$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/kEpEy19k-eZ5ZAtjaPEfwmIqZ0s.roa File: kEpEy19k-eZ5ZAtjaPEfwmIqZ0s.roa (raw, json) Hash identifier: lAWX6XptDhKICKZS7cyq8w0JNQvolIg11WfTtnKTQos= Subject key identifier: 90:4A:44:CB:5F:64:F9:E6:79:64:0B:63:68:F1:1F:C2:62:2A:67:4B Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14B4 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/kEpEy19k-eZ5ZAtjaPEfwmIqZ0s.roa Signing time: Fri 22 Aug 2025 08:54:43 +0000 ROA not before: Fri 22 Aug 2025 08:54:43 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24163 IP address blocks: 60.198.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5300 (0x14b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:43 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=904A44CB5F64F9E679640B6368F11FC2622A674B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:b8:66:8c:db:5f:6b:39:b5:ab:13:1b:e0: 9c:84:3e:c6:ee:82:d0:0e:45:33:3e:56:6b:21:3a: 5e:1e:cb:64:ab:48:bd:1e:b8:dc:61:88:35:99:72: 31:85:3c:09:49:98:3f:81:d3:ff:55:fb:cf:5d:5a: 64:89:93:01:b2:40:97:69:94:bc:fa:06:f4:48:27: 3f:80:09:c0:59:9f:37:2c:e7:01:e7:ab:0b:a7:c0: 51:f7:0c:10:84:11:21:30:7b:95:4f:96:27:51:84: 96:5e:8a:57:ec:26:6f:b8:b7:2e:90:36:81:f2:72: df:f6:68:1c:79:5c:97:c0:b0:8d:64:d3:25:6b:1e: d2:ad:23:9c:53:e8:b4:ec:46:d8:c5:52:9c:a6:7f: 8f:9d:19:89:5e:1c:9a:3d:72:67:d4:7c:fc:5e:75: ae:0c:2f:5c:85:3f:e0:4a:8e:0d:50:8f:6f:80:53: de:9d:ae:ef:d5:18:f4:53:d7:08:95:3d:39:70:6e: 85:d1:d7:25:1f:e2:f3:dd:dd:94:6c:06:40:9d:02: 0d:5c:b8:6d:69:22:c1:07:42:a2:47:8f:31:6b:59: 76:9d:2d:9d:c4:b5:a4:3a:8e:a9:9b:27:63:64:ee: e6:0b:7e:b3:9e:ba:e4:bd:46:7a:b8:fd:0d:3e:a5: 30:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4A:44:CB:5F:64:F9:E6:79:64:0B:63:68:F1:1F:C2:62:2A:67:4B X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/kEpEy19k-eZ5ZAtjaPEfwmIqZ0s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.198.36.0/22 Signature Algorithm: sha256WithRSAEncryption 53:d6:45:47:a9:fe:75:00:88:83:5e:42:90:38:9f:2c:74:08: 77:d1:56:c4:2d:17:30:94:0a:76:a6:da:48:9d:bb:59:05:88: f2:5a:66:b8:98:8f:bb:f0:8f:85:1b:bd:bf:cc:d3:c2:86:ca: 50:54:d5:ae:e8:9d:3b:d2:02:48:12:f1:50:45:5d:a9:6f:35: f1:2c:14:8e:97:2f:0d:b1:82:f9:17:4c:07:13:9d:5d:27:22: 8f:d1:56:c8:b3:24:4d:6d:99:fc:e1:8e:c1:53:93:fd:4e:4f: 10:13:43:d9:39:58:f8:86:81:02:d9:11:4b:ec:d1:60:df:81: 12:b9:dd:a8:58:6f:a2:27:e8:13:c3:d2:67:ad:08:d3:0b:a4: c6:cf:1f:ac:b3:a6:60:4f:8f:6a:6e:d2:7f:6d:85:23:89:ad: 24:84:58:76:80:c8:15:2d:ce:48:3d:b6:fa:53:ad:3a:fb:dc: b1:3d:e8:e9:67:67:ee:f7:d4:e3:f1:16:ab:b6:17:0d:a2:54: 08:16:4c:4a:01:14:45:f9:4e:d7:6b:db:26:41:75:77:ec:ce: e9:e8:ff:c2:7d:e1:1e:0e:b2:c3:55:5c:94:e3:7e:1d:f2:ed: ab:cb:bd:6c:b9:4e:a0:bc:96:5d:da:60:3b:46:6a:db:d6:24: 62:e2:08:6b -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFLQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NDNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkwNEE0NENCNUY2NEY5 RTY3OTY0MEI2MzY4RjExRkMyNjIyQTY3NEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDI37hmjNtfazm1qxMb4JyEPsbugtAORTM+VmshOl4ey2SrSL0e uNxhiDWZcjGFPAlJmD+B0/9V+89dWmSJkwGyQJdplLz6BvRIJz+ACcBZnzcs5wHn qwunwFH3DBCEESEwe5VPlidRhJZeilfsJm+4ty6QNoHyct/2aBx5XJfAsI1k0yVr HtKtI5xT6LTsRtjFUpymf4+dGYleHJo9cmfUfPxeda4ML1yFP+BKjg1Qj2+AU96d ru/VGPRT1wiVPTlwboXR1yUf4vPd3ZRsBkCdAg1cuG1pIsEHQqJHjzFrWXadLZ3E taQ6jqmbJ2Nk7uYLfrOeuuS9Rnq4/Q0+pTB5AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUkEpEy19k+eZ5ZAtjaPEfwmIqZ0swHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQva0VwRXkxOWstZVo1WkF0 amFQRWZ3bUlxWjBzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AjzGJDANBgkqhkiG9w0BAQsFAAOCAQEAU9ZFR6n+dQCIg15CkDifLHQId9FWxC0X MJQKdqbaSJ27WQWI8lpmuJiPu/CPhRu9v8zTwobKUFTVruidO9ICSBLxUEVdqW81 8SwUjpcvDbGC+RdMBxOdXScij9FWyLMkTW2Z/OGOwVOT/U5PEBND2TlY+IaBAtkR S+zRYN+BErndqFhvoifoE8PSZ60I0wukxs8frLOmYE+Pam7Sf22FI4mtJIRYdoDI FS3OSD22+lOtOvvcsT3o6Wdn7vfU4/EWq7YXDaJUCBZMSgEURflO12vbJkF1d+zO 6ej/wn3hHg6yw1VclON+HfLtq8u9bLlOoLyWXdpgO0Zq29YkYuIIaw== -----END CERTIFICATE-----Generated at Sun Aug 24 06:48:53 2025 by rpki-client