
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JMioOvnlX1xUP-N2URk3j_01DEg.roa
File: JMioOvnlX1xUP-N2URk3j_01DEg.roa (raw, json)
Hash identifier: iV9Tz38d6HHjWC0SsnXDCjyNvGbJ4YhaGTJuMpCD//U=
Subject key identifier: 24:C8:A8:3A:F9:E5:5F:5C:54:3F:E3:76:51:19:37:8F:FD:35:0C:48
Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Certificate serial: 15B6
Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JMioOvnlX1xUP-N2URk3j_01DEg.roa
Signing time: Tue 14 Apr 2026 07:16:31 +0000
ROA not before: Tue 14 Apr 2026 07:16:31 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 131628
IP address blocks: 175.97.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 20:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5558 (0x15b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464
Validity
Not Before: Apr 14 07:16:31 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=24C8A83AF9E55F5C543FE3765119378FFD350C48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:60:3c:7c:3e:9d:42:7a:07:26:cc:35:ef:
02:4b:6a:da:17:f9:d3:80:a2:e2:f9:76:dc:93:a6:
27:0d:bb:4b:b4:36:3e:ea:0b:60:a2:49:5e:15:8b:
ab:22:b9:66:10:fc:8d:b8:36:59:e1:b4:c5:38:6a:
03:a4:ce:96:6f:7f:4b:02:8b:94:9f:03:51:c8:a2:
bb:87:57:cc:7d:ba:71:43:9d:22:d3:ba:81:fc:a0:
1a:c4:2f:3b:47:2a:0c:62:3e:08:f7:48:bd:e1:54:
d2:5e:37:82:2c:37:b7:1f:20:e0:b0:ad:61:f5:c2:
5d:0a:96:64:48:2d:5c:3e:f1:f0:a0:a8:e7:ad:a8:
da:9d:73:48:dd:72:f3:9f:53:a3:a9:a5:30:41:4a:
7f:5d:16:ff:9e:f2:7b:23:bd:b5:12:c2:1f:9f:33:
fe:8f:0d:4d:d5:c7:a2:86:c8:a7:87:4c:76:63:3e:
c4:b6:27:ba:51:1b:58:59:a1:a3:45:29:40:bc:23:
80:f1:d5:73:4e:27:5c:34:5d:68:c7:6e:ac:ee:ad:
40:51:50:93:e0:bd:f2:a1:f5:f4:98:c0:43:d0:ad:
cd:d0:bf:cf:70:7d:b0:62:4b:9e:28:d0:60:85:60:
a7:ab:6b:bf:ee:5d:d1:b7:de:a7:3b:7c:52:a0:99:
0d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C8:A8:3A:F9:E5:5F:5C:54:3F:E3:76:51:19:37:8F:FD:35:0C:48
X509v3 Authority Key Identifier:
keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/JMioOvnlX1xUP-N2URk3j_01DEg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.97.212.0/22
Signature Algorithm: sha256WithRSAEncryption
04:3e:91:a7:73:3e:93:15:93:8f:83:48:a0:22:0f:85:73:72:
3b:e8:08:9a:bf:8f:64:70:39:9f:b7:ca:cb:fa:16:25:6f:4f:
c9:26:9d:70:aa:4b:4b:fa:1f:bd:33:2e:78:d9:68:b1:00:42:
05:83:df:23:6c:a6:24:1c:36:44:c1:25:7f:23:8b:9c:8c:b8:
7c:40:57:f6:95:bc:4e:d7:fa:05:3f:45:e4:af:00:cb:18:66:
ca:78:7e:a5:8b:7c:92:a7:86:6a:05:ca:14:9e:ed:45:24:94:
88:31:ee:37:6e:b0:1c:d7:d0:f9:ad:0b:17:a5:c6:40:02:48:
f5:1e:12:13:09:5e:cb:5e:15:07:6b:6f:d8:8a:a5:56:12:bc:
4e:4b:b2:74:ca:d6:84:82:e6:78:da:d0:3b:09:11:e1:a2:02:
30:d5:24:40:a4:c5:33:01:bc:bb:ab:69:c9:e4:71:3a:4f:11:
40:e3:4b:f1:a9:e7:4b:8e:4c:b9:a6:9a:ab:bd:76:49:a5:4d:
45:d9:78:fb:96:29:8a:78:02:c6:7a:6e:ab:6a:28:80:81:7a:
49:05:ff:54:f7:48:8f:aa:1e:ca:4d:5f:1a:d7:b4:45:d8:d7:
04:08:aa:39:53:54:75:36:cb:95:02:97:79:ab:77:53:ae:b2:
24:d6:b2:2f
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFbYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB
NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNjA0MTQw
NzE2MzFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDI0QzhBODNBRjlFNTVG
NUM1NDNGRTM3NjUxMTkzNzhGRkQzNTBDNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/7WA8fD6dQnoHJsw17wJLatoX+dOAouL5dtyTpicNu0u0Nj7q
C2CiSV4Vi6siuWYQ/I24NlnhtMU4agOkzpZvf0sCi5SfA1HIoruHV8x9unFDnSLT
uoH8oBrELztHKgxiPgj3SL3hVNJeN4IsN7cfIOCwrWH1wl0KlmRILVw+8fCgqOet
qNqdc0jdcvOfU6OppTBBSn9dFv+e8nsjvbUSwh+fM/6PDU3Vx6KGyKeHTHZjPsS2
J7pRG1hZoaNFKUC8I4Dx1XNOJ1w0XWjHbqzurUBRUJPgvfKh9fSYwEPQrc3Qv89w
fbBiS54o0GCFYKera7/uXdG33qc7fFKgmQ2NAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUJMioOvnlX1xUP+N2URk3j/01DEgwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it
/rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O
RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvSk1pb092bmxYMXhVUC1O
MlVSazNqXzAxREVnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
Aq9h1DANBgkqhkiG9w0BAQsFAAOCAQEABD6Rp3M+kxWTj4NIoCIPhXNyO+gImr+P
ZHA5n7fKy/oWJW9PySadcKpLS/ofvTMueNlosQBCBYPfI2ymJBw2RMElfyOLnIy4
fEBX9pW8Ttf6BT9F5K8Ayxhmynh+pYt8kqeGagXKFJ7tRSSUiDHuN26wHNfQ+a0L
F6XGQAJI9R4SEwley14VB2tv2IqlVhK8TkuydMrWhILmeNrQOwkR4aICMNUkQKTF
MwG8u6tpyeRxOk8RQONL8annS45Muaaaq712SaVNRdl4+5YpingCxnpuq2oogIF6
SQX/VPdIj6oeyk1fGte0RdjXBAiqOVNUdTbLlQKXeat3U66yJNayLw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:59 2026 by rpki-client