sha256WithRSAEncryption 21:2f:9f:79:dd:d1:03:3a:a5:16:07:74:ba:ca:74:e1:2c:e7: 82:ee:ff:9a:57:7b:da:b9:f6:96:6e:8f:e6:ff:47:87:e8:4c: 2d:0b:cf:da:be:e1:76:01:75:86:90:49:e4:5b:c6:f3:be:c8: 68:34:34:16:03:02:77:25:2a:a0:06:06:ef:bf:08:15:98:36: 19:b3:c2:ef:76:2f:af:18:4b:2c:b8:a2:a4:22:8d:4c:c8:b1: e4:cb:8e:fd:27:47:9d:92:09:bc:3a:d5:3b:29:f3:98:5e:99: 6d:4d:62:14:5c:50:53:6a:1e:53:80:b9:64:22:90:86:43:c6: ca:39:f0:d2:fd:27:bb:ee:a6:01:54:97:4b:aa:56:9d:f3:74: 25:16:a4:cb:2e:43:2f:77:ae:e6:bf:83:39:24:bd:86:56:ed: 3d:62:8b:69:d9:5a:e0:ad:36:5a:f9:7e:67:7a:5c:61:af:0b: f3:b0:3a:bf:56:cf:75:a5:b3:b3:da:bf:03:0a:73:9b:12:71: 94:af:8b:e8:6d:a8:f6:7e:60:10:47:41:53:2a:87:ed:62:75: 96:88:d8:55:1a:b9:88:b5:e0:3c:9f:bc:18:ea:c0:37:da:99: 45:1f:9b:ee:ac:f1:ff:39:da:4d:bb:41:a6:16:b8:a7:99:75: c0:39:0a:6f -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICEz4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA5MTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMzRTYxMjc3QUExRkUy QjNCQUI1MEMyM0I4NjAwODg5NTBEQjkzNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDmNyDuiW87rbv9D198ZvN3S/AdyC0cM1ItcXWrEtKkvePJDSX5 ZTZDsb3gjf1lRfxggNzNXv9ahq/aQECHnJidm19/PdQAkpBHC5HzSgMorSqmrXNp 54KQeBxDI48TUbzHuwfbIV02ZHM0RYKBqqT95pcNwYFM0Oc/Hg1xG2qyW9iGYIDI DVvvQPcf2TqiI7q+GdP98b/2dKcuQlWIYUmKb0zgHNLJ3Irq+UmFr396j+gxebMf WomPgjEQIPzn4TQSjYOHly4Ynz7iv2ETvlOWYSCjFs9fwncjNCUVwoPJqR/L40mu JWfZYESIZHl43JDXreJSwDhpVoDYuomA6ZjfAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUM+YSd6of4rO6tQwjuGAIiVDbk2IwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTS1ZU2Q2b2Y0ck82dFF3 anVHQUlpVkRiazJJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD ADzGMA0GCSqGSIb3DQEBCwUAA4IBAQAhL5953dEDOqUWB3S6ynThLOeC7v+aV3va ufaWbo/m/0eH6EwtC8/avuF2AXWGkEnkW8bzvshoNDQWAwJ3JSqgBgbvvwgVmDYZ s8Lvdi+vGEssuKKkIo1MyLHky479J0edkgm8OtU7KfOYXpltTWIUXFBTah5TgLlk IpCGQ8bKOfDS/Se77qYBVJdLqlad83QlFqTLLkMvd67mv4M5JL2GVu09Yotp2Vrg rTZa+X5nelxhrwvzsDq/Vs91pbOz2r8DCnObEnGUr4vobaj2fmAQR0FTKoftYnWW iNhVGrmIteA8n7wY6sA32plFH5vurPH/OdpNu0GmFrinmXXAOQpv -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:42 2025 by rpki-client on console.sobornost.net