$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/LBQEV-4qBE6ypL0ntIQusoVobxg.roa File: LBQEV-4qBE6ypL0ntIQusoVobxg.roa (raw, json) Hash identifier: XsJw0O3C0UEXT31gJkPEFKDXNjqrhQWtXSFZ2TkyHaw= Subject key identifier: 2C:14:04:57:EE:2A:04:4E:B2:A4:BD:27:B4:84:2E:B2:85:68:6F:18 Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Certificate serial: 1471 Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/LBQEV-4qBE6ypL0ntIQusoVobxg.roa Signing time: Fri 22 Aug 2025 09:00:26 +0000 ROA not before: Fri 22 Aug 2025 09:00:26 +0000 ROA not after: Sat 22 Aug 2026 08:14:28 +0000 asID: 17709 IP address blocks: 203.207.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5233 (0x1471) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51 Validity Not Before: Aug 22 09:00:26 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=2C140457EE2A044EB2A4BD27B4842EB285686F18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fa:9c:f8:21:dd:ca:39:cc:e4:ca:7c:bf:bc: 48:a3:b6:c4:b9:d8:5f:cd:e6:9c:6e:78:a1:1e:1b: cf:33:62:31:a7:72:05:57:ba:8a:77:8f:8a:6f:09: 66:2e:d8:c2:e7:31:a2:24:c3:67:a3:fa:f0:02:99: e2:bb:61:ab:bd:38:7f:68:07:6d:ed:43:50:be:1c: 12:ef:ac:60:81:96:6f:27:8b:ce:14:40:f3:71:e1: 24:e9:48:62:a5:91:d9:c0:51:f9:6a:81:56:65:3e: 2b:86:7c:ec:ca:2c:7f:f0:2a:a6:cc:8d:be:56:47: 3a:f2:96:30:8b:af:a6:77:e7:d0:04:f9:69:af:df: 2d:01:1a:87:60:05:fe:1b:bc:01:32:17:6e:c1:af: 84:2d:e9:b9:c3:cf:67:97:e0:97:73:ba:0b:b5:67: 97:f3:9d:55:e2:66:7a:b9:2f:9c:e7:b8:55:a2:27: f5:ca:39:ac:6d:99:4f:9c:78:a5:64:2d:18:a6:e4: 4f:08:25:b9:66:c6:4c:24:c2:58:5f:27:65:b0:b5: 24:40:7f:ed:f0:8e:a2:76:c2:05:8a:c8:24:4a:49: 79:e4:48:f2:e6:d7:d0:12:cf:98:48:84:2a:09:c3: d5:65:c2:48:c3:21:55:56:8b:29:3c:ee:a0:3b:cc: 87:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:14:04:57:EE:2A:04:4E:B2:A4:BD:27:B4:84:2E:B2:85:68:6F:18 X509v3 Authority Key Identifier: keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/LBQEV-4qBE6ypL0ntIQusoVobxg.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 203.207.32.0/20 Signature Algorithm: sha256WithRSAEncryption b4:ff:ca:60:49:94:aa:1f:04:d5:ac:d4:e7:12:b1:6c:fd:1a: e3:11:88:47:3e:c4:7a:32:67:b6:9d:95:a7:be:c7:e2:f5:e2: bc:d2:0e:f6:fb:6f:b8:3d:82:c7:ec:fd:a3:6c:70:da:a0:3c: 8e:1f:b6:68:29:ba:2f:f7:8f:ff:03:cd:f1:c7:bc:a2:96:65: fa:3b:a2:f1:28:09:1f:80:28:ce:86:5d:7c:0d:1c:76:ad:b6: 6d:13:aa:b0:c7:04:93:7e:4b:19:ea:86:3e:7d:cf:2f:e2:c6: 0e:84:3a:0c:bc:f7:c1:99:10:c2:ad:3f:e1:7b:2e:0b:7a:0a: b6:0e:c1:c7:c5:04:0d:d4:e5:66:86:ac:b0:27:85:40:ee:13: 66:f6:3f:e0:d4:92:0d:77:da:16:5a:ef:87:f9:22:f8:49:e4: 0f:db:5b:39:4c:2e:60:74:42:8a:37:01:28:51:d9:ef:30:3a: 0b:15:6f:54:b1:ca:34:48:76:17:8f:a3:c2:c9:fd:65:c0:98: 71:df:bc:3c:15:64:49:d3:31:a3:d4:66:2a:7b:a0:c4:9c:ca: 47:cb:9e:23:3b:44:f8:63:af:d5:c9:a3:72:e9:aa:6c:fa:e9: 71:ee:b0:6b:50:01:74:44:c8:2e:e3:d6:10:2e:c7:f8:6e:15: 85:64:1f:02 -----BEGIN CERTIFICATE----- MIIEzDCCA7SgAwIBAgICFHEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0U2 M0E1ODdENUU3MUZCQkQ4QzgxRUMzNEZFNTM2NkFDNjkxQUI1MTAeFw0yNTA4MjIw OTAwMjZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDJDMTQwNDU3RUUyQTA0 NEVCMkE0QkQyN0I0ODQyRUIyODU2ODZGMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDG+pz4Id3KOczkyny/vEijtsS52F/N5pxueKEeG88zYjGncgVX uop3j4pvCWYu2MLnMaIkw2ej+vACmeK7Yau9OH9oB23tQ1C+HBLvrGCBlm8ni84U QPNx4STpSGKlkdnAUflqgVZlPiuGfOzKLH/wKqbMjb5WRzryljCLr6Z359AE+Wmv 3y0BGodgBf4bvAEyF27Br4Qt6bnDz2eX4Jdzugu1Z5fznVXiZnq5L5znuFWiJ/XK OaxtmU+ceKVkLRim5E8IJblmxkwkwlhfJ2WwtSRAf+3wjqJ2wgWKyCRKSXnkSPLm 19ASz5hIhCoJw9VlwkjDIVVWiyk87qA7zIc/AgMBAAGjggHoMIIB5DAdBgNVHQ4E FgQULBQEV+4qBE6ypL0ntIQusoVobxgwHwYDVR0jBBgwFoAUPmOlh9XnH7vYyB7D T+U2asaRq1EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL1Bt T2xoOVhuSDd2WXlCN0RULVUyYXNhUnExRS5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev UG1PbGg5WG5IN3ZZeUI3RFQtVTJhc2FScTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvRkVUL0xCUUVWLTRxQkU2eXBMMG50SVF1c29W b2J4Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATLzyAwDQYJ KoZIhvcNAQELBQADggEBALT/ymBJlKofBNWs1OcSsWz9GuMRiEc+xHoyZ7adlae+ x+L14rzSDvb7b7g9gsfs/aNscNqgPI4ftmgpui/3j/8DzfHHvKKWZfo7ovEoCR+A KM6GXXwNHHattm0TqrDHBJN+Sxnqhj59zy/ixg6EOgy898GZEMKtP+F7Lgt6CrYO wcfFBA3U5WaGrLAnhUDuE2b2P+DUkg132hZa74f5IvhJ5A/bWzlMLmB0Qoo3AShR 2e8wOgsVb1SxyjRIdhePo8LJ/WXAmHHfvDwVZEnTMaPUZip7oMScykfLniM7RPhj r9XJo3Lpqmz66XHusGtQAXREyC7j1hAux/huFYVkHwI= -----END CERTIFICATE-----Generated at Thu Nov 6 01:56:52 2025 by rpki-client