
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fLI_N_WtIIPLhZP7tI4iAQWCkhw.roa
File: fLI_N_WtIIPLhZP7tI4iAQWCkhw.roa (raw, json)
Hash identifier: Fmzf16MMu7Mk2cMEslAtKTej5gN5lpuEE7c6OBWxva8=
Subject key identifier: 7C:B2:3F:37:F5:AD:20:83:CB:85:93:FB:B4:8E:22:01:05:82:92:1C
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 14E7
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fLI_N_WtIIPLhZP7tI4iAQWCkhw.roa
Signing time: Fri 22 Aug 2025 08:54:55 +0000
ROA not before: Fri 22 Aug 2025 08:54:55 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131628
IP address blocks: 175.99.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Oct 2025 07:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5351 (0x14e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Aug 22 08:54:55 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=7CB23F37F5AD2083CB8593FBB48E22010582921C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:b5:92:7e:cb:48:5f:3d:28:fe:dc:93:70:
e3:10:27:35:ef:ba:d9:15:8b:9e:23:c2:50:32:a8:
89:bc:c3:ee:cb:29:24:99:86:10:ff:f3:fd:97:45:
e2:c0:60:73:e1:91:e3:b6:7e:eb:9a:23:e5:ae:fa:
be:85:67:fe:da:1c:96:da:0d:f6:e5:db:ec:8e:e8:
37:25:11:33:2d:6f:01:61:4c:3e:59:dc:dc:c2:cb:
c6:b1:d3:1f:4f:6b:33:09:49:c3:9e:c9:8a:38:b9:
cb:56:f8:13:57:84:7c:cc:fd:c8:9d:9e:af:1b:9a:
80:05:2e:39:01:bf:4a:7f:5e:3c:e8:7c:32:4d:01:
ba:5c:38:98:93:e7:8e:51:1c:27:62:ca:9a:b4:eb:
b7:34:9e:d9:0b:6d:7f:26:46:b1:4e:66:85:a9:ee:
a8:06:b7:8c:78:db:66:0e:95:93:60:6f:2f:7a:41:
a1:19:1a:6d:9a:4e:be:6f:70:cc:2d:74:32:1c:ea:
73:01:cd:dc:5b:e5:13:27:24:c6:90:04:65:22:0b:
d2:7e:04:74:1b:b3:63:4c:42:c8:17:e9:78:83:74:
df:53:54:55:c6:52:ea:42:05:c3:06:fc:ef:3e:4f:
92:cf:01:4b:8e:31:40:12:93:b5:70:bd:d5:20:f3:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B2:3F:37:F5:AD:20:83:CB:85:93:FB:B4:8E:22:01:05:82:92:1C
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fLI_N_WtIIPLhZP7tI4iAQWCkhw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.99.225.0/24
Signature Algorithm: sha256WithRSAEncryption
19:7c:fd:5a:7d:a4:7c:ab:d9:a9:05:44:82:0b:d0:f5:83:4d:
9d:5e:2d:13:54:63:0c:ea:4f:15:58:b2:bd:ab:40:de:73:43:
e2:5f:af:80:64:40:68:8c:45:c4:f3:4f:a9:27:88:c4:55:f8:
bc:64:24:53:89:bc:e6:15:fe:08:14:b9:17:a4:87:07:78:8a:
46:5f:43:73:91:83:4e:6f:43:ed:de:0a:31:b3:0a:8e:a4:8c:
d7:e5:4d:41:32:b6:73:2f:47:bc:ac:94:31:b2:8a:10:f8:a0:
06:64:02:00:44:4d:11:87:44:9d:e4:b7:d4:c9:d8:59:38:60:
1c:f8:b4:c5:fa:0c:49:2f:61:40:50:56:05:4c:97:24:38:bd:
d0:23:21:57:9e:0a:22:c8:79:73:59:06:f0:38:99:15:85:0e:
04:5d:9b:a7:d6:27:6c:9e:cb:07:f9:1d:ce:88:2d:ae:ee:a0:
e6:c9:0e:f5:9c:88:50:dc:cf:f4:bb:01:45:9c:4d:2d:ac:da:
83:d6:1b:51:1c:14:57:53:3d:c6:14:65:c8:13:9b:f4:20:1e:
7e:31:a3:76:96:e4:8a:73:b6:92:4e:1a:4e:9e:4a:48:0f:84:
de:6a:ef:20:7b:fc:7d:d2:a4:e4:b9:2d:fc:26:49:60:f9:c0:
bd:5e:e8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:45:42 2025 by rpki-client