$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LILIANG/lix-AvIJPrL21NYjPnjqIk0su0Y.roa File: lix-AvIJPrL21NYjPnjqIk0su0Y.roa (raw, json) Hash identifier: kc9Bn6uvtzXyGNTV6AjxkE6EkOBqHa9riDXnWSSEPMY= Subject key identifier: 96:2C:7E:02:F2:09:3E:B2:F6:D4:D6:23:3E:78:EA:22:4D:2C:BB:46 Certificate issuer: /CN=FBE0E2FD417A37B1B56BB37DA16834229A399256 Certificate serial: 010A Authority key identifier: FB:E0:E2:FD:41:7A:37:B1:B5:6B:B3:7D:A1:68:34:22:9A:39:92:56 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/--Di_UF6N7G1a7N9oWg0Ipo5klY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/lix-AvIJPrL21NYjPnjqIk0su0Y.roa Signing time: Sun 22 Sep 2024 18:05:55 +0000 ROA not before: Sun 22 Sep 2024 18:05:55 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.69.52.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/--Di_UF6N7G1a7N9oWg0Ipo5klY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/--Di_UF6N7G1a7N9oWg0Ipo5klY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/--Di_UF6N7G1a7N9oWg0Ipo5klY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 14:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBE0E2FD417A37B1B56BB37DA16834229A399256 Validity Not Before: Sep 22 18:05:55 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=962C7E02F2093EB2F6D4D6233E78EA224D2CBB46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:e1:e0:07:d9:97:88:c9:05:df:90:7d:76: 33:84:e5:f5:47:70:29:d3:d6:fe:9b:fd:f3:f0:ca: 38:d3:43:5f:99:a6:da:39:22:c3:e0:c2:6e:40:9b: 21:dc:13:db:28:d5:af:a5:97:6c:0a:d0:c3:82:92: 52:aa:64:14:12:4f:fd:e7:ba:97:5b:48:bd:dd:85: 7a:22:6c:4e:e1:f8:07:52:a3:e5:16:87:95:8e:0d: 44:c1:43:79:c0:f9:b8:10:e3:3d:2f:c2:51:b0:d5: 22:6d:f8:b5:01:59:e7:58:e3:8e:6a:8f:33:79:ed: 82:04:89:1a:fc:f6:f5:b0:d9:c5:d6:ea:26:44:42: 2d:e1:d1:5e:4f:cf:dd:3b:36:0b:4e:70:4f:d3:42: 5d:bb:33:3d:ef:17:0c:ef:21:1b:69:15:6b:a0:3f: d4:f2:12:5c:63:d4:0d:80:e9:e2:85:91:00:01:cf: 5e:3c:6e:2d:dd:07:97:b5:3a:03:67:cc:15:2d:50: d1:c5:68:a0:5d:44:ff:3c:7f:b8:52:5b:92:32:86: ed:b2:f2:6d:93:d0:bb:94:d4:78:66:28:13:28:41: 4f:5d:17:26:e7:b9:e0:fe:09:59:11:27:35:d6:7f: a6:a9:fc:65:e2:76:d5:60:ab:12:97:a0:c4:53:8c: 2c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2C:7E:02:F2:09:3E:B2:F6:D4:D6:23:3E:78:EA:22:4D:2C:BB:46 X509v3 Authority Key Identifier: keyid:FB:E0:E2:FD:41:7A:37:B1:B5:6B:B3:7D:A1:68:34:22:9A:39:92:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/--Di_UF6N7G1a7N9oWg0Ipo5klY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/--Di_UF6N7G1a7N9oWg0Ipo5klY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LILIANG/lix-AvIJPrL21NYjPnjqIk0su0Y.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.69.52.0/23 Signature Algorithm: sha256WithRSAEncryption b4:59:b5:27:95:33:a7:32:b6:08:6c:96:6d:1e:35:8c:0c:61: d0:b8:4b:0c:f6:b2:0f:19:ab:d5:20:1c:48:55:e4:0f:e0:ce: 56:69:87:a7:d2:04:c5:ca:32:45:70:da:a2:3e:d9:f8:05:cf: d4:bd:1c:16:b8:67:cf:29:47:33:5c:cd:25:fd:e8:62:cf:69: fd:97:e3:c1:f3:6a:fb:40:af:88:ac:b0:c4:35:91:a0:2c:4d: 8d:e5:22:36:76:c2:f2:79:87:29:1c:be:ae:61:0c:2f:77:23: ac:e0:0e:30:91:ca:61:9b:7d:f3:fc:8f:06:f9:ae:9f:17:4d: bc:c5:12:6c:af:8b:05:4d:35:6d:ca:01:d9:db:53:b2:18:aa: cd:74:3e:06:b1:bd:8a:4b:56:32:b2:b8:de:d7:26:46:2b:32: fa:d6:96:4a:d7:06:14:f1:77:b2:0c:be:5c:81:61:69:e1:a7: 9b:be:9f:4a:11:21:53:fd:ae:f5:12:1f:26:ff:69:d5:a3:5a: 9e:8a:25:a1:9a:90:12:1e:0b:b6:ac:e1:dd:83:67:72:18:27: 6a:b0:da:c8:62:e3:18:4c:60:44:9c:b0:28:b5:0f:f4:d4:00: 65:a6:7d:46:dc:60:00:40:8a:39:aa:17:3c:fc:91:5f:de:d9: 8c:08:4f:1f -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkJF MEUyRkQ0MTdBMzdCMUI1NkJCMzdEQTE2ODM0MjI5QTM5OTI1NjAeFw0yNDA5MjIx ODA1NTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk2MkM3RTAyRjIwOTNF QjJGNkQ0RDYyMzNFNzhFQTIyNEQyQ0JCNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC5qOHgB9mXiMkF35B9djOE5fVHcCnT1v6b/fPwyjjTQ1+Zpto5 IsPgwm5AmyHcE9so1a+ll2wK0MOCklKqZBQST/3nupdbSL3dhXoibE7h+AdSo+UW h5WODUTBQ3nA+bgQ4z0vwlGw1SJt+LUBWedY445qjzN57YIEiRr89vWw2cXW6iZE Qi3h0V5Pz907NgtOcE/TQl27Mz3vFwzvIRtpFWugP9TyElxj1A2A6eKFkQABz148 bi3dB5e1OgNnzBUtUNHFaKBdRP88f7hSW5Iyhu2y8m2T0LuU1HhmKBMoQU9dFybn ueD+CVkRJzXWf6ap/GXidtVgqxKXoMRTjCw/AgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUlix+AvIJPrL21NYjPnjqIk0su0YwHwYDVR0jBBgwFoAU++Di/UF6N7G1a7N9 oWg0Ipo5klYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTElMSUFO Ry8tLURpX1VGNk43RzFhN045b1dnMElwbzVrbFkuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBLy0tRGlfVUY2TjdHMWE3TjlvV2cwSXBvNWtsWS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0xJTElBTkcvbGl4LUF2SUpQckwyMU5Z alBuanFJazBzdTBZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWdFNDANBgkqhkiG9w0BAQsFAAOCAQEAtFm1J5UzpzK2CGyWbR41jAxh0LhLDPay Dxmr1SAcSFXkD+DOVmmHp9IExcoyRXDaoj7Z+AXP1L0cFrhnzylHM1zNJf3oYs9p /ZfjwfNq+0CviKywxDWRoCxNjeUiNnbC8nmHKRy+rmEML3cjrOAOMJHKYZt98/yP BvmunxdNvMUSbK+LBU01bcoB2dtTshiqzXQ+BrG9iktWMrK43tcmRisy+taWStcG FPF3sgy+XIFhaeGnm76fShEhU/2u9RIfJv9p1aNanooloZqQEh4Ltqzh3YNnchgn arDayGLjGExgRJywKLUP9NQAZaZ9RtxgAECKOaoXPPyRX97ZjAhPHw== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:52 2024 by rpki-client on console-fra.rpki-client.org