$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LqJK_E-E4fRaLOE5QEE7RRzIq1g.roa File: LqJK_E-E4fRaLOE5QEE7RRzIq1g.roa (raw, json) Hash identifier: 9pfmd5Juv3bdGDF+ImWoAmSjOziL/BmJlheyor8Ppic= Subject key identifier: 2E:A2:4A:FC:4F:84:E1:F4:5A:2C:E1:39:40:41:3B:45:1C:C8:AB:58 Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A Certificate serial: 2491 Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LqJK_E-E4fRaLOE5QEE7RRzIq1g.roa Signing time: Mon 10 Feb 2025 14:18:47 +0000 ROA not before: Mon 10 Feb 2025 14:18:47 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 24164 IP address blocks: 124.6.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9361 (0x2491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08469E113701815993013E13E548A2B340E44E0A Validity Not Before: Feb 10 14:18:47 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2EA24AFC4F84E1F45A2CE13940413B451CC8AB58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:36:3c:b3:42:5b:7c:63:91:38:fc:ca:24:01: 89:ac:fc:5d:5e:68:5f:b1:c9:3e:77:db:8d:7c:22: 0d:62:72:39:8e:dd:5f:90:42:3e:6d:70:74:69:da: 8c:a6:8d:61:14:8a:9f:4a:ec:a1:1a:3b:0e:ae:15: c8:07:fe:4a:17:98:7e:ec:58:87:73:8d:66:0d:f1: d4:57:00:a2:5a:e4:ce:d0:72:df:05:74:4f:0b:aa: 4e:7f:e5:ae:55:d8:e0:68:97:a7:52:fc:6b:68:8f: 24:92:81:a8:44:ff:8d:66:7f:bf:05:5d:bc:c8:b7: ec:f1:e3:e5:4f:cc:b6:27:eb:c6:ce:69:40:29:d9: dd:ee:60:6d:9b:73:6b:ab:1c:c1:4f:b2:24:64:4e: b9:88:3e:6f:02:e7:7e:8d:97:13:96:c1:ae:c1:4e: d0:07:da:70:49:06:b1:01:d4:e3:c2:b8:03:ad:48: 89:23:1a:5d:b8:91:5f:09:b7:f6:fb:4f:90:3b:cf: 38:31:0a:e5:05:7c:35:5c:e5:4f:05:7e:3a:ea:c6: 1b:5d:64:20:c2:74:df:83:a3:4d:a0:b9:5e:57:61: 0d:39:ae:23:4a:ff:9b:29:ac:1d:41:4c:b4:99:f1: e4:46:7e:5c:13:df:a8:35:58:ba:56:93:24:b9:bd: 88:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A2:4A:FC:4F:84:E1:F4:5A:2C:E1:39:40:41:3B:45:1C:C8:AB:58 X509v3 Authority Key Identifier: keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/LqJK_E-E4fRaLOE5QEE7RRzIq1g.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 124.6.8.0/22 Signature Algorithm: sha256WithRSAEncryption 83:da:92:ff:1e:d1:d3:28:da:10:6d:61:2a:a5:e5:30:61:62: 76:f6:42:a3:57:f2:bf:7b:f2:a9:00:8a:56:0d:8f:0c:61:3e: ec:b1:a9:77:7a:8c:40:d8:97:ce:5d:98:c5:7e:64:81:a9:86: 4a:53:0f:b7:27:fc:dd:cc:d0:fe:a7:f8:d9:95:61:95:1d:2c: 91:85:6e:ac:11:ea:1f:17:aa:0a:fb:67:d8:5c:1d:ba:98:88: 9f:0e:b7:37:31:a8:bb:42:b8:97:17:6a:b8:08:9e:5f:93:10: 90:19:b8:a0:21:57:61:b1:83:d3:73:70:d2:32:7d:1f:a9:14: c4:33:bd:a7:f5:94:40:97:52:3d:61:f0:fd:f8:5c:68:59:3c: 7e:18:89:bc:e7:85:c7:30:90:2b:c3:77:71:d4:d2:1b:65:91: 97:10:b4:80:db:5e:6e:10:eb:5c:17:7e:3f:04:9e:a1:ee:a0: 47:7e:d4:33:8b:ab:6b:51:19:9b:d5:a3:fc:3a:15:eb:d3:d7: 43:57:cf:c9:86:03:75:9a:d2:d2:c0:d7:64:eb:6c:f6:6a:4e: 21:db:0a:aa:0b:38:32:11:d1:86:95:06:ac:09:67:97:b6:16: 8c:dd:a1:ca:e9:2d:e5:69:1c:47:d0:d7:c4:bb:df:63:80:f1: e9:65:ee:a5 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICJJEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0 NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yNTAyMTAx NDE4NDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJFQTI0QUZDNEY4NEUx RjQ1QTJDRTEzOTQwNDEzQjQ1MUNDOEFCNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQChNjyzQlt8Y5E4/MokAYms/F1eaF+xyT532418Ig1icjmO3V+Q Qj5tcHRp2oymjWEUip9K7KEaOw6uFcgH/koXmH7sWIdzjWYN8dRXAKJa5M7Qct8F dE8Lqk5/5a5V2OBol6dS/GtojySSgahE/41mf78FXbzIt+zx4+VPzLYn68bOaUAp 2d3uYG2bc2urHMFPsiRkTrmIPm8C536NlxOWwa7BTtAH2nBJBrEB1OPCuAOtSIkj Gl24kV8Jt/b7T5A7zzgxCuUFfDVc5U8FfjrqxhtdZCDCdN+Do02guV5XYQ05riNK /5sprB1BTLSZ8eRGflwT36g1WLpWkyS5vYgLAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQULqJK/E+E4fRaLOE5QEE7RRzIq1gwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T 5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL0xxSktfRS1FNGZSYUxPRTVR RUU3UlJ6SXExZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ8 BggwDQYJKoZIhvcNAQELBQADggEBAIPakv8e0dMo2hBtYSql5TBhYnb2QqNX8r97 8qkAilYNjwxhPuyxqXd6jEDYl85dmMV+ZIGphkpTD7cn/N3M0P6n+NmVYZUdLJGF bqwR6h8Xqgr7Z9hcHbqYiJ8OtzcxqLtCuJcXargInl+TEJAZuKAhV2Gxg9NzcNIy fR+pFMQzvaf1lECXUj1h8P34XGhZPH4YibznhccwkCvDd3HU0htlkZcQtIDbXm4Q 61wXfj8EnqHuoEd+1DOLq2tRGZvVo/w6FevT10NXz8mGA3Wa0tLA12TrbPZqTiHb CqoLODIR0YaVBqwJZ5e2FozdocrpLeVpHEfQ18S732OA8ell7qU= -----END CERTIFICATE-----Generated at Thu Apr 17 21:00:55 2025 by rpki-client