$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RAzF2Tx4uxqtSWLpougIjQz4ZPs.roa File: RAzF2Tx4uxqtSWLpougIjQz4ZPs.roa (raw, json) Hash identifier: INCX26Rvb+2dp4f8Z/rGrQHdp7RffdqSoNYbff2y4qQ= Subject key identifier: 44:0C:C5:D9:3C:78:BB:1A:AD:49:62:E9:A2:E8:08:8D:0C:F8:64:FB Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1474 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RAzF2Tx4uxqtSWLpougIjQz4ZPs.roa Signing time: Fri 22 Aug 2025 08:54:27 +0000 ROA not before: Fri 22 Aug 2025 08:54:27 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 203.77.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5236 (0x1474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:27 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=440CC5D93C78BB1AAD4962E9A2E8088D0CF864FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8b:0f:52:1f:11:f1:1e:a7:ce:c6:ff:a5:2a: 1a:71:74:f2:9e:d3:52:44:b1:fa:8d:6c:53:40:3d: e1:1a:db:c5:bd:65:b2:0d:96:67:ce:7f:76:7f:db: 19:43:9e:7a:8e:c5:38:f1:86:6d:d6:6d:8e:4c:fd: 1c:e4:c9:ef:ac:d0:8b:d9:96:4c:a8:fb:74:7a:47: 18:25:fc:2c:a4:c2:aa:32:68:23:04:92:b2:2b:ab: 41:85:30:65:9b:39:cb:e7:1d:cc:97:ce:2d:9e:18: 94:49:c6:67:cd:9a:c4:50:d3:37:68:9d:a2:23:e4: bb:6c:01:9c:6d:f8:68:34:0a:36:a3:11:60:5f:07: ca:5e:af:6e:f1:5a:72:34:23:dd:5e:83:b6:d8:37: e3:8e:4f:c9:e0:3b:1a:38:14:7e:d2:69:1d:63:d7: da:0d:c7:ec:5f:8b:39:9a:67:df:98:40:fd:1d:08: b2:90:7c:95:8b:21:d7:24:16:f7:2f:94:e0:00:fa: 26:e2:35:46:49:7b:1f:d1:63:bc:e7:d3:a7:01:cb: ad:db:db:de:b4:cc:28:3f:70:65:e6:e0:4e:ef:d0: 63:31:13:d9:13:62:41:b1:5f:05:f8:c5:cd:b8:3a: be:92:90:af:b6:8d:15:4f:0a:59:6c:30:aa:92:c6: 16:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0C:C5:D9:3C:78:BB:1A:AD:49:62:E9:A2:E8:08:8D:0C:F8:64:FB X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RAzF2Tx4uxqtSWLpougIjQz4ZPs.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.64.0/20 Signature Algorithm: sha256WithRSAEncryption 04:6e:a4:cb:a6:6e:19:06:18:b1:9a:62:f3:2f:97:b1:3d:09: 46:2d:3f:6a:53:4c:10:f4:31:6f:51:87:b9:2c:c9:8b:5a:d2: c4:ce:4e:29:63:3a:ce:1c:1e:77:b3:c1:1d:10:4c:79:29:88: b2:ab:50:ca:8d:4c:30:c2:75:05:33:88:78:29:b4:c7:cf:b2: 8e:6c:4a:df:3f:e1:60:3d:30:ce:62:29:a3:8e:1f:27:52:c6: 21:8c:13:67:77:00:f0:81:91:ea:c6:7c:d2:12:35:a2:2a:b7: 7a:c7:f0:41:9f:01:58:a5:0e:cb:60:a0:8d:c8:e4:7b:26:5e: 7b:3c:ba:c7:5f:f5:bb:5e:23:6b:b4:41:70:d2:9e:e4:c6:48: 58:9a:24:26:39:b5:ea:db:b0:61:e4:f9:8b:79:4a:11:81:b6: 08:66:9d:35:e5:53:5d:bc:a6:79:25:6b:be:72:da:2f:6f:5f: 67:f8:49:e5:10:9a:74:28:44:92:f8:ad:91:e9:d3:c4:28:79: 0e:fe:7a:d9:0b:d0:36:ae:91:cd:f5:7d:1a:31:9d:59:fa:40: e1:e7:2b:cc:b2:b9:d1:ad:93:fb:52:d6:8e:4f:ee:55:06:dc: 97:d7:79:19:ac:bc:82:b4:15:78:6c:6e:b2:6b:d6:24:25:50: 53:51:19:ae -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFHQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0MjdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ0MENDNUQ5M0M3OEJC MUFBRDQ5NjJFOUEyRTgwODhEMENGODY0RkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCviw9SHxHxHqfOxv+lKhpxdPKe01JEsfqNbFNAPeEa28W9ZbIN lmfOf3Z/2xlDnnqOxTjxhm3WbY5M/Rzkye+s0IvZlkyo+3R6Rxgl/CykwqoyaCME krIrq0GFMGWbOcvnHcyXzi2eGJRJxmfNmsRQ0zdonaIj5LtsAZxt+Gg0CjajEWBf B8per27xWnI0I91eg7bYN+OOT8ngOxo4FH7SaR1j19oNx+xfizmaZ9+YQP0dCLKQ fJWLIdckFvcvlOAA+ibiNUZJex/RY7zn06cBy63b2960zCg/cGXm4E7v0GMxE9kT YkGxXwX4xc24Or6SkK+2jRVPCllsMKqSxhazAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQURAzF2Tx4uxqtSWLpougIjQz4ZPswHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUkF6RjJUeDR1eHF0U1dM cG91Z0lqUXo0WlBzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BMtNQDANBgkqhkiG9w0BAQsFAAOCAQEABG6ky6ZuGQYYsZpi8y+XsT0JRi0/alNM EPQxb1GHuSzJi1rSxM5OKWM6zhwed7PBHRBMeSmIsqtQyo1MMMJ1BTOIeCm0x8+y jmxK3z/hYD0wzmIpo44fJ1LGIYwTZ3cA8IGR6sZ80hI1oiq3esfwQZ8BWKUOy2Cg jcjkeyZeezy6x1/1u14ja7RBcNKe5MZIWJokJjm16tuwYeT5i3lKEYG2CGadNeVT XbymeSVrvnLaL29fZ/hJ5RCadChEkvitkenTxCh5Dv562QvQNq6RzfV9GjGdWfpA 4ecrzLK50a2T+1LWjk/uVQbcl9d5Gay8grQVeGxusmvWJCVQU1EZrg== -----END CERTIFICATE-----Generated at Fri Oct 24 06:45:43 2025 by rpki-client