$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/T6DQ4cIbJLIr1OG27nUIEYs9gLg.roa File: T6DQ4cIbJLIr1OG27nUIEYs9gLg.roa (raw, json) Hash identifier: StVLbRsxhNV53zNVGpCX8fi0E0fzvX5ro83yR8T2/qY= Subject key identifier: 4F:A0:D0:E1:C2:1B:24:B2:2B:D4:E1:B6:EE:75:08:11:8B:3D:80:B8 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14B2 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/T6DQ4cIbJLIr1OG27nUIEYs9gLg.roa Signing time: Fri 22 Aug 2025 08:54:42 +0000 ROA not before: Fri 22 Aug 2025 08:54:42 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 210.192.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5298 (0x14b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:42 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4FA0D0E1C21B24B22BD4E1B6EE7508118B3D80B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:64:39:db:53:85:20:f7:d9:6d:e9:5a:3f: 20:5b:a2:88:b8:48:30:f1:0e:1f:6b:8a:17:cc:cb: 27:96:b2:aa:0b:40:c8:2b:be:2a:d4:7f:14:1d:6a: a5:4b:98:35:2b:48:ea:7e:ca:ea:d5:9a:a1:e8:a1: 11:d0:20:f1:3a:36:13:24:0a:bb:32:59:74:7a:d9: 67:90:08:37:58:53:79:b0:80:a4:af:6f:a6:a2:85: 72:77:7d:43:8a:b6:61:25:95:20:73:08:ea:b0:03: a0:ab:18:b8:b5:a2:79:8f:e2:84:59:50:70:ee:16: 9a:54:2e:3a:36:21:74:2f:99:f6:32:de:49:e2:8d: c6:8d:b4:70:d1:80:b3:18:5e:65:8a:67:6e:36:5d: c3:2c:aa:b3:e6:ea:c6:42:cd:9b:ce:ad:25:ce:ba: 26:98:08:70:a1:5a:4a:e6:f6:28:3a:1e:d3:1e:fa: ba:7b:03:43:ad:1f:9b:46:65:7d:e4:74:f3:67:d6: 06:33:65:21:ec:d6:95:a6:ef:ab:ca:e6:fc:64:04: b2:5e:02:b8:df:19:b9:63:de:d7:8c:64:df:a3:5d: 67:1d:2f:2b:09:eb:dd:2c:f4:29:9a:18:6c:f7:a3: 64:e1:a8:3f:92:53:59:d5:f3:55:78:ca:0d:06:d0: 61:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A0:D0:E1:C2:1B:24:B2:2B:D4:E1:B6:EE:75:08:11:8B:3D:80:B8 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/T6DQ4cIbJLIr1OG27nUIEYs9gLg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.192.0.0/18 Signature Algorithm: sha256WithRSAEncryption 3a:4e:b2:bd:00:48:52:87:8c:64:7d:77:1d:e0:f4:00:79:9e: 69:c2:6d:68:48:86:c8:32:22:cb:45:19:1f:23:3f:20:2a:3a: 36:8a:eb:dd:d6:8b:0c:61:d0:b5:23:f0:40:d2:29:41:cc:be: d4:0d:e1:59:3c:00:e3:4a:7e:ec:9a:62:24:cb:69:8c:01:24: fa:e7:9b:35:1a:3c:70:ca:b8:59:b4:4f:71:c6:e7:bf:9a:59: 30:2e:40:9d:b4:e1:88:08:e1:01:fa:14:9f:f5:37:50:85:4a: 0c:01:ce:26:c6:c5:bb:60:24:5a:86:38:21:b0:74:c3:28:31: cc:9e:bd:d3:cf:61:7c:d0:07:18:72:0c:3b:72:24:f5:c3:f7: f8:27:99:f6:dd:f7:3e:88:48:06:8d:a9:88:90:74:72:c3:6f: dd:31:74:c9:58:fa:c3:c3:fb:9c:eb:aa:9c:d5:7b:05:79:3c: 98:c6:e8:1b:c3:fa:9a:7d:91:8c:64:6f:4b:59:6b:68:b6:96: bb:49:f0:d7:55:27:92:bd:2a:3c:43:bb:69:ac:f2:30:46:c4: 13:95:2b:1a:46:9a:09:4d:0c:70:fa:c1:c3:6c:a9:5f:ac:ae: 0f:a6:72:d5:50:64:4b:42:8b:b3:5b:1d:e4:17:5f:0e:1c:70: 9b:74:02:da -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFLIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRGQTBEMEUxQzIxQjI0 QjIyQkQ0RTFCNkVFNzUwODExOEIzRDgwQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZVGQ521OFIPfZbelaPyBbooi4SDDxDh9rihfMyyeWsqoLQMgr virUfxQdaqVLmDUrSOp+yurVmqHooRHQIPE6NhMkCrsyWXR62WeQCDdYU3mwgKSv b6aihXJ3fUOKtmEllSBzCOqwA6CrGLi1onmP4oRZUHDuFppULjo2IXQvmfYy3kni jcaNtHDRgLMYXmWKZ242XcMsqrPm6sZCzZvOrSXOuiaYCHChWkrm9ig6HtMe+rp7 A0OtH5tGZX3kdPNn1gYzZSHs1pWm76vK5vxkBLJeArjfGblj3teMZN+jXWcdLysJ 690s9CmaGGz3o2ThqD+SU1nV81V4yg0G0GEbAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUT6DQ4cIbJLIr1OG27nUIEYs9gLgwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvVDZEUTRjSWJKTElyMU9H MjduVUlFWXM5Z0xnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BtLAADANBgkqhkiG9w0BAQsFAAOCAQEAOk6yvQBIUoeMZH13HeD0AHmeacJtaEiG yDIiy0UZHyM/ICo6Norr3daLDGHQtSPwQNIpQcy+1A3hWTwA40p+7JpiJMtpjAEk +uebNRo8cMq4WbRPccbnv5pZMC5AnbThiAjhAfoUn/U3UIVKDAHOJsbFu2AkWoY4 IbB0wygxzJ69089hfNAHGHIMO3Ik9cP3+CeZ9t33PohIBo2piJB0csNv3TF0yVj6 w8P7nOuqnNV7BXk8mMboG8P6mn2RjGRvS1lraLaWu0nw11Unkr0qPEO7aazyMEbE E5UrGkaaCU0McPrBw2ypX6yuD6Zy1VBkS0KLs1sd5BdfDhxwm3QC2g== -----END CERTIFICATE-----Generated at Sun Aug 24 06:49:56 2025 by rpki-client