$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/q7XEPKKcxEXYiB2qrBSkGgzu8kg.roa File: q7XEPKKcxEXYiB2qrBSkGgzu8kg.roa (raw, json) Hash identifier: OPvlRINnb22QNLEQaZj0xi6lJfj8uIcxJTs/+RwzDmE= Subject key identifier: AB:B5:C4:3C:A2:9C:C4:45:D8:88:1D:AA:AC:14:A4:1A:0C:EE:F2:48 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14F1 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/q7XEPKKcxEXYiB2qrBSkGgzu8kg.roa Signing time: Fri 22 Aug 2025 08:54:57 +0000 ROA not before: Fri 22 Aug 2025 08:54:57 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 9924 IP address blocks: 202.145.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5361 (0x14f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:57 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=ABB5C43CA29CC445D8881DAAAC14A41A0CEEF248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b1:34:e7:b0:af:c0:63:39:29:2f:47:ab:b1: 8a:f5:3a:ea:6b:20:ab:79:54:df:e8:6d:94:78:0d: c4:97:4c:d1:ec:76:45:7e:c2:d2:c4:84:6b:c5:ac: 90:04:b4:dc:44:65:fd:d1:b3:26:3f:61:b3:a4:c2: 23:70:a9:c7:3d:6a:af:05:e1:58:e8:23:15:a3:87: c4:b3:50:64:1d:33:c9:0f:81:16:0b:a0:f9:4f:5c: a0:d7:e0:78:a1:38:d0:36:6a:d2:db:00:74:31:a1: fe:50:ab:79:ed:e4:c6:36:51:54:46:32:eb:93:85: 1f:5e:d2:7c:08:98:e8:ea:1b:d5:8b:61:b2:3c:33: 85:21:ce:da:1a:8f:ec:c0:93:da:c5:39:5e:4d:9d: 04:e3:4b:a6:40:c4:37:e4:74:ab:8d:db:62:42:7a: f9:51:c7:cf:32:cb:18:fe:af:ce:13:d8:7e:64:51: e5:3d:a9:95:12:ee:7f:d4:70:93:95:66:07:a4:ec: 53:80:f9:6f:a2:ab:ce:e4:10:a3:62:b2:81:0d:71: 96:ca:53:9f:97:08:4c:a4:59:28:89:b4:61:6d:56: 13:dc:d0:55:93:bf:1e:42:a9:2a:37:e8:28:62:c9: dd:bc:70:64:5a:ca:f1:ee:d1:ff:ea:6e:58:38:e6: cf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B5:C4:3C:A2:9C:C4:45:D8:88:1D:AA:AC:14:A4:1A:0C:EE:F2:48 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/q7XEPKKcxEXYiB2qrBSkGgzu8kg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 202.145.64.0/18 Signature Algorithm: sha256WithRSAEncryption 88:1b:80:76:ea:ad:20:8c:c3:ff:01:4e:71:e6:54:db:71:ea: b0:67:5e:29:15:ee:ac:a3:ca:e1:41:21:ed:73:54:6b:18:a0: 3d:85:17:e4:c1:53:77:e3:74:b9:bd:f4:01:f3:4b:8d:ea:9e: d5:69:58:4d:50:a9:9e:cd:46:40:af:8b:5d:fb:85:63:a1:82: 70:f3:2b:11:15:59:ae:01:c7:0f:68:26:24:4f:9f:07:ca:89: 8f:5b:da:fb:23:05:6c:ee:a2:c9:cc:3a:5b:45:27:7c:e6:46: 4c:d8:88:1d:ad:85:85:a8:4b:59:8d:d0:32:9a:45:b8:12:c1: fa:fb:a1:ab:23:10:37:a8:de:91:2c:72:9d:34:df:b2:71:3f: 84:fe:6c:fa:f9:72:97:47:f3:45:44:57:62:4e:f6:a1:29:a9: ac:40:01:91:b9:bc:fd:ca:0c:aa:e6:76:8e:21:74:df:7f:93: ca:c0:0a:5f:cf:3b:88:6d:ee:49:f7:b0:cf:5f:cd:26:61:ac: b3:57:c0:cc:e4:e3:be:1a:c7:1d:5f:4e:88:3f:f5:4f:cf:00: d7:5f:9c:14:64:ba:ba:65:68:e3:05:a2:ac:3e:80:d0:ca:ba: 5f:51:57:e7:bf:06:4c:47:cf:1a:3c:4f:91:ff:1d:bf:fd:9a: 91:48:70:03 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICFPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEFCQjVDNDNDQTI5Q0M0 NDVEODg4MURBQUFDMTRBNDFBMENFRUYyNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCZsTTnsK/AYzkpL0ersYr1OuprIKt5VN/obZR4DcSXTNHsdkV+ wtLEhGvFrJAEtNxEZf3RsyY/YbOkwiNwqcc9aq8F4VjoIxWjh8SzUGQdM8kPgRYL oPlPXKDX4HihONA2atLbAHQxof5Qq3nt5MY2UVRGMuuThR9e0nwImOjqG9WLYbI8 M4Uhztoaj+zAk9rFOV5NnQTjS6ZAxDfkdKuN22JCevlRx88yyxj+r84T2H5kUeU9 qZUS7n/UcJOVZgek7FOA+W+iq87kEKNisoENcZbKU5+XCEykWSiJtGFtVhPc0FWT vx5CqSo36Chiyd28cGRayvHu0f/qblg45s9tAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUq7XEPKKcxEXYiB2qrBSkGgzu8kgwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvcTdYRVBLS2N4RVhZaUIy cXJCU2tHZ3p1OGtnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME BsqRQDANBgkqhkiG9w0BAQsFAAOCAQEAiBuAduqtIIzD/wFOceZU23HqsGdeKRXu rKPK4UEh7XNUaxigPYUX5MFTd+N0ub30AfNLjeqe1WlYTVCpns1GQK+LXfuFY6GC cPMrERVZrgHHD2gmJE+fB8qJj1va+yMFbO6iycw6W0UnfOZGTNiIHa2FhahLWY3Q MppFuBLB+vuhqyMQN6jekSxynTTfsnE/hP5s+vlyl0fzRURXYk72oSmprEABkbm8 /coMquZ2jiF033+TysAKX887iG3uSfewz1/NJmGss1fAzOTjvhrHHV9OiD/1T88A 11+cFGS6umVo4wWirD6A0Mq6X1FX578GTEfPGjxPkf8dv/2akUhwAw== -----END CERTIFICATE-----Generated at Fri Oct 24 04:52:54 2025 by rpki-client