$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SajHwnuGp2Tz1Jt_RJBdTsV42Ag.roa File: SajHwnuGp2Tz1Jt_RJBdTsV42Ag.roa (raw, json) Hash identifier: fNi7k2DT5DrVPdHfUeXbEK1ifz4jkFOVyaHDCqVbCdw= Subject key identifier: 49:A8:C7:C2:7B:86:A7:64:F3:D4:9B:7F:44:90:5D:4E:C5:78:D8:08 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14BB Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SajHwnuGp2Tz1Jt_RJBdTsV42Ag.roa Signing time: Fri 22 Aug 2025 08:54:44 +0000 ROA not before: Fri 22 Aug 2025 08:54:44 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 4662 IP address blocks: 210.62.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5307 (0x14bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:44 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=49A8C7C27B86A764F3D49B7F44905D4EC578D808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8c:3f:93:65:a0:e0:9c:e0:8f:8f:28:60:c5: 1e:57:4e:43:64:69:4d:63:3c:ea:27:8e:f6:aa:2a: 4e:05:d2:14:67:02:f4:5a:8f:26:10:6b:41:64:4a: ec:af:c2:91:5e:be:e0:a9:e4:7c:82:86:41:f2:af: 3a:3b:fa:89:d9:4b:9a:86:86:ce:b2:af:fc:a1:a9: 8c:5d:10:af:b1:0c:4e:9e:9b:6a:16:18:7e:51:12: d4:5b:dc:2a:fa:1d:84:e9:dd:0a:07:08:35:7c:af: 58:73:a4:e6:5b:2b:95:e4:6e:c0:10:ec:52:d3:ee: ec:cd:78:e7:0c:01:8b:3c:30:0c:84:0f:99:6c:24: fe:4a:83:26:5a:12:60:fb:a6:24:2d:e3:a5:90:d1: d8:85:a7:4b:29:e5:4c:5f:f0:0f:ba:a3:b5:23:3a: f1:61:2f:f6:9a:9b:1f:ac:6f:5b:e2:c7:6a:c8:2c: 29:e2:8c:46:2b:63:b2:66:30:66:51:03:de:a5:1c: b7:f0:8c:88:9d:99:f1:25:e4:ee:7b:54:e1:78:05: e8:1d:21:1c:19:9f:89:cc:0c:68:57:20:87:14:db: 19:52:83:ea:61:db:ab:d1:1e:c7:8a:3b:fa:7b:41: ee:47:75:da:c2:04:c1:1e:5e:dd:30:e3:83:82:99: ab:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A8:C7:C2:7B:86:A7:64:F3:D4:9B:7F:44:90:5D:4E:C5:78:D8:08 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/SajHwnuGp2Tz1Jt_RJBdTsV42Ag.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.62.192.0/19 Signature Algorithm: sha256WithRSAEncryption 81:75:2a:e5:01:23:c3:90:72:35:f4:81:da:1c:5f:8a:dc:d5: cb:7c:74:ca:b7:19:0e:15:08:54:94:c3:cc:03:99:b8:0c:8d: c4:b3:11:fd:08:df:fd:72:e9:d5:c1:2c:39:61:d3:46:43:14: 22:c6:33:91:c5:45:b8:6b:f8:05:bf:22:94:5e:4d:4d:29:e0: b1:c6:db:04:ec:97:50:e3:48:b0:cf:01:1f:d6:d9:a4:33:89: b3:f6:d5:69:b3:fc:0b:44:17:96:33:74:1f:54:e9:91:cd:21: f2:2d:c5:0b:e5:d1:98:73:3b:6d:8f:eb:dd:bd:35:4d:a8:90: 79:81:08:b9:ce:08:f1:2c:6d:be:e2:95:f9:9f:62:4e:b7:2d: 23:64:3b:d1:0a:c1:98:f8:9a:e0:8b:7d:1f:d4:3a:f6:62:bc: 1c:e4:23:a7:04:a9:65:37:9a:20:e2:37:31:16:42:ab:ec:f0: 60:88:93:46:0f:e9:2d:1f:6b:09:e6:9e:ec:3b:8e:59:ba:a0: f3:b7:07:f6:ad:33:ed:a5:d7:d2:f7:da:df:cc:7b:16:54:b2: 23:06:e3:04:c7:51:6b:b4:00:93:73:c6:ce:28:03:93:90:b3: de:7f:15:09:8b:a2:8b:6b:32:af:a8:e6:dc:42:c0:3a:10:7b: a3:13:59:72 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFLswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NDRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ5QThDN0MyN0I4NkE3 NjRGM0Q0OUI3RjQ0OTA1RDRFQzU3OEQ4MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpjD+TZaDgnOCPjyhgxR5XTkNkaU1jPOonjvaqKk4F0hRnAvRa jyYQa0FkSuyvwpFevuCp5HyChkHyrzo7+onZS5qGhs6yr/yhqYxdEK+xDE6em2oW GH5REtRb3Cr6HYTp3QoHCDV8r1hzpOZbK5XkbsAQ7FLT7uzNeOcMAYs8MAyED5ls JP5KgyZaEmD7piQt46WQ0diFp0sp5Uxf8A+6o7UjOvFhL/aamx+sb1vix2rILCni jEYrY7JmMGZRA96lHLfwjIidmfEl5O57VOF4BegdIRwZn4nMDGhXIIcU2xlSg+ph 26vRHseKO/p7Qe5HddrCBMEeXt0w44OCmatfAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUSajHwnuGp2Tz1Jt/RJBdTsV42AgwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvU2FqSHdudUdwMlR6MUp0 X1JKQmRUc1Y0MkFnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BdI+wDANBgkqhkiG9w0BAQsFAAOCAQEAgXUq5QEjw5ByNfSB2hxfitzVy3x0yrcZ DhUIVJTDzAOZuAyNxLMR/Qjf/XLp1cEsOWHTRkMUIsYzkcVFuGv4Bb8ilF5NTSng scbbBOyXUONIsM8BH9bZpDOJs/bVabP8C0QXljN0H1Tpkc0h8i3FC+XRmHM7bY/r 3b01TaiQeYEIuc4I8SxtvuKV+Z9iTrctI2Q70QrBmPia4It9H9Q69mK8HOQjpwSp ZTeaIOI3MRZCq+zwYIiTRg/pLR9rCeae7DuOWbqg87cH9q0z7aXX0vfa38x7FlSy IwbjBMdRa7QAk3PGzigDk5Cz3n8VCYuii2syr6jm3ELAOhB7oxNZcg== -----END CERTIFICATE-----Generated at Fri Oct 24 06:45:45 2025 by rpki-client