$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IdyIInnLiFyRGSO9N29vTm6wMeE.roa File: IdyIInnLiFyRGSO9N29vTm6wMeE.roa (raw, json) Hash identifier: 0dXTvW0h20mx86n0SQ+qZ4xa9nRy64giAFDfnGFeJr0= Subject key identifier: 21:DC:88:22:79:CB:88:5C:91:19:23:BD:37:6F:6F:4E:6E:B0:31:E1 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14D2 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IdyIInnLiFyRGSO9N29vTm6wMeE.roa Signing time: Fri 22 Aug 2025 08:54:49 +0000 ROA not before: Fri 22 Aug 2025 08:54:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 203.77.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5330 (0x14d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=21DC882279CB885C911923BD376F6F4E6EB031E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:61:f9:65:5f:c4:14:f1:d4:b7:76:7a:83:30: 8b:34:3e:cb:ec:6f:81:d3:36:2f:56:e5:e7:2c:76: 14:6b:58:f0:f9:46:00:5b:1f:3c:46:58:1b:c1:4b: ca:fd:14:32:9f:c6:46:72:cb:fe:17:91:11:43:75: 9f:6d:6d:e5:0b:70:99:0f:a1:e7:85:8e:27:e0:5b: 6f:e7:ff:70:c7:b5:a9:44:45:79:d1:ea:66:52:98: 04:d6:ea:a2:d3:54:fb:2f:a9:a7:07:89:fc:00:d0: f1:8e:a1:ae:3b:e6:4f:75:e9:ac:b9:56:47:94:54: 27:5e:0c:a2:a8:eb:ac:c9:cd:ce:ec:58:de:cb:12: b9:50:87:fe:9d:a6:af:bb:5d:56:e5:8d:9c:24:ab: 74:5f:3d:79:8b:69:a4:87:b3:73:dd:ff:6e:48:49: ea:c8:4b:4a:47:dc:22:ad:26:26:37:22:a4:5a:ae: 2f:30:58:4d:77:10:33:f8:01:a3:bf:e7:cd:5e:0d: 2e:7f:af:a8:c4:66:31:7b:2c:5c:81:a0:01:84:66: 6e:63:a5:86:10:fa:fa:04:ed:43:14:db:68:11:3d: 41:a8:02:71:99:ed:92:91:e9:e8:2b:6d:f6:82:1a: 36:69:7f:c5:9e:a0:c3:46:c4:c5:ba:fe:38:2d:d9: 56:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DC:88:22:79:CB:88:5C:91:19:23:BD:37:6F:6F:4E:6E:B0:31:E1 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/IdyIInnLiFyRGSO9N29vTm6wMeE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.32.0/22 Signature Algorithm: sha256WithRSAEncryption 74:52:cb:9e:bb:fa:df:51:8b:c7:36:c8:65:d8:f1:26:69:a2: b5:b8:f2:a3:0a:97:e9:05:4f:92:da:cd:4c:91:27:e9:af:08: da:7c:8b:28:83:1e:43:9e:ca:30:57:34:65:41:4d:cc:7b:88: f1:75:f7:fa:1e:07:dc:e1:ba:bf:ca:77:cc:0c:d5:bc:3b:4e: 48:51:39:56:ea:07:95:f6:81:a1:71:a5:99:b4:e9:73:80:06: 3f:e3:fb:3e:70:05:0c:a1:65:00:fa:55:7b:67:e9:61:4a:01: be:6d:fa:16:ab:ad:88:b4:75:15:33:ff:6b:d1:03:25:51:08: 72:26:5c:22:93:12:18:43:fc:24:a1:1d:8f:03:25:62:21:c2: 46:f5:5c:79:74:6a:c8:41:1e:6f:14:67:b6:2a:d5:c4:32:fd: b8:79:b6:28:c4:f8:18:cb:e0:70:56:76:cd:28:97:e8:ff:48: ac:33:12:74:08:c6:c7:bb:be:7d:25:10:40:b7:61:22:73:04: 13:b8:69:d8:89:b3:f1:e9:16:4d:98:1a:57:e5:4d:d4:12:24: 44:ab:31:8c:8f:96:39:29:4c:58:6f:55:58:1c:28:55:3a:01: f4:54:a6:2e:25:f9:91:d1:37:7c:57:5a:ba:77:72:54:e6:cd: 57:c1:02:6b -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFNIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIxREM4ODIyNzlDQjg4 NUM5MTE5MjNCRDM3NkY2RjRFNkVCMDMxRTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDxYfllX8QU8dS3dnqDMIs0Psvsb4HTNi9W5ecsdhRrWPD5RgBb HzxGWBvBS8r9FDKfxkZyy/4XkRFDdZ9tbeULcJkPoeeFjifgW2/n/3DHtalERXnR 6mZSmATW6qLTVPsvqacHifwA0PGOoa475k916ay5VkeUVCdeDKKo66zJzc7sWN7L ErlQh/6dpq+7XVbljZwkq3RfPXmLaaSHs3Pd/25ISerIS0pH3CKtJiY3IqRari8w WE13EDP4AaO/581eDS5/r6jEZjF7LFyBoAGEZm5jpYYQ+voE7UMU22gRPUGoAnGZ 7ZKR6egrbfaCGjZpf8WeoMNGxMW6/jgt2VY1AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUIdyIInnLiFyRGSO9N29vTm6wMeEwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvSWR5SUlubkxpRnlSR1NP OU4yOXZUbTZ3TWVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AstNIDANBgkqhkiG9w0BAQsFAAOCAQEAdFLLnrv631GLxzbIZdjxJmmitbjyowqX 6QVPktrNTJEn6a8I2nyLKIMeQ57KMFc0ZUFNzHuI8XX3+h4H3OG6v8p3zAzVvDtO SFE5VuoHlfaBoXGlmbTpc4AGP+P7PnAFDKFlAPpVe2fpYUoBvm36FqutiLR1FTP/ a9EDJVEIciZcIpMSGEP8JKEdjwMlYiHCRvVceXRqyEEebxRntirVxDL9uHm2KMT4 GMvgcFZ2zSiX6P9IrDMSdAjGx7u+fSUQQLdhInMEE7hp2Imz8ekWTZgaV+VN1BIk RKsxjI+WOSlMWG9VWBwoVToB9FSmLiX5kdE3fFdaundyVObNV8ECaw== -----END CERTIFICATE-----Generated at Sun Aug 24 06:49:37 2025 by rpki-client