$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Y4I4R3n8UsPzTeSfO7FpOcSoAQs.roa File: Y4I4R3n8UsPzTeSfO7FpOcSoAQs.roa (raw, json) Hash identifier: kyplBCTuEuSrSKLjaWENMhqTvj6VIpbGt8aFpHG+C94= Subject key identifier: 63:82:38:47:79:FC:52:C3:F3:4D:E4:9F:3B:B1:69:39:C4:A8:01:0B Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14E6 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Y4I4R3n8UsPzTeSfO7FpOcSoAQs.roa Signing time: Fri 22 Aug 2025 08:54:54 +0000 ROA not before: Fri 22 Aug 2025 08:54:54 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 60.199.140.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5350 (0x14e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:54 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6382384779FC52C3F34DE49F3BB16939C4A8010B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:e2:57:64:50:24:7e:bc:83:ed:8e:d0:11: 32:20:05:ea:23:b8:22:5b:87:59:5e:6b:82:74:bb: a0:77:67:a8:d2:45:13:7f:81:3c:ab:a8:77:75:e8: 6f:d4:84:fe:ed:b7:fd:36:6b:d3:ac:23:ef:54:b2: 97:d5:70:ef:c6:69:02:cb:ea:6e:35:2b:80:58:ae: 1b:d3:06:70:f2:26:7e:56:c7:f1:eb:6b:bc:0e:04: ad:f1:b2:6b:b3:dc:c1:56:a1:a9:3a:88:08:1d:bd: cb:ad:45:9a:79:28:62:08:a9:ed:f3:e2:9c:c5:a2: 13:f7:0a:9a:17:3c:e4:82:5d:a8:f9:4a:66:27:dd: 72:d7:83:c9:f2:40:82:57:03:c6:08:78:0e:33:e3: a8:ac:44:88:96:be:4e:52:55:4b:d4:94:64:2b:8d: 80:21:fc:2e:21:ee:e2:db:97:83:ce:f9:0b:ee:c6: 51:da:fb:9c:7b:f2:0a:61:3d:71:f7:2f:c1:f9:fe: 5b:c5:f4:6e:1e:8a:e9:eb:6f:91:fe:34:37:b0:35: 04:da:a3:6e:c4:e5:05:59:68:97:c2:d2:cf:4f:7d: 80:aa:78:b3:6e:30:5b:19:74:52:b2:0a:af:ef:e7: 9d:ff:61:0c:36:48:2c:8a:7a:fa:6a:52:6b:6b:a8: d0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:82:38:47:79:FC:52:C3:F3:4D:E4:9F:3B:B1:69:39:C4:A8:01:0B X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Y4I4R3n8UsPzTeSfO7FpOcSoAQs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.199.140.0/24 Signature Algorithm: sha256WithRSAEncryption 67:06:88:99:4c:55:db:69:5a:ae:69:0c:04:f3:9c:0a:ae:b3: 04:a9:44:9a:35:a8:9c:f0:db:a4:0d:1a:de:05:93:ac:6a:c4: dd:fc:0e:63:3a:90:8b:54:fa:6f:17:94:14:25:97:eb:95:80: da:9b:2f:82:60:dd:44:db:d9:c5:3b:a6:07:1b:7c:0b:d4:92: 52:de:30:67:76:7c:39:f1:a6:0b:50:1d:87:90:d0:68:44:e6: ee:da:34:15:e4:c2:f1:57:a8:f9:df:03:cd:4a:4b:8c:1d:36: c9:9b:a8:1b:f3:87:c3:5d:8c:94:c3:25:5c:72:36:96:ed:9b: b1:e8:04:ab:b9:b9:f8:81:4b:62:00:85:5a:e1:09:b8:30:cb: 79:d8:28:16:f8:e2:92:37:82:e4:a8:05:94:4e:f2:06:48:95: 33:55:4f:a5:df:f4:36:af:7e:85:44:63:7f:28:eb:dd:ab:69: 60:9c:d5:4f:ef:a8:f1:d9:2b:35:cf:64:59:f9:b0:9b:da:ba: 9e:28:ea:f2:45:c1:b6:df:7e:d8:c9:cb:9e:40:2e:e8:5c:1f: f8:c0:5d:d1:42:9a:be:c9:65:b7:06:4f:3b:fa:d2:d3:2a:b9: f0:92:69:8f:ed:76:8b:85:53:16:f4:af:0c:5b:42:4e:45:b0: e9:9c:31:16 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NTRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDYzODIzODQ3NzlGQzUy QzNGMzRERTQ5RjNCQjE2OTM5QzRBODAxMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/YuJXZFAkfryD7Y7QETIgBeojuCJbh1lea4J0u6B3Z6jSRRN/ gTyrqHd16G/UhP7tt/02a9OsI+9UspfVcO/GaQLL6m41K4BYrhvTBnDyJn5Wx/Hr a7wOBK3xsmuz3MFWoak6iAgdvcutRZp5KGIIqe3z4pzFohP3CpoXPOSCXaj5SmYn 3XLXg8nyQIJXA8YIeA4z46isRIiWvk5SVUvUlGQrjYAh/C4h7uLbl4PO+QvuxlHa +5x78gphPXH3L8H5/lvF9G4eiunrb5H+NDewNQTao27E5QVZaJfC0s9PfYCqeLNu MFsZdFKyCq/v553/YQw2SCyKevpqUmtrqNDFAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUY4I4R3n8UsPzTeSfO7FpOcSoAQswHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvWTRJNFIzbjhVc1B6VGVT Zk83RnBPY1NvQVFzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ADzHjDANBgkqhkiG9w0BAQsFAAOCAQEAZwaImUxV22larmkMBPOcCq6zBKlEmjWo nPDbpA0a3gWTrGrE3fwOYzqQi1T6bxeUFCWX65WA2psvgmDdRNvZxTumBxt8C9SS Ut4wZ3Z8OfGmC1Adh5DQaETm7to0FeTC8Veo+d8DzUpLjB02yZuoG/OHw12MlMMl XHI2lu2bsegEq7m5+IFLYgCFWuEJuDDLedgoFvjikjeC5KgFlE7yBkiVM1VPpd/0 Nq9+hURjfyjr3atpYJzVT++o8dkrNc9kWfmwm9q6nijq8kXBtt9+2MnLnkAu6Fwf +MBd0UKavslltwZPO/rS0yq58JJpj+12i4VTFvSvDFtCTkWw6ZwxFg== -----END CERTIFICATE-----Generated at Sun Aug 24 06:48:58 2025 by rpki-client