$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/o2XQMQYBH8l-MAMSBT0zr6PrtH4.roa File: o2XQMQYBH8l-MAMSBT0zr6PrtH4.roa (raw, json) Hash identifier: RiC9Cv63Rch8fHK/j1jE1lri8V1EOO7nSpJ6XwrANZ4= Subject key identifier: A3:65:D0:31:06:01:1F:C9:7E:30:03:12:05:3D:33:AF:A3:EB:B4:7E Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14E3 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/o2XQMQYBH8l-MAMSBT0zr6PrtH4.roa Signing time: Fri 22 Aug 2025 08:54:53 +0000 ROA not before: Fri 22 Aug 2025 08:54:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 203.77.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5347 (0x14e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A365D03106011FC97E300312053D33AFA3EBB47E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:44:67:37:e9:6b:04:7f:d3:8f:ea:46:99: b2:58:48:77:90:bc:4c:a1:af:7d:5f:27:99:7f:87: b8:fd:34:a2:83:e9:a0:76:a2:02:cd:48:88:79:77: 16:93:a8:f3:06:77:4f:be:52:b0:bc:25:8d:70:de: ff:b1:db:25:9b:5f:af:f9:53:d1:f7:be:b9:37:1f: 40:43:41:b1:09:8a:49:51:27:33:2d:dd:81:ee:03: a0:95:6f:c8:82:b6:21:8b:6e:18:84:da:53:1b:f5: 1a:4f:77:dc:e2:6e:49:73:f3:d0:91:3e:ee:52:85: 12:ad:18:40:da:c8:26:7d:f0:c8:6f:15:74:0a:e2: b9:da:7c:66:ce:99:3a:ea:e4:fa:0f:9f:dd:b5:29: 4c:49:94:0b:44:7e:d2:85:c5:40:1d:9d:30:36:ed: c7:2e:d5:f9:cb:58:f8:a4:73:5c:4c:53:92:4e:5b: ee:1e:8e:95:3c:7e:bf:66:02:ab:33:32:78:1e:d8: 74:96:c9:8d:96:c9:71:e4:35:32:6f:d9:8b:a9:b2: 76:fb:44:5f:93:93:84:1d:69:f3:1f:66:57:3e:dc: ae:74:18:59:1e:a9:b5:e9:fe:f6:50:20:b1:58:77: 35:4d:e0:9c:f3:82:f4:d6:fb:90:d9:42:53:6f:23: 44:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:65:D0:31:06:01:1F:C9:7E:30:03:12:05:3D:33:AF:A3:EB:B4:7E X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/o2XQMQYBH8l-MAMSBT0zr6PrtH4.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.0.0/19 Signature Algorithm: sha256WithRSAEncryption 53:3f:a9:7a:9f:4b:32:ad:64:7f:ea:9a:7f:33:81:34:56:d8: 29:a1:5d:de:8e:e9:70:a5:23:6f:8f:65:b7:3a:09:ab:b2:8b: c7:44:76:67:9f:d7:ba:5c:3f:5d:bb:51:c0:f3:66:78:61:bd: 13:75:56:32:b2:1c:4b:90:0f:77:09:f8:87:3d:ea:11:06:0a: 1d:d0:f9:df:01:5a:e7:4d:bd:a1:c8:fb:9b:bf:8f:a5:9f:6c: 3a:1e:79:a9:07:a7:ff:2a:58:95:4b:04:70:3f:e5:84:ac:21: e5:0f:db:2f:7a:05:cc:55:2c:93:7f:53:11:90:71:70:41:81: 1d:0e:3e:c9:ce:17:61:c2:1d:07:0e:c4:8b:97:f9:8c:69:92: 51:5d:a7:83:da:c3:54:27:4f:3e:df:95:08:a0:67:68:a8:1d: c8:b1:55:bc:8e:7b:00:09:eb:77:0f:7b:ce:2f:16:93:b4:a3: 3b:3b:26:15:8b:1c:8d:ea:d5:23:4a:e2:f1:30:0a:51:8c:26: 03:9d:d6:ef:b8:47:46:cb:76:2c:16:a4:84:83:d8:bb:ab:5e: f9:b3:72:04:9d:24:bd:cd:e5:d4:93:c4:d8:4e:59:c5:ce:77: c0:ab:36:76:8c:69:fc:e6:ea:3a:05:b8:0c:a5:78:10:43:e7: 8f:2c:69:91 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEzNjVEMDMxMDYwMTFG Qzk3RTMwMDMxMjA1M0QzM0FGQTNFQkI0N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHmURnN+lrBH/Tj+pGmbJYSHeQvEyhr31fJ5l/h7j9NKKD6aB2 ogLNSIh5dxaTqPMGd0++UrC8JY1w3v+x2yWbX6/5U9H3vrk3H0BDQbEJiklRJzMt 3YHuA6CVb8iCtiGLbhiE2lMb9RpPd9zibklz89CRPu5ShRKtGEDayCZ98MhvFXQK 4rnafGbOmTrq5PoPn921KUxJlAtEftKFxUAdnTA27ccu1fnLWPikc1xMU5JOW+4e jpU8fr9mAqszMnge2HSWyY2WyXHkNTJv2Yupsnb7RF+Tk4QdafMfZlc+3K50GFke qbXp/vZQILFYdzVN4JzzgvTW+5DZQlNvI0TDAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUo2XQMQYBH8l+MAMSBT0zr6PrtH4wHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvbzJYUU1RWUJIOGwtTUFN U0JUMHpyNlBydEg0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BctNADANBgkqhkiG9w0BAQsFAAOCAQEAUz+pep9LMq1kf+qafzOBNFbYKaFd3o7p cKUjb49ltzoJq7KLx0R2Z5/Xulw/XbtRwPNmeGG9E3VWMrIcS5APdwn4hz3qEQYK HdD53wFa5029ocj7m7+PpZ9sOh55qQen/ypYlUsEcD/lhKwh5Q/bL3oFzFUsk39T EZBxcEGBHQ4+yc4XYcIdBw7Ei5f5jGmSUV2ng9rDVCdPPt+VCKBnaKgdyLFVvI57 AAnrdw97zi8Wk7SjOzsmFYscjerVI0ri8TAKUYwmA53W77hHRst2LBakhIPYu6te +bNyBJ0kvc3l1JPE2E5Zxc53wKs2doxp/ObqOgW4DKV4EEPnjyxpkQ== -----END CERTIFICATE-----Generated at Sun Aug 24 06:47:02 2025 by rpki-client