$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Sj-haHuwpFwJwDiOOGHGsWcOzRM.roa File: Sj-haHuwpFwJwDiOOGHGsWcOzRM.roa (raw, json) Hash identifier: zNinVoqYIlxxxEyEdn2KPteOJZNdLT5MOY/RmB+yfVg= Subject key identifier: 4A:3F:A1:68:7B:B0:A4:5C:09:C0:38:8E:38:61:C6:B1:67:0E:CD:13 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14F0 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Sj-haHuwpFwJwDiOOGHGsWcOzRM.roa Signing time: Fri 22 Aug 2025 08:54:57 +0000 ROA not before: Fri 22 Aug 2025 08:54:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 60.199.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5360 (0x14f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=4A3FA1687BB0A45C09C0388E3861C6B1670ECD13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:da:15:fa:c0:03:81:02:88:bf:90:c6:cc:e9: aa:a9:c5:c8:04:1f:f8:a7:83:a5:22:8f:6e:f4:78: 55:58:55:0e:f9:63:ca:10:69:ba:16:b1:8c:fe:7e: 3b:6f:7f:be:46:8a:12:11:c9:03:b6:c5:37:23:80: 19:3d:08:1f:37:48:50:f2:d7:0d:93:8e:61:a1:69: 1f:6b:44:f9:22:1d:76:d1:77:f1:0e:43:ca:02:97: 9b:53:a4:33:d8:75:5d:d9:13:fe:f0:4e:7d:56:6d: c1:e7:20:8f:76:6d:5e:e8:b4:fe:97:65:8f:38:c4: a8:ac:b0:d4:68:5d:95:78:09:9c:78:28:6e:9d:fa: cb:95:b8:1f:3b:2a:f9:19:d6:3d:21:27:ed:3d:64: a3:3b:8a:03:c6:7e:50:25:a7:1b:14:e2:b9:58:c6: ce:81:9a:d8:d5:87:07:35:c2:51:9a:3c:dd:92:c0: 19:4e:d0:0f:dd:a0:82:84:7a:02:26:df:ff:0a:90: 6d:08:55:cf:57:80:20:38:f9:a6:5f:c2:8c:12:ab: b9:a3:fc:00:b3:74:60:fa:e1:da:6a:81:4c:95:79: 6f:0c:d0:f8:ba:ea:f3:f6:88:57:f4:4d:dd:b5:60: f1:ee:e6:ee:72:a8:d6:67:70:4b:fc:b9:26:3d:05: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3F:A1:68:7B:B0:A4:5C:09:C0:38:8E:38:61:C6:B1:67:0E:CD:13 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Sj-haHuwpFwJwDiOOGHGsWcOzRM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.199.0.0/16 Signature Algorithm: sha256WithRSAEncryption 88:7c:33:97:e0:a5:41:17:6b:6c:f0:a6:7c:ee:28:b2:0b:db: 0c:1c:37:1a:80:08:ba:3a:21:aa:ef:b0:29:d6:15:7e:c4:19: f6:50:73:9f:55:ef:8c:18:4d:bb:f6:64:78:8e:66:3d:bc:e4: dc:71:aa:fe:9f:56:5e:3c:9f:7e:5d:3b:7a:81:41:80:8a:53: 75:fe:76:47:29:da:8e:d9:50:b6:f2:5f:44:5b:81:98:97:e6: 48:90:1a:23:8c:20:cb:d0:44:a6:1d:18:a0:1c:9a:e8:85:39: 1b:95:6f:05:d2:b3:de:2b:79:76:f8:6c:cd:c4:bc:58:71:7d: 74:44:6b:0f:0b:97:22:84:ef:24:8f:ae:b2:66:19:de:e5:ec: 55:09:38:d4:85:48:0a:f1:40:77:e7:f2:29:52:c9:a0:2d:c6: 4f:fb:2a:13:92:89:8e:fa:bb:fc:17:89:0d:ff:50:d9:1e:78: 44:b1:c3:97:9e:ad:f7:c6:97:26:93:b8:db:e1:98:e7:ad:8f: a3:e9:70:33:40:77:b2:4d:be:b1:85:0a:1d:2b:d6:50:ed:0b: d3:01:9d:e4:d0:fb:19:ad:30:56:c4:cb:33:ca:0b:f3:85:47: 61:a1:ef:a5:0f:3c:30:85:8a:ca:2b:42:e0:4b:43:53:3e:d2: fb:f6:61:8f -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICFPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDRBM0ZBMTY4N0JCMEE0 NUMwOUMwMzg4RTM4NjFDNkIxNjcwRUNEMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDe2hX6wAOBAoi/kMbM6aqpxcgEH/ing6Uij270eFVYVQ75Y8oQ aboWsYz+fjtvf75GihIRyQO2xTcjgBk9CB83SFDy1w2TjmGhaR9rRPkiHXbRd/EO Q8oCl5tTpDPYdV3ZE/7wTn1WbcHnII92bV7otP6XZY84xKissNRoXZV4CZx4KG6d +suVuB87KvkZ1j0hJ+09ZKM7igPGflAlpxsU4rlYxs6BmtjVhwc1wlGaPN2SwBlO 0A/doIKEegIm3/8KkG0IVc9XgCA4+aZfwowSq7mj/ACzdGD64dpqgUyVeW8M0Pi6 6vP2iFf0Td21YPHu5u5yqNZncEv8uSY9BQi7AgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUSj+haHuwpFwJwDiOOGHGsWcOzRMwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvU2otaGFIdXdwRndKd0Rp T09HSEdzV2NPelJNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD ADzHMA0GCSqGSIb3DQEBCwUAA4IBAQCIfDOX4KVBF2ts8KZ87iiyC9sMHDcagAi6 OiGq77Ap1hV+xBn2UHOfVe+MGE279mR4jmY9vOTccar+n1ZePJ9+XTt6gUGAilN1 /nZHKdqO2VC28l9EW4GYl+ZIkBojjCDL0ESmHRigHJrohTkblW8F0rPeK3l2+GzN xLxYcX10RGsPC5cihO8kj66yZhne5exVCTjUhUgK8UB35/IpUsmgLcZP+yoTkomO +rv8F4kN/1DZHnhEscOXnq33xpcmk7jb4ZjnrY+j6XAzQHeyTb6xhQodK9ZQ7QvT AZ3k0PsZrTBWxMszygvzhUdhoe+lDzwwhYrKK0LgS0NTPtL79mGP -----END CERTIFICATE-----Generated at Fri Oct 24 04:51:04 2025 by rpki-client