$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ClrJ4SxYtgln2-hfJUcqEX73MQE.roa File: ClrJ4SxYtgln2-hfJUcqEX73MQE.roa (raw, json) Hash identifier: QbQek3I4/h1iwKcPBvwgMgzibFyXpDORmJNXceaq/kY= Subject key identifier: 0A:5A:C9:E1:2C:58:B6:09:67:DB:E8:5F:25:47:2A:11:7E:F7:31:01 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1503 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ClrJ4SxYtgln2-hfJUcqEX73MQE.roa Signing time: Fri 22 Aug 2025 08:55:02 +0000 ROA not before: Fri 22 Aug 2025 08:55:02 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 60.199.224.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5379 (0x1503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:55:02 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=0A5AC9E12C58B60967DBE85F25472A117EF73101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:0d:39:14:45:ec:cb:b2:bd:22:68:a1:df: 4a:05:53:26:79:5b:81:cb:57:54:2a:f5:80:53:b2: f3:51:d4:63:de:92:72:30:e7:bd:d9:15:72:f5:46: 0b:d4:d4:cd:2d:27:04:0f:79:82:f2:02:42:5a:2b: bb:15:d4:1e:dc:47:39:44:f9:c7:3a:49:4e:2f:a5: 23:4f:3f:41:6b:29:96:a9:b3:37:35:48:6c:52:d8: ea:36:28:39:62:dd:b3:c6:ba:71:8e:d4:db:be:3e: 03:3c:01:00:88:83:7f:fe:13:4c:87:fc:ec:23:b7: 22:13:19:52:a8:ce:84:b3:9b:21:fb:ec:ee:33:e7: 6c:52:8b:66:90:57:12:a5:b3:11:2a:6c:77:79:0f: 66:57:ab:be:d0:79:77:55:1d:aa:e1:8a:46:b9:71: 5d:18:7c:c6:e6:a1:a0:6d:e6:eb:c4:56:62:df:10: 0f:82:2f:75:d3:97:75:e6:93:f8:4a:11:13:e5:76: 46:7c:4e:e7:07:22:7b:77:ff:90:90:06:36:4a:9a: f6:16:fb:0f:64:5d:5b:af:e3:0c:20:35:c6:7d:af: 24:a2:73:d8:9e:ec:75:a8:0a:73:d9:b4:81:ff:81: 03:74:c0:e4:54:3b:cd:c6:19:d1:9e:5e:3f:58:54: 3d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:5A:C9:E1:2C:58:B6:09:67:DB:E8:5F:25:47:2A:11:7E:F7:31:01 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ClrJ4SxYtgln2-hfJUcqEX73MQE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.199.224.0/24 Signature Algorithm: sha256WithRSAEncryption 09:52:46:b7:79:26:4b:3b:65:34:d1:08:f5:d7:22:5b:fe:bb: 9b:bf:e9:45:a6:44:25:fd:90:7f:29:91:d1:ce:f1:be:2d:fc: 0b:02:42:8c:c2:39:70:1c:e1:20:50:08:d1:36:44:20:79:cd: 67:13:50:c8:44:47:ab:3e:c5:3e:36:d4:f8:be:22:be:a9:3a: 34:69:61:43:4d:25:38:9a:0e:98:e4:75:18:75:09:65:d3:2c: 26:b0:72:09:77:6e:47:5d:a2:fe:39:11:d3:f1:c2:f2:d6:24: 71:9a:42:4e:97:92:b4:04:60:04:e6:2c:65:6b:5e:82:d4:cf: 68:b8:23:84:4c:86:6c:43:85:f5:ab:39:b0:23:ec:82:32:d4: 9f:10:27:2c:f4:c0:17:e0:be:a5:9e:87:33:9a:a1:b7:5f:00: a5:9c:b9:a7:06:f8:71:1b:45:d5:59:4a:9f:7d:e6:d7:1c:bf: 4e:fc:0c:fc:e9:ce:8e:91:ff:40:6b:0c:11:5a:c7:44:69:3f: 77:79:71:af:47:6d:b9:5f:0e:53:86:0c:f3:b2:ac:f3:5b:70: 76:8d:37:6b:32:45:16:88:a5:53:53:dc:da:ea:c7:74:1f:0f: 7d:47:c7:f6:73:7d:d0:82:db:a6:d8:f1:50:6e:2c:a8:e9:cf: 3d:4b:fe:ac -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU1MDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDBBNUFDOUUxMkM1OEI2 MDk2N0RCRTg1RjI1NDcyQTExN0VGNzMxMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCzQQ05FEXsy7K9Imih30oFUyZ5W4HLV1Qq9YBTsvNR1GPeknIw 573ZFXL1RgvU1M0tJwQPeYLyAkJaK7sV1B7cRzlE+cc6SU4vpSNPP0FrKZapszc1 SGxS2Oo2KDli3bPGunGO1Nu+PgM8AQCIg3/+E0yH/OwjtyITGVKozoSzmyH77O4z 52xSi2aQVxKlsxEqbHd5D2ZXq77QeXdVHarhika5cV0YfMbmoaBt5uvEVmLfEA+C L3XTl3Xmk/hKERPldkZ8TucHInt3/5CQBjZKmvYW+w9kXVuv4wwgNcZ9rySic9ie 7HWoCnPZtIH/gQN0wORUO83GGdGeXj9YVD2RAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUClrJ4SxYtgln2+hfJUcqEX73MQEwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvQ2xySjRTeFl0Z2xuMi1o ZkpVY3FFWDczTVFFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ADzH4DANBgkqhkiG9w0BAQsFAAOCAQEACVJGt3kmSztlNNEI9dciW/67m7/pRaZE Jf2QfymR0c7xvi38CwJCjMI5cBzhIFAI0TZEIHnNZxNQyERHqz7FPjbU+L4ivqk6 NGlhQ00lOJoOmOR1GHUJZdMsJrByCXduR12i/jkR0/HC8tYkcZpCTpeStARgBOYs ZWtegtTPaLgjhEyGbEOF9as5sCPsgjLUnxAnLPTAF+C+pZ6HM5qht18ApZy5pwb4 cRtF1VlKn33m1xy/TvwM/OnOjpH/QGsMEVrHRGk/d3lxr0dtuV8OU4YM87Ks81tw do03azJFFoilU1Pc2urHdB8PfUfH9nN90ILbptjxUG4sqOnPPUv+rA== -----END CERTIFICATE-----Generated at Fri Oct 24 04:51:05 2025 by rpki-client