$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/f-AEje1mBuOhXLtWrQ4EvHOSy28.roa File: f-AEje1mBuOhXLtWrQ4EvHOSy28.roa (raw, json) Hash identifier: QUd7BOCYVX7r8zIfyCLi2IGbWg4FuDJ4XJCKgSlm59g= Subject key identifier: 7F:E0:04:8D:ED:66:06:E3:A1:5C:BB:56:AD:0E:04:BC:73:92:CB:6F Certificate issuer: /CN=A2FB739525B742A28A743315C6C88E766A7E0DC3 Certificate serial: 0D54 Authority key identifier: A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/f-AEje1mBuOhXLtWrQ4EvHOSy28.roa Signing time: Fri 01 Sep 2023 08:06:09 +0000 ROA not before: Fri 01 Sep 2023 08:06:09 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131618 IP address blocks: 103.135.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 May 2024 14:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3412 (0xd54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2FB739525B742A28A743315C6C88E766A7E0DC3 Validity Not Before: Sep 1 08:06:09 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=7FE0048DED6606E3A15CBB56AD0E04BC7392CB6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:28:05:df:37:bb:a3:2e:4f:3e:a0:80:94: b8:b7:96:df:5d:eb:8e:d2:de:ab:56:af:d9:5a:90: 60:33:84:04:a9:ec:da:af:73:c2:2a:94:b5:53:b3: f6:b4:7c:0c:ef:a7:f9:1b:e9:f3:7a:8f:37:d3:a0: 0e:9d:31:03:a2:55:fe:9a:75:0d:7c:66:56:7f:13: b3:0d:9c:46:36:64:5a:fa:40:a0:5a:1e:dc:0b:cb: 6c:f0:79:45:b5:b0:bc:d8:db:5c:60:15:ff:12:c1: 78:af:35:10:0d:15:6f:e7:14:d4:27:65:94:e3:90: 7d:7f:7e:19:74:37:7c:f0:5e:72:44:66:ea:d3:92: fa:66:fc:ad:ca:f3:ea:71:61:da:2b:a6:69:ab:e8: 54:eb:c0:01:d6:bf:fc:ec:a0:ed:9b:27:11:ee:8f: 89:c8:91:60:d3:a1:16:ee:53:0d:5e:45:59:4f:ef: 28:18:d1:21:2e:42:1e:1b:67:30:6a:e3:30:a4:61: b2:38:f2:eb:b7:19:5c:49:24:5f:9b:fe:ad:19:2a: 3a:f3:5b:8d:54:41:ed:04:be:39:2d:df:87:2f:40: 79:86:6f:67:e6:f1:b0:9a:fc:f4:47:9f:84:74:8a: 11:64:fe:bb:ec:12:af:31:97:3d:72:93:5a:24:5b: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E0:04:8D:ED:66:06:E3:A1:5C:BB:56:AD:0E:04:BC:73:92:CB:6F X509v3 Authority Key Identifier: keyid:A2:FB:73:95:25:B7:42:A2:8A:74:33:15:C6:C8:8E:76:6A:7E:0D:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/ovtzlSW3QqKKdDMVxsiOdmp-DcM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ovtzlSW3QqKKdDMVxsiOdmp-DcM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASIACLOUD/f-AEje1mBuOhXLtWrQ4EvHOSy28.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.117.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:c4:35:6e:ab:ab:98:7e:1c:ba:38:46:a9:66:0c:38:17:1b: 78:1d:9b:62:74:02:73:15:4f:53:1c:95:95:73:4b:53:58:99: db:cf:20:ee:87:48:b6:46:10:9a:ac:2e:80:b1:eb:a8:fa:7b: bb:2e:5c:77:c0:0a:28:64:35:49:8d:45:88:df:c4:25:90:4f: 68:8e:e1:c8:2a:1d:72:32:8b:06:e3:50:37:4f:5a:a2:f4:b3: ad:cd:d1:41:1c:1d:a5:d1:65:92:f5:59:f6:18:b3:bc:00:17: f6:89:05:c4:70:d6:26:79:c1:ed:3a:a0:13:bf:f0:4c:84:9d: 76:d1:f7:d7:72:08:c6:c7:28:b4:06:c1:1b:7d:36:3e:58:1d: 02:0b:07:72:9a:dc:e5:99:8e:22:41:ec:ae:43:13:df:e6:2b: e9:62:54:89:f8:b1:24:50:e9:57:36:1c:6b:c8:c0:b5:b3:d5: 1a:85:af:b6:8a:f8:bb:65:0c:77:bf:ae:9f:eb:e5:bd:74:ce: a6:2b:ad:13:aa:c7:38:39:62:c8:99:51:0f:8a:7d:68:ae:2d: 21:4a:69:3f:f9:81:95:89:e6:93:3d:a6:bd:9c:96:b4:1e:f1: 4b:25:5a:da:9e:ff:7c:3f:3e:5d:29:da:6a:a1:81:5f:a7:7b: fb:3c:18:1a -----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgICDVQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTJG QjczOTUyNUI3NDJBMjhBNzQzMzE1QzZDODhFNzY2QTdFMERDMzAeFw0yMzA5MDEw ODA2MDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdGRTAwNDhERUQ2NjA2 RTNBMTVDQkI1NkFEMEUwNEJDNzM5MkNCNkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/TCgF3ze7oy5PPqCAlLi3lt9d647S3qtWr9lakGAzhASp7Nqv c8IqlLVTs/a0fAzvp/kb6fN6jzfToA6dMQOiVf6adQ18ZlZ/E7MNnEY2ZFr6QKBa HtwLy2zweUW1sLzY21xgFf8SwXivNRANFW/nFNQnZZTjkH1/fhl0N3zwXnJEZurT kvpm/K3K8+pxYdorpmmr6FTrwAHWv/zsoO2bJxHuj4nIkWDToRbuUw1eRVlP7ygY 0SEuQh4bZzBq4zCkYbI48uu3GVxJJF+b/q0ZKjrzW41UQe0Evjkt34cvQHmGb2fm 8bCa/PRHn4R0ihFk/rvsEq8xlz1yk1okW4CDAgMBAAGjggH0MIIB8DAdBgNVHQ4E FgQUf+AEje1mBuOhXLtWrQ4EvHOSy28wHwYDVR0jBBgwFoAUovtzlSW3QqKKdDMV xsiOdmp+DcMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQUNM T1VEL292dHpsU1czUXFLS2RETVZ4c2lPZG1wLURjTS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0Evb3Z0emxTVzNRcUtLZERNVnhzaU9kbXAtRGNNLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNJQUNMT1VEL2YtQUVqZTFtQnVP aFhMdFdyUTRFdkhPU3kyOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABnh3UwDQYJKoZIhvcNAQELBQADggEBABvENW6rq5h+HLo4RqlmDDgXG3gd m2J0AnMVT1MclZVzS1NYmdvPIO6HSLZGEJqsLoCx66j6e7suXHfACihkNUmNRYjf xCWQT2iO4cgqHXIyiwbjUDdPWqL0s63N0UEcHaXRZZL1WfYYs7wAF/aJBcRw1iZ5 we06oBO/8EyEnXbR99dyCMbHKLQGwRt9Nj5YHQILB3Ka3OWZjiJB7K5DE9/mK+li VIn4sSRQ6Vc2HGvIwLWz1RqFr7aK+LtlDHe/rp/r5b10zqYrrROqxzg5YsiZUQ+K fWiuLSFKaT/5gZWJ5pM9pr2clrQe8UslWtqe/3w/Pl0p2mqhgV+ne/s8GBo= -----END CERTIFICATE-----Generated at Fri May 17 09:34:25 2024 by rpki-client on console-fra.rpki-client.org