$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/AS131611.roa File: AS131611.roa (raw, json) Hash identifier: X08FG+CzePQMO2I41W4nRys+J1Le2sDyG4TRj9U/xtA= Subject key identifier: 48:55:C6:05:2B:F9:AD:76:B4:65:34:97:9D:2D:BC:49:4A:73:D9:10 Certificate issuer: /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5 Certificate serial: 603ED6ADB814099E8FE439C2EEB2C99CF2D25787 Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS131611.roa Signing time: Wed 10 Jun 2026 10:03:49 +0000 ROA not before: Wed 10 Jun 2026 09:58:49 +0000 ROA not after: Wed 09 Jun 2027 10:03:49 +0000 asID: 131611 IP address blocks: 60.198.160.0/19 maxlen: 24 124.9.64.0/18 maxlen: 24 124.9.64.0/19 maxlen: 24 124.9.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:3e:d6:ad:b8:14:09:9e:8f:e4:39:c2:ee:b2:c9:9c:f2:d2:57:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5 Validity Not Before: Jun 10 09:58:49 2026 GMT Not After : Jun 9 10:03:49 2027 GMT Subject: CN=4855C6052BF9AD76B46534979D2DBC494A73D910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:eb:80:ff:b4:19:b1:78:ec:90:23:22:8b:5c: 0a:18:b6:a7:f6:8a:e1:fb:55:a9:93:fd:3a:4a:32: 52:c3:b2:28:b1:3a:01:fa:79:aa:ce:23:2c:d4:39: 2c:42:6e:49:31:10:20:61:97:3f:08:c9:e6:7c:40: 05:6b:fc:c8:bb:6e:12:29:0b:42:70:a6:86:fe:14: f6:7b:a8:2c:6b:1c:b4:e8:29:6f:ee:e8:36:20:61: 92:a9:0c:6a:0a:96:04:0e:b0:ac:53:3a:15:4b:03: db:9c:25:5f:8b:a6:bb:6e:41:55:3d:b3:0a:a9:9a: f4:31:78:bb:36:e8:53:4c:48:b7:d9:93:73:4c:c4: a7:88:8c:f6:1c:b4:ac:74:13:27:24:ea:79:66:1d: 77:f7:d8:e7:35:b2:8e:60:09:22:15:f6:36:36:68: ba:fe:2e:f2:f5:2f:19:c2:7b:76:d9:50:5b:f9:bb: c5:df:87:e5:4a:7b:dd:65:4e:63:89:37:55:0f:a4: dd:c6:93:72:17:6b:9e:7c:12:2b:a1:7f:61:c8:70: 6b:bf:d5:30:b2:33:5b:44:15:35:40:55:f6:90:dc: d6:b3:78:db:20:99:80:52:b5:b4:75:6f:13:80:f0: 1b:f7:cd:55:46:50:c7:ef:0c:dd:1d:ec:61:58:7c: 45:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:55:C6:05:2B:F9:AD:76:B4:65:34:97:9D:2D:BC:49:4A:73:D9:10 X509v3 Authority Key Identifier: keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/AS131611.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 60.198.160.0/19 124.9.64.0/18 Signature Algorithm: sha256WithRSAEncryption 90:12:85:b9:11:5e:48:d8:f1:46:88:98:bc:f4:65:80:86:1a: e5:e6:53:4d:7e:94:e1:d7:ea:1d:3c:8d:45:ef:dc:d9:e2:e2: 58:71:2e:90:f7:74:18:cf:b0:fd:f3:10:cb:3c:bd:37:64:72: 66:52:06:6e:ca:bd:68:a8:28:f0:08:21:1e:53:95:9e:0f:1a: 7d:ce:d5:01:76:66:0b:12:3a:e9:30:e4:69:5c:2e:c4:f9:7c: 57:f1:1a:5b:c6:fb:9c:9d:2e:47:ea:db:0f:26:62:75:ac:f3: 5c:ea:df:18:4c:c0:d5:de:c7:65:7e:03:77:5f:e7:c7:77:79: 9a:e6:b8:74:22:46:12:74:31:cc:56:ef:64:72:26:23:d4:b6: 40:fd:a3:20:5f:30:ae:a4:59:5c:44:da:2e:8a:13:eb:9b:b5: 5f:e0:18:31:43:dc:7b:22:a2:93:3e:06:bf:1f:a5:d8:3f:6f: 5c:19:30:94:fe:ca:5d:01:86:eb:09:27:63:11:75:9f:72:9f: ef:d8:cc:83:18:ed:ea:61:7b:77:ba:e9:ea:a7:6d:3b:67:b8: b4:91:1f:c2:28:38:6c:ff:35:d3:53:75:16:2a:29:04:56:04: 3a:8b:7e:fc:a9:5a:32:29:c9:a8:d5:f1:71:4d:53:4b:21:46: 78:f6:1e:58 -----BEGIN CERTIFICATE----- MIIEszCCA5ugAwIBAgIUYD7WrbgUCZ6P5DnC7rLJnPLSV4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIwMUQ1QTQ5Njc1NURGNjlBQzkyRkVDM0JENjRGRkU0 QUVBNTFGNTAeFw0yNjA2MTAwOTU4NDlaFw0yNzA2MDkxMDAzNDlaMDMxMTAvBgNV BAMTKDQ4NTVDNjA1MkJGOUFENzZCNDY1MzQ5NzlEMkRCQzQ5NEE3M0Q5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL64D/tBmxeOyQIyKLXAoYtqf2 iuH7VamT/TpKMlLDsiixOgH6earOIyzUOSxCbkkxECBhlz8IyeZ8QAVr/Mi7bhIp C0Jwpob+FPZ7qCxrHLToKW/u6DYgYZKpDGoKlgQOsKxTOhVLA9ucJV+LprtuQVU9 swqpmvQxeLs26FNMSLfZk3NMxKeIjPYctKx0Eyck6nlmHXf32Oc1so5gCSIV9jY2 aLr+LvL1LxnCe3bZUFv5u8Xfh+VKe91lTmOJN1UPpN3Gk3IXa558Eiuhf2HIcGu/ 1TCyM1tEFTVAVfaQ3NazeNsgmYBStbR1bxOA8Bv3zVVGUMfvDN0d7GFYfEVdAgMB AAGjggG9MIIBuTAdBgNVHQ4EFgQUSFXGBSv5rXa0ZTSXnS28SUpz2RAwHwYDVR0j BBgwFoAUmwHVpJZ1XfaayS/sO9ZP/krqUfUwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUFJPRk9O RC8wLzlCMDFENUE0OTY3NTVERjY5QUM5MkZFQzNCRDY0RkZFNEFFQTUxRjUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvOUIwMUQ1QTQ5Njc1NURGNjlBQzkyRkVDM0JE NjRGRkU0QUVBNTFGNS5jZXIwTwYIKwYBBQUHAQsEQzBBMD8GCCsGAQUFBzALhjNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1BST0ZPTkQvMC9BUzEzMTYxMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQw EgQCAAEwDAMEBTzGoAMEBnwJQDANBgkqhkiG9w0BAQsFAAOCAQEAkBKFuRFeSNjx RoiYvPRlgIYa5eZTTX6U4dfqHTyNRe/c2eLiWHEukPd0GM+w/fMQyzy9N2RyZlIG bsq9aKgo8AghHlOVng8afc7VAXZmCxI66TDkaVwuxPl8V/EaW8b7nJ0uR+rbDyZi dazzXOrfGEzA1d7HZX4Dd1/nx3d5mua4dCJGEnQxzFbvZHImI9S2QP2jIF8wrqRZ XETaLooT65u1X+AYMUPceyKikz4Gvx+l2D9vXBkwlP7KXQGG6wknYxF1n3Kf79jM gxjt6mF7d7rp6qdtO2e4tJEfwig4bP8101N1FiopBFYEOot+/KlaMinJqNXxcU1T SyFGePYeWA== -----END CERTIFICATE-----Generated at Sat Jun 13 13:38:26 2026 by rpki-client