$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Itae71xaKTqP--3woQco7pZ2lQ4.roa File: Itae71xaKTqP--3woQco7pZ2lQ4.roa (raw, json) Hash identifier: QMxwDqqDy8kblh7eH5hvQPhORPErzCLgGHUCETtN/E4= Subject key identifier: 22:D6:9E:EF:5C:5A:29:3A:8F:FB:ED:F0:A1:07:28:EE:96:76:95:0E Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14A3 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Itae71xaKTqP--3woQco7pZ2lQ4.roa Signing time: Fri 22 Aug 2025 08:54:38 +0000 ROA not before: Fri 22 Aug 2025 08:54:38 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 210.62.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5283 (0x14a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:38 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=22D69EEF5C5A293A8FFBEDF0A10728EE9676950E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b0:4f:4f:9d:fb:0c:67:10:45:09:a3:e0:fb: 82:7f:7f:f7:54:22:2f:55:5e:35:5d:c2:ae:4c:ad: fa:70:70:9b:84:01:5a:7e:48:a6:fb:4d:cd:92:db: 5d:96:4b:ed:6e:df:d8:3f:3e:32:c6:3a:3b:70:0a: 9a:cc:eb:2a:5f:f7:d0:68:3e:0f:a5:ed:5c:a5:b9: 51:6c:1b:e2:41:59:ca:b4:dc:0f:0e:b0:3f:4c:9a: ae:8d:96:4f:0b:99:5b:38:00:83:a4:37:07:d2:cf: d8:86:fb:ae:da:8c:c2:7a:0f:98:d3:35:de:89:4e: 7e:e6:ec:0d:69:51:d6:53:9b:ed:37:5d:a6:8c:ac: d6:17:2b:67:fc:c0:bd:b3:57:3b:6b:be:0b:22:0b: 05:64:21:62:55:b4:0a:b1:dc:80:72:e8:ed:cf:c0: 99:9f:e8:3c:62:f1:e5:d0:3b:25:8b:24:33:a5:f9: 12:cc:a8:da:37:ed:11:23:7e:0f:03:e8:de:5b:5b: 6a:35:64:8b:a5:96:15:9d:34:f5:8c:21:bf:5e:bf: 29:85:20:2d:ab:c7:1c:cc:c4:da:48:dd:e3:b2:a2: 56:b2:ae:7c:da:62:f8:dc:09:cc:29:7d:ee:35:55: ae:23:f7:17:06:6d:20:0f:56:b1:97:a4:3a:0e:cf: 92:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D6:9E:EF:5C:5A:29:3A:8F:FB:ED:F0:A1:07:28:EE:96:76:95:0E X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Itae71xaKTqP--3woQco7pZ2lQ4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.32.0/19 Signature Algorithm: sha256WithRSAEncryption 3a:cb:bd:eb:61:eb:5e:a6:f3:21:30:e4:1e:14:a3:4d:e7:41: a8:9e:1a:fc:ba:bf:40:a8:e6:c8:1b:f6:c4:57:36:71:cb:24: 2d:75:e9:c1:52:be:87:05:5a:54:f5:af:f2:14:b9:0f:eb:21: 91:6c:ab:a1:21:08:68:6a:76:53:f3:17:ba:26:26:1d:54:98: af:5b:8c:20:d1:ec:70:96:48:a7:ef:2b:3a:78:76:a3:b1:e6: b1:02:31:3d:62:a3:4f:8e:c9:a9:a4:25:1c:7d:3c:ad:cf:cb: 99:91:56:e6:df:86:21:64:62:72:49:31:3f:0e:24:5f:52:d2: 5b:d9:8c:f3:70:55:fe:0c:2a:cc:de:69:07:5e:6c:21:9d:1e: 39:d1:e7:ed:17:37:6c:78:e6:e2:f0:6c:1c:a6:25:4c:b1:11: ad:48:be:7c:33:25:f6:a3:80:17:6e:1a:74:4f:0a:5a:d4:cc: 82:45:01:8c:26:aa:fd:3e:62:e9:1f:72:f0:86:e2:ef:8e:17: 89:b0:ff:fb:16:ec:3d:50:e8:ca:1c:6a:40:60:07:2c:b6:03: 52:f0:cc:b2:8a:c4:13:c6:dd:29:b9:85:c9:08:c1:6e:30:a8: 73:13:a7:fd:81:4c:d2:86:e7:89:a7:d9:20:e4:f0:71:05:3d: 1f:96:98:25 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0MzhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDIyRDY5RUVGNUM1QTI5 M0E4RkZCRURGMEExMDcyOEVFOTY3Njk1MEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbsE9PnfsMZxBFCaPg+4J/f/dUIi9VXjVdwq5MrfpwcJuEAVp+ SKb7Tc2S212WS+1u39g/PjLGOjtwCprM6ypf99BoPg+l7VyluVFsG+JBWcq03A8O sD9Mmq6Nlk8LmVs4AIOkNwfSz9iG+67ajMJ6D5jTNd6JTn7m7A1pUdZTm+03XaaM rNYXK2f8wL2zVztrvgsiCwVkIWJVtAqx3IBy6O3PwJmf6Dxi8eXQOyWLJDOl+RLM qNo37REjfg8D6N5bW2o1ZIullhWdNPWMIb9evymFIC2rxxzMxNpI3eOyolayrnza YvjcCcwpfe41Va4j9xcGbSAPVrGXpDoOz5JlAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUItae71xaKTqP++3woQco7pZ2lQ4wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvSXRhZTcxeGFLVHFQLS0z d29RY283cFoybFE0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BdI+IDANBgkqhkiG9w0BAQsFAAOCAQEAOsu962HrXqbzITDkHhSjTedBqJ4a/Lq/ QKjmyBv2xFc2ccskLXXpwVK+hwVaVPWv8hS5D+shkWyroSEIaGp2U/MXuiYmHVSY r1uMINHscJZIp+8rOnh2o7HmsQIxPWKjT47JqaQlHH08rc/LmZFW5t+GIWRickkx Pw4kX1LSW9mM83BV/gwqzN5pB15sIZ0eOdHn7Rc3bHjm4vBsHKYlTLERrUi+fDMl 9qOAF24adE8KWtTMgkUBjCaq/T5i6R9y8Ibi744XibD/+xbsPVDoyhxqQGAHLLYD UvDMsorEE8bdKbmFyQjBbjCocxOn/YFM0obniafZIOTwcQU9H5aYJQ== -----END CERTIFICATE-----Generated at Sun Aug 24 06:50:44 2025 by rpki-client