$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RCjj5nKIPddPiEtTI0bxgloajfk.roa File: RCjj5nKIPddPiEtTI0bxgloajfk.roa (raw, json) Hash identifier: dx0vtsDxKIpT15LGvSCxKngddte81vFOG7VeciYZPZ8= Subject key identifier: 44:28:E3:E6:72:88:3D:D7:4F:88:4B:53:23:46:F1:82:5A:1A:8D:F9 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 151C Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RCjj5nKIPddPiEtTI0bxgloajfk.roa Signing time: Wed 03 Sep 2025 07:38:53 +0000 ROA not before: Wed 03 Sep 2025 07:38:53 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 131628 IP address blocks: 175.97.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Sep 2025 06:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5404 (0x151c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 3 07:38:53 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4428E3E672883DD74F884B532346F1825A1A8DF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:bd:55:4d:fe:04:13:d6:3f:ff:05:a4:9d: 9e:04:87:d5:b1:e7:62:ee:de:3d:8c:89:c7:cd:57: 1a:d1:04:f0:a9:a1:d9:b8:d7:07:3a:6f:16:18:56: cf:b1:bc:23:b9:2d:97:40:31:d7:e3:a5:80:06:ab: 47:3f:68:72:d9:90:c8:bd:d9:c4:91:64:ce:a0:70: d4:ad:d1:aa:2d:d8:3b:dd:e2:d3:13:2c:48:14:b2: ba:84:70:10:b3:d4:f9:0c:34:1e:40:5c:2e:e9:b3: 72:9f:1e:ee:f8:65:6b:6b:16:f8:d4:ed:3b:76:3e: 3a:af:bd:9d:aa:90:2c:8e:01:ee:ae:bf:52:d7:40: d3:3d:11:88:3f:4d:6f:00:26:35:0d:96:2a:a7:62: 99:6b:13:d0:6d:da:3a:99:8d:db:4a:a6:49:72:a2: 1f:a9:2a:33:e5:e6:c5:6c:0b:0b:c3:ad:82:bb:a0: cd:4e:25:8d:82:64:b1:d7:48:76:2a:02:02:d1:04: 5d:83:2b:be:97:55:1b:d7:e3:ca:b1:e6:c1:9d:98: 0d:83:b2:8b:ea:25:18:e5:79:ca:29:3c:41:13:f6: c2:80:d9:9c:2d:e4:69:8e:d4:da:17:08:55:24:94: 76:d3:b5:85:46:1a:3c:9b:3d:ea:b6:6f:61:2e:d5: 29:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:28:E3:E6:72:88:3D:D7:4F:88:4B:53:23:46:F1:82:5A:1A:8D:F9 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/RCjj5nKIPddPiEtTI0bxgloajfk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 175.97.208.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:c6:53:71:93:68:a4:c2:89:ce:ef:ad:24:cb:bf:a6:4e:b9: a7:d9:36:97:eb:9c:52:5a:07:77:51:5a:e8:80:08:1d:bb:3d: 99:7e:89:27:eb:98:dc:4a:63:16:9e:e8:04:ab:0a:39:7b:06: 35:3b:76:91:ef:3e:4a:75:15:79:e1:3d:a3:e0:92:b7:e7:40: 0b:1d:ba:4b:e3:71:8e:66:84:45:51:41:15:ea:64:7c:45:94: 2b:f8:c2:da:9c:c5:25:27:cc:21:4a:d8:86:6a:1c:4e:ad:82: 8c:27:72:e5:a5:39:d0:d1:b2:e9:55:71:ad:7b:2b:4c:d5:58: 8d:19:31:52:4e:17:16:94:1e:4f:a5:63:40:a3:a0:20:c9:62: 65:9d:f0:63:51:51:83:3f:fe:e2:1b:29:30:4b:59:03:58:66: 91:50:fc:48:d8:07:a4:1d:ef:05:0f:07:06:78:82:5f:58:c2: 4e:af:44:61:3c:6f:5d:11:d9:10:87:39:e9:93:31:75:a7:0e: c1:ea:87:7c:f8:e4:17:46:4b:92:bf:db:91:ae:71:a9:54:33: 47:43:28:66:4c:1b:35:c4:63:a7:c9:83:c3:50:42:09:34:42: e3:3d:40:6a:4e:56:2f:86:25:cb:2b:b5:61:fb:83:b7:87:33: 64:1d:60:04 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFRwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA5MDMw NzM4NTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ0MjhFM0U2NzI4ODNE RDc0Rjg4NEI1MzIzNDZGMTgyNUExQThERjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC2Kr1VTf4EE9Y//wWknZ4Eh9Wx52Lu3j2MicfNVxrRBPCpodm4 1wc6bxYYVs+xvCO5LZdAMdfjpYAGq0c/aHLZkMi92cSRZM6gcNSt0aot2Dvd4tMT LEgUsrqEcBCz1PkMNB5AXC7ps3KfHu74ZWtrFvjU7Tt2PjqvvZ2qkCyOAe6uv1LX QNM9EYg/TW8AJjUNliqnYplrE9Bt2jqZjdtKpklyoh+pKjPl5sVsCwvDrYK7oM1O JY2CZLHXSHYqAgLRBF2DK76XVRvX48qx5sGdmA2DsovqJRjlecopPEET9sKA2Zwt 5GmO1NoXCFUklHbTtYVGGjybPeq2b2Eu1SmhAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQURCjj5nKIPddPiEtTI0bxgloajfkwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvUkNqajVuS0lQZGRQaUV0 VEkwYnhnbG9hamZrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Aq9h0DANBgkqhkiG9w0BAQsFAAOCAQEAe8ZTcZNopMKJzu+tJMu/pk65p9k2l+uc UloHd1Fa6IAIHbs9mX6JJ+uY3EpjFp7oBKsKOXsGNTt2ke8+SnUVeeE9o+CSt+dA Cx26S+NxjmaERVFBFepkfEWUK/jC2pzFJSfMIUrYhmocTq2CjCdy5aU50NGy6VVx rXsrTNVYjRkxUk4XFpQeT6VjQKOgIMliZZ3wY1FRgz/+4hspMEtZA1hmkVD8SNgH pB3vBQ8HBniCX1jCTq9EYTxvXRHZEIc56ZMxdacOweqHfPjkF0ZLkr/bka5xqVQz R0MoZkwbNcRjp8mDw1BCCTRC4z1Aak5WL4Ylyyu1YfuDt4czZB1gBA== -----END CERTIFICATE-----Generated at Fri Sep 5 03:28:13 2025 by rpki-client