$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QfyriezBHnVF5b3STnQ4prubmM0.roa File: QfyriezBHnVF5b3STnQ4prubmM0.roa (raw, json) Hash identifier: bCcvmF+Fl8VUgkCBQzOdeEaDhJViOidjS/Cn70RvxnE= Subject key identifier: 41:FC:AB:89:EC:C1:1E:75:45:E5:BD:D2:4E:74:38:A6:BB:9B:98:CD Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1500 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QfyriezBHnVF5b3STnQ4prubmM0.roa Signing time: Fri 22 Aug 2025 08:55:01 +0000 ROA not before: Fri 22 Aug 2025 08:55:01 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4662 IP address blocks: 203.77.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5376 (0x1500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:55:01 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=41FCAB89ECC11E7545E5BDD24E7438A6BB9B98CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:97:82:90:b6:f7:89:05:cc:06:8f:80:34: 6c:dc:8f:9d:cb:ce:b6:98:11:5e:23:d9:f7:6f:05: 3f:67:b0:24:bf:14:b1:ce:30:4f:87:59:c3:b2:82: 7d:1f:63:fb:de:40:87:d6:ee:7f:69:19:34:15:38: dc:ab:d7:93:bb:cb:43:24:37:ec:44:37:5e:92:75: 1c:97:f1:01:32:ae:92:38:11:43:c5:d3:62:d0:b1: 96:e6:04:42:b9:6b:5d:6f:85:8f:b5:63:e1:50:60: 2b:ac:8b:68:34:51:be:e2:bf:2e:9a:a4:f4:fc:f9: b6:01:c7:f3:49:79:79:31:6e:39:72:c6:08:6f:6e: 3d:79:c4:7b:c5:a0:fe:20:8e:36:52:85:d7:51:e5: 3b:86:ad:ff:bb:c9:c8:82:d0:65:ba:a0:6c:54:bd: 95:57:80:e3:d3:1b:b1:05:dd:79:a5:e1:61:f7:54: 31:04:2f:08:1c:3e:20:55:ca:27:12:2b:e1:60:72: ff:39:f8:2a:28:4b:c4:5e:37:ca:65:32:33:28:85: 32:13:d9:69:7c:4e:d4:d3:15:3d:42:97:e9:46:95: 42:08:0e:21:82:8e:2b:63:24:55:03:b1:63:03:41: ed:a9:83:5b:b3:04:35:5a:2a:84:4a:9d:d0:01:07: d7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FC:AB:89:EC:C1:1E:75:45:E5:BD:D2:4E:74:38:A6:BB:9B:98:CD X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/QfyriezBHnVF5b3STnQ4prubmM0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.64.0/18 Signature Algorithm: sha256WithRSAEncryption 15:fe:16:2c:52:e2:1b:0c:cd:d3:65:18:66:08:96:92:f3:37: f9:43:d8:38:13:46:af:13:9a:0a:ff:4f:90:cd:8f:c9:67:e0: 61:56:29:10:71:a5:fe:43:88:3d:c1:e6:61:27:bc:20:32:8c: 74:66:c7:b2:24:f9:09:15:22:25:a9:be:d5:31:84:67:8c:04: 09:94:45:4f:99:fd:e1:d1:31:fa:12:fb:79:dd:30:c4:91:6e: 2e:bc:21:e8:6b:b3:ff:85:6e:c2:c4:2e:6c:b3:90:3f:80:e5: 26:7d:cd:d2:24:5e:1a:c3:5a:d6:4c:c4:21:cd:f5:e4:f7:58: bc:da:2b:75:c0:23:df:9a:82:14:3d:0b:25:bd:b2:55:e6:60: 85:8a:b1:d1:1d:11:37:2f:5c:57:be:83:48:53:d9:da:1e:04: 1b:57:ed:db:74:e9:11:c0:5d:37:a0:49:96:1f:b0:fc:02:78: 6d:d2:50:fb:45:a5:06:0a:12:d5:dd:cd:fc:19:8a:c8:63:91: 9a:07:a6:eb:ca:e8:70:32:d7:ec:94:52:5f:7a:3c:92:1e:cd: 03:10:17:5b:93:9a:d6:2a:9e:2b:3b:73:1a:af:d1:a0:ea:c2: 6f:5a:df:09:73:d9:2b:46:a4:ba:b6:55:b3:b8:27:8c:66:21: 0d:20:61:55 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFQAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU1MDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQxRkNBQjg5RUNDMTFF NzU0NUU1QkREMjRFNzQzOEE2QkI5Qjk4Q0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDIzZeCkLb3iQXMBo+ANGzcj53LzraYEV4j2fdvBT9nsCS/FLHO ME+HWcOygn0fY/veQIfW7n9pGTQVONyr15O7y0MkN+xEN16SdRyX8QEyrpI4EUPF 02LQsZbmBEK5a11vhY+1Y+FQYCusi2g0Ub7ivy6apPT8+bYBx/NJeXkxbjlyxghv bj15xHvFoP4gjjZShddR5TuGrf+7yciC0GW6oGxUvZVXgOPTG7EF3Xml4WH3VDEE LwgcPiBVyicSK+Fgcv85+CooS8ReN8plMjMohTIT2Wl8TtTTFT1Cl+lGlUIIDiGC jitjJFUDsWMDQe2pg1uzBDVaKoRKndABB9flAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUQfyriezBHnVF5b3STnQ4prubmM0wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUWZ5cmllekJIblZGNWIz U1RuUTRwcnVibU0wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BstNQDANBgkqhkiG9w0BAQsFAAOCAQEAFf4WLFLiGwzN02UYZgiWkvM3+UPYOBNG rxOaCv9PkM2PyWfgYVYpEHGl/kOIPcHmYSe8IDKMdGbHsiT5CRUiJam+1TGEZ4wE CZRFT5n94dEx+hL7ed0wxJFuLrwh6Guz/4VuwsQubLOQP4DlJn3N0iReGsNa1kzE Ic315PdYvNordcAj35qCFD0LJb2yVeZghYqx0R0RNy9cV76DSFPZ2h4EG1ft23Tp EcBdN6BJlh+w/AJ4bdJQ+0WlBgoS1d3N/BmKyGORmgem68rocDLX7JRSX3o8kh7N AxAXW5Oa1iqeKztzGq/RoOrCb1rfCXPZK0akurZVs7gnjGYhDSBhVQ== -----END CERTIFICATE-----Generated at Sun Aug 24 06:49:29 2025 by rpki-client