$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/XWbYTP-_aHD1VqN4HpRJeUBuvIo.roa File: XWbYTP-_aHD1VqN4HpRJeUBuvIo.roa (raw, json) Hash identifier: cCBuQGhhUoygAWdvsYSfMsps5lDnxVgji6LafUEEpzk= Subject key identifier: 5D:66:D8:4C:FF:BF:68:70:F5:56:A3:78:1E:94:49:79:40:6E:BC:8A Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 148C Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/XWbYTP-_aHD1VqN4HpRJeUBuvIo.roa Signing time: Fri 22 Aug 2025 08:54:33 +0000 ROA not before: Fri 22 Aug 2025 08:54:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 203.77.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5260 (0x148c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5D66D84CFFBF6870F556A3781E944979406EBC8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:be:e8:31:9c:1d:de:5f:e8:13:e5:2e:65:fb: 10:a3:47:a3:ba:d7:be:e4:06:0a:17:ff:59:17:72: a7:45:4c:ee:7b:5e:de:bf:88:20:7b:7d:7a:9d:81: 94:3a:75:08:30:97:79:37:0d:50:a0:ca:81:b5:99: 05:0b:1b:4a:ab:28:88:37:d1:0d:95:ce:f4:6d:42: 3a:c7:56:04:99:96:4a:d7:c6:8c:40:c1:15:3d:d2: ed:d4:39:64:5f:f9:c8:e9:16:aa:ba:af:a9:e0:8b: d9:69:8f:ca:7a:05:83:e9:9a:62:5a:19:d4:df:75: 1a:e8:d0:cf:3d:09:49:f6:36:14:ce:88:30:6a:31: a9:fc:0f:db:1b:d1:fd:bb:f5:73:4f:f7:2f:cf:0c: 6c:7d:2c:6b:72:f6:95:82:33:cf:c3:12:f9:7c:32: 37:6d:ff:98:d0:78:36:9c:80:48:e3:b5:b7:26:24: 3c:84:c9:c6:da:b1:9a:92:e1:ec:37:15:b9:a1:74: 28:54:5e:be:15:c7:fc:ce:a8:b3:2e:c8:0d:4a:aa: ac:95:1a:9a:ff:13:01:86:2a:e9:a8:4c:dd:96:d3: 76:eb:e5:75:9f:e6:bb:c1:68:7b:c0:a8:f6:0f:b6: b6:64:b0:3d:3d:40:68:be:41:3e:c5:2c:64:a8:f4: 37:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:66:D8:4C:FF:BF:68:70:F5:56:A3:78:1E:94:49:79:40:6E:BC:8A X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/XWbYTP-_aHD1VqN4HpRJeUBuvIo.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.77.51.0/24 Signature Algorithm: sha256WithRSAEncryption 36:bd:3a:75:68:8c:49:95:d0:da:83:79:fe:ba:d2:df:c5:66: 81:f2:54:76:33:ee:73:af:16:a4:63:26:fc:d9:96:95:e8:2a: 00:4a:30:ac:43:c7:c0:46:f8:43:2b:e7:8e:db:7d:5f:51:2a: 75:6f:d1:ea:1f:9b:44:c9:3f:0c:5a:a2:ac:2c:d1:02:0b:8f: f1:e3:44:e7:91:b8:72:7b:49:fd:99:17:d1:1a:bf:1a:f6:0a: f6:87:99:a6:14:83:c4:c2:f8:43:5b:58:bd:9b:3b:69:1c:b6: 8e:1e:cc:b9:d5:d5:a0:fb:54:4b:53:07:e8:09:17:0e:24:15: 82:63:4a:75:6c:3e:98:66:85:ca:fa:06:49:f4:68:c1:8c:bb: 17:4d:3d:71:16:2e:74:5f:9e:7d:d7:74:75:42:15:5f:d6:97: 56:cd:5a:e4:78:a1:a3:38:34:22:6b:62:f5:a8:19:17:9b:46: d4:79:4f:8e:e2:aa:b2:60:af:b4:b4:70:db:76:04:40:6c:30: 76:ce:84:84:6f:a5:90:22:6e:76:f3:cd:67:a3:6f:74:45:93: 8d:f0:66:21:e2:38:2e:79:a4:33:c2:ae:a4:64:af:16:8c:86: a5:72:0c:91:ea:59:77:41:f9:e9:6f:b2:c9:40:7d:11:c9:7d: 79:18:76:45 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVENjZEODRDRkZCRjY4 NzBGNTU2QTM3ODFFOTQ0OTc5NDA2RUJDOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDsvugxnB3eX+gT5S5l+xCjR6O6177kBgoX/1kXcqdFTO57Xt6/ iCB7fXqdgZQ6dQgwl3k3DVCgyoG1mQULG0qrKIg30Q2VzvRtQjrHVgSZlkrXxoxA wRU90u3UOWRf+cjpFqq6r6ngi9lpj8p6BYPpmmJaGdTfdRro0M89CUn2NhTOiDBq Man8D9sb0f279XNP9y/PDGx9LGty9pWCM8/DEvl8Mjdt/5jQeDacgEjjtbcmJDyE ycbasZqS4ew3FbmhdChUXr4Vx/zOqLMuyA1KqqyVGpr/EwGGKumoTN2W03br5XWf 5rvBaHvAqPYPtrZksD09QGi+QT7FLGSo9DfDAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUXWbYTP+/aHD1VqN4HpRJeUBuvIowHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvWFdiWVRQLV9hSEQxVnFO NEhwUkplVUJ1dklvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AMtNMzANBgkqhkiG9w0BAQsFAAOCAQEANr06dWiMSZXQ2oN5/rrS38VmgfJUdjPu c68WpGMm/NmWlegqAEowrEPHwEb4Qyvnjtt9X1EqdW/R6h+bRMk/DFqirCzRAguP 8eNE55G4cntJ/ZkX0Rq/GvYK9oeZphSDxML4Q1tYvZs7aRy2jh7MudXVoPtUS1MH 6AkXDiQVgmNKdWw+mGaFyvoGSfRowYy7F009cRYudF+efdd0dUIVX9aXVs1a5Hih ozg0Imti9agZF5tG1HlPjuKqsmCvtLRw23YEQGwwds6EhG+lkCJudvPNZ6NvdEWT jfBmIeI4LnmkM8KupGSvFoyGpXIMkepZd0H56W+yyUB9Ecl9eRh2RQ== -----END CERTIFICATE-----Generated at Fri Oct 24 06:43:30 2025 by rpki-client