$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/oPxXPv7OITo8fsJk6FpP4n_ry9Q.roa File: oPxXPv7OITo8fsJk6FpP4n_ry9Q.roa (raw, json) Hash identifier: j0+ifdDH7U3B4EKXPrnFnm2tLSPr9ANQmt2SwFvLyks= Subject key identifier: A0:FC:57:3E:FE:CE:21:3A:3C:7E:C2:64:E8:5A:4F:E2:7F:EB:CB:D4 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 147F Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/oPxXPv7OITo8fsJk6FpP4n_ry9Q.roa Signing time: Fri 22 Aug 2025 08:54:30 +0000 ROA not before: Fri 22 Aug 2025 08:54:30 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4662 IP address blocks: 210.62.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5247 (0x147f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:30 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=A0FC573EFECE213A3C7EC264E85A4FE27FEBCBD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:28:bf:54:5a:2d:98:e1:75:2b:e5:ca:ec:cf: b8:e8:d0:cb:82:aa:a6:84:db:5a:a7:0b:7c:84:ee: fa:15:84:c1:d7:da:71:c0:81:8c:17:24:ff:86:e7: 99:3b:b3:e8:eb:ee:70:e2:a5:e5:4a:d2:06:9b:38: 0e:e1:ea:64:db:86:17:d4:67:c9:b7:ee:7d:9f:46: a5:6d:fa:23:46:b1:7a:9b:4e:aa:dd:ef:34:28:20: e9:56:54:ff:ae:20:61:34:c3:8c:6b:e0:fc:6c:c6: 64:93:6a:ed:2c:d9:8f:5e:c6:47:be:d6:01:df:66: ee:e2:8c:42:86:75:09:eb:6a:6b:84:0c:ea:f2:9e: cb:99:ca:00:c6:4c:04:f6:80:4d:a1:31:9e:94:18: 3f:c1:35:38:1d:ef:49:d1:ee:d8:d1:50:41:81:6f: 67:f1:e8:0f:2a:3d:91:d0:2b:15:37:7b:7f:91:bc: 68:5d:de:65:33:1b:28:88:6b:47:88:b8:7e:7e:0a: bb:6a:fd:17:de:db:88:90:e1:53:2b:de:4d:eb:d8: 75:6b:54:4f:e3:cb:01:69:21:f6:bc:e2:c2:a4:18: 8d:bb:50:33:3f:5d:c7:34:bf:a7:ac:0f:88:6b:b4: 82:c4:d8:31:b5:f2:9a:fa:bf:e3:03:5c:0d:5b:5e: d6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FC:57:3E:FE:CE:21:3A:3C:7E:C2:64:E8:5A:4F:E2:7F:EB:CB:D4 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/oPxXPv7OITo8fsJk6FpP4n_ry9Q.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.0.0/18 Signature Algorithm: sha256WithRSAEncryption 25:8e:9f:33:00:e5:d7:f7:c2:f4:57:58:34:58:d7:db:82:af: f4:52:f7:53:12:23:91:25:eb:b9:5d:02:48:c0:0a:50:14:09: 6f:70:d7:9f:0b:f9:66:31:a0:f9:4f:cd:8d:8e:07:cd:4d:aa: a2:ae:f6:2c:00:92:dd:90:10:79:eb:ea:65:b6:8c:22:b6:9f: 1c:4e:59:b6:56:42:2f:f3:f2:57:89:3d:f7:6d:98:08:43:f7: 91:d1:84:c9:16:a5:84:47:be:de:62:37:ef:fa:68:d0:f0:e6: 11:72:6d:e2:ad:f9:7d:9f:67:de:c7:7d:8d:fd:b9:31:fc:84: 35:89:ac:36:15:8d:2a:8e:85:20:27:74:c9:c0:a9:66:5d:97: 9b:d0:c4:b6:86:2a:71:37:74:4c:26:e1:bd:8e:44:47:3b:bc: d5:a1:fd:53:a4:c2:7c:de:f0:bd:79:7c:ba:36:8e:b9:a4:69: 61:4c:f4:57:98:e0:1f:24:56:b2:69:f1:5c:ca:64:fd:ad:5e: ec:f4:08:91:57:d8:58:92:88:30:c7:5d:75:8c:f7:ef:c2:0a: 9c:50:4a:64:75:2d:b7:bc:89:1b:f3:66:b0:cd:c1:4b:bf:63: e5:c3:bd:fb:9c:b0:6a:b3:c2:9b:89:3f:af:b3:19:8a:40:6e: b5:94:cc:43 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFH8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEEwRkM1NzNFRkVDRTIx M0EzQzdFQzI2NEU4NUE0RkUyN0ZFQkNCRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTKL9UWi2Y4XUr5crsz7jo0MuCqqaE21qnC3yE7voVhMHX2nHA gYwXJP+G55k7s+jr7nDipeVK0gabOA7h6mTbhhfUZ8m37n2fRqVt+iNGsXqbTqrd 7zQoIOlWVP+uIGE0w4xr4PxsxmSTau0s2Y9exke+1gHfZu7ijEKGdQnramuEDOry nsuZygDGTAT2gE2hMZ6UGD/BNTgd70nR7tjRUEGBb2fx6A8qPZHQKxU3e3+RvGhd 3mUzGyiIa0eIuH5+Crtq/Rfe24iQ4VMr3k3r2HVrVE/jywFpIfa84sKkGI27UDM/ Xcc0v6esD4hrtILE2DG18pr6v+MDXA1bXtZ9AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUoPxXPv7OITo8fsJk6FpP4n/ry9QwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvb1B4WFB2N09JVG84ZnNK azZGcFA0bl9yeTlRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BtI+ADANBgkqhkiG9w0BAQsFAAOCAQEAJY6fMwDl1/fC9FdYNFjX24Kv9FL3UxIj kSXruV0CSMAKUBQJb3DXnwv5ZjGg+U/NjY4HzU2qoq72LACS3ZAQeevqZbaMIraf HE5ZtlZCL/PyV4k9922YCEP3kdGEyRalhEe+3mI37/po0PDmEXJt4q35fZ9n3sd9 jf25MfyENYmsNhWNKo6FICd0ycCpZl2Xm9DEtoYqcTd0TCbhvY5ERzu81aH9U6TC fN7wvXl8ujaOuaRpYUz0V5jgHyRWsmnxXMpk/a1e7PQIkVfYWJKIMMdddYz378IK nFBKZHUtt7yJG/NmsM3BS79j5cO9+5ywarPCm4k/r7MZikButZTMQw== -----END CERTIFICATE-----Generated at Sun Aug 24 06:49:51 2025 by rpki-client