$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/NLJAdY6etYbK1jUE0C21ZnS4fzU.roa File: NLJAdY6etYbK1jUE0C21ZnS4fzU.roa (raw, json) Hash identifier: 8yYphlLlmTyTSFiMdLmMeV6y64h2EEjU9piGxEl9EPU= Subject key identifier: 34:B2:40:75:8E:9E:B5:86:CA:D6:35:04:D0:2D:B5:66:74:B8:7F:35 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 150F Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/NLJAdY6etYbK1jUE0C21ZnS4fzU.roa Signing time: Fri 22 Aug 2025 08:55:05 +0000 ROA not before: Fri 22 Aug 2025 08:55:05 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 210.17.80.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5391 (0x150f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:55:05 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=34B240758E9EB586CAD63504D02DB56674B87F35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:83:e0:96:b6:88:41:f7:5d:ca:cf:84:ae:06: 34:08:78:27:df:e4:a4:34:05:a3:10:a6:fb:df:d8: d4:b6:c6:26:bc:bb:c4:6b:ec:84:f2:c2:9c:cc:9b: 26:40:35:31:a8:97:40:11:08:f6:bd:84:50:e6:42: 42:cb:d0:92:4b:44:09:19:b9:d3:dd:d9:e2:c8:08: 0f:b0:35:5c:6e:08:f8:54:25:39:79:80:24:a8:52: 82:28:60:b0:59:be:b5:9a:76:e3:e4:e0:1e:a3:66: 7a:1a:df:30:07:67:fb:d3:c7:ff:c0:b3:62:06:f2: 69:74:c9:15:f0:6c:ff:09:4e:3d:19:69:98:9f:62: 47:ea:0b:76:bf:4b:17:2c:c8:2b:43:19:ab:9c:b0: d2:d1:53:af:e8:92:23:ef:47:f1:93:73:66:50:54: bd:56:7b:a0:d5:b7:0e:52:5a:17:08:8b:26:4d:dc: b9:3c:d2:8a:9b:a8:a2:ef:e8:d1:1a:47:b3:74:25: e4:9c:b4:52:0c:2c:60:0a:77:6e:8a:03:aa:47:70: f3:b0:4c:5b:2a:1f:34:98:18:ec:f4:b9:53:8e:ba: aa:e1:63:63:f1:41:cc:98:52:d8:cc:fa:d1:f1:25: e9:ef:ed:7f:d6:19:08:9e:3d:90:f2:3c:d4:66:d7: 6a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B2:40:75:8E:9E:B5:86:CA:D6:35:04:D0:2D:B5:66:74:B8:7F:35 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/NLJAdY6etYbK1jUE0C21ZnS4fzU.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.80.0/20 Signature Algorithm: sha256WithRSAEncryption 38:a3:87:63:9c:c7:c7:a4:8e:24:3e:d3:6a:4a:94:56:b2:e6: a0:5f:eb:18:f6:fa:fb:65:d1:a5:83:11:e8:01:da:d6:62:ff: 14:3d:98:00:02:00:07:ce:44:2e:2b:f4:f2:14:32:30:f8:fe: f1:6c:f2:3d:5a:46:d4:9b:c6:cf:a2:f6:54:c2:6f:03:2d:d0: 85:ec:1b:26:8b:fb:f9:00:83:a8:f6:e8:3d:74:5d:02:7c:64: 42:be:e4:04:c7:10:bb:83:6e:3f:f2:e3:4a:60:dd:0a:79:19: 53:a4:90:6e:ea:22:29:a2:be:81:e9:a9:75:9b:59:ef:5d:90: f2:0e:db:48:10:6f:c2:f9:a4:e0:bf:7e:3e:f2:49:ce:1c:61: 63:83:a7:cc:11:1d:81:9d:c1:0f:12:77:eb:fd:74:3b:77:3f: d4:e2:48:da:74:d9:3f:17:f7:0f:17:1a:9c:48:1f:f9:77:85: c8:06:8a:18:4d:16:fd:ad:25:7b:e2:9e:fe:79:9a:1b:ea:a2: 16:58:29:79:0a:5c:21:4c:7a:eb:f2:1e:31:0a:43:7a:0c:e7: 49:04:a0:b6:f5:6f:35:f1:b4:b6:d7:dc:da:6b:1e:55:d8:ea: 43:44:21:9a:f0:0f:98:fc:dd:9a:63:68:bb:9d:a0:f3:81:b4: 08:8b:92:c2 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU1MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM0QjI0MDc1OEU5RUI1 ODZDQUQ2MzUwNEQwMkRCNTY2NzRCODdGMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC6g+CWtohB913Kz4SuBjQIeCff5KQ0BaMQpvvf2NS2xia8u8Rr 7ITywpzMmyZANTGol0ARCPa9hFDmQkLL0JJLRAkZudPd2eLICA+wNVxuCPhUJTl5 gCSoUoIoYLBZvrWaduPk4B6jZnoa3zAHZ/vTx//As2IG8ml0yRXwbP8JTj0ZaZif YkfqC3a/SxcsyCtDGaucsNLRU6/okiPvR/GTc2ZQVL1We6DVtw5SWhcIiyZN3Lk8 0oqbqKLv6NEaR7N0JeSctFIMLGAKd26KA6pHcPOwTFsqHzSYGOz0uVOOuqrhY2Px QcyYUtjM+tHxJenv7X/WGQiePZDyPNRm12q/AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUNLJAdY6etYbK1jUE0C21ZnS4fzUwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTkxKQWRZNmV0WWJLMWpV RTBDMjFablM0ZnpVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BNIRUDANBgkqhkiG9w0BAQsFAAOCAQEAOKOHY5zHx6SOJD7TakqUVrLmoF/rGPb6 +2XRpYMR6AHa1mL/FD2YAAIAB85ELiv08hQyMPj+8WzyPVpG1JvGz6L2VMJvAy3Q hewbJov7+QCDqPboPXRdAnxkQr7kBMcQu4NuP/LjSmDdCnkZU6SQbuoiKaK+gemp dZtZ712Q8g7bSBBvwvmk4L9+PvJJzhxhY4OnzBEdgZ3BDxJ36/10O3c/1OJI2nTZ Pxf3DxcanEgf+XeFyAaKGE0W/a0le+Ke/nmaG+qiFlgpeQpcIUx66/IeMQpDegzn SQSgtvVvNfG0ttfc2mseVdjqQ0QhmvAPmPzdmmNou52g84G0CIuSwg== -----END CERTIFICATE-----Generated at Sun Aug 24 06:52:29 2025 by rpki-client