$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ttdZq7ZbhutiVqoq82EJGQxhRRE.roa File: ttdZq7ZbhutiVqoq82EJGQxhRRE.roa (raw, json) Hash identifier: WLgO+5DRGA/6o6HyZ/syeYdRjjDetAe5Y9nXL2Dt62A= Subject key identifier: B6:D7:59:AB:B6:5B:86:EB:62:56:AA:2A:F3:61:09:19:0C:61:45:11 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 14AF Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ttdZq7ZbhutiVqoq82EJGQxhRRE.roa Signing time: Fri 22 Aug 2025 08:54:41 +0000 ROA not before: Fri 22 Aug 2025 08:54:41 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 20940 IP address blocks: 2001:4546:1003::/48 maxlen: 64 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 06:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5295 (0x14af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Aug 22 08:54:41 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B6D759ABB65B86EB6256AA2AF36109190C614511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:59:7d:63:96:fd:b2:bf:19:3e:4e:7e:b8:76: d9:39:41:b6:f5:65:23:d1:49:74:97:62:19:50:07: a6:e9:93:7a:cf:a5:55:17:47:e0:63:6b:83:69:95: 68:fa:09:c1:ac:7f:b6:d1:1d:03:66:95:94:4f:28: e2:99:99:01:79:25:df:45:f1:6c:16:e6:42:87:ef: e7:36:1e:c6:0e:4b:14:87:f4:53:c1:33:29:fd:55: 16:6f:3a:30:1b:e5:d9:1d:09:b0:60:25:24:51:f8: c6:88:26:cd:c3:3a:f0:23:7d:91:b9:b1:4a:b7:f1: 13:a6:bd:ec:95:31:76:2b:fe:97:69:00:5e:7b:a8: 0d:8a:0d:e5:d1:77:53:23:04:e9:45:18:36:73:0c: 12:d8:cb:84:9b:61:77:d4:1d:e7:36:e7:cf:32:2e: 9c:42:55:97:ac:ad:8d:9d:1e:0d:e0:2f:5c:ed:32: 88:a7:be:90:c3:84:02:12:6e:50:67:f1:96:81:2f: ac:99:17:65:3a:00:ba:d9:16:f3:c9:62:0f:b3:80: 8e:91:64:38:d3:12:4d:0c:c8:9b:90:a9:21:fa:c0: 49:24:77:2c:eb:28:21:c8:44:63:5b:7f:37:4a:a2: b6:9e:ae:76:71:0d:f8:1e:ce:fd:21:aa:d4:67:5b: ea:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D7:59:AB:B6:5B:86:EB:62:56:AA:2A:F3:61:09:19:0C:61:45:11 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/ttdZq7ZbhutiVqoq82EJGQxhRRE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2001:4546:1003::/48 Signature Algorithm: sha256WithRSAEncryption 11:d2:31:60:b0:2e:ad:bf:0c:52:6f:d2:57:d2:2e:b3:2d:a5: 11:ab:26:ce:5c:45:95:2b:a8:eb:b7:c9:37:b7:60:13:6d:fa: 60:48:67:69:4e:43:54:14:6f:42:09:9d:e4:e4:6b:de:ab:70: c1:5e:fb:c7:c3:68:86:e4:ac:e1:d3:f2:60:95:7a:67:1c:d1: c1:50:f0:76:bd:f8:45:73:b1:47:ed:61:1e:ad:54:11:47:50: e3:d6:4d:6f:be:d1:13:ca:08:eb:d2:5b:da:1d:0b:55:de:d4: f3:5c:6d:23:30:ba:96:7e:4d:33:b5:7e:fa:48:48:8c:6e:aa: 7f:fc:6d:98:b7:07:f7:7c:af:b4:34:79:02:9a:20:f7:52:b5: 92:fd:80:33:0a:db:a8:74:28:b8:c1:d8:e2:bf:f1:4a:47:af: cc:80:2e:76:4d:ef:22:65:35:e8:4e:91:67:b6:e5:13:c5:6d: ef:f4:f7:01:c7:78:ee:cd:f8:c1:c0:b7:93:ee:3c:8d:fa:a6: 4b:0c:81:de:c5:84:29:b4:c2:b9:a9:3d:64:cb:29:5b:8e:58: e7:91:f3:aa:29:b5:b1:e7:fa:62:bb:81:53:e9:59:7f:39:f4: 1f:8d:f4:78:eb:32:07:65:6e:e3:49:19:69:4c:34:d2:20:a3: 25:bd:15:78 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICFK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yNTA4MjIw ODU0NDFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI2RDc1OUFCQjY1Qjg2 RUI2MjU2QUEyQUYzNjEwOTE5MEM2MTQ1MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJWX1jlv2yvxk+Tn64dtk5Qbb1ZSPRSXSXYhlQB6bpk3rPpVUX R+Bja4NplWj6CcGsf7bRHQNmlZRPKOKZmQF5Jd9F8WwW5kKH7+c2HsYOSxSH9FPB Myn9VRZvOjAb5dkdCbBgJSRR+MaIJs3DOvAjfZG5sUq38ROmveyVMXYr/pdpAF57 qA2KDeXRd1MjBOlFGDZzDBLYy4SbYXfUHec2588yLpxCVZesrY2dHg3gL1ztMoin vpDDhAISblBn8ZaBL6yZF2U6ALrZFvPJYg+zgI6RZDjTEk0MyJuQqSH6wEkkdyzr KCHIRGNbfzdKoraernZxDfgezv0hqtRnW+q5AgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQUttdZq7ZbhutiVqoq82EJGQxhRREwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvdHRkWnE3WmJodXRpVnFv cTgyRUpHUXhoUlJFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH ACABRUYQAzANBgkqhkiG9w0BAQsFAAOCAQEAEdIxYLAurb8MUm/SV9Iusy2lEasm zlxFlSuo67fJN7dgE236YEhnaU5DVBRvQgmd5ORr3qtwwV77x8NohuSs4dPyYJV6 ZxzRwVDwdr34RXOxR+1hHq1UEUdQ49ZNb77RE8oI69Jb2h0LVd7U81xtIzC6ln5N M7V++khIjG6qf/xtmLcH93yvtDR5Apog91K1kv2AMwrbqHQouMHY4r/xSkevzIAu dk3vImU16E6RZ7blE8Vt7/T3Acd47s34wcC3k+48jfqmSwyB3sWEKbTCuak9ZMsp W45Y55Hzqim1sef6YruBU+lZfzn0H430eOsyB2Vu40kZaUw00iCjJb0VeA== -----END CERTIFICATE-----Generated at Wed Nov 5 04:41:08 2025 by rpki-client