$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Xfz9TzCYAcXEqS-Jplc6hcB5z8g.roa File: Xfz9TzCYAcXEqS-Jplc6hcB5z8g.roa (raw, json) Hash identifier: ixOn3m8437B0A0+SHCCZv3pRsXnDjWL1bV/Vufa+goQ= Subject key identifier: 5D:FC:FD:4F:30:98:01:C5:C4:A9:2F:89:A6:57:3A:85:C0:79:CF:C8 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14EB Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Xfz9TzCYAcXEqS-Jplc6hcB5z8g.roa Signing time: Fri 22 Aug 2025 08:54:55 +0000 ROA not before: Fri 22 Aug 2025 08:54:55 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 210.17.96.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5355 (0x14eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:55 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=5DFCFD4F309801C5C4A92F89A6573A85C079CFC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2c:cd:00:76:e5:3d:01:2e:6a:f0:28:e8:a3: 91:d0:e9:d2:8c:94:ae:b1:9e:a8:0e:b4:e8:ce:96: b6:17:92:6b:2c:b4:07:62:df:3a:6a:82:3b:d2:56: 7f:05:da:5c:91:14:ed:4b:2b:fe:9a:60:8e:44:69: a2:17:7a:2d:ab:c0:e1:3f:4d:f6:92:28:39:14:ab: b4:d0:25:c2:3b:22:1f:84:4f:a1:d1:79:5d:3b:c1: 6d:fc:91:93:2c:cf:2b:13:25:d6:a2:35:5e:a9:e4: 84:f0:ed:cf:05:4a:e7:58:c0:bd:1b:e1:53:ea:59: b6:70:71:1d:df:bb:a8:2d:47:07:4e:73:5d:06:4a: 7e:e6:90:89:35:51:d4:bc:f5:94:0b:fb:50:c8:60: 36:3c:a6:14:2c:75:1f:d8:97:55:b7:93:e4:aa:a9: 25:2a:46:be:9c:55:8d:3a:5f:27:58:95:02:96:1e: 14:b8:c2:de:20:ce:e0:9c:6e:fa:a5:98:2f:d7:e2: 63:56:a4:bc:77:ed:e8:ad:ad:a4:8f:07:1e:a2:14: 00:cc:ad:1e:92:18:72:89:7b:47:cc:e5:09:0b:aa: 00:2c:85:59:5b:bd:79:d7:65:df:a3:92:ac:c2:a8: d1:1c:bc:ac:6d:4e:58:a5:9e:a4:97:53:72:b4:2f: e3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FC:FD:4F:30:98:01:C5:C4:A9:2F:89:A6:57:3A:85:C0:79:CF:C8 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/Xfz9TzCYAcXEqS-Jplc6hcB5z8g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.96.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:4b:d9:d2:a2:a2:c2:a0:da:55:40:7d:d1:bb:38:79:be:e8: 0e:e8:84:6a:d0:66:47:af:b5:a3:7a:f6:bd:2c:66:9e:68:6b: 90:5f:a0:2b:cc:63:57:c8:89:f4:40:15:ee:c1:42:ca:72:bb: 55:37:4d:57:f8:d6:94:f1:f3:a1:65:6a:32:ba:82:d4:91:6c: 4e:02:1f:58:03:d4:a9:f3:79:ac:03:a0:be:61:df:55:25:6d: 1c:01:72:51:26:97:e1:89:23:9f:22:ae:8d:39:f5:ea:b5:3c: 43:ee:c2:55:20:4a:bc:cb:fb:1c:de:01:52:97:ff:ea:e3:d9: 27:54:10:83:64:92:5b:bd:0f:b0:a8:8c:40:8b:a1:19:45:b1: 5f:c4:5f:78:25:17:46:d9:78:02:e4:70:88:19:84:22:13:59: 07:87:01:56:ad:34:1e:4b:a3:12:a5:7d:8b:2f:b3:e7:5d:78: 68:9d:7e:fe:21:52:cc:04:ec:09:b5:9f:41:9d:a5:ca:88:45: ab:b6:1b:a9:f2:11:e6:ba:8e:24:d5:78:15:67:7c:6c:b6:8c: 34:e7:29:59:ba:2b:11:84:fd:00:94:e2:3d:65:a0:f3:b2:c6: 3b:2f:36:9a:de:95:58:9f:ad:9a:bc:37:30:97:b7:a2:89:cb: f8:c3:5c:e2 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NTVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVERkNGRDRGMzA5ODAx QzVDNEE5MkY4OUE2NTczQTg1QzA3OUNGQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDWLM0AduU9AS5q8Cjoo5HQ6dKMlK6xnqgOtOjOlrYXkmsstAdi 3zpqgjvSVn8F2lyRFO1LK/6aYI5EaaIXei2rwOE/TfaSKDkUq7TQJcI7Ih+ET6HR eV07wW38kZMszysTJdaiNV6p5ITw7c8FSudYwL0b4VPqWbZwcR3fu6gtRwdOc10G Sn7mkIk1UdS89ZQL+1DIYDY8phQsdR/Yl1W3k+SqqSUqRr6cVY06XydYlQKWHhS4 wt4gzuCcbvqlmC/X4mNWpLx37eitraSPBx6iFADMrR6SGHKJe0fM5QkLqgAshVlb vXnXZd+jkqzCqNEcvKxtTlilnqSXU3K0L+MlAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUXfz9TzCYAcXEqS+Jplc6hcB5z8gwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvWGZ6OVR6Q1lBY1hFcVMt SnBsYzZoY0I1ejhnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AtIRYDANBgkqhkiG9w0BAQsFAAOCAQEAH0vZ0qKiwqDaVUB90bs4eb7oDuiEatBm R6+1o3r2vSxmnmhrkF+gK8xjV8iJ9EAV7sFCynK7VTdNV/jWlPHzoWVqMrqC1JFs TgIfWAPUqfN5rAOgvmHfVSVtHAFyUSaX4YkjnyKujTn16rU8Q+7CVSBKvMv7HN4B Upf/6uPZJ1QQg2SSW70PsKiMQIuhGUWxX8RfeCUXRtl4AuRwiBmEIhNZB4cBVq00 HkujEqV9iy+z5114aJ1+/iFSzATsCbWfQZ2lyohFq7YbqfIR5rqOJNV4FWd8bLaM NOcpWborEYT9AJTiPWWg87LGOy82mt6VWJ+tmrw3MJe3oonL+MNc4g== -----END CERTIFICATE-----Generated at Fri Oct 24 04:55:39 2025 by rpki-client