$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/akTr6FE3T9BTohUgrgyW2Rju2G4.roa File: akTr6FE3T9BTohUgrgyW2Rju2G4.roa (raw, json) Hash identifier: E1LC1kDW1sKF6TEY5sPdYNrrLGGD8S8OwdQt6R8W3iM= Subject key identifier: 6A:44:EB:E8:51:37:4F:D0:53:A2:15:20:AE:0C:96:D9:18:EE:D8:6E Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14F9 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/akTr6FE3T9BTohUgrgyW2Rju2G4.roa Signing time: Fri 22 Aug 2025 08:55:00 +0000 ROA not before: Fri 22 Aug 2025 08:55:00 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 60.198.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5369 (0x14f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:55:00 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6A44EBE851374FD053A21520AE0C96D918EED86E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0b:e6:e5:5c:68:d3:f7:3c:80:a7:0a:0f:f8: 37:bd:b8:fe:0f:26:24:8b:eb:ed:a5:3f:6a:cd:0d: 5a:76:c0:cc:6d:14:91:d3:79:b2:0b:cc:46:5d:36: 08:20:8d:04:f1:c7:a3:3b:21:31:8e:51:7c:f3:3d: 4c:86:0e:a3:6f:94:af:de:e0:1d:76:5c:52:cf:dc: b0:b7:05:b4:a9:a2:72:e5:1d:15:05:ba:6c:b7:cf: 81:cf:4b:20:85:8e:7b:1f:1f:17:2c:51:a2:c0:98: 4b:6c:89:72:42:60:51:57:a8:3e:3c:4a:57:03:d0: 00:11:b2:00:22:92:ee:7b:3d:44:c0:e8:7b:09:30: e1:2d:97:4f:23:2b:b7:15:43:83:ab:bf:c7:5f:67: f0:b8:84:bb:8d:ec:61:16:a8:11:4b:a7:ca:9e:e4: 35:f8:e1:0b:e9:cc:cf:1f:bb:b4:a3:8f:26:6f:a0: 9e:df:41:6b:cd:c5:45:35:d4:56:db:ee:89:37:a5: 5b:94:e6:8b:07:19:42:34:b5:2c:2b:c5:cd:28:c5: 01:c6:52:b8:c6:5b:e5:b5:5c:3a:48:b0:b6:c9:b3: 2e:06:b8:50:dc:4a:8b:9d:f1:d5:cc:1f:11:7b:b4: 4d:9e:56:6d:36:da:82:13:c4:25:48:fd:49:0d:eb: 75:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:44:EB:E8:51:37:4F:D0:53:A2:15:20:AE:0C:96:D9:18:EE:D8:6E X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/akTr6FE3T9BTohUgrgyW2Rju2G4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.198.32.0/22 Signature Algorithm: sha256WithRSAEncryption 93:02:cb:51:18:5f:71:29:cf:91:d6:11:ec:9c:19:8b:3b:1c: fe:09:8a:9d:9b:4c:56:b7:11:b2:d2:50:53:cc:ae:5b:40:aa: d4:49:03:05:64:08:41:5a:d9:de:d0:98:6e:13:f6:15:f9:78: c0:2a:2e:54:22:a2:65:20:17:e1:00:c0:ef:e4:56:b5:43:6d: 40:b8:bb:79:f8:96:45:a0:c7:81:69:54:2f:cd:ca:43:6d:89: 08:a2:39:4d:90:62:15:9d:db:e2:ca:1d:41:fb:21:47:d9:78: 65:cd:3e:84:a8:2d:15:2b:bd:dd:9f:08:e5:34:c1:36:4e:85: a6:2a:65:87:bf:46:ce:23:dc:f5:2f:4f:3c:9f:59:0b:3e:d8: 97:2f:50:4e:59:2f:0f:5b:53:55:fc:cc:38:e5:93:38:4c:26: af:2a:8e:5c:29:6a:06:f6:50:f2:a5:a6:4f:fa:75:24:4d:bc: bc:de:f1:a9:d8:80:f6:c8:ee:cd:97:59:61:3b:78:8e:0a:02: ac:22:6e:d7:e0:6c:77:bf:bd:40:c5:89:cb:d6:64:1c:00:cd: ec:bd:a4:81:d2:5a:43:44:e0:4c:ad:07:5f:83:54:2b:a2:88: aa:87:b8:ae:3e:63:0f:b5:48:58:d7:68:47:c5:a5:2b:35:7f: e7:7f:18:5c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU1MDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZBNDRFQkU4NTEzNzRG RDA1M0EyMTUyMEFFMEM5NkQ5MThFRUQ4NkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHC+blXGjT9zyApwoP+De9uP4PJiSL6+2lP2rNDVp2wMxtFJHT ebILzEZdNgggjQTxx6M7ITGOUXzzPUyGDqNvlK/e4B12XFLP3LC3BbSponLlHRUF umy3z4HPSyCFjnsfHxcsUaLAmEtsiXJCYFFXqD48SlcD0AARsgAiku57PUTA6HsJ MOEtl08jK7cVQ4Orv8dfZ/C4hLuN7GEWqBFLp8qe5DX44QvpzM8fu7SjjyZvoJ7f QWvNxUU11Fbb7ok3pVuU5osHGUI0tSwrxc0oxQHGUrjGW+W1XDpIsLbJsy4GuFDc Soud8dXMHxF7tE2eVm022oITxCVI/UkN63WlAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUakTr6FE3T9BTohUgrgyW2Rju2G4wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvYWtUcjZGRTNUOUJUb2hV Z3JneVcyUmp1Mkc0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AjzGIDANBgkqhkiG9w0BAQsFAAOCAQEAkwLLURhfcSnPkdYR7JwZizsc/gmKnZtM VrcRstJQU8yuW0Cq1EkDBWQIQVrZ3tCYbhP2Ffl4wCouVCKiZSAX4QDA7+RWtUNt QLi7efiWRaDHgWlUL83KQ22JCKI5TZBiFZ3b4sodQfshR9l4Zc0+hKgtFSu93Z8I 5TTBNk6Fpiplh79GziPc9S9PPJ9ZCz7Yly9QTlkvD1tTVfzMOOWTOEwmryqOXClq BvZQ8qWmT/p1JE28vN7xqdiA9sjuzZdZYTt4jgoCrCJu1+Bsd7+9QMWJy9ZkHADN 7L2kgdJaQ0TgTK0HX4NUK6KIqoe4rj5jD7VIWNdoR8WlKzV/538YXA== -----END CERTIFICATE-----Generated at Sun Aug 24 06:49:40 2025 by rpki-client