$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mJT-cTFEHt-WmBGGm7jAClYrbGo.roa File: mJT-cTFEHt-WmBGGm7jAClYrbGo.roa (raw, json) Hash identifier: K1Y5K55S3dO+YJbVD4Z031Z2NaL/5ygx7I5aIROC5N8= Subject key identifier: 98:94:FE:71:31:44:1E:DF:96:98:11:86:9B:B8:C0:0A:56:2B:6C:6A Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 12F4 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mJT-cTFEHt-WmBGGm7jAClYrbGo.roa Signing time: Mon 10 Feb 2025 14:08:56 +0000 ROA not before: Mon 10 Feb 2025 14:08:56 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 4662 IP address blocks: 210.62.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4852 (0x12f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:08:56 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=9894FE7131441EDF969811869BB8C00A562B6C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:81:4b:99:0a:b5:e7:5a:92:5b:22:5a:5d:06: ba:33:a9:cb:69:19:f0:ba:1d:67:58:cb:51:d1:0f: ef:1c:4d:f9:d2:51:b2:d9:58:84:5d:ef:2a:78:41: 00:b1:ab:2e:fe:7f:84:57:02:72:69:b3:ab:cf:dc: 52:80:82:a3:30:06:f0:39:6f:b7:fd:3f:1b:c4:5c: 68:25:28:51:dd:75:6e:af:d0:e4:5c:01:3c:08:c3: 0b:77:2a:a5:90:c1:3d:da:4d:bd:70:73:d1:b8:aa: 46:ac:a8:bc:9b:4d:4e:c3:8a:43:26:ac:5b:55:59: 85:ed:95:eb:d5:ac:85:ad:2f:7b:c4:8a:76:6f:5a: c5:58:8b:ee:96:ca:1f:98:00:de:87:e1:e0:05:60: 32:88:20:7b:91:7a:52:30:09:ef:dd:12:44:56:e7: 61:b0:b2:14:ac:73:1b:d1:d2:44:bc:38:48:8e:d4: 98:d3:33:84:81:31:b9:99:63:2d:c9:22:fe:9f:95: 98:39:a6:81:dd:4b:98:e9:33:72:2a:4a:34:af:7b: 48:50:c0:09:dd:4c:17:1b:cf:4c:6d:b2:e2:33:c2: 0c:4e:50:b0:bb:fd:cf:2a:f3:72:0d:9d:a5:df:4f: 72:2b:23:02:a8:c1:b6:9f:6a:be:b5:36:d8:61:95: d2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:94:FE:71:31:44:1E:DF:96:98:11:86:9B:B8:C0:0A:56:2B:6C:6A X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/mJT-cTFEHt-WmBGGm7jAClYrbGo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.0.0/18 Signature Algorithm: sha256WithRSAEncryption 14:b2:a8:45:dc:5b:1b:e3:d2:4e:67:eb:0b:05:70:9c:4b:3e: 48:a2:e9:df:1f:8e:e5:f4:0e:5e:8a:a8:a0:1d:33:61:d7:fd: d8:bb:dd:a5:3b:fe:f5:91:0a:d4:7c:0f:26:eb:9a:56:65:1b: 5e:b7:22:a4:4d:da:74:ca:81:69:95:60:84:01:6a:0f:fc:f4: 10:ab:31:54:23:6a:3d:c4:1f:5a:45:00:cd:53:00:80:63:90: b7:a9:9b:78:1a:79:18:fa:07:96:2b:d1:9f:38:ca:4f:a4:81: e4:72:3d:e9:5e:8a:fe:d5:6c:da:28:3a:6f:e0:87:98:95:7f: 11:84:d1:ee:d5:be:e4:69:03:e5:35:22:21:93:6d:d1:de:a4: 5f:c2:42:b2:55:b6:20:4d:32:2e:ec:3f:c7:0f:5e:da:2c:f8: c2:74:98:0b:7b:cf:8e:8a:15:5b:13:52:88:15:22:e2:5f:d8: a1:1d:2a:8f:41:cd:00:dd:20:d1:2a:95:e5:4d:dd:ab:57:2b: 3d:de:26:f0:31:8a:16:8f:37:d2:00:ca:b2:44:e5:ac:f5:59: b9:81:23:95:2b:f7:5f:c3:24:bf:ec:c5:00:cf:c6:da:8e:4d: 3d:95:10:47:fc:f2:e6:ef:b3:de:ff:1d:e0:2e:6a:51:98:c6: 91:43:df:48 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEvQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA4NTZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk4OTRGRTcxMzE0NDFF REY5Njk4MTE4NjlCQjhDMDBBNTYyQjZDNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKgUuZCrXnWpJbIlpdBrozqctpGfC6HWdYy1HRD+8cTfnSUbLZ WIRd7yp4QQCxqy7+f4RXAnJps6vP3FKAgqMwBvA5b7f9PxvEXGglKFHddW6v0ORc ATwIwwt3KqWQwT3aTb1wc9G4qkasqLybTU7DikMmrFtVWYXtlevVrIWtL3vEinZv WsVYi+6Wyh+YAN6H4eAFYDKIIHuRelIwCe/dEkRW52GwshSscxvR0kS8OEiO1JjT M4SBMbmZYy3JIv6flZg5poHdS5jpM3IqSjSve0hQwAndTBcbz0xtsuIzwgxOULC7 /c8q83INnaXfT3IrIwKowbafar61NthhldKRAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUmJT+cTFEHt+WmBGGm7jAClYrbGowHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvbUpULWNURkVIdC1XbUJH R203akFDbFlyYkdvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BtI+ADANBgkqhkiG9w0BAQsFAAOCAQEAFLKoRdxbG+PSTmfrCwVwnEs+SKLp3x+O 5fQOXoqooB0zYdf92LvdpTv+9ZEK1HwPJuuaVmUbXrcipE3adMqBaZVghAFqD/z0 EKsxVCNqPcQfWkUAzVMAgGOQt6mbeBp5GPoHlivRnzjKT6SB5HI96V6K/tVs2ig6 b+CHmJV/EYTR7tW+5GkD5TUiIZNt0d6kX8JCslW2IE0yLuw/xw9e2iz4wnSYC3vP jooVWxNSiBUi4l/YoR0qj0HNAN0g0SqV5U3dq1crPd4m8DGKFo830gDKskTlrPVZ uYEjlSv3X8Mkv+zFAM/G2o5NPZUQR/zy5u+z3v8d4C5qUZjGkUPfSA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net