$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KwSiJfTwQWwwX_PlOix6wRFnMPw.roa File: KwSiJfTwQWwwX_PlOix6wRFnMPw.roa (raw, json) Hash identifier: aZH/Nh/HUmaeUi46y29G3874aIDW+EKWugXCamZrJ+w= Subject key identifier: 2B:04:A2:25:F4:F0:41:6C:30:5F:F3:E5:3A:2C:7A:C1:11:67:30:FC Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14E0 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KwSiJfTwQWwwX_PlOix6wRFnMPw.roa Signing time: Fri 22 Aug 2025 08:54:53 +0000 ROA not before: Fri 22 Aug 2025 08:54:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24158 IP address blocks: 2001:4546:1000:8f00::/56 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5344 (0x14e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2B04A225F4F0416C305FF3E53A2C7AC1116730FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4e:b1:32:f2:ef:20:1b:ae:4c:8c:0e:5d:26: 28:41:34:11:7d:d3:3a:b1:33:64:52:8c:05:5b:a8: 00:b5:84:79:f8:21:66:f8:24:be:64:a2:1e:4f:52: 8d:4b:f2:9a:8f:1d:7b:3a:1b:d3:fb:a4:26:7a:d7: a7:4c:2d:ec:44:e5:a5:bb:b2:22:62:3e:24:42:4c: c8:dc:28:49:28:9e:c2:1a:45:04:bb:ee:e7:32:87: 94:84:42:30:e3:2a:84:32:dc:8b:ff:ec:4d:72:2c: 1f:fc:a0:76:46:1d:af:71:4e:c8:57:ad:a4:08:f5: ca:1f:ea:5e:9e:55:0b:b1:d1:7b:c0:02:51:98:9d: d1:f5:b0:4f:09:cd:bb:61:23:a6:44:0d:64:f4:e1: ad:32:53:35:97:95:63:26:64:d1:18:0a:20:22:ba: 9e:eb:69:00:db:03:cb:79:d0:4a:33:d3:78:a8:11: 87:62:bd:70:ac:dc:63:86:b4:16:2c:1d:16:f7:ea: 71:d8:2a:89:80:00:f9:da:ff:08:de:50:82:bf:0e: f2:25:88:be:d0:14:75:b5:04:fd:b9:d5:b4:17:da: f5:c0:54:4d:8e:88:1c:48:5d:ed:69:25:1c:73:ea: 6d:5f:f2:34:59:d8:c8:c9:23:40:98:f0:4d:69:7b: 6e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:04:A2:25:F4:F0:41:6C:30:5F:F3:E5:3A:2C:7A:C1:11:67:30:FC X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/KwSiJfTwQWwwX_PlOix6wRFnMPw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:4546:1000:8f00::/56 Signature Algorithm: sha256WithRSAEncryption 13:bb:1e:19:3a:0a:4a:d4:65:08:1b:49:1e:64:8d:24:b5:fc: c9:ef:80:5f:b6:42:8e:4a:fb:27:fc:47:bf:f6:17:2e:0f:5b: 6c:da:68:45:47:af:7c:5a:ab:a2:c4:ca:f2:ce:bf:40:75:ea: fa:9e:45:e8:ab:9b:ec:9b:34:ae:26:ff:91:7f:43:da:ce:e9: 78:d9:90:dd:96:2e:ef:74:e6:ad:5f:39:13:a4:f6:79:bc:76: 30:4a:93:82:77:46:16:cd:67:48:a3:e3:c1:9c:09:da:be:02: 7f:b9:34:09:5a:1f:11:c6:b7:d1:24:a8:26:8d:77:ed:f4:e2: be:0b:d5:1e:cc:47:f0:1f:35:6a:4a:dc:21:05:f7:6b:ba:77: 73:c7:6b:51:e2:1e:81:e8:85:e6:b8:8f:b3:40:1e:a5:cc:6f: 10:62:56:1c:59:18:ca:56:ea:47:95:73:11:99:3c:8a:5d:68: 0c:46:9f:10:76:23:47:0c:80:50:dd:e4:d4:e6:a2:76:15:ab: 61:f8:aa:6a:61:a8:46:ed:09:41:3e:95:cc:26:e3:02:d4:9b: 7c:a0:cb:3e:ab:93:fc:85:f1:d8:a1:5d:91:ec:11:f2:0d:8a: 91:13:33:0e:3a:f5:67:62:d2:1c:2f:c1:26:2b:1e:ec:1e:30: 21:41:e3:11 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICFOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJCMDRBMjI1RjRGMDQx NkMzMDVGRjNFNTNBMkM3QUMxMTE2NzMwRkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJTrEy8u8gG65MjA5dJihBNBF90zqxM2RSjAVbqAC1hHn4IWb4 JL5koh5PUo1L8pqPHXs6G9P7pCZ616dMLexE5aW7siJiPiRCTMjcKEkonsIaRQS7 7ucyh5SEQjDjKoQy3Iv/7E1yLB/8oHZGHa9xTshXraQI9cof6l6eVQux0XvAAlGY ndH1sE8JzbthI6ZEDWT04a0yUzWXlWMmZNEYCiAiup7raQDbA8t50Eoz03ioEYdi vXCs3GOGtBYsHRb36nHYKomAAPna/wjeUIK/DvIliL7QFHW1BP251bQX2vXAVE2O iBxIXe1pJRxz6m1f8jRZ2MjJI0CY8E1pe25pAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUKwSiJfTwQWwwX/PlOix6wRFnMPwwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvS3dTaUpmVHdRV3d3WF9Q bE9peDZ3UkZuTVB3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAjBggrBgEFBQcBBwEB/wQUMBIwEAQCAAIwCgMI ACABRUYQAI8wDQYJKoZIhvcNAQELBQADggEBABO7Hhk6CkrUZQgbSR5kjSS1/Mnv gF+2Qo5K+yf8R7/2Fy4PW2zaaEVHr3xaq6LEyvLOv0B16vqeReirm+ybNK4m/5F/ Q9rO6XjZkN2WLu905q1fOROk9nm8djBKk4J3RhbNZ0ij48GcCdq+An+5NAlaHxHG t9EkqCaNd+304r4L1R7MR/AfNWpK3CEF92u6d3PHa1HiHoHohea4j7NAHqXMbxBi VhxZGMpW6keVcxGZPIpdaAxGnxB2I0cMgFDd5NTmonYVq2H4qmphqEbtCUE+lcwm 4wLUm3ygyz6rk/yF8dihXZHsEfINipETMw469Wdi0hwvwSYrHuweMCFB4xE= -----END CERTIFICATE-----Generated at Fri Oct 24 06:44:34 2025 by rpki-client