$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WTs1pGckS2V9i0og67g1HaAcnG0.roa File: WTs1pGckS2V9i0og67g1HaAcnG0.roa (raw, json) Hash identifier: ArJO5GoMMsuLhHUBJFIQSLMoEDobLiIHSF9EpGXJMsE= Subject key identifier: 59:3B:35:A4:67:24:4B:65:7D:8B:4A:20:EB:B8:35:1D:A0:1C:9C:6D Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1496 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WTs1pGckS2V9i0og67g1HaAcnG0.roa Signing time: Fri 22 Aug 2025 08:54:35 +0000 ROA not before: Fri 22 Aug 2025 08:54:35 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 203.77.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5270 (0x1496) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:35 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=593B35A467244B657D8B4A20EBB8351DA01C9C6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:78:89:08:40:26:2b:9b:d1:0d:74:f7:71:b5: 2b:42:be:bd:7a:2e:82:dd:12:8f:dd:da:5a:f8:cd: 48:3f:65:d2:30:05:29:e2:a1:81:26:ad:52:06:f2: 9e:ae:35:18:35:8f:f6:a1:3a:bd:f9:c6:e6:4b:0e: 8b:8a:8c:12:0f:5e:a3:c6:e3:c1:78:33:71:7d:75: 96:61:78:b9:4e:da:d0:29:ba:6e:9a:5c:df:5b:1b: 03:80:9d:33:4e:13:a6:c0:6d:be:7a:96:48:3f:cb: 24:e7:6a:21:21:03:54:ae:60:ff:32:3f:0e:a7:8e: d5:7a:53:d5:8b:a1:a5:ac:dc:10:4d:46:ea:60:0d: ac:3b:9f:19:6c:6d:c0:bb:e8:e8:b0:84:0a:95:2e: d4:ef:4b:ef:4e:19:1e:c9:43:fe:a7:aa:2f:41:a8: f8:54:d7:c6:14:98:a8:d1:57:5d:cf:2d:90:7f:ca: dc:fc:5b:fc:bd:a5:fb:a5:91:7d:f7:f4:2c:4c:bd: 92:ae:b8:8e:4f:d4:69:63:7d:10:3e:f0:4b:5f:cd: aa:62:5c:a6:95:bb:89:ae:42:d1:44:62:3a:c5:3c: b9:24:c0:64:de:87:5c:c9:01:40:bf:3d:80:1e:b4: f0:45:04:1a:12:0c:6c:36:9b:e5:39:1c:9b:2b:7f: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3B:35:A4:67:24:4B:65:7D:8B:4A:20:EB:B8:35:1D:A0:1C:9C:6D X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/WTs1pGckS2V9i0og67g1HaAcnG0.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.53.0/24 Signature Algorithm: sha256WithRSAEncryption 42:2a:63:4d:67:04:c7:06:13:bb:9e:84:b5:c4:6c:07:17:83: b4:04:01:6b:bb:4f:37:22:d1:b2:b1:3b:0f:cb:b2:70:cc:31: a7:38:58:14:96:01:2f:d3:70:38:6d:02:84:45:89:63:c2:78: 8e:21:41:46:33:16:9b:8f:de:98:f4:7e:1c:7b:33:94:35:8d: 92:32:b8:8b:7a:8e:30:31:9e:20:1a:ad:aa:94:7d:bf:ac:ec: ee:09:8b:d4:bf:15:4c:6b:be:4d:b5:ee:0f:bc:9f:ab:f6:46: 7c:fe:88:9b:53:76:2e:14:68:bc:84:66:5b:f1:d0:1e:e6:f9: c6:3d:d2:d6:84:a2:90:ab:67:08:1f:e0:11:b9:01:0f:b8:50: b8:9b:aa:19:0a:c1:7d:ff:c5:a5:ad:cd:97:3a:d9:9c:6a:0d: e7:45:23:77:58:a4:8b:41:24:ea:c7:52:e6:e8:76:67:e4:99: 0b:e9:54:c9:79:19:23:bc:76:b0:e3:c1:c9:08:fc:5c:e8:6c: 8f:0a:78:10:c3:74:c9:2b:39:5a:56:37:ed:50:f7:ad:6b:91: 71:56:a2:76:5f:83:15:7e:c3:dd:58:5a:89:ca:b3:f0:0a:0c: 8a:dc:ca:e6:54:2a:77:e2:84:ee:1b:52:54:e6:83:14:ce:50: c8:90:92:88 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0MzVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDU5M0IzNUE0NjcyNDRC NjU3RDhCNEEyMEVCQjgzNTFEQTAxQzlDNkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCleIkIQCYrm9ENdPdxtStCvr16LoLdEo/d2lr4zUg/ZdIwBSni oYEmrVIG8p6uNRg1j/ahOr35xuZLDouKjBIPXqPG48F4M3F9dZZheLlO2tApum6a XN9bGwOAnTNOE6bAbb56lkg/yyTnaiEhA1SuYP8yPw6njtV6U9WLoaWs3BBNRupg Daw7nxlsbcC76OiwhAqVLtTvS+9OGR7JQ/6nqi9BqPhU18YUmKjRV13PLZB/ytz8 W/y9pfulkX339CxMvZKuuI5P1GljfRA+8EtfzapiXKaVu4muQtFEYjrFPLkkwGTe h1zJAUC/PYAetPBFBBoSDGw2m+U5HJsrf11fAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUWTs1pGckS2V9i0og67g1HaAcnG0wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvV1RzMXBHY2tTMlY5aTBv ZzY3ZzFIYUFjbkcwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AMtNNTANBgkqhkiG9w0BAQsFAAOCAQEAQipjTWcExwYTu56EtcRsBxeDtAQBa7tP NyLRsrE7D8uycMwxpzhYFJYBL9NwOG0ChEWJY8J4jiFBRjMWm4/emPR+HHszlDWN kjK4i3qOMDGeIBqtqpR9v6zs7gmL1L8VTGu+TbXuD7yfq/ZGfP6Im1N2LhRovIRm W/HQHub5xj3S1oSikKtnCB/gEbkBD7hQuJuqGQrBff/Fpa3NlzrZnGoN50Ujd1ik i0Ek6sdS5uh2Z+SZC+lUyXkZI7x2sOPByQj8XOhsjwp4EMN0ySs5WlY37VD3rWuR cVaidl+DFX7D3Vhaicqz8AoMitzK5lQqd+KE7htSVOaDFM5QyJCSiA== -----END CERTIFICATE-----Generated at Sun Aug 24 08:54:26 2025 by rpki-client