$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ktj7h_Vy-5x-a3y_5oFMQJQuHdg.roa File: ktj7h_Vy-5x-a3y_5oFMQJQuHdg.roa (raw, json) Hash identifier: OqQscgiycL4BOh1MdgiSD7h6aQI41KnrhplsjQ5gYTQ= Subject key identifier: 92:D8:FB:87:F5:72:FB:9C:7E:6B:7C:BF:E6:81:4C:40:94:2E:1D:D8 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14F6 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ktj7h_Vy-5x-a3y_5oFMQJQuHdg.roa Signing time: Fri 22 Aug 2025 08:54:59 +0000 ROA not before: Fri 22 Aug 2025 08:54:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 18049 IP address blocks: 210.62.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5366 (0x14f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=92D8FB87F572FB9C7E6B7CBFE6814C40942E1DD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:65:61:97:73:d1:f6:e7:d9:fd:c7:bd:fd:7a: 48:6d:50:c6:7c:94:d3:5a:23:f2:08:69:b4:c9:30: c1:67:2e:7c:d4:c2:a4:29:b2:09:cb:0f:7e:bb:56: fe:28:53:25:d4:ba:2d:31:83:b5:7d:13:2a:e9:e6: db:e0:fe:af:b6:a1:80:a3:ff:f8:3c:5a:0b:24:0b: 18:de:17:f6:30:21:89:52:1b:f5:0c:28:3f:f0:76: bd:55:01:2f:23:ac:6b:cf:2c:5d:20:ad:1d:9d:25: 3e:85:c7:38:c9:d1:d1:fe:f1:03:bb:0f:63:4f:8d: db:12:3b:86:96:44:a0:9c:a4:de:96:07:ca:cd:df: 10:1a:e8:14:6d:e5:13:f7:cd:5d:89:6f:f4:79:81: 1c:00:28:93:00:24:0f:0b:9a:79:5c:c3:bd:e1:e3: 42:bc:52:1f:a9:c4:d5:b3:ba:6f:1d:ee:ba:94:2b: 5a:3d:b1:45:3a:a1:8f:a4:7a:1d:b7:e4:cd:1e:06: 70:b8:5c:55:43:38:0c:9c:93:ec:21:7d:06:a7:16: 2d:61:df:d4:13:c3:36:2a:1c:d8:d7:9e:90:1e:78: a5:10:12:a6:2f:c1:bf:e7:82:40:9f:52:58:c3:f6: fc:48:d3:d9:b8:77:e2:38:35:cf:57:95:c4:10:7d: 35:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D8:FB:87:F5:72:FB:9C:7E:6B:7C:BF:E6:81:4C:40:94:2E:1D:D8 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ktj7h_Vy-5x-a3y_5oFMQJQuHdg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.208.0/21 Signature Algorithm: sha256WithRSAEncryption 06:42:7b:e3:d8:00:21:43:43:70:80:2f:f9:11:26:94:d0:43: 20:4d:61:f9:cd:8a:a7:d3:53:cc:98:56:24:5c:02:dc:5b:d7: e0:0f:f1:63:ff:3e:e1:74:03:5d:46:b8:2f:02:4d:81:99:57: 55:e8:a9:4c:35:57:27:63:5b:34:8b:5f:5b:45:07:1a:eb:38: 71:12:27:19:7b:4c:0d:b4:3d:96:cd:bf:2d:7e:16:e4:93:cd: 14:ad:98:6b:03:33:ac:86:7b:9e:09:3e:b5:52:40:89:cd:3f: 80:25:76:7f:28:89:93:6a:df:a9:98:30:f1:54:27:d3:d8:9c: ba:8d:a3:b1:fe:e0:8c:41:77:77:be:70:b2:87:da:f9:13:14: ff:01:93:5a:92:17:bb:d0:10:b3:f8:73:cc:ad:e7:48:a8:2b: cf:1a:ef:40:84:03:06:83:6f:e1:46:e0:9c:2f:48:a2:2c:43: 5d:1a:f8:36:e4:19:a1:61:bd:f9:b8:6a:16:6d:9f:55:f8:c7: a8:2e:6f:34:d8:2f:55:ea:01:a1:a6:1b:89:5e:c9:78:b8:18: a1:6e:60:d2:6e:37:f6:b5:9d:60:84:58:4b:81:43:4a:21:9a: 93:37:0f:22:32:f4:46:34:be:2c:0a:5b:42:29:5e:89:53:b3: 5f:ad:a3:02 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDkyRDhGQjg3RjU3MkZC OUM3RTZCN0NCRkU2ODE0QzQwOTQyRTFERDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZZWGXc9H259n9x739ekhtUMZ8lNNaI/IIabTJMMFnLnzUwqQp sgnLD367Vv4oUyXUui0xg7V9Eyrp5tvg/q+2oYCj//g8WgskCxjeF/YwIYlSG/UM KD/wdr1VAS8jrGvPLF0grR2dJT6FxzjJ0dH+8QO7D2NPjdsSO4aWRKCcpN6WB8rN 3xAa6BRt5RP3zV2Jb/R5gRwAKJMAJA8Lmnlcw73h40K8Uh+pxNWzum8d7rqUK1o9 sUU6oY+keh235M0eBnC4XFVDOAyck+whfQanFi1h39QTwzYqHNjXnpAeeKUQEqYv wb/ngkCfUljD9vxI09m4d+I4Nc9XlcQQfTUXAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUktj7h/Vy+5x+a3y/5oFMQJQuHdgwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQva3RqN2hfVnktNXgtYTN5 XzVvRk1RSlF1SGRnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME A9I+0DANBgkqhkiG9w0BAQsFAAOCAQEABkJ749gAIUNDcIAv+REmlNBDIE1h+c2K p9NTzJhWJFwC3FvX4A/xY/8+4XQDXUa4LwJNgZlXVeipTDVXJ2NbNItfW0UHGus4 cRInGXtMDbQ9ls2/LX4W5JPNFK2YawMzrIZ7ngk+tVJAic0/gCV2fyiJk2rfqZgw 8VQn09icuo2jsf7gjEF3d75wsofa+RMU/wGTWpIXu9AQs/hzzK3nSKgrzxrvQIQD BoNv4UbgnC9IoixDXRr4NuQZoWG9+bhqFm2fVfjHqC5vNNgvVeoBoaYbiV7JeLgY oW5g0m439rWdYIRYS4FDSiGakzcPIjL0RjS+LApbQileiVOzX62jAg== -----END CERTIFICATE-----Generated at Sun Aug 24 06:49:53 2025 by rpki-client