
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/eFtB4InZ83o1u3_Cjn87s2Fid-M.roa
File: eFtB4InZ83o1u3_Cjn87s2Fid-M.roa (raw, json)
Hash identifier: T0LJHn3tfPfkr1OLUaupNnfGiB0M6b6VlWKOCE5Yo+s=
Subject key identifier: 78:5B:41:E0:89:D9:F3:7A:35:BB:7F:C2:8E:7F:3B:B3:61:62:77:E3
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 14EA
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/eFtB4InZ83o1u3_Cjn87s2Fid-M.roa
Signing time: Fri 22 Aug 2025 08:54:55 +0000
ROA not before: Fri 22 Aug 2025 08:54:55 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 24164
IP address blocks: 203.77.80.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 07:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5354 (0x14ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 22 08:54:55 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=785B41E089D9F37A35BB7FC28E7F3BB3616277E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:56:a8:6e:9c:69:6d:f9:50:14:b1:db:76:
c1:03:73:9e:fa:4d:bb:66:4a:1e:16:69:d1:b9:d3:
cc:5e:56:ea:dd:54:32:8e:5e:1b:64:c1:69:7e:86:
f3:2b:f1:41:93:74:fb:21:d4:e7:f2:5e:7d:2a:a7:
f3:9c:dd:1c:3d:ca:53:73:7c:70:65:18:1e:71:ab:
55:c0:67:cf:be:c0:0e:a9:a7:8d:0f:c2:48:59:33:
8a:64:9c:82:95:4a:10:1e:2d:d5:3e:a1:02:09:42:
e3:a3:6a:81:4c:e0:f2:6e:50:98:03:a2:54:36:d7:
cb:f4:05:75:f3:d7:22:83:e8:bd:57:d4:2c:ca:32:
d9:f4:83:bd:b4:92:f4:f8:a6:b1:41:79:a9:f0:5c:
fe:46:88:9c:ae:6e:cc:54:27:52:6b:64:74:29:00:
7f:13:3c:96:38:3e:4b:dd:c6:88:95:28:a4:6e:93:
79:c6:4f:cd:21:20:6c:3a:da:39:57:f5:f2:e4:7b:
49:66:53:b7:60:b9:c3:c2:6f:a8:53:9f:fc:52:b1:
eb:50:63:01:9e:6e:a7:7b:a2:ad:49:e8:aa:1f:96:
c2:e2:35:62:e0:dd:b4:ba:cf:9b:ae:b2:c4:33:dd:
db:6d:2a:fa:8c:d8:ed:8a:5c:37:3f:09:93:2c:a2:
cc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5B:41:E0:89:D9:F3:7A:35:BB:7F:C2:8E:7F:3B:B3:61:62:77:E3
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/eFtB4InZ83o1u3_Cjn87s2Fid-M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.77.80.0/23
Signature Algorithm: sha256WithRSAEncryption
33:5c:6e:bb:a0:cc:ed:a2:41:70:a5:40:2a:18:b8:0e:a2:2b:
47:f4:a8:f9:27:e8:b3:55:37:37:b9:e4:43:80:b5:a3:80:d8:
2f:78:92:af:f3:df:18:bc:ae:a0:7b:fa:96:f9:2c:0d:a5:32:
7a:a1:98:ab:57:76:c4:dd:fd:74:76:37:8d:2f:8b:24:18:33:
a5:14:46:01:58:f9:08:3f:0f:6c:37:5b:66:b1:fa:54:35:cf:
e4:f9:e2:cd:96:b2:a6:70:e5:18:02:06:9d:dd:dd:7d:cc:af:
12:b9:1d:4f:fd:eb:fb:fa:b0:ae:c2:4c:6f:ed:c0:f7:e1:f7:
71:6f:06:13:d6:a4:49:6f:a4:0f:af:a3:5b:98:01:0c:f4:42:
62:93:c3:36:93:23:f9:88:d2:16:7c:ae:8d:02:ca:0c:f1:b3:
4e:0e:d1:16:4a:24:b8:14:f6:03:81:2c:4f:09:1f:53:5d:1a:
e3:54:a4:4b:e7:01:b2:d4:a2:60:78:f4:d0:a9:17:62:4e:3c:
b2:94:cb:db:9e:7f:60:08:c2:cd:77:66:25:fa:e6:72:a1:e6:
ea:10:24:aa:a1:f6:0f:02:cb:9e:93:8e:28:f6:b5:54:92:46:
ba:c7:87:b2:b2:02:c3:24:35:dc:45:fe:1f:b6:e9:09:83:4c:
62:15:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:44:31 2025 by rpki-client