$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zpJlCJ88MUb0wX8XcKZrqcwSOnY.roa File: zpJlCJ88MUb0wX8XcKZrqcwSOnY.roa (raw, json) Hash identifier: oEEQxim3qRzyYtg/tS5QSBVv5saWjaUOZHXL5hagIr0= Subject key identifier: CE:92:65:08:9F:3C:31:46:F4:C1:7F:17:70:A6:6B:A9:CC:12:3A:76 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1502 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zpJlCJ88MUb0wX8XcKZrqcwSOnY.roa Signing time: Fri 22 Aug 2025 08:55:02 +0000 ROA not before: Fri 22 Aug 2025 08:55:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 124.8.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5378 (0x1502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:55:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=CE9265089F3C3146F4C17F1770A66BA9CC123A76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:77:73:f0:ba:40:7b:b0:5c:9b:7e:39:d1: 9b:5a:1e:8e:35:6e:0a:f4:c7:4a:55:5e:fd:1c:92: 45:c6:54:be:25:28:cf:34:13:1b:f3:84:37:59:04: 24:63:e8:1e:f6:dc:e5:35:64:24:c9:f3:87:55:52: f6:d4:b6:4a:c8:68:09:95:6a:13:67:6d:62:94:17: 7f:33:dd:d0:be:e7:e0:a4:cc:c9:be:4e:c5:86:42: 42:f3:46:8f:c4:af:da:4a:c6:66:7b:34:d3:3d:82: 6f:44:66:05:f6:85:d7:32:b2:46:c1:11:b7:29:4d: ba:95:88:0e:f6:ac:ef:e5:2c:04:3d:f1:b3:9b:fc: 15:48:a2:4a:e7:c1:9d:ee:7f:21:72:29:14:88:41: 53:2d:d7:b3:a5:62:6d:85:8a:f3:f4:40:5e:72:6e: de:0d:24:a6:8a:19:d8:2d:db:d8:6b:c7:58:bf:b1: 19:92:6a:03:30:73:40:17:ca:68:ca:69:d7:c9:9b: cf:6e:ca:8b:11:32:78:c0:98:12:77:75:4a:bd:07: 6e:8c:2f:9a:39:05:13:5a:15:8b:33:25:33:1c:32: d0:a7:87:7d:68:8a:2f:88:78:a8:aa:92:53:d7:63: 10:29:85:b4:7b:d6:37:6b:c6:f9:fa:6d:fd:a0:8b: 6f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:92:65:08:9F:3C:31:46:F4:C1:7F:17:70:A6:6B:A9:CC:12:3A:76 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/zpJlCJ88MUb0wX8XcKZrqcwSOnY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.8.0.0/14 Signature Algorithm: sha256WithRSAEncryption 1a:3f:eb:63:7e:a6:3c:05:f8:bf:a9:4b:ac:47:b9:2e:e7:b4: 32:d7:e0:2f:46:70:90:f9:a5:e3:eb:dc:b3:7b:85:79:c0:38: 48:8f:e9:42:47:34:b2:71:0e:71:23:d8:89:54:83:aa:f6:09: 4c:36:7a:9a:c0:cd:42:c7:79:fc:1d:e6:55:b4:01:ab:40:d1: 10:c0:e6:9c:79:c0:30:9b:1c:ae:b9:63:e7:fc:bc:be:f7:b6: 43:3e:31:2f:d8:6b:66:c0:cb:2a:bb:05:77:4c:88:d8:a8:15: 2c:24:77:1f:82:56:9d:13:24:9e:e0:a0:05:27:c5:a2:f9:a4: 8d:44:f7:48:8f:39:da:7c:c9:b0:bd:8d:5d:e6:5a:31:d9:6b: a9:fd:ef:bb:11:25:b8:a5:93:07:50:7b:74:42:64:36:1c:48: 22:fe:07:5b:cb:b9:d9:0d:17:f8:ef:af:3d:e6:59:c6:1d:75: 64:d4:2d:f0:38:07:38:dd:8f:e2:04:25:9f:d0:0e:9f:9e:ed: 10:3a:11:49:83:8a:93:07:85:83:a6:0e:cd:8f:48:c0:ef:95: 34:ef:30:a8:97:3b:7c:7c:22:cf:b6:77:e3:29:e5:f4:c8:25: 57:57:d0:f2:b6:ab:68:59:46:39:9a:dc:1c:b0:c0:b3:01:af: 21:05:59:37 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICFQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU1MDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKENFOTI2NTA4OUYzQzMx NDZGNEMxN0YxNzcwQTY2QkE5Q0MxMjNBNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC4THdz8LpAe7Bcm3450ZtaHo41bgr0x0pVXv0ckkXGVL4lKM80 ExvzhDdZBCRj6B723OU1ZCTJ84dVUvbUtkrIaAmVahNnbWKUF38z3dC+5+CkzMm+ TsWGQkLzRo/Er9pKxmZ7NNM9gm9EZgX2hdcyskbBEbcpTbqViA72rO/lLAQ98bOb /BVIokrnwZ3ufyFyKRSIQVMt17OlYm2FivP0QF5ybt4NJKaKGdgt29hrx1i/sRmS agMwc0AXymjKadfJm89uyosRMnjAmBJ3dUq9B26ML5o5BRNaFYszJTMcMtCnh31o ii+IeKiqklPXYxAphbR71jdrxvn6bf2gi28hAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUzpJlCJ88MUb0wX8XcKZrqcwSOnYwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvenBKbENKODhNVWIwd1g4 WGNLWnJxY3dTT25ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD AnwIMA0GCSqGSIb3DQEBCwUAA4IBAQAaP+tjfqY8Bfi/qUusR7ku57Qy1+AvRnCQ +aXj69yze4V5wDhIj+lCRzSycQ5xI9iJVIOq9glMNnqawM1Cx3n8HeZVtAGrQNEQ wOacecAwmxyuuWPn/Ly+97ZDPjEv2GtmwMsquwV3TIjYqBUsJHcfgladEySe4KAF J8Wi+aSNRPdIjznafMmwvY1d5lox2Wup/e+7ESW4pZMHUHt0QmQ2HEgi/gdby7nZ DRf476895lnGHXVk1C3wOAc43Y/iBCWf0A6fnu0QOhFJg4qTB4WDpg7Nj0jA75U0 7zColzt8fCLPtnfjKeX0yCVXV9DytqtoWUY5mtwcsMCzAa8hBVk3 -----END CERTIFICATE-----Generated at Sun Aug 24 06:52:36 2025 by rpki-client