$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fiaffyY4BgXZDwkLjfhWsRxSniM.roa File: fiaffyY4BgXZDwkLjfhWsRxSniM.roa (raw, json) Hash identifier: t3WfFegpEgSzOsee0fl/ZUiX6huQqPkyxvp1nz9sLHY= Subject key identifier: 7E:26:9F:7F:26:38:06:05:D9:0F:09:0B:8D:F8:56:B1:1C:52:9E:23 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14F8 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fiaffyY4BgXZDwkLjfhWsRxSniM.roa Signing time: Fri 22 Aug 2025 08:54:59 +0000 ROA not before: Fri 22 Aug 2025 08:54:59 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 24164 IP address blocks: 203.65.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5368 (0x14f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:59 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=7E269F7F26380605D90F090B8DF856B11C529E23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1b:30:55:8f:7e:55:c8:ce:27:db:32:1a:16: ef:b7:16:4b:bf:0a:86:4b:60:e9:49:8c:aa:a2:5f: ee:67:74:07:be:d2:98:36:6b:7a:03:83:f1:74:25: e1:bb:fa:34:8d:67:89:f5:3d:0e:37:35:2b:29:ab: 0f:72:fb:3e:25:ca:c7:01:0e:bf:31:06:95:98:81: bc:0b:ff:1f:45:59:2e:21:f4:1b:97:86:96:e0:e8: a9:0c:d7:db:68:ef:f5:48:54:ae:85:da:e7:5b:50: c9:89:cc:f6:3c:5d:8c:cb:f0:51:57:f4:37:3a:1f: bd:0e:4d:10:88:5f:ba:a3:98:78:41:ee:b1:70:b2: fa:2d:39:cf:33:dd:a1:29:51:ca:8a:63:57:bf:dc: 4f:66:49:f6:8e:9f:0b:8b:5f:b9:25:45:71:83:40: fe:ad:dc:e9:df:f4:4e:7a:a0:e0:27:c7:dc:9d:86: 44:15:ef:75:48:5f:74:24:7c:f1:c1:a3:9f:db:63: c5:b1:0d:42:4e:fc:05:12:a0:c8:72:51:fe:b7:54: 08:e4:5a:6a:b2:08:8f:bd:91:0e:14:04:fe:54:8b: bc:78:59:9d:a2:43:dd:b2:be:7e:07:99:29:22:0d: b5:fd:4d:e9:32:6c:9e:e6:d8:c8:71:0c:bc:97:c0: dd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:26:9F:7F:26:38:06:05:D9:0F:09:0B:8D:F8:56:B1:1C:52:9E:23 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/fiaffyY4BgXZDwkLjfhWsRxSniM.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.65.172.0/24 Signature Algorithm: sha256WithRSAEncryption 04:26:82:b7:d3:a4:15:c6:2f:8d:68:f5:43:32:f3:b9:3f:d1: 5b:11:de:9e:a4:86:0a:e1:d9:3b:a3:3e:7d:29:01:fe:51:0b: bd:5b:36:e4:f4:38:b5:61:cc:78:4c:63:5d:e7:d2:7f:d2:9f: b4:4c:3a:eb:19:27:25:7c:5e:8e:9c:be:79:99:84:16:6d:e0: fa:44:b0:06:68:bd:30:eb:ff:fe:b1:d9:82:77:ee:4c:e2:c2: 0a:26:c2:39:3e:e5:f3:4f:87:2a:21:98:67:8a:59:99:1a:26: 23:6e:e3:96:a4:4b:2a:95:ec:15:8b:43:2d:f4:c4:17:f7:17: 48:db:18:67:66:d4:df:25:ef:ef:3e:da:c6:88:b5:5b:f6:1a: a1:af:6f:4e:bf:ed:39:10:0f:37:c9:7f:0f:07:ee:64:69:54: 4a:34:b3:66:dd:c7:15:0f:2a:73:02:ae:4d:8a:a4:40:c0:0b: 72:0f:5b:71:2f:f8:87:b9:f3:d3:f0:16:e2:f7:32:41:dc:44: 7b:d1:48:ae:d8:46:dd:1c:aa:64:a1:e9:67:34:4f:c0:42:06: d0:9e:e2:bb:04:ea:82:c8:61:de:ce:86:d9:16:63:78:c7:a8: f9:e2:c7:99:c9:c3:df:ea:07:d5:f1:0d:c3:be:2e:03:3c:c7: 90:58:e2:62 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdFMjY5RjdGMjYzODA2 MDVEOTBGMDkwQjhERjg1NkIxMUM1MjlFMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCkGzBVj35VyM4n2zIaFu+3Fku/CoZLYOlJjKqiX+5ndAe+0pg2 a3oDg/F0JeG7+jSNZ4n1PQ43NSspqw9y+z4lyscBDr8xBpWYgbwL/x9FWS4h9BuX hpbg6KkM19to7/VIVK6F2udbUMmJzPY8XYzL8FFX9Dc6H70OTRCIX7qjmHhB7rFw svotOc8z3aEpUcqKY1e/3E9mSfaOnwuLX7klRXGDQP6t3Onf9E56oOAnx9ydhkQV 73VIX3QkfPHBo5/bY8WxDUJO/AUSoMhyUf63VAjkWmqyCI+9kQ4UBP5Ui7x4WZ2i Q92yvn4HmSkiDbX9TekybJ7m2MhxDLyXwN0HAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUfiaffyY4BgXZDwkLjfhWsRxSniMwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvZmlhZmZ5WTRCZ1haRHdr TGpmaFdzUnhTbmlNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AMtBrDANBgkqhkiG9w0BAQsFAAOCAQEABCaCt9OkFcYvjWj1QzLzuT/RWxHenqSG CuHZO6M+fSkB/lELvVs25PQ4tWHMeExjXefSf9KftEw66xknJXxejpy+eZmEFm3g +kSwBmi9MOv//rHZgnfuTOLCCibCOT7l80+HKiGYZ4pZmRomI27jlqRLKpXsFYtD LfTEF/cXSNsYZ2bU3yXv7z7axoi1W/Yaoa9vTr/tORAPN8l/DwfuZGlUSjSzZt3H FQ8qcwKuTYqkQMALcg9bcS/4h7nz0/AW4vcyQdxEe9FIrthG3RyqZKHpZzRPwEIG 0J7iuwTqgshh3s6G2RZjeMeo+eLHmcnD3+oH1fENw74uAzzHkFjiYg== -----END CERTIFICATE-----Generated at Fri Oct 24 06:44:31 2025 by rpki-client