$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/LSX4fsAZg0BMHrYF6Od8mtvTDtk.roa File: LSX4fsAZg0BMHrYF6Od8mtvTDtk.roa (raw, json) Hash identifier: EpQzTqDgbvimXfBBbo1WZlcj2y014mNm8ypcOh2QOo4= Subject key identifier: 2D:25:F8:7E:C0:19:83:40:4C:1E:B6:05:E8:E7:7C:9A:DB:D3:0E:D9 Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3 Certificate serial: 0EC6 Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/LSX4fsAZg0BMHrYF6Od8mtvTDtk.roa Signing time: Mon 10 Feb 2025 14:02:46 +0000 ROA not before: Mon 10 Feb 2025 14:02:46 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131618 IP address blocks: 103.135.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3782 (0xec6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3 Validity Not Before: Feb 10 14:02:46 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=2D25F87EC01983404C1EB605E8E77C9ADBD30ED9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c7:43:bd:95:ef:55:a2:5d:cb:93:cd:46:5d: b9:1b:86:bb:df:5a:2b:b3:b0:61:28:0c:44:33:df: 14:69:69:bc:ae:6e:2d:67:86:20:fc:89:4a:ee:50: c1:8e:0f:95:ac:35:e7:7c:01:12:92:70:e7:b4:2f: 8e:6b:0e:41:a8:0c:35:49:9b:4c:2c:14:b5:f6:1e: 83:48:18:ef:21:10:67:c9:c9:2f:53:f3:c4:8c:52: d5:37:29:b5:10:1a:ed:07:29:8b:39:19:89:8b:18: 21:c3:d8:d6:b6:15:9f:7f:95:71:0d:de:7f:3b:57: 61:8e:ee:6b:91:c0:32:b8:5f:1b:c0:26:4e:36:8d: 49:26:cd:b9:6b:cf:2e:5f:08:df:f5:b9:1f:b7:6e: 7f:62:91:0d:4b:bd:2f:b0:47:77:ed:7d:75:40:b9: 63:bf:c2:71:a2:6e:47:91:55:2d:b2:95:b4:82:e9: 65:98:c1:af:dc:55:80:8e:9d:7a:a5:92:27:25:03: df:b5:21:88:69:49:ae:d6:8c:91:d3:62:d8:ce:d5: e4:b8:1c:25:03:a9:2f:10:a7:c7:d9:5f:3a:4b:2e: 59:c5:0c:b1:4a:8f:e3:58:c2:13:8f:bc:2a:e6:29: 68:f5:a6:66:e4:63:a3:48:3e:de:26:54:f9:95:72: 14:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:25:F8:7E:C0:19:83:40:4C:1E:B6:05:E8:E7:7C:9A:DB:D3:0E:D9 X509v3 Authority Key Identifier: keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/LSX4fsAZg0BMHrYF6Od8mtvTDtk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.117.0/24 Signature Algorithm: sha256WithRSAEncryption 34:c2:02:45:69:ad:cb:fb:71:3c:a6:96:b7:1c:d3:88:70:d0: 66:64:17:81:3b:8d:37:04:d5:8c:b7:d6:bb:14:1e:9f:e4:e0: 3e:99:c7:79:40:43:d3:ef:cd:c4:0e:78:79:0f:90:60:7c:72: aa:0b:5a:2b:92:7f:e5:08:a8:69:23:35:53:da:00:a1:4b:9e: 24:59:f2:29:cb:82:b8:77:6e:71:13:36:d5:93:64:d0:f2:ed: 9c:c4:b1:41:fa:f8:0d:21:ab:19:dc:ad:38:30:9b:1a:e0:96: f2:b7:69:e0:38:aa:1e:18:3a:f9:fd:33:cd:00:0c:65:68:ae: a5:b3:92:bb:93:05:8c:62:07:4e:0f:d2:c6:c9:c6:b4:da:77: 29:cf:ea:10:11:cf:d3:82:10:d6:36:ce:e9:08:58:75:b4:ef: 39:37:c7:09:c4:c8:a3:8d:b2:d8:78:0c:28:ed:07:76:f5:5b: e7:7f:fb:aa:1a:cf:85:64:23:05:4d:48:71:76:6b:20:7e:45: 95:f0:42:99:ef:95:c1:72:87:e1:3a:14:5f:8b:d5:e0:0d:0b: 9f:4b:4c:64:27:54:d9:76:a7:8c:57:4d:97:75:a4:aa:f0:51: f0:46:30:a7:c4:fd:8b:68:16:92:fd:fc:77:aa:e6:08:b5:e0: 02:30:d7:44 -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDsYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTJG QjczOTUyNUI3NDJBMjhBNzQzMzE1QzZDODhFNzY2QTdFMERDMzAeFw0yNTAyMTAx NDAyNDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDJEMjVGODdFQzAxOTgz NDA0QzFFQjYwNUU4RTc3QzlBREJEMzBFRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCtx0O9le9Vol3Lk81GXbkbhrvfWiuzsGEoDEQz3xRpabyubi1n hiD8iUruUMGOD5WsNed8ARKScOe0L45rDkGoDDVJm0wsFLX2HoNIGO8hEGfJyS9T 88SMUtU3KbUQGu0HKYs5GYmLGCHD2Na2FZ9/lXEN3n87V2GO7muRwDK4XxvAJk42 jUkmzblrzy5fCN/1uR+3bn9ikQ1LvS+wR3ftfXVAuWO/wnGibkeRVS2ylbSC6WWY wa/cVYCOnXqlkiclA9+1IYhpSa7WjJHTYtjO1eS4HCUDqS8Qp8fZXzpLLlnFDLFK j+NYwhOPvCrmKWj1pmbkY6NIPt4mVPmVchQbAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQULSX4fsAZg0BMHrYF6Od8mtvTDtkwHwYDVR0jBBgwFoAUovtzlSW3QqKKdDMV xsiOdmp+DcMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQUNM T1VEL292dHpsU1czUXFLS2RETVZ4c2lPZG1wLURjTS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0Evb3Z0emxTVzNRcUtLZERNVnhzaU9kbXAtRGNNLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQUNMT1VEL0xTWDRmc0FaZzBC TUhyWUY2T2Q4bXR2VER0ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnh3UwDQYJKoZIhvcNAQELBQADggEBADTCAkVprcv7cTymlrcc04hw0GZk F4E7jTcE1Yy31rsUHp/k4D6Zx3lAQ9PvzcQOeHkPkGB8cqoLWiuSf+UIqGkjNVPa AKFLniRZ8inLgrh3bnETNtWTZNDy7ZzEsUH6+A0hqxncrTgwmxrglvK3aeA4qh4Y Ovn9M80ADGVorqWzkruTBYxiB04P0sbJxrTadynP6hARz9OCENY2zukIWHW07zk3 xwnEyKONsth4DCjtB3b1W+d/+6oaz4VkIwVNSHF2ayB+RZXwQpnvlcFyh+E6FF+L 1eANC59LTGQnVNl2p4xXTZd1pKrwUfBGMKfE/YtoFpL9/Heq5gi14AIw10Q= -----END CERTIFICATE-----Generated at Fri Apr 18 22:43:49 2025 by rpki-client