$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5vmoi1SjlYMOKeZDa4cTiAqxtws.roa File: 5vmoi1SjlYMOKeZDa4cTiAqxtws.roa (raw, json) Hash identifier: 0PYoD9Qan5IDEfndzAaCJYsMs8VAoasrpVqKuqczIWQ= Subject key identifier: E6:F9:A8:8B:54:A3:95:83:0E:29:E6:43:6B:87:13:88:0A:B1:B7:0B Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 149D Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5vmoi1SjlYMOKeZDa4cTiAqxtws.roa Signing time: Fri 22 Aug 2025 08:54:37 +0000 ROA not before: Fri 22 Aug 2025 08:54:37 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131634 IP address blocks: 124.108.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5277 (0x149d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:37 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=E6F9A88B54A395830E29E6436B8713880AB1B70B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:dd:6b:4a:a3:9b:9d:51:e1:e3:f7:75:76: 06:aa:11:13:8b:3c:88:94:fa:ff:2e:63:c8:59:29: 30:d4:d1:6c:45:9a:7c:5f:1e:a0:11:a2:83:8e:9c: 4c:7e:17:ab:3b:df:e8:af:b6:05:6d:dc:1c:7f:a6: 99:24:58:d2:7d:df:48:c7:44:ee:52:df:99:f4:83: 8f:dd:2a:c2:88:9d:db:dd:54:72:fd:60:25:01:cb: a9:00:77:ae:0e:96:89:15:8d:d1:d0:ea:41:5c:b0: 77:1f:4f:41:14:d0:95:df:f0:d6:5c:43:f0:d6:cf: 62:58:a5:f4:51:19:17:42:6b:0a:a1:1f:23:a2:f4: c2:5e:2e:2a:8f:16:19:c7:a5:e0:56:3d:d7:98:43: 56:db:39:40:66:ff:dd:c4:65:ff:ff:cc:98:3d:94: c5:ec:cf:d1:61:d5:5a:b9:58:d0:99:b3:55:17:4b: 4e:95:76:0f:92:3c:05:18:2c:40:e2:fc:2e:38:d2: b9:ce:b2:ef:cc:15:a0:68:56:30:d6:c3:a9:90:ec: 8a:a5:e9:d5:af:34:fa:5a:4b:be:94:34:df:16:ec: f7:38:25:1d:10:41:45:cf:3a:4c:12:02:7e:9c:35: 0f:72:db:9c:ed:c8:d8:a5:40:7c:b8:43:5e:b1:2f: 7e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F9:A8:8B:54:A3:95:83:0E:29:E6:43:6B:87:13:88:0A:B1:B7:0B X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/5vmoi1SjlYMOKeZDa4cTiAqxtws.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.108.136.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:37:41:79:35:68:05:33:75:d1:45:a3:ea:e4:70:b2:48:58: 24:01:ad:c6:58:a6:4d:37:55:9e:1b:7a:02:1c:5b:b3:93:e8: e1:44:9e:04:7f:ff:53:85:3d:25:03:41:70:9d:9b:a1:ae:6a: 07:4d:d0:4f:c5:e3:6f:5f:27:b3:64:9b:2f:9d:36:a6:55:a4: d3:0f:cc:96:7d:60:74:6a:7e:19:77:e5:43:c4:4a:25:b5:2a: 47:28:1b:d8:4b:64:0a:6b:e6:92:29:f2:78:75:e6:05:d8:fd: f4:68:62:79:94:49:77:19:10:7b:a8:77:ad:d6:b1:c9:eb:3a: a3:ed:b3:26:fa:7c:bc:fb:6b:2f:73:cd:cf:d2:cd:e1:20:ac: d5:68:1b:8c:29:98:4b:4d:27:9a:d0:54:07:36:42:93:02:11: 6e:f0:70:fb:97:5f:11:90:9c:a0:f9:18:ac:da:17:b4:66:ad: c2:59:8a:21:98:53:3e:8c:00:27:21:3d:e4:53:1b:f7:fd:7c: c9:ba:4b:8b:6a:2f:c2:fe:40:97:53:3e:f3:e0:4b:d0:90:14: 00:aa:9b:93:eb:a2:19:90:0e:b3:2d:62:3b:4b:52:6b:b6:ba: 83:c1:80:d7:8a:6e:01:20:42:da:00:06:15:5a:f6:44:af:a3: e9:67:13:80 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0MzdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEU2RjlBODhCNTRBMzk1 ODMwRTI5RTY0MzZCODcxMzg4MEFCMUI3MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4+t1rSqObnVHh4/d1dgaqEROLPIiU+v8uY8hZKTDU0WxFmnxf HqARooOOnEx+F6s73+ivtgVt3Bx/ppkkWNJ930jHRO5S35n0g4/dKsKIndvdVHL9 YCUBy6kAd64OlokVjdHQ6kFcsHcfT0EU0JXf8NZcQ/DWz2JYpfRRGRdCawqhHyOi 9MJeLiqPFhnHpeBWPdeYQ1bbOUBm/93EZf//zJg9lMXsz9Fh1Vq5WNCZs1UXS06V dg+SPAUYLEDi/C440rnOsu/MFaBoVjDWw6mQ7Iql6dWvNPpaS76UNN8W7Pc4JR0Q QUXPOkwSAn6cNQ9y25ztyNilQHy4Q16xL375AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQU5vmoi1SjlYMOKeZDa4cTiAqxtwswHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvNXZtb2kxU2psWU1PS2Va RGE0Y1RpQXF4dHdzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AnxsiDANBgkqhkiG9w0BAQsFAAOCAQEAfTdBeTVoBTN10UWj6uRwskhYJAGtxlim TTdVnht6Ahxbs5Po4USeBH//U4U9JQNBcJ2boa5qB03QT8Xjb18ns2SbL502plWk 0w/Mln1gdGp+GXflQ8RKJbUqRygb2EtkCmvmkinyeHXmBdj99GhieZRJdxkQe6h3 rdaxyes6o+2zJvp8vPtrL3PNz9LN4SCs1WgbjCmYS00nmtBUBzZCkwIRbvBw+5df EZCcoPkYrNoXtGatwlmKIZhTPowAJyE95FMb9/18ybpLi2ovwv5Al1M+8+BL0JAU AKqbk+uiGZAOsy1iO0tSa7a6g8GA14puASBC2gAGFVr2RK+j6WcTgA== -----END CERTIFICATE-----Generated at Sun Aug 24 06:52:32 2025 by rpki-client