
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ME3ebyKY_RtMNkYeebhP6_UC5LY.roa
File: ME3ebyKY_RtMNkYeebhP6_UC5LY.roa (raw, json)
Hash identifier: xDM2KBa4rXMqUv0CrSNY4hKc+zB78DFoU1BrhRQeU4s=
Subject key identifier: 30:4D:DE:6F:22:98:FD:1B:4C:36:46:1E:79:B8:4F:EB:F5:02:E4:B6
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 1509
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ME3ebyKY_RtMNkYeebhP6_UC5LY.roa
Signing time: Fri 22 Aug 2025 08:55:03 +0000
ROA not before: Fri 22 Aug 2025 08:55:03 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18049
IP address blocks: 60.198.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Oct 2025 22:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5385 (0x1509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 22 08:55:03 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=304DDE6F2298FD1B4C36461E79B84FEBF502E4B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:43:22:77:99:ce:c5:8d:ef:c4:24:cb:2c:01:
a7:9b:4b:7a:be:86:4c:d6:7a:e5:a6:15:bf:bc:7e:
5e:fa:e5:e7:ba:9b:05:7a:1c:ba:40:1b:17:5b:57:
c9:a1:5a:b0:03:d0:f0:94:02:14:99:ba:0e:26:f5:
66:51:88:91:e9:a7:46:7a:32:8a:9c:ca:87:81:51:
a2:62:20:b9:ba:7e:4d:5f:31:23:85:d0:b6:35:ba:
c6:83:fd:c5:72:17:1a:f4:29:8b:55:c1:9e:de:16:
7a:b5:e0:ba:ac:db:30:1c:16:c6:da:0b:b3:e2:02:
fd:0d:c1:5e:59:4d:b7:3b:8f:14:a3:01:c8:67:7b:
cb:90:cb:d9:9d:e7:48:2e:59:74:d5:9e:eb:95:90:
53:3e:63:18:c5:e2:a8:ae:7f:88:38:64:76:b1:0f:
52:cf:35:5c:ef:8d:81:bd:89:12:9b:e7:41:ad:ca:
51:dc:39:31:b5:eb:f1:55:cf:42:fd:08:20:61:6e:
08:3f:36:ff:21:46:48:02:60:0c:dd:2d:be:94:a4:
10:8a:ee:7f:a5:ca:b1:33:67:7b:69:5c:5b:5f:1e:
b2:7a:33:1f:cc:44:df:4c:35:18:70:1c:7a:5f:5f:
e9:b9:3f:d0:1e:30:10:02:aa:76:f9:60:c1:e3:d4:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4D:DE:6F:22:98:FD:1B:4C:36:46:1E:79:B8:4F:EB:F5:02:E4:B6
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ME3ebyKY_RtMNkYeebhP6_UC5LY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.198.64.0/18
Signature Algorithm: sha256WithRSAEncryption
38:ae:1c:f2:7c:8c:16:74:58:df:96:6a:82:00:79:0d:14:99:
1a:e7:65:19:1c:e0:4c:30:66:85:91:5d:2b:08:5d:24:1e:d9:
8a:e4:da:41:ca:15:48:12:68:f6:c7:cd:18:e3:d9:c4:46:e6:
58:54:1a:ad:d5:40:b5:a5:6d:43:72:fe:e3:da:3f:07:04:80:
a9:d5:a4:09:77:c3:02:08:c8:17:b4:49:ad:17:51:f5:08:12:
9b:e5:db:5b:61:2c:6a:b0:5a:0c:d3:7f:d8:b6:c6:3c:60:70:
e3:2b:88:8d:39:17:42:55:e0:a8:b7:97:35:6b:43:f3:f4:7b:
d0:78:27:d1:71:5a:f2:53:dd:ec:2a:cc:0c:cb:b2:13:b8:b0:
61:75:5b:61:91:5a:a0:d8:9d:10:c6:c6:b3:13:74:23:74:22:
72:57:42:2e:e8:b1:fa:38:49:77:8f:2d:b3:5c:bd:83:9f:00:
7e:c3:ca:77:ea:62:78:09:93:c5:93:18:59:f2:17:2b:c8:54:
40:16:2a:ff:fe:08:c6:a9:39:cc:26:36:69:06:65:97:f0:90:
cd:96:c1:1f:ae:f1:75:a4:2e:18:ff:53:ff:62:b2:75:bd:16:
1a:ad:b6:a4:20:1a:72:a2:35:f5:08:a3:f8:b3:86:7e:ec:55:
b1:d4:9d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:26 2025 by rpki-client