$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1tM7P_NP0G0Rcpjy9kEhDm1a2CI.roa File: 1tM7P_NP0G0Rcpjy9kEhDm1a2CI.roa (raw, json) Hash identifier: nyGw6tOFDvVJ2W0KHDAPgB8dBI3ebQZ5CnUMmmGfquw= Subject key identifier: D6:D3:3B:3F:F3:4F:D0:6D:11:72:98:F2:F6:41:21:0E:6D:5A:D8:22 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14D7 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1tM7P_NP0G0Rcpjy9kEhDm1a2CI.roa Signing time: Fri 22 Aug 2025 08:54:50 +0000 ROA not before: Fri 22 Aug 2025 08:54:50 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24165 IP address blocks: 203.77.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5335 (0x14d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:50 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=D6D33B3FF34FD06D117298F2F641210E6D5AD822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:92:82:1b:a7:ca:a7:1e:52:46:ca:ae:0a: 88:bf:66:4e:a3:b8:37:32:28:47:8f:bf:e9:ee:e2: 74:6d:b6:4a:a3:01:51:65:2b:20:c4:4c:3c:6d:a6: 2a:90:b3:04:b1:cb:39:46:89:c8:9c:57:0c:fa:8a: 0c:3f:21:13:21:53:d1:09:48:bc:d0:7b:54:ab:bd: 50:4b:89:6e:11:ef:be:f8:67:46:b1:b3:e2:c5:7a: 90:47:3f:7d:df:ae:5d:13:b7:c5:7d:ce:6e:c4:e9: 62:1b:da:a4:8b:a5:89:7d:05:43:6a:b1:44:c4:63: b3:29:73:30:0f:9f:7d:00:42:51:34:d4:d0:fb:17: c0:d7:65:9a:26:fd:58:5c:c2:ca:80:c7:d5:06:f8: 0d:c0:28:b7:3f:c6:a0:ae:e3:81:7b:2e:f3:4b:5e: 0a:5d:26:9e:90:4d:2b:e0:eb:18:3a:1e:d4:7c:1a: 38:7e:9a:e0:0b:96:83:bf:dc:84:bc:25:7e:06:80: 56:a8:9b:0f:e2:f6:2f:a2:30:7a:29:14:57:a2:d1: 0b:37:71:00:72:2b:03:20:b3:fe:98:5e:33:ff:58: 4a:dc:ba:29:49:c9:de:57:a6:32:ba:45:cf:fe:df: 96:ef:1c:f6:06:ba:5e:7b:5e:42:71:e8:82:cb:55: bc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D3:3B:3F:F3:4F:D0:6D:11:72:98:F2:F6:41:21:0E:6D:5A:D8:22 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/1tM7P_NP0G0Rcpjy9kEhDm1a2CI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.44.0/22 Signature Algorithm: sha256WithRSAEncryption 30:cc:4a:c3:c8:b0:06:b7:b4:7e:05:03:90:bb:de:12:e2:6e: 2f:dd:78:bb:70:8f:e7:51:63:70:50:27:33:2b:92:c6:70:c6: 42:9b:0f:da:57:08:57:7a:f5:ef:16:6e:5e:ca:5a:1b:f9:57: 59:dd:37:f5:70:60:05:0e:c6:e6:bb:1b:b1:e1:a0:be:ab:43: b0:c2:13:63:8e:06:dd:f1:5c:cf:a6:86:41:33:ae:1a:a5:f6: dc:d0:d2:b1:92:93:94:84:b1:89:4f:54:a5:b2:57:05:00:f3: 68:b0:e9:b1:0d:52:71:e7:ea:22:11:8e:d6:34:05:8d:3a:d6: a7:75:fa:38:40:70:b7:61:4e:30:e4:bb:ea:66:c4:19:5f:18: ec:be:8f:6e:64:6e:39:a5:a5:5c:8c:7f:00:57:2b:08:25:83: 7d:53:56:15:cd:a7:2c:9a:d0:7d:83:98:46:f3:e9:3d:e1:03: bf:2c:d7:dc:a1:9b:9d:20:22:57:bf:81:14:82:b9:b4:c4:89: 02:3e:9d:30:ae:15:d4:7b:cf:12:df:5e:fb:53:2c:0d:b5:49: 74:a4:55:b6:7a:d9:9a:7c:4b:f6:d2:fd:06:0d:c2:74:7c:96: af:19:47:15:c2:52:6e:19:86:07:e9:18:46:c5:a5:c2:d7:2c: 04:9f:4d:be -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFNcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEQ2RDMzQjNGRjM0RkQw NkQxMTcyOThGMkY2NDEyMTBFNkQ1QUQ4MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDD4JKCG6fKpx5SRsquCoi/Zk6juDcyKEePv+nu4nRttkqjAVFl KyDETDxtpiqQswSxyzlGicicVwz6igw/IRMhU9EJSLzQe1SrvVBLiW4R7774Z0ax s+LFepBHP33frl0Tt8V9zm7E6WIb2qSLpYl9BUNqsUTEY7MpczAPn30AQlE01ND7 F8DXZZom/VhcwsqAx9UG+A3AKLc/xqCu44F7LvNLXgpdJp6QTSvg6xg6HtR8Gjh+ muALloO/3IS8JX4GgFaomw/i9i+iMHopFFei0Qs3cQByKwMgs/6YXjP/WErcuilJ yd5XpjK6Rc/+35bvHPYGul57XkJx6ILLVbxFAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU1tM7P/NP0G0Rcpjy9kEhDm1a2CIwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvMXRNN1BfTlAwRzBSY3Bq eTlrRWhEbTFhMkNJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AstNLDANBgkqhkiG9w0BAQsFAAOCAQEAMMxKw8iwBre0fgUDkLveEuJuL914u3CP 51FjcFAnMyuSxnDGQpsP2lcIV3r17xZuXspaG/lXWd039XBgBQ7G5rsbseGgvqtD sMITY44G3fFcz6aGQTOuGqX23NDSsZKTlISxiU9UpbJXBQDzaLDpsQ1ScefqIhGO 1jQFjTrWp3X6OEBwt2FOMOS76mbEGV8Y7L6PbmRuOaWlXIx/AFcrCCWDfVNWFc2n LJrQfYOYRvPpPeEDvyzX3KGbnSAiV7+BFIK5tMSJAj6dMK4V1HvPEt9e+1MsDbVJ dKRVtnrZmnxL9tL9Bg3CdHyWrxlHFcJSbhmGB+kYRsWlwtcsBJ9Nvg== -----END CERTIFICATE-----Generated at Sun Aug 24 06:48:42 2025 by rpki-client