$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/O29a9KAdUgIzFt-feXVpONhteIw.roa File: O29a9KAdUgIzFt-feXVpONhteIw.roa (raw, json) Hash identifier: 2Li6vZ6rstMuuwx8DlLvBP+1bTygNQjnh1hnFrufxnE= Subject key identifier: 3B:6F:5A:F4:A0:1D:52:02:33:16:DF:9F:79:75:69:38:D8:6D:78:8C Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 147D Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/O29a9KAdUgIzFt-feXVpONhteIw.roa Signing time: Fri 22 Aug 2025 08:54:29 +0000 ROA not before: Fri 22 Aug 2025 08:54:29 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 203.77.0.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5245 (0x147d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:29 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=3B6F5AF4A01D52023316DF9F79756938D86D788C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:c0:d0:db:36:aa:41:16:45:f9:68:9b:bc: b7:ef:19:f5:28:11:bc:34:84:a4:7f:91:00:ba:76: aa:2e:fa:af:da:15:12:9a:ac:5e:51:d3:43:8e:ce: 19:ba:9c:98:1c:6e:06:de:ed:44:4e:17:c4:0b:33: 92:1e:c8:05:c3:d9:e7:2e:63:26:55:cc:1e:43:14: 6a:3b:01:2e:0b:f0:49:61:67:2c:ad:a8:b2:63:9f: fb:e4:11:ee:30:6c:ff:5a:77:34:7f:a1:64:74:88: 47:f6:81:b0:ee:08:46:e0:0a:32:11:e4:e4:66:58: 1f:8f:97:96:90:2e:e2:01:53:8d:14:cd:7e:9b:fa: 95:87:3f:a6:df:6a:1a:77:39:62:19:73:de:06:a0: f6:d7:a8:ab:4f:33:5d:41:4d:72:44:ba:ac:ec:0f: e7:a0:16:9c:b5:89:78:9b:b6:22:44:84:48:5b:9c: fc:57:90:00:1d:51:3e:d8:d8:36:bb:83:45:d2:5f: c6:2a:58:4f:c8:e0:3d:ec:3c:d5:b3:86:84:51:97: 24:f8:a1:37:42:2a:3a:f3:88:7e:85:83:77:2b:63: 60:68:af:cf:3c:91:7a:fb:f4:e5:c0:46:62:ca:1f: 4a:36:4a:01:40:d3:11:70:ce:85:36:27:34:a4:a0: be:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6F:5A:F4:A0:1D:52:02:33:16:DF:9F:79:75:69:38:D8:6D:78:8C X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/O29a9KAdUgIzFt-feXVpONhteIw.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.0.0/19 Signature Algorithm: sha256WithRSAEncryption 64:91:2d:7a:a1:3d:b6:c8:0e:04:ff:c9:ec:ed:dd:cb:c6:88: 15:f0:ea:07:28:e2:95:1b:95:1f:e8:ab:d2:be:66:67:a3:1d: a3:7f:46:cd:56:03:96:0d:2b:a6:b8:74:6b:1b:6c:e3:9d:0a: 39:ed:36:65:de:d6:2b:94:95:9b:6d:ff:0c:66:b6:d4:a6:bc: d9:97:04:51:ca:70:59:20:75:b8:ae:b3:31:fb:86:28:e2:c2: d7:d3:56:f6:1d:d1:1d:1f:6d:a9:1f:32:92:53:94:a8:b0:1a: 8f:e9:b6:be:f6:3e:24:6e:86:ce:46:13:4e:47:60:97:51:43: 3a:74:ac:f0:3c:0c:30:8d:71:6c:25:99:dd:c7:47:e1:bc:fc: 32:37:e1:b4:16:53:d5:79:8e:3b:63:08:49:d6:8b:04:7e:fb: 0d:83:2b:eb:fa:99:f8:a2:71:21:a2:08:38:72:60:5d:c2:da: 1d:76:8b:13:53:b6:16:e4:9a:7f:4b:d9:45:1e:e5:4f:82:b2: c5:16:cb:fe:74:c0:fe:41:9a:bb:43:be:90:a4:f2:ae:39:38: 6b:85:1d:e8:f1:08:4a:33:44:33:d5:39:44:0a:83:ba:5d:2c: 56:3e:2e:fb:1a:e1:c3:d3:ac:06:32:9d:f4:01:13:fc:12:b0: 43:7b:d7:83 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0MjlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNCNkY1QUY0QTAxRDUy MDIzMzE2REY5Rjc5NzU2OTM4RDg2RDc4OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCsxsDQ2zaqQRZF+WibvLfvGfUoEbw0hKR/kQC6dqou+q/aFRKa rF5R00OOzhm6nJgcbgbe7UROF8QLM5IeyAXD2ecuYyZVzB5DFGo7AS4L8ElhZyyt qLJjn/vkEe4wbP9adzR/oWR0iEf2gbDuCEbgCjIR5ORmWB+Pl5aQLuIBU40UzX6b +pWHP6bfahp3OWIZc94GoPbXqKtPM11BTXJEuqzsD+egFpy1iXibtiJEhEhbnPxX kAAdUT7Y2Da7g0XSX8YqWE/I4D3sPNWzhoRRlyT4oTdCKjrziH6Fg3crY2Bor888 kXr79OXARmLKH0o2SgFA0xFwzoU2JzSkoL5/AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUO29a9KAdUgIzFt+feXVpONhteIwwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvTzI5YTlLQWRVZ0l6RnQt ZmVYVnBPTmh0ZUl3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BctNADANBgkqhkiG9w0BAQsFAAOCAQEAZJEteqE9tsgOBP/J7O3dy8aIFfDqByji lRuVH+ir0r5mZ6Mdo39GzVYDlg0rprh0axts450KOe02Zd7WK5SVm23/DGa21Ka8 2ZcEUcpwWSB1uK6zMfuGKOLC19NW9h3RHR9tqR8yklOUqLAaj+m2vvY+JG6GzkYT Tkdgl1FDOnSs8DwMMI1xbCWZ3cdH4bz8MjfhtBZT1XmOO2MISdaLBH77DYMr6/qZ +KJxIaIIOHJgXcLaHXaLE1O2FuSaf0vZRR7lT4KyxRbL/nTA/kGau0O+kKTyrjk4 a4Ud6PEISjNEM9U5RAqDul0sVj4u+xrhw9OsBjKd9AET/BKwQ3vXgw== -----END CERTIFICATE-----Generated at Fri Oct 24 06:44:34 2025 by rpki-client