$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fKYLA6xKlLl3of-JKEE-THdy87I.roa File: fKYLA6xKlLl3of-JKEE-THdy87I.roa (raw, json) Hash identifier: mfiH+DsOj0jeqh9oELdcwGsHNoS4LGJdb/Ew9QZr57o= Subject key identifier: 7C:A6:0B:03:AC:4A:94:B9:77:A1:FF:89:28:41:3E:4C:77:72:F3:B2 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 148F Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fKYLA6xKlLl3of-JKEE-THdy87I.roa Signing time: Fri 22 Aug 2025 08:54:33 +0000 ROA not before: Fri 22 Aug 2025 08:54:33 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 60.199.162.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5263 (0x148f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:33 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7CA60B03AC4A94B977A1FF8928413E4C7772F3B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:19:94:43:b6:12:46:f9:23:b1:ed:c0:b8: d4:46:99:03:7d:47:f9:e4:cc:fe:19:e6:84:df:e6: b9:40:5d:79:a3:bc:5b:2f:cd:19:3e:fe:45:0e:9f: 80:79:20:c8:f0:56:cf:30:ab:2a:da:79:ed:48:8b: 36:7c:d0:93:25:bf:db:ca:90:68:79:28:8e:ca:e4: 34:6c:1e:d0:7b:ee:c8:d5:19:2c:f9:c1:40:34:8b: 2a:c1:28:66:23:73:a0:59:cb:f8:c9:eb:6d:ea:17: 2e:92:62:2c:fd:15:e3:d4:aa:9b:8d:d4:b0:4a:83: 35:78:9a:d8:ba:30:1b:6f:04:cb:c3:45:f9:0c:6c: 67:a0:b0:a6:80:0c:3d:1a:6b:39:35:f8:d5:cf:12: 32:db:a1:1c:de:65:a2:6b:d9:78:8e:c9:e3:fc:fb: 19:ff:e7:20:61:3e:3d:8e:50:f4:e1:03:2a:95:b6: b5:36:84:59:4a:9c:9a:0f:5b:9a:55:5d:97:d8:6b: 68:43:ef:fa:3b:7a:6b:5a:8c:69:cb:3f:73:13:e2: 01:84:fe:92:07:3d:2c:3a:de:ec:a8:a7:09:77:44: 79:f3:71:0c:02:19:4b:aa:96:12:24:c8:db:78:ce: c2:6c:4f:45:31:a1:15:71:d2:1e:ef:83:c5:9d:bb: a3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A6:0B:03:AC:4A:94:B9:77:A1:FF:89:28:41:3E:4C:77:72:F3:B2 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fKYLA6xKlLl3of-JKEE-THdy87I.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 60.199.162.0/24 Signature Algorithm: sha256WithRSAEncryption 47:60:2e:ad:41:56:dc:ef:af:29:20:b3:35:75:4b:b2:c5:2d: eb:55:7a:5e:f2:71:88:23:d3:eb:f1:59:94:00:1f:5a:79:3d: 00:53:d3:b9:96:c3:74:ec:51:76:8c:76:31:12:7d:ee:fa:66: 5f:dd:13:56:cd:c0:40:bf:2a:e2:a1:89:48:29:d7:24:8c:4d: 1f:e2:a6:92:0d:11:09:e8:b8:ce:7e:67:b9:da:fa:7c:bb:af: 87:26:1e:53:08:40:df:7a:d3:a0:58:43:60:9a:9b:7b:e3:ee: 4f:5a:1e:6f:75:3b:4a:99:41:fa:e1:0a:df:89:b1:9c:b9:e1: 6e:20:ca:4f:7a:cf:5c:80:a4:7e:0d:aa:4e:2a:a5:34:3d:c4: bb:2b:25:d3:01:b9:8e:da:eb:86:22:7c:b0:67:19:ac:9b:75: 17:10:d5:fb:83:25:ca:50:69:4a:06:6a:1f:fe:79:12:16:71: fd:b4:f1:56:b7:c0:3d:59:64:f4:62:ad:34:e2:9f:2d:9b:d5: d8:60:8f:f7:60:d6:91:bb:20:27:9f:db:c7:67:4c:23:b7:a0: 79:52:6d:c2:f0:33:bf:74:99:79:a4:a5:8c:e0:7a:a9:57:10: 5e:50:15:ed:ae:c4:a7:80:70:db:c2:6e:f1:e5:e9:27:cb:82: 82:dc:bf:9b -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFI8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0MzNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdDQTYwQjAzQUM0QTk0 Qjk3N0ExRkY4OTI4NDEzRTRDNzc3MkYzQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCbXhmUQ7YSRvkjse3AuNRGmQN9R/nkzP4Z5oTf5rlAXXmjvFsv zRk+/kUOn4B5IMjwVs8wqyraee1IizZ80JMlv9vKkGh5KI7K5DRsHtB77sjVGSz5 wUA0iyrBKGYjc6BZy/jJ623qFy6SYiz9FePUqpuN1LBKgzV4mti6MBtvBMvDRfkM bGegsKaADD0aazk1+NXPEjLboRzeZaJr2XiOyeP8+xn/5yBhPj2OUPThAyqVtrU2 hFlKnJoPW5pVXZfYa2hD7/o7emtajGnLP3MT4gGE/pIHPSw63uyopwl3RHnzcQwC GUuqlhIkyNt4zsJsT0UxoRVx0h7vg8Wdu6PxAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUfKYLA6xKlLl3of+JKEE+THdy87IwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvZktZTEE2eEtsTGwzb2Yt SktFRS1USGR5ODdJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ADzHojANBgkqhkiG9w0BAQsFAAOCAQEAR2AurUFW3O+vKSCzNXVLssUt61V6XvJx iCPT6/FZlAAfWnk9AFPTuZbDdOxRdox2MRJ97vpmX90TVs3AQL8q4qGJSCnXJIxN H+Kmkg0RCei4zn5nudr6fLuvhyYeUwhA33rToFhDYJqbe+PuT1oeb3U7SplB+uEK 34mxnLnhbiDKT3rPXICkfg2qTiqlND3Euysl0wG5jtrrhiJ8sGcZrJt1FxDV+4Ml ylBpSgZqH/55EhZx/bTxVrfAPVlk9GKtNOKfLZvV2GCP92DWkbsgJ5/bx2dMI7eg eVJtwvAzv3SZeaSljOB6qVcQXlAV7a7Ep4Bw28Ju8eXpJ8uCgty/mw== -----END CERTIFICATE-----Generated at Fri Oct 24 04:48:22 2025 by rpki-client