$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1DA2D1vEcsskgb_X9VQMZjxfAww.roa File: 1DA2D1vEcsskgb_X9VQMZjxfAww.roa (raw, json) Hash identifier: cKt2eSMQ3CcI99GvlOOb5od4Yme+TllX2mR8Fo4ZB2A= Subject key identifier: D4:30:36:0F:5B:C4:72:CB:24:81:BF:D7:F5:54:0C:66:3C:5F:03:0C Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1505 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1DA2D1vEcsskgb_X9VQMZjxfAww.roa Signing time: Fri 22 Aug 2025 08:55:02 +0000 ROA not before: Fri 22 Aug 2025 08:55:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 210.17.19.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5381 (0x1505) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:55:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D430360F5BC472CB2481BFD7F5540C663C5F030C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:9a:04:be:63:a6:f5:76:60:46:7d:eb:30: 7c:15:cc:e5:e2:fc:c1:e8:fd:7f:f0:4c:ea:4e:af: 5a:14:7a:47:fe:c1:80:aa:02:f5:f3:72:66:c6:9e: 12:06:fa:41:d5:61:e7:a0:3f:90:cc:0e:1d:fa:df: 8b:77:38:fe:c0:7e:15:85:b6:86:7d:e8:c0:b8:76: 63:e3:a8:4a:ca:06:fd:af:da:ac:6e:7b:2b:50:6d: ba:fc:b7:3c:8c:4b:87:4c:ed:50:11:cb:46:95:d4: ac:7c:9f:9d:5b:7b:77:cc:8f:9d:7a:24:b6:64:03: 14:5c:59:e8:0e:f2:92:0b:fc:1c:2f:9a:6e:8c:82: d1:73:e2:0f:31:26:e8:aa:b3:70:63:05:2a:09:77: 3a:b4:63:f4:aa:f8:bd:ea:23:1c:71:37:c3:80:fb: af:d1:d5:db:4f:a8:16:1b:fd:38:c9:62:a6:ce:6c: 51:0b:bd:fb:8a:78:32:a1:a5:b0:39:d7:81:48:2c: d9:a1:86:6b:c8:8d:4f:ee:18:bc:a8:13:b2:01:11: 8a:6c:55:3f:1b:4f:3b:07:77:f1:cf:a9:14:97:34: 9e:76:03:6f:07:46:4a:fc:64:b5:8b:8d:c6:8b:38: 0e:a4:17:b5:4e:cc:78:87:50:de:a1:ba:50:83:92: 55:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:30:36:0F:5B:C4:72:CB:24:81:BF:D7:F5:54:0C:66:3C:5F:03:0C X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1DA2D1vEcsskgb_X9VQMZjxfAww.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.19.0/24 Signature Algorithm: sha256WithRSAEncryption 10:33:19:79:d3:7d:77:09:78:0a:bd:5c:7b:df:d4:cd:0e:8b: 78:ea:05:dc:17:3b:1b:e9:84:d0:78:38:e6:88:22:15:d3:0d: 6c:15:86:bd:4d:c5:bc:fd:fb:b5:65:cf:88:b6:f7:32:6f:e2: c4:f9:b4:7c:8a:a8:78:5a:c6:84:69:78:c9:91:32:05:11:f1: c6:52:54:21:b3:c7:e3:0f:98:bf:9d:b1:1b:88:42:16:c3:fc: 45:1b:dc:8b:83:e3:b7:69:63:1f:c6:99:65:a3:c2:40:9b:02: ad:77:36:c7:a5:99:9d:71:99:0b:2d:85:44:a6:e1:68:17:2f: 71:a6:73:b0:9f:ca:76:dd:a2:63:93:c8:6a:0c:4c:57:70:4a: c5:d7:35:d4:22:93:7a:99:0f:2a:7e:20:e0:4b:08:d8:00:7d: 06:ac:c9:8c:d8:1c:b2:be:df:db:5e:97:a0:aa:27:84:b4:ad: 29:14:3d:8b:35:4e:45:7b:b7:b6:72:49:fe:b6:26:d0:10:5f: 18:db:6c:42:e3:3f:15:be:ac:a6:d3:e9:55:5e:39:4b:ec:08: 15:a5:54:96:87:5b:6a:7f:e9:2d:c7:1e:00:6b:cd:50:58:dd: 46:bf:6f:47:1d:d8:5f:39:74:ce:04:ef:35:86:37:24:43:86: 73:f3:42:aa -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFQUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU1MDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ0MzAzNjBGNUJDNDcy Q0IyNDgxQkZEN0Y1NTQwQzY2M0M1RjAzMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCnU5oEvmOm9XZgRn3rMHwVzOXi/MHo/X/wTOpOr1oUekf+wYCq AvXzcmbGnhIG+kHVYeegP5DMDh3634t3OP7AfhWFtoZ96MC4dmPjqErKBv2v2qxu eytQbbr8tzyMS4dM7VARy0aV1Kx8n51be3fMj516JLZkAxRcWegO8pIL/Bwvmm6M gtFz4g8xJuiqs3BjBSoJdzq0Y/Sq+L3qIxxxN8OA+6/R1dtPqBYb/TjJYqbObFEL vfuKeDKhpbA514FILNmhhmvIjU/uGLyoE7IBEYpsVT8bTzsHd/HPqRSXNJ52A28H Rkr8ZLWLjcaLOA6kF7VOzHiHUN6hulCDklWpAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU1DA2D1vEcsskgb/X9VQMZjxfAwwwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvMURBMkQxdkVjc3NrZ2Jf WDlWUU1aanhmQXd3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIREzANBgkqhkiG9w0BAQsFAAOCAQEAEDMZedN9dwl4Cr1ce9/UzQ6LeOoF3Bc7 G+mE0Hg45ogiFdMNbBWGvU3FvP37tWXPiLb3Mm/ixPm0fIqoeFrGhGl4yZEyBRHx xlJUIbPH4w+Yv52xG4hCFsP8RRvci4Pjt2ljH8aZZaPCQJsCrXc2x6WZnXGZCy2F RKbhaBcvcaZzsJ/Kdt2iY5PIagxMV3BKxdc11CKTepkPKn4g4EsI2AB9BqzJjNgc sr7f216XoKonhLStKRQ9izVORXu3tnJJ/rYm0BBfGNtsQuM/Fb6sptPpVV45S+wI FaVUlodban/pLcceAGvNUFjdRr9vRx3YXzl0zgTvNYY3JEOGc/NCqg== -----END CERTIFICATE-----Generated at Sun Aug 24 06:43:29 2025 by rpki-client