$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fLI_N_WtIIPLhZP7tI4iAQWCkhw.roa File: fLI_N_WtIIPLhZP7tI4iAQWCkhw.roa (raw, json) Hash identifier: Fmzf16MMu7Mk2cMEslAtKTej5gN5lpuEE7c6OBWxva8= Subject key identifier: 7C:B2:3F:37:F5:AD:20:83:CB:85:93:FB:B4:8E:22:01:05:82:92:1C Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14E7 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fLI_N_WtIIPLhZP7tI4iAQWCkhw.roa Signing time: Fri 22 Aug 2025 08:54:55 +0000 ROA not before: Fri 22 Aug 2025 08:54:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131628 IP address blocks: 175.99.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5351 (0x14e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7CB23F37F5AD2083CB8593FBB48E22010582921C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:b5:92:7e:cb:48:5f:3d:28:fe:dc:93:70: e3:10:27:35:ef:ba:d9:15:8b:9e:23:c2:50:32:a8: 89:bc:c3:ee:cb:29:24:99:86:10:ff:f3:fd:97:45: e2:c0:60:73:e1:91:e3:b6:7e:eb:9a:23:e5:ae:fa: be:85:67:fe:da:1c:96:da:0d:f6:e5:db:ec:8e:e8: 37:25:11:33:2d:6f:01:61:4c:3e:59:dc:dc:c2:cb: c6:b1:d3:1f:4f:6b:33:09:49:c3:9e:c9:8a:38:b9: cb:56:f8:13:57:84:7c:cc:fd:c8:9d:9e:af:1b:9a: 80:05:2e:39:01:bf:4a:7f:5e:3c:e8:7c:32:4d:01: ba:5c:38:98:93:e7:8e:51:1c:27:62:ca:9a:b4:eb: b7:34:9e:d9:0b:6d:7f:26:46:b1:4e:66:85:a9:ee: a8:06:b7:8c:78:db:66:0e:95:93:60:6f:2f:7a:41: a1:19:1a:6d:9a:4e:be:6f:70:cc:2d:74:32:1c:ea: 73:01:cd:dc:5b:e5:13:27:24:c6:90:04:65:22:0b: d2:7e:04:74:1b:b3:63:4c:42:c8:17:e9:78:83:74: df:53:54:55:c6:52:ea:42:05:c3:06:fc:ef:3e:4f: 92:cf:01:4b:8e:31:40:12:93:b5:70:bd:d5:20:f3: 19:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B2:3F:37:F5:AD:20:83:CB:85:93:FB:B4:8E:22:01:05:82:92:1C X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fLI_N_WtIIPLhZP7tI4iAQWCkhw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.99.225.0/24 Signature Algorithm: sha256WithRSAEncryption 19:7c:fd:5a:7d:a4:7c:ab:d9:a9:05:44:82:0b:d0:f5:83:4d: 9d:5e:2d:13:54:63:0c:ea:4f:15:58:b2:bd:ab:40:de:73:43: e2:5f:af:80:64:40:68:8c:45:c4:f3:4f:a9:27:88:c4:55:f8: bc:64:24:53:89:bc:e6:15:fe:08:14:b9:17:a4:87:07:78:8a: 46:5f:43:73:91:83:4e:6f:43:ed:de:0a:31:b3:0a:8e:a4:8c: d7:e5:4d:41:32:b6:73:2f:47:bc:ac:94:31:b2:8a:10:f8:a0: 06:64:02:00:44:4d:11:87:44:9d:e4:b7:d4:c9:d8:59:38:60: 1c:f8:b4:c5:fa:0c:49:2f:61:40:50:56:05:4c:97:24:38:bd: d0:23:21:57:9e:0a:22:c8:79:73:59:06:f0:38:99:15:85:0e: 04:5d:9b:a7:d6:27:6c:9e:cb:07:f9:1d:ce:88:2d:ae:ee:a0: e6:c9:0e:f5:9c:88:50:dc:cf:f4:bb:01:45:9c:4d:2d:ac:da: 83:d6:1b:51:1c:14:57:53:3d:c6:14:65:c8:13:9b:f4:20:1e: 7e:31:a3:76:96:e4:8a:73:b6:92:4e:1a:4e:9e:4a:48:0f:84: de:6a:ef:20:7b:fc:7d:d2:a4:e4:b9:2d:fc:26:49:60:f9:c0: bd:5e:e8:bd -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdDQjIzRjM3RjVBRDIw ODNDQjg1OTNGQkI0OEUyMjAxMDU4MjkyMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChz7WSfstIXz0o/tyTcOMQJzXvutkVi54jwlAyqIm8w+7LKSSZ hhD/8/2XReLAYHPhkeO2fuuaI+Wu+r6FZ/7aHJbaDfbl2+yO6DclETMtbwFhTD5Z 3NzCy8ax0x9PazMJScOeyYo4uctW+BNXhHzM/cidnq8bmoAFLjkBv0p/XjzofDJN AbpcOJiT545RHCdiypq067c0ntkLbX8mRrFOZoWp7qgGt4x422YOlZNgby96QaEZ Gm2aTr5vcMwtdDIc6nMBzdxb5RMnJMaQBGUiC9J+BHQbs2NMQsgX6XiDdN9TVFXG UupCBcMG/O8+T5LPAUuOMUASk7VwvdUg8xlJAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUfLI/N/WtIIPLhZP7tI4iAQWCkhwwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvZkxJX05fV3RJSVBMaFpQ N3RJNGlBUVdDa2h3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AK9j4TANBgkqhkiG9w0BAQsFAAOCAQEAGXz9Wn2kfKvZqQVEggvQ9YNNnV4tE1Rj DOpPFViyvatA3nND4l+vgGRAaIxFxPNPqSeIxFX4vGQkU4m85hX+CBS5F6SHB3iK Rl9Dc5GDTm9D7d4KMbMKjqSM1+VNQTK2cy9HvKyUMbKKEPigBmQCAERNEYdEneS3 1MnYWThgHPi0xfoMSS9hQFBWBUyXJDi90CMhV54KIsh5c1kG8DiZFYUOBF2bp9Yn bJ7LB/kdzogtru6g5skO9ZyIUNzP9LsBRZxNLazag9YbURwUV1M9xhRlyBOb9CAe fjGjdpbkinO2kk4aTp5KSA+E3mrvIHv8fdKk5Lkt/CZJYPnAvV7ovQ== -----END CERTIFICATE-----Generated at Sun Aug 24 06:52:42 2025 by rpki-client