$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/R2ANHquBsNuiJQZj_g-TwxsxP5A.roa File: R2ANHquBsNuiJQZj_g-TwxsxP5A.roa (raw, json) Hash identifier: 2/mXBBKmFnFzKKPoGRr2TEf5jHHggSLaSXRQWRx6uag= Subject key identifier: 47:60:0D:1E:AB:81:B0:DB:A2:25:06:63:FE:0F:93:C3:1B:31:3F:90 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1333 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/R2ANHquBsNuiJQZj_g-TwxsxP5A.roa Signing time: Mon 10 Feb 2025 14:09:13 +0000 ROA not before: Mon 10 Feb 2025 14:09:13 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 210.17.13.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4915 (0x1333) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:09:13 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=47600D1EAB81B0DBA2250663FE0F93C31B313F90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:a3:d6:6d:9e:26:03:c8:d1:0d:6f:ef:33: b0:89:7a:7f:e2:b7:4a:23:d0:ee:52:30:20:67:c7: fe:2b:bf:65:d2:74:e3:9c:d5:34:c6:95:6f:da:70: e0:83:ea:6b:9a:13:2a:bd:b5:ef:38:7c:61:ef:78: cf:2b:f4:20:05:a5:c9:bc:a0:b2:72:d3:1a:10:57: 8a:72:a1:6c:45:60:f4:a0:a9:98:d4:18:bc:ac:1b: a3:b9:af:27:33:c2:95:8e:a4:6f:2f:17:87:e7:0b: d2:07:c3:47:d1:ed:12:ce:42:96:b3:b3:28:3e:2e: 4e:c2:58:59:43:b4:d5:17:57:c1:e7:7e:28:65:39: 27:31:0f:09:e3:f6:04:a1:c4:95:7d:4d:49:b9:6f: de:74:8c:63:33:82:8b:68:12:76:ac:8b:f3:12:27: 36:83:9e:44:50:45:71:e6:77:94:e4:67:63:f4:f0: 18:6d:30:72:b0:e7:4f:53:8f:4f:f3:c1:23:21:8a: 59:5c:1b:62:60:57:7a:6b:a9:16:e6:ae:ff:11:1e: 80:cb:e2:1f:e7:3e:f0:23:8c:c5:2e:fe:06:19:41: c6:f2:af:c9:2d:43:2c:c0:23:6a:c6:b5:18:1b:94: 7b:8e:57:06:a7:5b:6d:15:d8:39:f2:d3:33:fc:c9: 36:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:60:0D:1E:AB:81:B0:DB:A2:25:06:63:FE:0F:93:C3:1B:31:3F:90 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/R2ANHquBsNuiJQZj_g-TwxsxP5A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.13.0/24 Signature Algorithm: sha256WithRSAEncryption 40:2d:74:4c:82:9e:c8:a8:14:d6:ec:3e:18:be:ce:60:52:da: 0f:75:c0:54:4c:12:42:4c:e3:0d:35:49:9b:c5:48:08:5f:68: 54:b5:48:99:33:a3:29:4d:ca:0f:e6:92:90:ce:d5:83:2b:ed: f5:51:ed:d6:64:0f:b3:58:45:71:3c:e3:d3:36:41:7e:6d:3d: 52:1d:5c:2b:37:7d:f8:fe:58:4b:af:bf:76:2e:62:60:d7:4b: c1:b8:0b:fa:28:39:b2:3c:1b:6a:09:49:fd:0f:66:87:e5:e7: 11:b9:7c:7f:03:c0:fe:ce:fe:fb:75:7d:66:8a:76:ab:ba:bc: 2e:46:86:b7:4a:fa:cf:49:3a:09:6c:ab:4e:2a:38:ac:c4:b0: 34:12:ed:e8:61:d5:49:e5:a9:91:2a:8a:8b:f1:ea:50:e5:c1: 3f:6e:8f:8a:2f:5c:ae:a2:a3:da:75:86:c7:4b:46:53:b7:a6: 69:03:ac:d4:53:6f:9f:26:44:d9:42:f4:09:09:de:74:e7:5a: 3b:d7:43:61:82:4f:c0:94:ab:31:25:6f:45:b8:af:f5:21:40: 55:c4:e3:10:0d:01:5f:a0:6a:05:44:19:97:36:17:44:88:bd: 75:81:68:52:63:49:87:a1:7f:df:34:58:98:a4:9b:e6:78:ad: 71:d7:2a:0c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEzMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA5MTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ3NjAwRDFFQUI4MUIw REJBMjI1MDY2M0ZFMEY5M0MzMUIzMTNGOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5HqPWbZ4mA8jRDW/vM7CJen/it0oj0O5SMCBnx/4rv2XSdOOc 1TTGlW/acOCD6muaEyq9te84fGHveM8r9CAFpcm8oLJy0xoQV4pyoWxFYPSgqZjU GLysG6O5ryczwpWOpG8vF4fnC9IHw0fR7RLOQpazsyg+Lk7CWFlDtNUXV8Hnfihl OScxDwnj9gShxJV9TUm5b950jGMzgotoEnasi/MSJzaDnkRQRXHmd5TkZ2P08Bht MHKw509Tj0/zwSMhillcG2JgV3prqRbmrv8RHoDL4h/nPvAjjMUu/gYZQcbyr8kt QyzAI2rGtRgblHuOVwanW20V2Dny0zP8yTYhAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUR2ANHquBsNuiJQZj/g+TwxsxP5AwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUjJBTkhxdUJzTnVpSlFa al9nLVR3eHN4UDVBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIRDTANBgkqhkiG9w0BAQsFAAOCAQEAQC10TIKeyKgU1uw+GL7OYFLaD3XAVEwS QkzjDTVJm8VICF9oVLVImTOjKU3KD+aSkM7Vgyvt9VHt1mQPs1hFcTzj0zZBfm09 Uh1cKzd9+P5YS6+/di5iYNdLwbgL+ig5sjwbaglJ/Q9mh+XnEbl8fwPA/s7++3V9 Zop2q7q8LkaGt0r6z0k6CWyrTio4rMSwNBLt6GHVSeWpkSqKi/HqUOXBP26Pii9c rqKj2nWGx0tGU7emaQOs1FNvnyZE2UL0CQnedOdaO9dDYYJPwJSrMSVvRbiv9SFA VcTjEA0BX6BqBUQZlzYXRIi9dYFoUmNJh6F/3zRYmKSb5nitcdcqDA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:42 2025 by rpki-client on console.sobornost.net