$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1QJZjmZ_VTRL4hGegqH4uSwgD7o.roa File: 1QJZjmZ_VTRL4hGegqH4uSwgD7o.roa (raw, json) Hash identifier: zUDQHt80IbDbcuIXmPjVBdkL7f0HvOvjkUpSRr1njnw= Subject key identifier: D5:02:59:8E:66:7F:55:34:4B:E2:11:9E:82:A1:F8:B9:2C:20:0F:BA Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1495 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1QJZjmZ_VTRL4hGegqH4uSwgD7o.roa Signing time: Fri 22 Aug 2025 08:54:35 +0000 ROA not before: Fri 22 Aug 2025 08:54:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 210.17.35.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5269 (0x1495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D502598E667F55344BE2119E82A1F8B92C200FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:4f:5c:12:a9:42:cd:82:e1:81:37:25:a0: 60:3b:ef:04:a5:a6:58:0b:22:17:eb:71:f9:9d:ca: c6:6f:e5:a1:ac:de:24:6a:0e:99:41:27:4c:5b:75: 38:f5:b3:e3:c5:85:fd:cd:d9:7e:ca:87:d5:14:29: 71:61:de:bb:37:2c:0d:47:77:bf:14:d5:01:68:35: 5c:bc:d7:1e:17:d6:56:b1:89:0a:35:5f:61:d3:03: d6:00:91:90:cc:8e:f6:97:06:04:f5:37:c3:00:b8: 71:99:d4:e2:42:45:3a:5e:dd:04:14:35:a7:29:3e: 7f:26:0e:e5:a7:0b:6f:f6:99:f8:07:df:6a:84:74: 3b:53:60:34:6c:23:5f:79:8b:8e:e3:91:15:7a:2a: 09:4b:cb:41:80:68:02:c6:4f:76:e2:59:81:3b:2c: 6e:74:87:c6:8f:5a:4d:3c:cd:7a:db:b1:dd:c8:8c: 71:47:08:0b:c2:ca:c7:e4:31:37:4e:be:cd:1a:67: 38:13:55:e5:2e:96:e3:16:32:ec:50:48:f9:fe:6f: f9:75:8c:be:37:da:11:26:9f:b7:93:c9:c1:49:c4: 3d:6f:37:d1:87:2c:c1:a6:1d:be:af:3a:77:f4:e5: 73:15:41:61:e8:c9:54:13:07:bb:13:76:ba:c3:6b: 69:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:02:59:8E:66:7F:55:34:4B:E2:11:9E:82:A1:F8:B9:2C:20:0F:BA X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1QJZjmZ_VTRL4hGegqH4uSwgD7o.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.35.0/24 Signature Algorithm: sha256WithRSAEncryption 53:bc:ae:54:73:c2:46:db:2a:32:c8:2f:b9:f4:77:fa:5b:cc: c6:7b:3c:7a:c9:4b:55:80:bb:f9:4b:c9:6b:76:22:5f:9f:fe: 54:68:69:51:14:2b:1c:8b:c7:c8:64:29:60:6d:f8:23:b9:7f: 7b:88:26:56:17:68:9f:4a:c1:a8:39:61:0c:7e:0e:be:9b:26: ec:9a:c9:f1:e5:af:48:a2:1c:d3:e9:1a:8a:48:25:28:1f:37: 62:4d:95:e2:b1:55:c8:2f:56:ef:a5:d6:0b:da:70:a6:37:7a: 11:93:6b:38:42:16:18:19:e9:96:20:11:cf:eb:49:9d:8e:f0: 08:f6:e9:df:64:14:22:a9:81:da:ff:31:d2:2b:77:d4:12:4c: f7:00:c6:f4:b5:8e:d0:46:42:5d:2f:16:f0:cc:e4:fc:7a:a4: 68:ec:31:e4:57:2a:73:f5:cb:cc:ee:74:2b:c3:31:40:29:b6: bb:6e:b0:83:8a:08:60:52:0f:4a:38:53:b7:72:78:86:18:3f: 2f:a5:1d:a9:8c:16:c2:ae:e6:da:17:18:a7:36:7b:42:09:2c: 7e:0d:48:b3:a0:4d:f6:68:6e:4f:f2:f6:46:00:a3:6c:9e:92: e3:65:16:28:ff:bb:8d:d6:6d:97:5b:17:fa:61:26:26:7a:28: 91:ca:7a:60 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0MzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ1MDI1OThFNjY3RjU1 MzQ0QkUyMTE5RTgyQTFGOEI5MkMyMDBGQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDEhE9cEqlCzYLhgTcloGA77wSlplgLIhfrcfmdysZv5aGs3iRq DplBJ0xbdTj1s+PFhf3N2X7Kh9UUKXFh3rs3LA1Hd78U1QFoNVy81x4X1laxiQo1 X2HTA9YAkZDMjvaXBgT1N8MAuHGZ1OJCRTpe3QQUNacpPn8mDuWnC2/2mfgH32qE dDtTYDRsI195i47jkRV6KglLy0GAaALGT3biWYE7LG50h8aPWk08zXrbsd3IjHFH CAvCysfkMTdOvs0aZzgTVeUuluMWMuxQSPn+b/l1jL432hEmn7eTycFJxD1vN9GH LMGmHb6vOnf05XMVQWHoyVQTB7sTdrrDa2lBAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU1QJZjmZ/VTRL4hGegqH4uSwgD7owHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvMVFKWmptWl9WVFJMNGhH ZWdxSDR1U3dnRDdvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIRIzANBgkqhkiG9w0BAQsFAAOCAQEAU7yuVHPCRtsqMsgvufR3+lvMxns8eslL VYC7+UvJa3YiX5/+VGhpURQrHIvHyGQpYG34I7l/e4gmVhdon0rBqDlhDH4Ovpsm 7JrJ8eWvSKIc0+kaikglKB83Yk2V4rFVyC9W76XWC9pwpjd6EZNrOEIWGBnpliAR z+tJnY7wCPbp32QUIqmB2v8x0it31BJM9wDG9LWO0EZCXS8W8Mzk/HqkaOwx5Fcq c/XLzO50K8MxQCm2u26wg4oIYFIPSjhTt3J4hhg/L6UdqYwWwq7m2hcYpzZ7Qgks fg1Is6BN9mhuT/L2RgCjbJ6S42UWKP+7jdZtl1sX+mEmJnookcp6YA== -----END CERTIFICATE-----Generated at Sun Aug 24 06:49:50 2025 by rpki-client