$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ntgn0hlmdzuDh-QjHdDaouQOtVE.roa File: Ntgn0hlmdzuDh-QjHdDaouQOtVE.roa (raw, json) Hash identifier: I/mEbJtw/oCjN9unzHWeGnIr7fMUErhP0ITj9nfRSy0= Subject key identifier: 36:D8:27:D2:19:66:77:3B:83:87:E4:23:1D:D0:DA:A2:E4:0E:B5:51 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14DA Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ntgn0hlmdzuDh-QjHdDaouQOtVE.roa Signing time: Fri 22 Aug 2025 08:54:51 +0000 ROA not before: Fri 22 Aug 2025 08:54:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 210.17.76.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5338 (0x14da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=36D827D21966773B8387E4231DD0DAA2E40EB551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3b:5f:f6:90:f7:39:96:1b:87:5b:84:8d:a5: 4b:88:98:2a:27:ef:a7:9b:31:67:23:54:59:ff:e4: 5c:f4:30:25:21:a5:cb:7a:6d:6b:df:5d:15:f2:fa: 3f:ec:fc:97:77:8e:06:ed:fd:6e:08:be:86:88:53: 39:b0:16:09:c1:ec:46:24:c4:eb:d1:1e:24:c3:95: 73:4b:5f:f8:03:9c:38:c7:cb:9f:aa:6a:20:0d:70: 39:43:15:83:82:2d:e3:cc:1e:2d:48:89:ec:7d:e8: 16:fc:28:0d:f1:b3:d1:ea:9c:17:90:09:fe:17:a1: f2:00:76:a9:5c:3e:a7:2b:08:07:39:53:56:86:7f: fe:66:7c:0b:a6:44:64:e9:0b:f6:b5:ed:93:24:86: 2f:ca:0f:8a:4b:a4:94:eb:91:5d:53:84:9f:d6:d9: 6a:6d:e1:b3:13:6d:c3:27:db:8d:fc:86:91:c6:9f: 42:84:6e:8a:34:b7:8c:44:02:61:1b:09:db:a7:83: 94:6a:ba:f7:57:36:93:e5:8e:4f:cc:bb:59:29:ff: f9:25:6b:06:f1:af:41:96:7c:9d:52:23:cb:01:0b: 33:52:c9:57:c2:84:e6:d4:b6:42:28:35:9a:e7:33: e3:5c:d3:36:bd:86:ca:b1:fa:44:cd:3f:3c:16:18: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:D8:27:D2:19:66:77:3B:83:87:E4:23:1D:D0:DA:A2:E4:0E:B5:51 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ntgn0hlmdzuDh-QjHdDaouQOtVE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.76.0/22 Signature Algorithm: sha256WithRSAEncryption 63:b5:92:95:a7:58:99:e6:d8:fd:fb:16:fc:f8:ff:3c:81:b7: 62:ae:16:d0:e2:75:26:a7:fb:68:e8:ba:a3:48:e1:a5:8a:ef: df:7f:73:76:fc:58:ea:0e:56:cc:9d:c2:28:05:c2:21:6b:d5: 49:eb:b9:6e:ae:35:df:ab:49:ea:85:5f:99:74:2b:df:90:f2: 7e:4c:9e:8e:27:46:dd:ee:d2:5d:b5:b3:bd:75:d3:00:1c:d6: 2c:88:57:ba:55:45:63:2d:fd:2e:77:de:1e:24:78:9d:a7:25: 1b:69:23:1f:16:af:46:ab:f6:4e:a8:0f:25:30:2b:f8:d0:96: b2:de:13:25:48:59:6e:29:4b:f6:fc:ad:0e:44:e4:8f:85:62: 0f:b2:12:59:8d:8d:93:69:b1:b6:69:fa:31:9c:c0:81:6f:bf: b0:0e:4f:c1:71:85:9b:5f:e9:bb:8e:64:0a:15:7f:9b:2a:f1: a7:a0:9a:a1:60:e2:4f:aa:a0:8d:cc:07:63:0b:73:16:2c:36: 95:33:d3:56:79:12:76:c8:29:28:a4:08:84:97:3f:8d:3d:11: 5d:e8:7a:ed:2e:83:95:3a:8c:4d:55:df:6f:b1:d5:ed:0d:40: 05:3c:2a:35:2d:61:75:21:2c:a0:4d:21:3f:af:be:e8:bb:e3: 92:c9:38:1d -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFNowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM2RDgyN0QyMTk2Njc3 M0I4Mzg3RTQyMzFERDBEQUEyRTQwRUI1NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDPO1/2kPc5lhuHW4SNpUuImCon76ebMWcjVFn/5Fz0MCUhpct6 bWvfXRXy+j/s/Jd3jgbt/W4IvoaIUzmwFgnB7EYkxOvRHiTDlXNLX/gDnDjHy5+q aiANcDlDFYOCLePMHi1Iiex96Bb8KA3xs9HqnBeQCf4XofIAdqlcPqcrCAc5U1aG f/5mfAumRGTpC/a17ZMkhi/KD4pLpJTrkV1ThJ/W2Wpt4bMTbcMn2438hpHGn0KE boo0t4xEAmEbCdung5RquvdXNpPljk/Mu1kp//klawbxr0GWfJ1SI8sBCzNSyVfC hObUtkIoNZrnM+Nc0za9hsqx+kTNPzwWGOo5AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUNtgn0hlmdzuDh+QjHdDaouQOtVEwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTnRnbjBobG1kenVEaC1R akhkRGFvdVFPdFZFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AtIRTDANBgkqhkiG9w0BAQsFAAOCAQEAY7WSladYmebY/fsW/Pj/PIG3Yq4W0OJ1 Jqf7aOi6o0jhpYrv339zdvxY6g5WzJ3CKAXCIWvVSeu5bq4136tJ6oVfmXQr35Dy fkyejidG3e7SXbWzvXXTABzWLIhXulVFYy39LnfeHiR4naclG2kjHxavRqv2TqgP JTAr+NCWst4TJUhZbilL9vytDkTkj4ViD7ISWY2Nk2mxtmn6MZzAgW+/sA5PwXGF m1/pu45kChV/myrxp6CaoWDiT6qgjcwHYwtzFiw2lTPTVnkSdsgpKKQIhJc/jT0R Xeh67S6DlTqMTVXfb7HV7Q1ABTwqNS1hdSEsoE0hP6++6Lvjksk4HQ== -----END CERTIFICATE-----Generated at Sun Aug 24 06:49:59 2025 by rpki-client