$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LBW4-eufEdcaolEL2k79Wd6COWc.roa File: LBW4-eufEdcaolEL2k79Wd6COWc.roa (raw, json) Hash identifier: qgdMXtsratW7J7XfZsWysQVsPhIsJ6Zv0AOwzqsaK50= Subject key identifier: 2C:15:B8:F9:EB:9F:11:D7:1A:A2:51:0B:DA:4E:FD:59:DE:82:39:67 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14E1 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LBW4-eufEdcaolEL2k79Wd6COWc.roa Signing time: Fri 22 Aug 2025 08:54:53 +0000 ROA not before: Fri 22 Aug 2025 08:54:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24158 IP address blocks: 203.105.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5345 (0x14e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2C15B8F9EB9F11D71AA2510BDA4EFD59DE823967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:81:0c:07:dc:36:dd:c3:63:a5:b7:69:35:af: 06:b4:11:08:c4:89:a0:7e:85:94:43:e5:75:39:f6: 95:bf:f2:b4:a4:13:61:f0:42:d7:9e:94:9f:8b:3a: 59:54:b7:fe:77:7d:87:31:ef:95:90:7a:c2:a6:7b: 62:e9:c2:b2:3e:13:a4:4b:17:4c:cf:c6:ef:d1:c5: 2d:40:84:88:7e:99:f4:27:90:7c:3f:ce:01:0a:13: 98:c8:b3:16:19:ff:31:a7:42:dd:b6:43:bb:49:58: 0f:13:6e:5e:d8:8f:ee:f0:3b:ec:5d:2c:fd:3c:11: 8a:a9:f1:69:35:55:dd:26:2b:2b:46:09:fd:59:81: 25:13:58:42:57:0e:8e:a6:c4:4e:d2:81:1c:8e:af: b4:b0:2c:1f:16:05:e1:33:bb:b1:4e:a2:af:b1:b1: 41:07:7c:1b:b9:a7:fd:ec:18:ba:b0:8a:7e:66:c9: c4:58:46:3b:b0:e2:08:89:a6:d3:e2:4f:2c:f8:34: 61:62:51:7b:b8:cc:47:ec:1d:a2:b8:3a:df:65:ea: cb:26:cc:1e:e6:eb:81:93:bf:31:b5:6d:95:ec:d9: 19:f6:e7:2a:07:b0:41:89:56:15:34:24:8b:96:60: 68:07:b7:a1:1f:d0:70:7c:fc:e2:da:bd:c0:cf:44: 0f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:15:B8:F9:EB:9F:11:D7:1A:A2:51:0B:DA:4E:FD:59:DE:82:39:67 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/LBW4-eufEdcaolEL2k79Wd6COWc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.105.239.0/24 Signature Algorithm: sha256WithRSAEncryption 02:84:2a:ae:0f:1e:38:da:73:93:91:2c:0b:3e:e3:d0:35:34: 2a:29:c5:31:ac:3e:8e:15:1f:02:00:f8:a8:54:6e:49:b7:3d: 6d:54:dd:c3:57:f9:b9:e7:dd:20:ed:7f:10:e4:69:c4:33:c5: eb:04:8d:9b:71:65:c8:9d:bf:45:03:fd:94:60:76:da:20:85: 16:d7:d3:8e:74:d9:b8:94:84:50:9c:cd:46:c0:96:bb:7c:9b: 86:b9:cd:30:f4:7e:a8:d1:1b:11:4b:ae:6f:e2:ed:7a:71:40: 1f:07:72:86:a4:ef:e5:c0:8f:34:90:89:bb:92:70:25:04:51: c0:f8:e4:a4:22:f6:26:e5:da:a0:1e:27:05:47:e8:1a:94:47: 31:9e:26:9e:3d:74:0e:51:26:37:78:d2:8f:6a:ee:54:07:c7: 05:a0:0e:1e:cb:52:20:1e:f6:1c:86:e0:2e:27:aa:6f:72:fb: 2f:23:ba:52:a1:7a:e2:83:e2:b0:46:0b:68:d4:f9:d0:8f:1a: ea:2a:d0:ce:fe:62:ab:43:36:1f:ce:1b:3e:c1:30:38:a1:06: e7:c0:b1:22:6c:8c:1a:81:63:b7:63:43:5d:1f:98:f2:a6:92: 8c:11:0f:5d:32:8b:9e:4c:20:30:04:1f:75:ce:7c:0c:a4:3a: 5e:8e:79:b4 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJDMTVCOEY5RUI5RjEx RDcxQUEyNTEwQkRBNEVGRDU5REU4MjM5NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDbgQwH3Dbdw2Olt2k1rwa0EQjEiaB+hZRD5XU59pW/8rSkE2Hw QteelJ+LOllUt/53fYcx75WQesKme2LpwrI+E6RLF0zPxu/RxS1AhIh+mfQnkHw/ zgEKE5jIsxYZ/zGnQt22Q7tJWA8Tbl7Yj+7wO+xdLP08EYqp8Wk1Vd0mKytGCf1Z gSUTWEJXDo6mxE7SgRyOr7SwLB8WBeEzu7FOoq+xsUEHfBu5p/3sGLqwin5mycRY Rjuw4giJptPiTyz4NGFiUXu4zEfsHaK4Ot9l6ssmzB7m64GTvzG1bZXs2Rn25yoH sEGJVhU0JIuWYGgHt6Ef0HB8/OLavcDPRA/bAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQULBW4+eufEdcaolEL2k79Wd6COWcwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTEJXNC1ldWZFZGNhb2xF TDJrNzlXZDZDT1djLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AMtp7zANBgkqhkiG9w0BAQsFAAOCAQEAAoQqrg8eONpzk5EsCz7j0DU0KinFMaw+ jhUfAgD4qFRuSbc9bVTdw1f5uefdIO1/EORpxDPF6wSNm3FlyJ2/RQP9lGB22iCF FtfTjnTZuJSEUJzNRsCWu3ybhrnNMPR+qNEbEUuub+LtenFAHwdyhqTv5cCPNJCJ u5JwJQRRwPjkpCL2JuXaoB4nBUfoGpRHMZ4mnj10DlEmN3jSj2ruVAfHBaAOHstS IB72HIbgLieqb3L7LyO6UqF64oPisEYLaNT50I8a6irQzv5iq0M2H84bPsEwOKEG 58CxImyMGoFjt2NDXR+Y8qaSjBEPXTKLnkwgMAQfdc58DKQ6Xo55tA== -----END CERTIFICATE-----Generated at Fri Oct 24 06:47:46 2025 by rpki-client