$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IAMT/LKqjR3X8xPwN6qXNbqpdZaU4mTE.roa File: LKqjR3X8xPwN6qXNbqpdZaU4mTE.roa (raw, json) Hash identifier: jINXH81Sv0BJDWCAEjeXIc3SDJ2ys1FOoIa5+DVxVaY= Subject key identifier: 2C:AA:A3:47:75:FC:C4:FC:0D:EA:A5:CD:6E:AA:5D:65:A5:38:99:31 Certificate issuer: /CN=F33A72AAF798105BB277F094458E464B4659F803 Certificate serial: 01D8 Authority key identifier: F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/LKqjR3X8xPwN6qXNbqpdZaU4mTE.roa Signing time: Tue 13 May 2025 04:39:05 +0000 ROA not before: Tue 13 May 2025 04:39:05 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 152609 IP address blocks: 157.20.248.20/30 maxlen: 30 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 08:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F33A72AAF798105BB277F094458E464B4659F803 Validity Not Before: May 13 04:39:05 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2CAAA34775FCC4FC0DEAA5CD6EAA5D65A5389931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:67:db:6f:73:86:3f:44:fc:af:f1:42:0d: 07:23:32:21:05:e0:78:db:51:a7:39:47:79:85:49: e0:df:36:e1:41:96:e1:ba:42:b7:c4:1d:04:6f:3a: 3e:3f:88:bf:4f:99:af:6f:bd:89:c5:5c:4b:71:55: 13:87:4c:af:f2:62:63:7d:c7:d2:8d:49:0f:7a:f3: d4:bd:d2:2f:6b:fe:4d:b5:f7:98:4f:53:38:3d:a8: fc:db:0e:ed:17:b5:51:01:bf:b3:38:7c:e1:23:8f: a2:f7:aa:3d:cf:f1:56:d5:68:c3:86:f6:77:af:08: 28:6f:b1:fe:f8:f0:25:24:09:e0:fd:6f:49:7d:20: c8:21:78:94:5a:b3:b2:2b:d7:e4:7f:7d:82:7e:5a: 80:ad:ce:cd:e6:50:29:e7:b6:cb:9b:6d:84:cf:4c: e9:a7:83:e2:0c:16:2c:b8:af:e7:17:66:5b:be:cf: f7:44:ec:d4:ac:d4:f9:c9:e5:49:30:61:9b:45:20: 8a:a3:f5:c2:58:58:b0:07:34:4c:26:79:17:ff:10: 2c:08:b0:89:2a:85:38:27:8e:89:00:69:b0:d8:d7: 46:25:cc:21:7c:2c:6f:bd:2c:93:9c:4d:3d:5d:7e: 4d:68:4f:34:ad:25:b8:bd:e5:37:47:3f:48:b0:bd: d6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AA:A3:47:75:FC:C4:FC:0D:EA:A5:CD:6E:AA:5D:65:A5:38:99:31 X509v3 Authority Key Identifier: keyid:F3:3A:72:AA:F7:98:10:5B:B2:77:F0:94:45:8E:46:4B:46:59:F8:03 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/8zpyqveYEFuyd_CURY5GS0ZZ-AM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IAMT/LKqjR3X8xPwN6qXNbqpdZaU4mTE.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.248.20/30 Signature Algorithm: sha256WithRSAEncryption 66:86:0c:95:e6:d5:0b:a4:d9:96:15:f3:0c:db:0c:80:d2:fc: 8b:c6:fe:49:96:7c:60:bf:66:5d:35:65:42:8d:32:56:66:7b: 20:34:10:b4:f3:97:36:01:24:0f:58:78:9c:f0:f5:93:49:4e: ab:d1:76:c3:f4:8a:0c:72:eb:97:2e:81:c6:72:b3:10:1a:39: 3a:33:03:9c:ab:dd:70:a2:7d:82:31:9f:d7:9c:7c:85:b4:5b: a4:ed:b9:09:88:eb:d4:5b:2e:16:64:9a:74:e9:40:63:3e:70: c3:b6:ad:4b:7e:f6:9e:74:da:3d:11:33:9e:e8:78:12:ec:2c: 8d:14:21:11:a7:e1:9b:b0:1a:f4:65:6f:91:39:50:fc:89:b2: 3d:79:58:38:a6:65:13:38:24:e1:b6:8f:10:4d:0c:5d:b3:ba: 4a:72:a6:11:91:1c:00:92:0e:00:62:43:25:bc:3a:9a:2e:0a: 2e:6b:ff:05:1f:0b:12:41:69:1b:81:68:38:87:6a:52:f2:59: 73:f6:5e:63:c7:3d:a4:6c:5b:a8:f2:f6:7e:55:53:31:cc:3e: 55:42:23:e7:97:98:9e:68:21:51:86:5a:ff:15:0a:fe:9d:8d: 3e:66:eb:b8:72:86:8e:e6:94:84:f2:3b:b1:fe:ad:54:41:d2: 52:8e:41:8e -----BEGIN CERTIFICATE----- MIIEzzCCA7egAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjMz QTcyQUFGNzk4MTA1QkIyNzdGMDk0NDU4RTQ2NEI0NjU5RjgwMzAeFw0yNTA1MTMw NDM5MDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJDQUFBMzQ3NzVGQ0M0 RkMwREVBQTVDRDZFQUE1RDY1QTUzODk5MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDES2fbb3OGP0T8r/FCDQcjMiEF4HjbUac5R3mFSeDfNuFBluG6 QrfEHQRvOj4/iL9Pma9vvYnFXEtxVROHTK/yYmN9x9KNSQ9689S90i9r/k2195hP Uzg9qPzbDu0XtVEBv7M4fOEjj6L3qj3P8VbVaMOG9nevCChvsf748CUkCeD9b0l9 IMgheJRas7Ir1+R/fYJ+WoCtzs3mUCnntsubbYTPTOmng+IMFiy4r+cXZlu+z/dE 7NSs1PnJ5UkwYZtFIIqj9cJYWLAHNEwmeRf/ECwIsIkqhTgnjokAabDY10YlzCF8 LG+9LJOcTT1dfk1oTzStJbi95TdHP0iwvdZjAgMBAAGjggHrMIIB5zAdBgNVHQ4E FgQULKqjR3X8xPwN6qXNbqpdZaU4mTEwHwYDVR0jBBgwFoAU8zpyqveYEFuyd/CU RY5GS0ZZ+AMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSUFNVC84 enB5cXZlWUVGdXlkX0NVUlk1R1MwWlotQU0uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB Lzh6cHlxdmVZRUZ1eWRfQ1VSWTVHUzBaWi1BTS5jZXIwDgYDVR0PAQH/BAQDAgeA MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBL0lBTVQvTEtxalIzWDh4UHdONnFYTmJxcGRa YVU0bVRFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy ZHAvbm90aWZ5LnhtbDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFAp0U+BQw DQYJKoZIhvcNAQELBQADggEBAGaGDJXm1Quk2ZYV8wzbDIDS/IvG/kmWfGC/Zl01 ZUKNMlZmeyA0ELTzlzYBJA9YeJzw9ZNJTqvRdsP0igxy65cugcZysxAaOTozA5yr 3XCifYIxn9ecfIW0W6TtuQmI69RbLhZkmnTpQGM+cMO2rUt+9p502j0RM57oeBLs LI0UIRGn4ZuwGvRlb5E5UPyJsj15WDimZRM4JOG2jxBNDF2zukpyphGRHACSDgBi QyW8OpouCi5r/wUfCxJBaRuBaDiHalLyWXP2XmPHPaRsW6jy9n5VUzHMPlVCI+eX mJ5oIVGGWv8VCv6djT5m67hyho7mlITyO7H+rVRB0lKOQY4= -----END CERTIFICATE-----Generated at Mon May 19 07:22:35 2025 by rpki-client