$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bRd87Q312_HWrZtD3DxcfjrbQ6I.roa File: bRd87Q312_HWrZtD3DxcfjrbQ6I.roa (raw, json) Hash identifier: xh3mfJyBrWtoMwvZOzNXAumqK/xabImoDYZ1//SKn7o= Subject key identifier: 6D:17:7C:ED:0D:F5:DB:F1:D6:AD:9B:43:DC:3C:5C:7E:3A:DB:43:A2 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14D4 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bRd87Q312_HWrZtD3DxcfjrbQ6I.roa Signing time: Fri 22 Aug 2025 08:54:49 +0000 ROA not before: Fri 22 Aug 2025 08:54:49 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 43.240.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5332 (0x14d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=6D177CED0DF5DBF1D6AD9B43DC3C5C7E3ADB43A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:fc:e9:08:b3:de:6a:01:cb:9f:92:49:be: 6f:b2:c5:c1:d1:a8:6a:36:69:c4:0f:0b:3e:14:c8: ed:e0:a3:e8:26:65:91:c7:aa:6a:bd:3e:db:7b:d7: f5:57:d4:36:4b:e3:5a:dd:fa:5c:a6:fd:a6:7c:aa: a4:c5:7f:86:f2:e8:ed:bd:2f:03:2a:f4:25:06:1a: 85:e9:d4:de:19:57:9b:16:2d:21:e7:8b:cc:15:ac: c6:06:61:3e:17:12:26:52:d0:61:70:0e:37:63:f9: ec:ff:f7:96:20:ba:c5:f4:42:5a:67:b2:d4:6f:f4: 33:fd:6c:1d:e6:f1:a5:6a:9b:51:8e:4e:c0:f1:ce: 9e:e7:76:92:c4:71:a9:80:eb:04:61:ad:71:1a:75: dd:d3:5f:50:5c:b9:25:9f:e9:c6:90:29:99:67:a1: c5:91:aa:b3:9d:3e:62:90:65:3b:fa:84:c6:a6:5f: 56:05:da:ee:75:71:15:44:49:be:99:2f:1d:f7:6d: 86:a6:51:f4:69:ea:29:45:2b:8b:f2:b9:a2:38:03: e3:26:90:5c:83:f1:3e:5e:5b:49:d8:1e:ab:54:2b: 82:8d:36:00:4e:31:1e:f6:fe:57:1c:a8:e5:f8:51: 60:9c:fd:cd:7f:45:1f:91:b7:9c:70:25:2b:48:e3: a3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:17:7C:ED:0D:F5:DB:F1:D6:AD:9B:43:DC:3C:5C:7E:3A:DB:43:A2 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/bRd87Q312_HWrZtD3DxcfjrbQ6I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 43.240.24.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:37:44:d7:7f:7a:3d:6e:b0:2b:09:fb:9e:2f:ae:c4:e1:74: f1:94:02:04:07:35:a5:ab:af:5d:73:5d:04:92:30:2e:e7:9e: 53:d3:c1:47:c6:52:ff:e0:18:f6:80:2e:8b:db:de:1d:f4:9e: b3:75:87:37:73:81:88:50:be:04:b1:02:4f:d8:f6:6f:ff:61: c1:e2:1f:23:ff:47:7e:d0:65:e7:3f:3c:d3:59:8d:57:fe:98: 97:c9:f5:bf:26:3b:9b:91:f6:bd:f8:18:c2:73:e0:67:d7:7b: 33:7a:a4:e0:02:c6:ae:51:9c:c0:cd:79:fc:be:bc:a5:9f:9f: 19:a6:2d:07:97:dc:ab:c3:7c:4b:29:30:dd:a2:72:b0:ee:09: 83:4d:6e:6b:78:b3:78:df:4b:3a:ef:39:11:78:56:0e:56:12: 06:cd:f2:e1:07:b4:c9:7f:41:7f:78:40:57:3f:a4:a2:4a:ba: b7:6e:58:c7:6f:bd:00:d0:ba:c7:3c:11:af:ae:40:c8:b8:97: b4:b7:01:3e:df:f7:23:c3:7f:92:52:fc:de:41:f8:99:14:29: 7b:88:cd:87:03:58:77:17:3b:ba:02:1c:5a:5c:f5:fb:d3:b3: b6:1d:ea:c7:7f:8d:dd:ec:fe:66:9a:ec:b1:a8:61:45:e7:7e: f0:e5:20:40 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFNQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDZEMTc3Q0VEMERGNURC RjFENkFEOUI0M0RDM0M1QzdFM0FEQjQzQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDTD/zpCLPeagHLn5JJvm+yxcHRqGo2acQPCz4UyO3go+gmZZHH qmq9Ptt71/VX1DZL41rd+lym/aZ8qqTFf4by6O29LwMq9CUGGoXp1N4ZV5sWLSHn i8wVrMYGYT4XEiZS0GFwDjdj+ez/95YgusX0QlpnstRv9DP9bB3m8aVqm1GOTsDx zp7ndpLEcamA6wRhrXEadd3TX1BcuSWf6caQKZlnocWRqrOdPmKQZTv6hMamX1YF 2u51cRVESb6ZLx33bYamUfRp6ilFK4vyuaI4A+MmkFyD8T5eW0nYHqtUK4KNNgBO MR72/lccqOX4UWCc/c1/RR+Rt5xwJStI46P9AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUbRd87Q312/HWrZtD3DxcfjrbQ6IwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvYlJkODdRMzEyX0hXclp0 RDNEeGNmanJiUTZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AivwGDANBgkqhkiG9w0BAQsFAAOCAQEAHjdE1396PW6wKwn7ni+uxOF08ZQCBAc1 pauvXXNdBJIwLueeU9PBR8ZS/+AY9oAui9veHfSes3WHN3OBiFC+BLECT9j2b/9h weIfI/9HftBl5z8801mNV/6Yl8n1vyY7m5H2vfgYwnPgZ9d7M3qk4ALGrlGcwM15 /L68pZ+fGaYtB5fcq8N8Sykw3aJysO4Jg01ua3izeN9LOu85EXhWDlYSBs3y4Qe0 yX9Bf3hAVz+kokq6t25Yx2+9ANC6xzwRr65AyLiXtLcBPt/3I8N/klL83kH4mRQp e4jNhwNYdxc7ugIcWlz1+9Ozth3qx3+N3ez+ZprssahhRed+8OUgQA== -----END CERTIFICATE-----Generated at Fri Oct 24 04:55:07 2025 by rpki-client