$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/gM_SXWVeLukbQXwOe-XvQJ72zyE.roa File: gM_SXWVeLukbQXwOe-XvQJ72zyE.roa (raw, json) Hash identifier: HpfOaTXuuxOO3dQlO1K0zWIHkNBwi1cDpNe5InCU1tg= Subject key identifier: 80:CF:D2:5D:65:5E:2E:E9:1B:41:7C:0E:7B:E5:EF:40:9E:F6:CF:21 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 1512 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/gM_SXWVeLukbQXwOe-XvQJ72zyE.roa Signing time: Fri 22 Aug 2025 08:55:06 +0000 ROA not before: Fri 22 Aug 2025 08:55:06 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 210.67.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5394 (0x1512) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:55:06 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=80CFD25D655E2EE91B417C0E7BE5EF409EF6CF21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3a:f2:fa:d3:0d:57:4a:e5:59:39:a3:3e:d1: 54:a4:e8:7f:52:24:0b:92:d4:79:db:16:82:2c:ec: 57:95:74:53:29:0a:b3:b8:81:41:44:0b:d5:c6:ce: 59:a9:ba:29:22:2f:e4:3f:8a:90:2a:92:3a:ee:bd: 90:4e:88:29:a9:97:27:d3:57:64:ab:c3:35:00:72: df:9b:7e:a7:4b:82:30:e3:17:ae:bf:90:30:69:27: a4:bf:19:1d:29:2f:fe:9f:77:95:ca:8a:83:24:06: b0:58:93:be:08:94:eb:c5:0a:ec:1c:c2:68:ec:8a: b0:06:bd:40:8a:69:6b:05:47:d8:22:8c:9c:4f:ca: 81:4e:71:39:dc:80:fe:09:a4:09:3f:ae:75:94:fa: 6e:ea:44:0f:39:f3:f1:a3:28:cb:fc:69:69:5d:e3: 61:a3:50:9c:f9:7f:30:42:7e:ca:d4:cf:06:a6:9d: 50:8e:8f:d9:67:37:ab:ab:9f:50:7d:aa:61:4e:60: 0b:0a:ec:29:ca:bc:38:7b:d3:72:cf:55:7f:ea:01: a5:a0:71:02:7d:b9:6e:f3:3e:ef:76:62:2e:27:d9: 89:11:ef:43:31:fd:3e:25:44:ef:49:54:5e:39:6c: a2:f4:45:7b:56:62:18:6f:5d:f7:0a:39:dc:e4:29: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CF:D2:5D:65:5E:2E:E9:1B:41:7C:0E:7B:E5:EF:40:9E:F6:CF:21 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/gM_SXWVeLukbQXwOe-XvQJ72zyE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.67.192.0/19 Signature Algorithm: sha256WithRSAEncryption 3d:5e:2b:19:d9:fe:9d:a5:f0:b5:a0:b1:6e:26:58:da:0a:0a: 0c:93:59:0f:43:7b:25:88:84:8c:a0:5e:b7:3c:a1:51:26:d8: 28:85:57:0c:b6:90:25:c4:4f:20:2a:ce:d3:78:97:ab:44:b7: eb:be:03:f6:b4:6c:88:a9:58:e0:e9:f5:ac:f9:0d:27:07:a6: a6:dd:81:54:67:b6:47:d9:bb:d6:85:eb:d1:9c:b7:ed:79:34: ec:42:13:01:9e:1d:35:47:d4:fc:aa:bd:8b:6f:c1:02:bc:1e: 89:89:9e:36:dd:3e:25:d2:ec:23:7d:bd:8e:4a:7e:26:68:a0: 1d:92:01:09:e7:26:ef:da:5b:04:36:db:6a:34:da:b8:6c:54: 92:df:d1:01:29:a1:0b:f3:9f:ba:58:89:3f:67:e2:98:b5:fe: f0:7b:01:96:f4:12:ac:52:a4:df:64:f2:59:11:1b:6b:6b:7b: 14:f4:56:b6:49:f5:2c:61:60:3a:fd:bc:b2:55:3c:02:fd:61: c9:2d:c3:55:a5:f8:ec:89:05:e9:b6:40:8a:3a:50:36:e9:cb: fd:8c:5c:b6:aa:e9:f8:7a:e0:32:3a:5a:a0:c4:79:c5:90:ca: 05:8b:05:4f:96:53:9d:fd:3d:67:c8:70:82:63:d4:87:e2:a7: 4b:f2:6e:e5 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFRIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU1MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDgwQ0ZEMjVENjU1RTJF RTkxQjQxN0MwRTdCRTVFRjQwOUVGNkNGMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDNOvL60w1XSuVZOaM+0VSk6H9SJAuS1HnbFoIs7FeVdFMpCrO4 gUFEC9XGzlmpuikiL+Q/ipAqkjruvZBOiCmplyfTV2SrwzUAct+bfqdLgjDjF66/ kDBpJ6S/GR0pL/6fd5XKioMkBrBYk74IlOvFCuwcwmjsirAGvUCKaWsFR9gijJxP yoFOcTncgP4JpAk/rnWU+m7qRA858/GjKMv8aWld42GjUJz5fzBCfsrUzwamnVCO j9lnN6urn1B9qmFOYAsK7CnKvDh703LPVX/qAaWgcQJ9uW7zPu92Yi4n2YkR70Mx /T4lRO9JVF45bKL0RXtWYhhvXfcKOdzkKZxdAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUgM/SXWVeLukbQXwOe+XvQJ72zyEwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvZ01fU1hXVmVMdWtiUVh3 T2UtWHZRSjcyenlFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BdJDwDANBgkqhkiG9w0BAQsFAAOCAQEAPV4rGdn+naXwtaCxbiZY2goKDJNZD0N7 JYiEjKBetzyhUSbYKIVXDLaQJcRPICrO03iXq0S3674D9rRsiKlY4On1rPkNJwem pt2BVGe2R9m71oXr0Zy37Xk07EITAZ4dNUfU/Kq9i2/BArweiYmeNt0+JdLsI329 jkp+JmigHZIBCecm79pbBDbbajTauGxUkt/RASmhC/OfuliJP2fimLX+8HsBlvQS rFKk32TyWREba2t7FPRWtkn1LGFgOv28slU8Av1hyS3DVaX47IkF6bZAijpQNunL /Yxctqrp+HrgMjpaoMR5xZDKBYsFT5ZTnf09Z8hwgmPUh+KnS/Ju5Q== -----END CERTIFICATE-----Generated at Fri Oct 24 04:51:06 2025 by rpki-client