$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MAEx1xMFfC6sU_g10p-IK4-gKrc.roa File: MAEx1xMFfC6sU_g10p-IK4-gKrc.roa (raw, json) Hash identifier: Pt9m71seTYA5lRi6F8BdhIICO91ZFRduA2BpKTTu4ss= Subject key identifier: 30:01:31:D7:13:05:7C:2E:AC:53:F8:35:D2:9F:88:2B:8F:A0:2A:B7 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1379 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MAEx1xMFfC6sU_g10p-IK4-gKrc.roa Signing time: Mon 10 Feb 2025 14:09:29 +0000 ROA not before: Mon 10 Feb 2025 14:09:29 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 210.17.16.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4985 (0x1379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:09:29 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=300131D713057C2EAC53F835D29F882B8FA02AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:31:dc:cf:a2:dd:8f:81:b6:15:76:a5:e2:11: 05:a3:f1:91:b7:5d:86:d1:a9:6d:33:22:80:18:6e: a7:b0:9d:fe:43:f1:a5:14:4c:71:91:1c:fc:59:f2: 8d:4e:86:ae:4c:18:5c:45:09:0c:be:32:4f:9e:02: eb:1f:a6:69:00:b8:2e:68:8b:bd:55:97:87:8f:a7: d1:92:b2:85:52:94:f1:c5:9f:04:4b:8f:e3:a5:c5: f1:8d:3f:ec:75:b6:59:6b:c2:24:0f:8e:0b:c6:e9: ad:9d:49:97:5b:6b:24:2a:50:c5:5c:61:28:ab:57: bb:02:79:80:c7:c7:b1:7e:39:6a:dc:d7:30:d0:38: a9:57:0c:56:ac:b7:5a:5e:87:55:0e:cc:02:18:70: d0:b0:29:2c:ec:13:95:e3:9d:c9:ea:94:b5:f0:90: 90:9a:08:0c:a9:76:8f:27:d2:76:e1:d2:c6:c6:cd: 5e:38:00:52:3e:81:6d:f5:67:83:68:81:3c:f1:85: 12:38:7b:8b:dd:0d:f8:70:57:8e:73:9a:b8:ca:df: 9c:77:32:ad:e7:fa:4a:59:01:cc:f5:45:dc:a6:f1: 17:ec:b5:ba:69:91:61:e7:79:b4:33:e3:51:cb:1e: d7:b9:94:85:2b:c5:5a:df:ca:2a:b1:77:8e:5d:cb: 43:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:01:31:D7:13:05:7C:2E:AC:53:F8:35:D2:9F:88:2B:8F:A0:2A:B7 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/MAEx1xMFfC6sU_g10p-IK4-gKrc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.16.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:03:7a:75:82:27:29:74:27:a4:45:ca:44:07:55:84:9d:a5: 27:5b:8c:23:3d:1f:11:a9:56:20:60:51:93:a3:f2:27:8c:9a: d1:94:3c:7c:b1:29:55:55:a8:79:ae:27:23:bc:e1:c9:6a:85: b5:07:81:cf:72:2d:f8:69:e0:d4:d0:dd:c7:96:eb:91:ff:ad: 81:02:32:f7:c0:f8:1e:bc:09:3a:9e:b3:73:d8:98:6a:46:b9: 85:28:5e:58:e1:0e:a3:e3:f2:48:4a:a5:91:d9:09:2e:fc:fd: 75:fd:6e:55:d4:73:e2:d5:43:48:4d:ef:33:0f:ec:7a:78:05: 66:c2:7d:e1:8e:5b:53:57:46:82:96:b6:78:d5:f6:1b:88:10: d4:4c:61:59:5f:46:53:26:22:68:80:14:7e:08:49:39:05:cc: 5e:1e:1d:71:2f:55:55:0f:40:87:57:68:dc:14:04:2c:68:c7: 21:bc:a8:92:4f:a8:3d:9c:87:0d:4c:ce:04:a3:ea:4c:46:d1: 02:27:e8:af:bc:93:88:73:5e:34:a9:ef:92:9e:6a:3b:ae:cc: 20:7d:13:0e:bf:bc:88:cb:e9:9a:b8:d7:71:91:21:43:b4:e9: 10:eb:fd:bf:42:73:d2:d7:7d:43:65:a9:d7:c3:c5:60:9a:2b: f8:0f:c3:31 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICE3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA5MjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMwMDEzMUQ3MTMwNTdD MkVBQzUzRjgzNUQyOUY4ODJCOEZBMDJBQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDoMdzPot2PgbYVdqXiEQWj8ZG3XYbRqW0zIoAYbqewnf5D8aUU THGRHPxZ8o1Ohq5MGFxFCQy+Mk+eAusfpmkAuC5oi71Vl4ePp9GSsoVSlPHFnwRL j+OlxfGNP+x1tllrwiQPjgvG6a2dSZdbayQqUMVcYSirV7sCeYDHx7F+OWrc1zDQ OKlXDFast1peh1UOzAIYcNCwKSzsE5XjncnqlLXwkJCaCAypdo8n0nbh0sbGzV44 AFI+gW31Z4NogTzxhRI4e4vdDfhwV45zmrjK35x3Mq3n+kpZAcz1Rdym8Rfstbpp kWHnebQz41HLHte5lIUrxVrfyiqxd45dy0PZAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUMAEx1xMFfC6sU/g10p+IK4+gKrcwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTUFFeDF4TUZmQzZzVV9n MTBwLUlLNC1nS3JjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIREDANBgkqhkiG9w0BAQsFAAOCAQEAfQN6dYInKXQnpEXKRAdVhJ2lJ1uMIz0f EalWIGBRk6PyJ4ya0ZQ8fLEpVVWoea4nI7zhyWqFtQeBz3It+Gng1NDdx5brkf+t gQIy98D4HrwJOp6zc9iYaka5hSheWOEOo+PySEqlkdkJLvz9df1uVdRz4tVDSE3v Mw/sengFZsJ94Y5bU1dGgpa2eNX2G4gQ1ExhWV9GUyYiaIAUfghJOQXMXh4dcS9V VQ9Ah1do3BQELGjHIbyokk+oPZyHDUzOBKPqTEbRAifor7yTiHNeNKnvkp5qO67M IH0TDr+8iMvpmrjXcZEhQ7TpEOv9v0Jz0td9Q2Wp18PFYJor+A/DMQ== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:42 2025 by rpki-client on console.sobornost.net