$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HAqgSYLBuItLY-v8yhXkt5cCE78.roa File: HAqgSYLBuItLY-v8yhXkt5cCE78.roa (raw, json) Hash identifier: 3QGkAiegWnr6PwVOMN9sotgvd55E/RyihNkKr++/UQc= Subject key identifier: 1C:0A:A0:49:82:C1:B8:8B:4B:63:EB:FC:CA:15:E4:B7:97:02:13:BF Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14B5 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HAqgSYLBuItLY-v8yhXkt5cCE78.roa Signing time: Fri 22 Aug 2025 08:54:43 +0000 ROA not before: Fri 22 Aug 2025 08:54:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 210.17.43.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5301 (0x14b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=1C0AA04982C1B88B4B63EBFCCA15E4B7970213BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:81:e2:88:8f:ff:c4:34:c6:5c:e6:ea:1d: 04:75:68:7a:16:1a:3e:d7:f2:ce:02:81:b2:d9:1a: 8f:ee:1f:a5:8b:98:da:b5:f9:c6:b5:62:b2:51:e4: 81:15:c7:93:99:14:ff:7d:b5:d4:86:d3:26:28:17: 6c:2b:36:f8:79:cb:53:a1:c0:15:a7:c0:fc:ec:bb: 76:c8:dd:6b:77:d7:b4:fe:7f:89:a0:75:15:c3:12: 80:90:12:ac:ea:7d:f9:8e:93:ff:01:df:cd:49:72: 40:2c:85:94:87:d5:d2:5e:ae:ad:77:2f:03:f4:90: 9b:3c:35:b8:42:4d:db:94:ed:24:7f:93:16:63:1d: b0:ee:03:3f:8d:63:c4:45:50:bd:98:70:7c:22:43: 1d:2d:7c:f1:af:21:e6:53:9d:96:85:69:41:52:e4: c6:00:84:5a:8c:e4:06:c5:58:89:f0:cd:b6:e0:03: 9e:1b:48:27:63:40:b6:53:f4:f4:a9:a8:68:27:00: 03:6a:97:42:84:b6:e3:dd:3e:48:ae:96:c8:5e:ed: 68:14:81:d1:56:0c:30:de:bb:8c:f6:00:db:2d:87: 2e:2a:15:64:e0:9c:48:d4:6c:c0:61:92:11:ba:5f: 2b:36:04:fa:09:ef:d8:2c:42:79:49:4d:94:87:88: c0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0A:A0:49:82:C1:B8:8B:4B:63:EB:FC:CA:15:E4:B7:97:02:13:BF X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/HAqgSYLBuItLY-v8yhXkt5cCE78.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.43.0/24 Signature Algorithm: sha256WithRSAEncryption 70:8a:5f:59:d1:93:ad:d0:b4:73:2d:07:41:d6:1f:64:93:99: 6c:ac:5d:3f:e9:b3:92:61:bf:a5:fb:66:d5:f6:c9:e2:79:e9: c3:0d:99:6b:cc:d2:18:3d:a9:22:ff:8a:cd:ce:9f:f3:59:4b: f2:81:e5:e0:5b:ce:dc:c9:cd:24:5f:d0:3c:0b:f3:22:44:12: ac:da:3b:b3:51:1b:cd:d4:5d:1b:95:63:2a:9d:b0:e5:a0:fc: e8:90:38:3f:a2:69:92:f5:b6:d9:9b:bc:ee:09:2c:36:28:b9: 60:4e:56:dd:a3:54:06:70:a2:9e:b6:50:02:7d:56:bd:a7:76: 44:26:f4:7c:98:99:9f:fd:88:df:55:dd:72:76:69:1a:73:57: 20:9e:9f:fd:d8:c0:fa:c3:c9:b4:12:83:c6:e2:69:4e:f3:01: 59:ab:73:2f:bb:e2:fd:b4:d2:8a:c0:f2:ac:69:e3:e2:57:12: 8a:70:c2:3f:d1:9d:84:8f:a1:01:67:7e:4f:68:96:cb:47:97: ae:bb:5f:10:cd:cc:a8:3c:34:ee:70:8d:d3:6f:7f:96:d8:f7: 94:ba:18:39:98:58:aa:25:35:1e:6f:4d:7d:52:b8:30:dd:9b: b5:a2:60:a7:4a:aa:b1:e3:84:61:e3:f5:52:96:da:db:fa:16: 15:4e:fc:51 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFLUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDFDMEFBMDQ5ODJDMUI4 OEI0QjYzRUJGQ0NBMTVFNEI3OTcwMjEzQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1vYHiiI//xDTGXObqHQR1aHoWGj7X8s4CgbLZGo/uH6WLmNq1 +ca1YrJR5IEVx5OZFP99tdSG0yYoF2wrNvh5y1OhwBWnwPzsu3bI3Wt317T+f4mg dRXDEoCQEqzqffmOk/8B381JckAshZSH1dJerq13LwP0kJs8NbhCTduU7SR/kxZj HbDuAz+NY8RFUL2YcHwiQx0tfPGvIeZTnZaFaUFS5MYAhFqM5AbFWInwzbbgA54b SCdjQLZT9PSpqGgnAANql0KEtuPdPkiulshe7WgUgdFWDDDeu4z2ANsthy4qFWTg nEjUbMBhkhG6Xys2BPoJ79gsQnlJTZSHiMCZAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUHAqgSYLBuItLY+v8yhXkt5cCE78wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvSEFxZ1NZTEJ1SXRMWS12 OHloWGt0NWNDRTc4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIRKzANBgkqhkiG9w0BAQsFAAOCAQEAcIpfWdGTrdC0cy0HQdYfZJOZbKxdP+mz kmG/pftm1fbJ4nnpww2Za8zSGD2pIv+Kzc6f81lL8oHl4FvO3MnNJF/QPAvzIkQS rNo7s1EbzdRdG5VjKp2w5aD86JA4P6JpkvW22Zu87gksNii5YE5W3aNUBnCinrZQ An1Wvad2RCb0fJiZn/2I31XdcnZpGnNXIJ6f/djA+sPJtBKDxuJpTvMBWatzL7vi /bTSisDyrGnj4lcSinDCP9GdhI+hAWd+T2iWy0eXrrtfEM3MqDw07nCN029/ltj3 lLoYOZhYqiU1Hm9NfVK4MN2btaJgp0qqseOEYeP1Upba2/oWFU78UQ== -----END CERTIFICATE-----Generated at Sun Aug 24 06:50:44 2025 by rpki-client