$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ns7_IPeQXQ8k3qGuAb3q6UclNHk.roa File: Ns7_IPeQXQ8k3qGuAb3q6UclNHk.roa (raw, json) Hash identifier: wFJrf+w1ZV+g+zZJX1niOtNrD7moo5sD4i3VQpHMcJY= Subject key identifier: 36:CE:FF:20:F7:90:5D:0F:24:DE:A1:AE:01:BD:EA:E9:47:25:34:79 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14DB Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ns7_IPeQXQ8k3qGuAb3q6UclNHk.roa Signing time: Fri 22 Aug 2025 08:54:51 +0000 ROA not before: Fri 22 Aug 2025 08:54:51 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 203.105.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5339 (0x14db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:51 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=36CEFF20F7905D0F24DEA1AE01BDEAE947253479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:89:0c:17:98:0b:6e:22:71:0a:cf:e2:7f: fd:00:23:65:3c:90:fa:76:75:48:6f:bc:9a:11:1b: 05:b7:2f:c8:66:f9:8b:e9:f6:18:9f:e5:12:e8:30: 07:27:fa:ae:96:52:cd:c7:29:85:dd:11:03:4a:a8: e2:59:7f:bb:11:32:9d:a3:32:13:06:40:28:40:bd: ce:09:4c:ab:e4:b6:9f:6b:59:4b:76:e4:42:d4:4d: 69:5c:83:e9:c2:93:5d:5a:a6:c5:b2:80:db:70:0f: 41:7d:5d:53:15:6f:d1:8e:43:a5:a8:ef:d4:80:6b: 80:dc:43:a9:3e:a2:e8:27:32:c9:bf:87:3f:d3:15: 7c:f3:ff:3a:62:6b:b6:40:2c:a6:a6:bc:89:70:a6: 50:52:34:fa:83:1b:85:00:e6:9f:bb:42:55:d2:1e: 8e:ef:1f:6d:04:c7:88:f6:7c:77:cd:6d:3d:0a:d1: 7e:83:8b:bf:cf:16:18:fd:12:45:f3:e2:ff:48:80: 46:b2:41:02:83:e3:e5:2a:11:ce:57:26:c6:1b:e1: c3:73:3a:8b:a8:04:f7:55:36:01:36:ad:f7:30:b6: 21:a1:e6:da:42:b3:9e:c8:ad:4c:00:b7:71:8c:09: 53:8b:20:79:c2:05:11:83:58:f2:47:5d:62:14:84: 02:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CE:FF:20:F7:90:5D:0F:24:DE:A1:AE:01:BD:EA:E9:47:25:34:79 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Ns7_IPeQXQ8k3qGuAb3q6UclNHk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.105.224.0/19 Signature Algorithm: sha256WithRSAEncryption 4b:af:65:3a:b6:fa:71:62:9d:c5:74:a8:f9:b7:11:4c:d2:fa: 53:54:9b:f4:9f:ca:da:ba:6f:45:50:e7:71:ef:d1:45:c6:b6: 0b:95:6b:70:19:70:7c:6c:ba:74:43:a0:ff:05:70:65:d9:9e: c9:a2:e5:c7:c5:83:72:0e:40:e7:b5:30:d8:96:64:ec:f3:1e: c9:b0:c3:28:8c:32:f2:3d:d0:5c:5e:b3:70:1c:8f:d2:ee:25: ed:e4:d1:25:7f:4c:7f:8e:ea:7a:f6:a2:9b:0b:85:e6:c1:ee: 57:41:fe:b9:19:c5:55:7e:51:bb:66:d0:2d:f7:ef:4b:46:83: aa:d5:29:49:83:88:e3:d3:2f:48:31:b1:85:9e:cb:2c:93:55: 60:16:81:cc:fe:ea:49:5e:fa:12:2e:a3:99:61:4b:57:72:7b: 4f:23:20:17:c6:de:5c:af:d7:06:85:d3:28:8c:c8:a8:e7:13: d0:31:3c:e4:29:a0:d7:2b:65:08:40:10:d6:ef:bb:e5:f3:20: 30:21:9b:79:1e:e7:d9:ec:d8:4e:fa:19:07:d4:f1:a1:26:0b: 11:bd:a4:16:fa:40:a0:dc:95:d5:c6:b0:66:49:0e:63:78:3f: 7b:ff:47:23:da:1e:87:01:b7:a4:46:ed:14:90:dd:24:56:00: eb:8a:20:7a -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFNswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM2Q0VGRjIwRjc5MDVE MEYyNERFQTFBRTAxQkRFQUU5NDcyNTM0NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCaqIkMF5gLbiJxCs/if/0AI2U8kPp2dUhvvJoRGwW3L8hm+Yvp 9hif5RLoMAcn+q6WUs3HKYXdEQNKqOJZf7sRMp2jMhMGQChAvc4JTKvktp9rWUt2 5ELUTWlcg+nCk11apsWygNtwD0F9XVMVb9GOQ6Wo79SAa4DcQ6k+ougnMsm/hz/T FXzz/zpia7ZALKamvIlwplBSNPqDG4UA5p+7QlXSHo7vH20Ex4j2fHfNbT0K0X6D i7/PFhj9EkXz4v9IgEayQQKD4+UqEc5XJsYb4cNzOouoBPdVNgE2rfcwtiGh5tpC s57IrUwAt3GMCVOLIHnCBRGDWPJHXWIUhAKlAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUNs7/IPeQXQ8k3qGuAb3q6UclNHkwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTnM3X0lQZVFYUThrM3FH dUFiM3E2VWNsTkhrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Bctp4DANBgkqhkiG9w0BAQsFAAOCAQEAS69lOrb6cWKdxXSo+bcRTNL6U1Sb9J/K 2rpvRVDnce/RRca2C5VrcBlwfGy6dEOg/wVwZdmeyaLlx8WDcg5A57Uw2JZk7PMe ybDDKIwy8j3QXF6zcByP0u4l7eTRJX9Mf47qevaimwuF5sHuV0H+uRnFVX5Ru2bQ LffvS0aDqtUpSYOI49MvSDGxhZ7LLJNVYBaBzP7qSV76Ei6jmWFLV3J7TyMgF8be XK/XBoXTKIzIqOcT0DE85Cmg1ytlCEAQ1u+75fMgMCGbeR7n2ezYTvoZB9TxoSYL Eb2kFvpAoNyV1cawZkkOY3g/e/9HI9oehwG3pEbtFJDdJFYA64ogeg== -----END CERTIFICATE-----Generated at Fri Oct 24 04:52:56 2025 by rpki-client