$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Dopo70L2gw2_NEitufworFEcmGo.roa File: Dopo70L2gw2_NEitufworFEcmGo.roa (raw, json) Hash identifier: fmtPVHfjwCzMc5n7T+TYZNivrjDP4qaM9eVnZhckREA= Subject key identifier: 0E:8A:68:EF:42:F6:83:0D:BF:34:48:AD:B9:FC:28:AC:51:1C:98:6A Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14AE Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Dopo70L2gw2_NEitufworFEcmGo.roa Signing time: Fri 22 Aug 2025 08:54:41 +0000 ROA not before: Fri 22 Aug 2025 08:54:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 103.224.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5294 (0x14ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0E8A68EF42F6830DBF3448ADB9FC28AC511C986A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:49:d4:a8:b5:2b:5f:f2:56:1a:7f:11:5d:e0: 74:8e:7b:d9:f6:3a:44:a2:82:40:b9:f8:9c:92:0d: 3c:7a:6e:c7:a9:1e:7b:ef:50:64:f1:c4:47:21:a8: 62:d1:71:18:dd:66:e6:e6:1d:38:9c:63:2c:13:86: b7:c9:85:dd:34:e5:ff:06:4b:34:91:ac:8c:38:58: fa:d1:e8:2c:94:11:6d:7b:0f:48:77:0c:40:b2:8d: 9b:1a:34:74:0b:06:cc:35:f1:59:f0:74:65:87:ca: 19:22:4e:bc:1f:c5:08:1f:e8:5b:0a:6f:e2:e2:a2: 23:39:69:86:f6:af:dc:31:49:eb:f6:f1:9e:ab:ac: a4:8f:ad:c6:80:fc:ee:62:a3:2e:c0:77:d8:2c:d5: f1:6f:52:04:45:32:c0:41:cd:1d:9b:15:7e:9a:11: ef:63:c6:e0:7f:cc:89:f7:a3:fa:6f:53:b0:f4:dc: 26:c7:6f:67:a5:b2:b1:31:60:c2:93:1f:a8:6b:db: 43:50:2c:c6:44:c4:29:55:06:ab:08:ad:ce:91:0a: 80:9e:10:99:a2:7f:19:82:db:b4:2e:1c:26:27:f8: 9a:ec:95:e4:fe:6c:71:56:ec:5c:f1:4f:e9:cb:38: 39:8b:5f:74:29:38:13:e8:fc:1a:01:0b:e9:d8:c9: 17:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8A:68:EF:42:F6:83:0D:BF:34:48:AD:B9:FC:28:AC:51:1C:98:6A X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Dopo70L2gw2_NEitufworFEcmGo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.224.132.0/22 Signature Algorithm: sha256WithRSAEncryption 28:83:ef:d4:00:0d:ec:f5:b8:a1:15:7a:59:eb:7a:89:d2:42: be:ef:7e:fa:17:cf:9a:b7:92:cc:90:cd:f9:7c:64:78:2b:fc: 36:3a:8b:50:ef:e2:f7:18:28:37:b9:78:20:6c:39:5f:7a:5a: df:3a:dc:c0:c1:17:a3:fc:a5:48:bb:00:48:5e:e5:98:c6:80: 1f:a2:94:e2:f0:08:5b:be:06:a7:07:b0:05:b4:d8:e8:14:83: e1:96:24:74:ce:15:3d:98:e4:2d:65:6d:30:0a:3a:f5:84:47: 9c:c7:51:cf:f9:b9:27:15:38:ef:9f:cb:f4:09:02:fc:cc:ef: b9:2f:03:e5:42:a6:db:33:b5:14:24:71:99:c8:04:8a:a5:84: 5c:1e:21:d6:55:12:b6:b2:e0:86:fd:70:b3:da:5b:49:6b:e4: 16:6f:fc:98:58:90:9a:05:ab:3c:b3:c6:32:0e:15:28:60:8b: 4b:27:0f:e8:bb:09:20:7b:b9:f3:b0:d0:df:f2:54:d5:e5:1d: fe:1a:9c:26:db:01:6c:f3:d8:9d:ad:19:cc:70:5e:07:80:30: 1f:5b:6a:5a:db:6b:d3:13:57:ac:16:7e:66:53:00:39:8f:ce: bf:20:94:5f:90:0b:ba:2b:ed:27:2d:a3:47:7b:7d:d4:32:0c: 8d:c1:c0:ca -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBFOEE2OEVGNDJGNjgz MERCRjM0NDhBREI5RkMyOEFDNTExQzk4NkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDwSdSotStf8lYafxFd4HSOe9n2OkSigkC5+JySDTx6bsepHnvv UGTxxEchqGLRcRjdZubmHTicYywThrfJhd005f8GSzSRrIw4WPrR6CyUEW17D0h3 DECyjZsaNHQLBsw18VnwdGWHyhkiTrwfxQgf6FsKb+LioiM5aYb2r9wxSev28Z6r rKSPrcaA/O5ioy7Ad9gs1fFvUgRFMsBBzR2bFX6aEe9jxuB/zIn3o/pvU7D03CbH b2elsrExYMKTH6hr20NQLMZExClVBqsIrc6RCoCeEJmifxmC27QuHCYn+JrsleT+ bHFW7FzxT+nLODmLX3QpOBPo/BoBC+nYyRdzAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUDopo70L2gw2/NEitufworFEcmGowHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvRG9wbzcwTDJndzJfTkVp dHVmd29yRkVjbUdvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AmfghDANBgkqhkiG9w0BAQsFAAOCAQEAKIPv1AAN7PW4oRV6Wet6idJCvu9++hfP mreSzJDN+XxkeCv8NjqLUO/i9xgoN7l4IGw5X3pa3zrcwMEXo/ylSLsASF7lmMaA H6KU4vAIW74GpwewBbTY6BSD4ZYkdM4VPZjkLWVtMAo69YRHnMdRz/m5JxU475/L 9AkC/MzvuS8D5UKm2zO1FCRxmcgEiqWEXB4h1lUStrLghv1ws9pbSWvkFm/8mFiQ mgWrPLPGMg4VKGCLSycP6LsJIHu587DQ3/JU1eUd/hqcJtsBbPPYna0ZzHBeB4Aw H1tqWttr0xNXrBZ+ZlMAOY/OvyCUX5ALuivtJy2jR3t91DIMjcHAyg== -----END CERTIFICATE-----Generated at Sun Aug 24 06:47:04 2025 by rpki-client