$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fCHYi3jH3-4VTGsP6G8CrPPx46U.roa File: fCHYi3jH3-4VTGsP6G8CrPPx46U.roa (raw, json) Hash identifier: TCEnqUvk2V2pePBb8fTMkFzIRfoPsCpSQvlPHxcLA1I= Subject key identifier: 7C:21:D8:8B:78:C7:DF:EE:15:4C:6B:0F:E8:6F:02:AC:F3:F1:E3:A5 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1494 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fCHYi3jH3-4VTGsP6G8CrPPx46U.roa Signing time: Fri 22 Aug 2025 08:54:34 +0000 ROA not before: Fri 22 Aug 2025 08:54:34 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131611 IP address blocks: 124.9.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5268 (0x1494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:34 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7C21D88B78C7DFEE154C6B0FE86F02ACF3F1E3A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:46:75:11:00:fa:83:3e:cb:73:69:00:a4:3c: 24:f3:3a:eb:8e:ff:1c:5a:76:d0:50:35:27:2a:a7: 42:2f:1b:0a:59:08:ea:3a:65:fc:6b:50:69:9d:8a: ab:05:81:44:61:55:bf:af:23:ea:f4:26:fa:b8:78: 69:f3:dd:fb:53:36:7c:89:9b:ef:c2:6d:92:82:8c: 04:f9:11:39:21:81:ea:a1:f2:98:a6:f8:66:56:d4: f0:36:aa:60:a1:d9:75:42:81:7c:51:d8:ce:0e:df: 07:b1:eb:27:e7:dc:02:92:2e:fc:2a:65:cd:43:42: 1b:35:f9:72:db:c4:8e:e2:b0:a9:9e:65:e4:52:2a: 43:85:b2:04:e8:ed:ec:3d:ef:5f:63:b9:61:6f:c5: f3:14:f6:1d:f4:b2:34:ad:43:3a:11:f5:36:49:41: ac:42:24:61:48:d7:26:eb:6a:37:3c:32:dd:c9:64: 40:62:a3:38:81:f8:03:8f:bc:f8:a4:de:70:c9:fd: 31:2c:8d:e8:35:70:db:fd:cc:cf:41:7a:b8:eb:88: 67:8f:dc:42:fc:f5:b3:f3:9b:ab:c6:9b:97:95:ea: 5c:bf:e8:90:17:23:ef:18:66:b2:5d:a8:a8:81:5a: 5a:22:4b:be:e9:3d:95:0c:36:8a:bd:65:8f:f6:1c: 8f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:21:D8:8B:78:C7:DF:EE:15:4C:6B:0F:E8:6F:02:AC:F3:F1:E3:A5 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fCHYi3jH3-4VTGsP6G8CrPPx46U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.9.64.0/19 Signature Algorithm: sha256WithRSAEncryption 3f:12:04:80:9c:6e:42:e8:ba:84:ed:13:71:60:f8:62:77:74: 4a:c9:10:33:80:e9:d7:95:86:9f:56:03:79:c4:13:eb:df:3b: a8:44:d7:42:5f:37:7c:f3:84:a9:13:82:23:1f:68:0a:69:1b: 28:b8:58:05:c1:43:7e:58:4f:3e:8d:cf:44:9b:ee:05:e8:71: d4:28:f4:79:e3:d2:15:d9:71:55:ae:b0:3a:e5:8e:8d:e1:f5: 36:67:e4:1f:f4:76:23:f3:b8:ee:49:95:85:77:4a:db:ff:26: 5c:07:ba:c4:0c:d8:04:a0:70:1c:2d:94:e0:f9:f0:57:2c:92: 1b:c8:42:c2:92:e5:c5:89:60:84:f4:58:7c:b5:2e:36:96:4f: ec:50:43:76:ee:e7:31:5b:c4:23:eb:2f:f6:81:24:ab:6e:21: 44:c3:93:74:b2:2b:53:27:c9:81:65:06:15:ee:a1:1d:24:16: 87:f8:3f:55:63:2b:7c:ec:ef:56:06:84:34:67:f7:c3:64:38: 54:ff:e2:90:87:28:7e:d5:3c:1b:2b:df:0f:89:bc:19:09:f2: 1b:24:e0:1d:57:fb:44:40:92:fd:2b:3b:79:61:58:1e:b5:ef: d9:ba:b6:8f:44:73:80:72:58:29:33:d2:14:8a:26:23:ab:c1: 4d:bd:ac:5c -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFJQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0MzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdDMjFEODhCNzhDN0RG RUUxNTRDNkIwRkU4NkYwMkFDRjNGMUUzQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvRnURAPqDPstzaQCkPCTzOuuO/xxadtBQNScqp0IvGwpZCOo6 ZfxrUGmdiqsFgURhVb+vI+r0Jvq4eGnz3ftTNnyJm+/CbZKCjAT5ETkhgeqh8pim +GZW1PA2qmCh2XVCgXxR2M4O3wex6yfn3AKSLvwqZc1DQhs1+XLbxI7isKmeZeRS KkOFsgTo7ew9719juWFvxfMU9h30sjStQzoR9TZJQaxCJGFI1ybrajc8Mt3JZEBi oziB+AOPvPik3nDJ/TEsjeg1cNv9zM9BerjriGeP3EL89bPzm6vGm5eV6ly/6JAX I+8YZrJdqKiBWloiS77pPZUMNoq9ZY/2HI+BAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUfCHYi3jH3+4VTGsP6G8CrPPx46UwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvZkNIWWkzakgzLTRWVEdz UDZHOENyUFB4NDZVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BXwJQDANBgkqhkiG9w0BAQsFAAOCAQEAPxIEgJxuQui6hO0TcWD4Ynd0SskQM4Dp 15WGn1YDecQT6987qETXQl83fPOEqROCIx9oCmkbKLhYBcFDflhPPo3PRJvuBehx 1Cj0eePSFdlxVa6wOuWOjeH1NmfkH/R2I/O47kmVhXdK2/8mXAe6xAzYBKBwHC2U 4PnwVyySG8hCwpLlxYlghPRYfLUuNpZP7FBDdu7nMVvEI+sv9oEkq24hRMOTdLIr UyfJgWUGFe6hHSQWh/g/VWMrfOzvVgaENGf3w2Q4VP/ikIcoftU8GyvfD4m8GQny GyTgHVf7RECS/Ss7eWFYHrXv2bq2j0RzgHJYKTPSFIomI6vBTb2sXA== -----END CERTIFICATE-----Generated at Sun Aug 24 06:49:50 2025 by rpki-client