$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/xBOKJgtJm0gA6R0cBVJL6a2DFQ4.roa File: xBOKJgtJm0gA6R0cBVJL6a2DFQ4.roa (raw, json) Hash identifier: 9XfBCIxTzOIjrMjmlRavLNWteaKH4+3q6mX6MobdtDI= Subject key identifier: C4:13:8A:26:0B:49:9B:48:00:E9:1D:1C:05:52:4B:E9:AD:83:15:0E Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 12EA Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/xBOKJgtJm0gA6R0cBVJL6a2DFQ4.roa Signing time: Mon 10 Feb 2025 14:08:53 +0000 ROA not before: Mon 10 Feb 2025 14:08:53 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131634 IP address blocks: 210.17.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4842 (0x12ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Feb 10 14:08:53 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C4138A260B499B4800E91D1C05524BE9AD83150E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:da:09:a7:02:6e:47:d2:d9:4d:23:5f:08:40: 29:4d:e2:b0:82:b7:ee:de:c8:7b:37:e8:d6:86:46: c6:69:92:30:18:7d:b3:b7:88:8d:1e:b7:69:ff:d1: ef:12:7d:2d:d6:6c:97:93:e5:4f:2c:ed:95:5c:d8: 6e:9e:00:c4:4b:1d:fb:8d:70:e5:0d:c6:d9:f8:aa: 9f:04:50:36:a6:b9:7d:66:9b:e3:9f:73:a9:17:b4: 20:c8:a8:43:a0:4d:2c:9c:07:75:e2:f8:63:ee:a9: 68:aa:84:f4:1a:1d:97:ea:34:85:e3:18:78:67:6c: 6e:47:37:86:d7:9d:37:d0:c6:b3:9a:f2:98:8f:1e: f0:f1:27:69:c9:9e:a8:e4:91:26:c6:30:f9:80:42: b8:35:05:af:7f:0b:14:02:93:d6:93:f8:39:ee:ac: f7:16:d7:14:f8:5a:c1:c4:e9:6e:bc:1a:43:f9:6b: f2:bf:54:d7:5e:c2:7f:f2:ce:74:59:b2:3f:b7:15: 65:80:f3:e2:c2:78:4b:c5:bf:d6:81:1d:03:b8:fb: b5:5d:f7:9c:7f:01:44:fb:44:80:69:4d:70:e6:9a: 60:5e:53:53:07:77:8d:76:5e:7f:af:48:fa:de:21: fe:3a:3c:73:5c:5e:5b:4f:e8:9e:3c:c3:f9:fc:c1: 86:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:13:8A:26:0B:49:9B:48:00:E9:1D:1C:05:52:4B:E9:AD:83:15:0E X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/xBOKJgtJm0gA6R0cBVJL6a2DFQ4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.80.0/24 Signature Algorithm: sha256WithRSAEncryption 84:b4:5a:d2:9b:26:cc:49:e4:4f:15:6d:c6:4b:cd:ec:23:b6: 27:82:79:2a:87:c2:c3:65:db:47:9e:04:c6:87:ad:f0:5f:13: 69:b7:51:79:c7:f8:25:b9:6e:57:b3:b5:74:ff:16:cf:05:d8: 8c:75:14:93:30:b8:c2:ac:02:eb:c6:cd:45:18:99:13:ff:45: af:55:f9:d2:be:5e:f1:7c:62:90:f0:c1:15:9e:ae:73:8a:ba: 97:1e:d0:5b:e5:64:12:b8:e5:11:3f:40:65:de:e9:0b:6d:14: 8c:83:97:34:95:42:b5:9c:d5:6e:2f:15:05:54:3d:20:d6:7d: ee:52:b7:2b:2a:91:d2:76:b6:17:a1:40:32:5f:78:3f:b5:0b: 1a:6c:e5:84:87:31:a3:fe:36:ef:6b:47:bf:b3:2d:96:5f:37: e9:65:57:42:2c:f9:11:e1:80:c9:29:c1:fc:f2:da:8e:65:f4: 40:a1:57:47:f1:d0:37:ad:78:78:dd:05:c6:0b:de:48:31:6b: 14:af:3f:bd:16:bd:de:bd:c1:b7:7a:b3:b4:01:ed:9d:87:a5: b9:74:86:e1:a2:7c:b5:b1:e3:19:03:23:94:cd:c2:a1:b6:28: d3:2c:8c:0d:64:a0:ca:9d:17:03:e9:dd:37:2e:b7:d5:f5:b6: af:09:97:94 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICEuowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTAyMTAx NDA4NTNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM0MTM4QTI2MEI0OTlC NDgwMEU5MUQxQzA1NTI0QkU5QUQ4MzE1MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDA2gmnAm5H0tlNI18IQClN4rCCt+7eyHs36NaGRsZpkjAYfbO3 iI0et2n/0e8SfS3WbJeT5U8s7ZVc2G6eAMRLHfuNcOUNxtn4qp8EUDamuX1mm+Of c6kXtCDIqEOgTSycB3Xi+GPuqWiqhPQaHZfqNIXjGHhnbG5HN4bXnTfQxrOa8piP HvDxJ2nJnqjkkSbGMPmAQrg1Ba9/CxQCk9aT+DnurPcW1xT4WsHE6W68GkP5a/K/ VNdewn/yznRZsj+3FWWA8+LCeEvFv9aBHQO4+7Vd95x/AUT7RIBpTXDmmmBeU1MH d412Xn+vSPreIf46PHNcXltP6J48w/n8wYbnAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUxBOKJgtJm0gA6R0cBVJL6a2DFQ4wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQveEJPS0pndEptMGdBNlIw Y0JWSkw2YTJERlE0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIRUDANBgkqhkiG9w0BAQsFAAOCAQEAhLRa0psmzEnkTxVtxkvN7CO2J4J5KofC w2XbR54Exoet8F8TabdRecf4JbluV7O1dP8WzwXYjHUUkzC4wqwC68bNRRiZE/9F r1X50r5e8XxikPDBFZ6uc4q6lx7QW+VkErjlET9AZd7pC20UjIOXNJVCtZzVbi8V BVQ9INZ97lK3KyqR0na2F6FAMl94P7ULGmzlhIcxo/4272tHv7Mtll836WVXQiz5 EeGAySnB/PLajmX0QKFXR/HQN614eN0FxgveSDFrFK8/vRa93r3Bt3qztAHtnYel uXSG4aJ8tbHjGQMjlM3CobYo0yyMDWSgyp0XA+ndNy631fW2rwmXlA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:43 2025 by rpki-client on console.sobornost.net