$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/LB8WifvRyRE3mBEWQQqNkPvg08A.roa File: LB8WifvRyRE3mBEWQQqNkPvg08A.roa (raw, json) Hash identifier: GOfwZTHCrxLJ9mnKrODYXJEzZ3Q8afH6jnDI6yPm4D8= Subject key identifier: 2C:1F:16:89:FB:D1:C9:11:37:98:11:16:41:0A:8D:90:FB:E0:D3:C0 Certificate issuer: /CN=ABC8439FE19D99B038270208C94B66CA231FFED5 Certificate serial: 02FF Authority key identifier: AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/LB8WifvRyRE3mBEWQQqNkPvg08A.roa Signing time: Mon 10 Feb 2025 13:57:24 +0000 ROA not before: Mon 10 Feb 2025 13:57:24 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 38047 IP address blocks: 2400:61a0:a054::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 06:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 767 (0x2ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ABC8439FE19D99B038270208C94B66CA231FFED5 Validity Not Before: Feb 10 13:57:24 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2C1F1689FBD1C91137981116410A8D90FBE0D3C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2b:25:14:78:bb:19:b7:de:62:f1:36:03:f0: b6:6c:b1:dc:fb:63:df:ab:37:d5:96:69:7c:5a:63: 4c:d5:04:66:2b:b5:2c:75:92:1a:77:c9:00:cc:ea: 42:5c:7e:87:c3:24:b7:7c:39:54:d2:1b:76:7d:bd: df:7a:9a:ab:8a:9d:47:9b:ee:42:99:68:6a:a2:8c: ee:a8:96:9d:ee:7a:5f:84:3d:e1:fe:cd:e9:c1:57: 1b:a3:ae:aa:e9:2e:18:eb:85:7e:a6:fd:07:57:46: d6:e1:6f:03:d8:55:51:13:0a:7b:2a:92:36:4d:f3: 41:c8:7d:2e:7a:d4:b3:13:02:06:ff:5d:2f:c0:b0: 5a:02:11:ab:21:59:f2:59:fc:6e:72:46:fb:b8:99: 1f:be:d5:81:0e:22:ac:48:a4:d2:f7:1c:e4:24:c8: 31:80:39:68:f8:ef:d0:d8:75:ec:de:82:bf:42:48: c1:72:45:2d:a8:5a:df:0c:17:18:17:97:1c:a5:9b: 5b:bf:49:c8:e4:e0:59:ba:d4:1b:bb:82:d1:25:d3: b7:44:af:d1:87:3a:dd:81:bf:27:e8:56:0e:a0:d8: 98:a4:c2:af:ce:0a:dc:4b:48:23:7d:55:21:85:c4: a2:7d:4e:92:96:f6:07:2b:4f:f1:c1:2f:c1:dc:56: 84:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1F:16:89:FB:D1:C9:11:37:98:11:16:41:0A:8D:90:FB:E0:D3:C0 X509v3 Authority Key Identifier: keyid:AB:C8:43:9F:E1:9D:99:B0:38:27:02:08:C9:4B:66:CA:23:1F:FE:D5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/q8hDn-GdmbA4JwIIyUtmyiMf_tU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q8hDn-GdmbA4JwIIyUtmyiMf_tU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHINATEL/LB8WifvRyRE3mBEWQQqNkPvg08A.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2400:61a0:a054::/48 Signature Algorithm: sha256WithRSAEncryption 83:01:95:0b:99:42:ac:7b:37:c8:2e:62:ed:76:cf:b9:7e:12: 15:58:76:19:78:dc:70:f2:c5:a4:e5:4e:08:dc:8a:10:0b:db: 68:a5:a7:c6:ef:e0:3f:ce:82:9b:7c:97:69:98:ea:d4:18:04: be:27:f0:36:32:34:b8:01:29:0d:0c:6e:3e:96:e3:f0:88:dc: 4b:77:fe:43:fb:8c:bb:f5:32:47:90:21:5a:d3:e1:0f:29:82: 42:44:d6:3a:4b:38:42:3c:f4:67:f5:2c:4f:f9:6d:73:49:23: 1d:86:8d:bf:38:c6:41:66:9e:de:b3:37:13:35:85:3f:e1:4e: c9:e5:77:00:64:4f:b5:1f:87:f9:94:a5:03:4d:e6:db:3e:2b: 4e:18:b9:18:28:59:1e:0a:ac:bf:7a:72:4d:10:21:b0:13:0c: b5:20:91:8e:9c:2b:3b:33:d6:a6:75:53:c1:aa:ca:0e:64:97: a5:58:bd:05:e9:e6:bb:90:05:fa:72:da:85:45:b8:91:7f:c9: 56:9b:85:d5:8f:65:20:a1:e9:f0:af:90:db:d0:6c:31:c4:6b: a8:7c:d2:ee:5e:e1:11:04:5a:9a:25:c7:09:c4:04:07:0a:50: c7:20:06:38:c4:99:6c:f3:c6:d8:86:89:1c:83:ac:0d:24:e3: 4d:84:d8:4b -----BEGIN CERTIFICATE----- MIIE2TCCA8GgAwIBAgICAv8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUJD ODQzOUZFMTlEOTlCMDM4MjcwMjA4Qzk0QjY2Q0EyMzFGRkVENTAeFw0yNTAyMTAx MzU3MjRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJDMUYxNjg5RkJEMUM5 MTEzNzk4MTExNjQxMEE4RDkwRkJFMEQzQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCTKyUUeLsZt95i8TYD8LZssdz7Y9+rN9WWaXxaY0zVBGYrtSx1 khp3yQDM6kJcfofDJLd8OVTSG3Z9vd96mquKnUeb7kKZaGqijO6olp3uel+EPeH+ zenBVxujrqrpLhjrhX6m/QdXRtbhbwPYVVETCnsqkjZN80HIfS561LMTAgb/XS/A sFoCEashWfJZ/G5yRvu4mR++1YEOIqxIpNL3HOQkyDGAOWj479DYdezegr9CSMFy RS2oWt8MFxgXlxylm1u/Scjk4Fm61Bu7gtEl07dEr9GHOt2BvyfoVg6g2Jikwq/O CtxLSCN9VSGFxKJ9TpKW9gcrT/HBL8HcVoTjAgMBAAGjggH1MIIB8TAdBgNVHQ4E FgQULB8WifvRyRE3mBEWQQqNkPvg08AwHwYDVR0jBBgwFoAUq8hDn+GdmbA4JwII yUtmyiMf/tUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJTkFU RUwvcThoRG4tR2RtYkE0SndJSXlVdG15aU1mX3RVLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9xOGhEbi1HZG1iQTRKd0lJeVV0bXlpTWZfdFUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElOQVRFTC9MQjhXaWZ2UnlSRTNt QkVXUVFxTmtQdmcwOEEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ AwcAJABhoKBUMA0GCSqGSIb3DQEBCwUAA4IBAQCDAZULmUKsezfILmLtds+5fhIV WHYZeNxw8sWk5U4I3IoQC9topafG7+A/zoKbfJdpmOrUGAS+J/A2MjS4ASkNDG4+ luPwiNxLd/5D+4y79TJHkCFa0+EPKYJCRNY6SzhCPPRn9SxP+W1zSSMdho2/OMZB Zp7eszcTNYU/4U7J5XcAZE+1H4f5lKUDTebbPitOGLkYKFkeCqy/enJNECGwEwy1 IJGOnCs7M9amdVPBqsoOZJelWL0F6ea7kAX6ctqFRbiRf8lWm4XVj2Ugoenwr5Db 0GwxxGuofNLuXuERBFqaJccJxAQHClDHIAY4xJls88bYhokcg6wNJONNhNhL -----END CERTIFICATE-----Generated at Wed Apr 23 04:23:21 2025 by rpki-client