$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/npnnNIoTVDEhplofVvJDQ-F_lbM.roa File: npnnNIoTVDEhplofVvJDQ-F_lbM.roa (raw, json) Hash identifier: heUVfod0UZi0rIUm8LhuRDpKuLZ0E2BRjYA0ZQmJLnY= Subject key identifier: 9E:99:E7:34:8A:13:54:31:21:A6:5A:1F:56:F2:43:43:E1:7F:95:B3 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14F4 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/npnnNIoTVDEhplofVvJDQ-F_lbM.roa Signing time: Fri 22 Aug 2025 08:54:58 +0000 ROA not before: Fri 22 Aug 2025 08:54:58 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 210.67.144.0/20 maxlen: 25 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5364 (0x14f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:58 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=9E99E7348A13543121A65A1F56F24343E17F95B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:f1:a0:4d:b1:cc:e6:1d:a2:c3:f6:06:42: 35:aa:1b:a9:85:2b:6f:af:27:62:0e:c3:15:25:95: 82:26:c2:b7:73:ee:73:3e:fa:27:27:e6:30:65:98: d2:23:9b:73:4b:d1:e8:59:d1:a7:d1:85:2b:ac:94: 14:88:d8:8a:08:61:78:de:4a:68:98:95:c2:07:ab: 0c:e5:9d:53:8c:e0:03:a7:e7:36:fd:34:24:ff:f0: 26:c9:ce:49:75:6c:5a:94:61:95:28:ab:9a:3a:f1: 6e:57:73:62:e8:70:ba:e8:10:72:ae:e2:d7:97:4e: c2:c5:46:89:90:a0:09:d3:ea:31:50:d6:b2:4e:45: 81:63:b2:62:a7:20:09:de:b7:cb:55:91:ac:8d:d6: d3:dd:d7:10:b9:e4:eb:01:ac:07:26:6d:a1:0a:78: 71:c4:c2:ce:fd:29:45:6b:bb:a5:31:24:4f:87:ff: 4f:b2:5a:b3:38:55:e6:9e:74:a7:92:3a:65:7e:40: e8:4b:50:b2:10:be:ef:a2:36:92:fa:61:51:48:32: 8b:eb:e3:d4:7a:34:14:4a:8c:f4:01:90:97:6a:81: 41:5d:d4:b9:f2:b8:9e:88:ef:2f:60:1c:e8:e6:34: d9:9d:fe:1d:be:a9:d4:27:c7:9a:d0:b3:5a:e5:69: b9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:99:E7:34:8A:13:54:31:21:A6:5A:1F:56:F2:43:43:E1:7F:95:B3 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/npnnNIoTVDEhplofVvJDQ-F_lbM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.67.144.0/20 Signature Algorithm: sha256WithRSAEncryption 2a:e7:0c:1e:14:65:9d:ab:e5:4e:49:3b:10:54:11:86:fb:46: 11:b1:1f:28:b7:cf:14:5c:a8:ae:f2:60:d3:f8:5b:0c:5f:d5: 86:10:35:87:64:f9:57:dd:2e:02:a4:39:10:e2:15:7c:8f:81: f2:87:10:4d:b2:cd:6e:6a:b7:5f:38:d1:91:45:f5:c4:b4:5b: 46:a0:bc:c4:d9:43:3b:1a:6b:ea:99:15:38:d7:ec:b5:94:6f: 7a:79:7e:b9:9e:08:33:3e:cd:64:9c:1c:fb:c9:4c:65:f0:c7: c1:3f:2e:aa:16:d5:89:35:83:a9:74:5b:a1:71:4d:22:c7:05: 52:cc:ec:fa:83:b0:10:72:a6:ba:f9:a4:94:79:cd:47:78:c9: e1:f2:bc:24:ca:4d:45:b6:e2:5e:2e:6f:ec:e7:d6:5f:10:d4: e5:6d:9a:79:ef:d3:c0:59:42:02:aa:8d:cf:48:d0:ae:85:f9: 86:95:14:34:5f:ce:bc:63:8f:76:b7:03:9f:fe:9b:44:fb:8b: d0:69:01:39:8d:ab:cf:c3:86:f1:66:f2:a1:fa:2e:19:15:77: 79:12:69:f0:4c:fb:96:11:7c:e0:1d:b6:da:54:c1:0e:07:76: 72:36:b8:d5:31:37:63:1a:30:19:97:d3:36:df:0a:64:e9:d5: a5:27:84:87 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDlFOTlFNzM0OEExMzU0 MzEyMUE2NUExRjU2RjI0MzQzRTE3Rjk1QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/3/GgTbHM5h2iw/YGQjWqG6mFK2+vJ2IOwxUllYImwrdz7nM+ +icn5jBlmNIjm3NL0ehZ0afRhSuslBSI2IoIYXjeSmiYlcIHqwzlnVOM4AOn5zb9 NCT/8CbJzkl1bFqUYZUoq5o68W5Xc2LocLroEHKu4teXTsLFRomQoAnT6jFQ1rJO RYFjsmKnIAnet8tVkayN1tPd1xC55OsBrAcmbaEKeHHEws79KUVru6UxJE+H/0+y WrM4VeaedKeSOmV+QOhLULIQvu+iNpL6YVFIMovr49R6NBRKjPQBkJdqgUFd1Lny uJ6I7y9gHOjmNNmd/h2+qdQnx5rQs1rlabm3AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUnpnnNIoTVDEhplofVvJDQ+F/lbMwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvbnBubk5Jb1RWREVocGxv ZlZ2SkRRLUZfbGJNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BNJDkDANBgkqhkiG9w0BAQsFAAOCAQEAKucMHhRlnavlTkk7EFQRhvtGEbEfKLfP FFyorvJg0/hbDF/VhhA1h2T5V90uAqQ5EOIVfI+B8ocQTbLNbmq3XzjRkUX1xLRb RqC8xNlDOxpr6pkVONfstZRvenl+uZ4IMz7NZJwc+8lMZfDHwT8uqhbViTWDqXRb oXFNIscFUszs+oOwEHKmuvmklHnNR3jJ4fK8JMpNRbbiXi5v7OfWXxDU5W2aee/T wFlCAqqNz0jQroX5hpUUNF/OvGOPdrcDn/6bRPuL0GkBOY2rz8OG8WbyofouGRV3 eRJp8Ez7lhF84B222lTBDgd2cja41TE3YxowGZfTNt8KZOnVpSeEhw== -----END CERTIFICATE-----Generated at Sun Aug 24 06:52:23 2025 by rpki-client