$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LmT2PE_sxmWNqug9Naz8Cg2XDPE.roa File: LmT2PE_sxmWNqug9Naz8Cg2XDPE.roa (raw, json) Hash identifier: Eokhzf+LEgZQwBjbtc8/bYI6qU4kbfrReMQrijetsN8= Subject key identifier: 2E:64:F6:3C:4F:EC:C6:65:8D:AA:E8:3D:35:AC:FC:0A:0D:97:0C:F1 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 24C0 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LmT2PE_sxmWNqug9Naz8Cg2XDPE.roa Signing time: Mon 10 Feb 2025 14:18:57 +0000 ROA not before: Mon 10 Feb 2025 14:18:57 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 122.100.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 18:17:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9408 (0x24c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:57 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2E64F63C4FECC6658DAAE83D35ACFC0A0D970CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8e:72:48:8e:1c:e8:97:a3:2a:b5:b5:11:94: f0:1b:03:e5:b8:77:1f:d7:91:14:c7:5b:4f:38:3e: d6:5b:8d:90:5b:56:96:47:cc:9f:8a:af:90:6c:ee: 25:66:51:ef:eb:ff:eb:84:aa:ec:99:b4:89:cf:fd: 4a:10:f8:30:00:f9:49:0d:9e:75:7a:81:eb:44:49: 9a:69:df:3c:2c:83:1b:35:a1:c0:cd:26:06:ef:97: 81:29:e0:0f:8d:92:18:09:c2:c5:d4:a4:fc:f8:19: fb:a8:68:84:0e:66:b7:b5:64:e4:7a:d9:4e:d6:08: af:0f:85:e2:16:6b:a7:c5:ec:cf:93:55:4d:c8:1e: b2:e9:63:18:c2:c6:80:ad:cc:1e:b9:e6:0a:1d:13: ea:97:9d:76:3a:e2:8f:1a:5e:b5:fc:91:43:13:d4: 33:ed:95:4f:40:59:35:95:67:40:f5:17:f9:68:96: 02:3e:5e:bb:bf:30:ac:ce:4a:08:64:d8:32:60:a6: b5:bd:b6:33:13:d4:48:56:5a:5f:d0:7f:c9:e4:88: ea:5d:ee:e5:a6:a0:81:e1:f1:af:01:b7:a1:f9:7e: 45:35:ce:5d:44:71:3b:97:51:44:d6:e7:61:fd:6d: d9:da:71:00:dc:15:f2:74:06:d8:3e:b0:9c:1f:85: 50:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:64:F6:3C:4F:EC:C6:65:8D:AA:E8:3D:35:AC:FC:0A:0D:97:0C:F1 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LmT2PE_sxmWNqug9Naz8Cg2XDPE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 122.100.64.0/18 Signature Algorithm: sha256WithRSAEncryption 13:11:50:70:1c:d1:b8:65:8f:3d:99:48:f6:c7:14:dc:e1:cc: 33:da:86:4a:27:e6:8f:52:43:9f:dc:20:bc:4c:4c:63:10:c6: 5f:64:07:20:c3:82:50:3c:21:20:d6:97:d2:49:6c:42:86:01: 67:0e:6c:7a:09:29:75:b1:5f:cc:b4:a5:b3:a5:be:d0:91:2f: a6:ac:7e:2f:a8:90:a2:22:5b:d7:64:4d:30:0c:bf:2a:a6:d2: 73:03:6f:86:0c:43:d2:d5:53:ee:ba:bc:a6:2b:b2:a2:06:5a: d6:2d:67:64:51:4f:56:f4:07:cd:ce:fe:7d:ed:06:4d:e4:3d: 6a:7d:b7:ce:40:ec:e3:9f:c3:22:c0:3f:a0:37:dc:b1:67:62: 41:90:4f:05:f4:28:dd:48:20:db:10:e6:9b:e7:0a:4c:b4:74: 0f:0f:6f:62:1b:d4:39:4d:cd:7e:e9:23:2b:50:cf:f8:27:6b: 6f:20:80:a1:6a:d3:50:23:c1:f6:a0:8b:92:9e:35:25:c7:27: ae:a8:78:3d:86:c3:0a:73:f4:70:8a:e4:82:cd:5f:d2:38:c2: 19:43:a2:16:c1:20:00:f9:9c:4e:df:d1:0f:f7:73:fa:a0:16: 61:d8:ac:31:a6:e4:ff:62:71:ac:55:59:99:ac:69:eb:94:a1: 4e:86:0d:3c -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJMAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NTdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJFNjRGNjNDNEZFQ0M2 NjU4REFBRTgzRDM1QUNGQzBBMEQ5NzBDRjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKjnJIjhzol6MqtbURlPAbA+W4dx/XkRTHW084PtZbjZBbVpZH zJ+Kr5Bs7iVmUe/r/+uEquyZtInP/UoQ+DAA+UkNnnV6getESZpp3zwsgxs1ocDN Jgbvl4Ep4A+NkhgJwsXUpPz4GfuoaIQOZre1ZOR62U7WCK8PheIWa6fF7M+TVU3I HrLpYxjCxoCtzB655godE+qXnXY64o8aXrX8kUMT1DPtlU9AWTWVZ0D1F/lolgI+ Xru/MKzOSghk2DJgprW9tjMT1EhWWl/Qf8nkiOpd7uWmoIHh8a8Bt6H5fkU1zl1E cTuXUUTW52H9bdnacQDcFfJ0Btg+sJwfhVBpAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULmT2PE/sxmWNqug9Naz8Cg2XDPEwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0xtVDJQRV9zeG1XTnF1ZzlO YXo4Q2cyWERQRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ6 ZEAwDQYJKoZIhvcNAQELBQADggEBABMRUHAc0bhljz2ZSPbHFNzhzDPahkon5o9S Q5/cILxMTGMQxl9kByDDglA8ISDWl9JJbEKGAWcObHoJKXWxX8y0pbOlvtCRL6as fi+okKIiW9dkTTAMvyqm0nMDb4YMQ9LVU+66vKYrsqIGWtYtZ2RRT1b0B83O/n3t Bk3kPWp9t85A7OOfwyLAP6A33LFnYkGQTwX0KN1IINsQ5pvnCky0dA8Pb2Ib1DlN zX7pIytQz/gna28ggKFq01Ajwfagi5KeNSXHJ66oeD2Gwwpz9HCK5ILNX9I4whlD ohbBIAD5nE7f0Q/3c/qgFmHYrDGm5P9icaxVWZmsaeuUoU6GDTw= -----END CERTIFICATE-----Generated at Fri Apr 18 16:33:15 2025 by rpki-client