$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/81WQE-YjndINucL5LLYyxHjLDHQ.roa File: 81WQE-YjndINucL5LLYyxHjLDHQ.roa (raw, json) Hash identifier: FK6rMK0BnNb1EgLQbhR/OWDj2lkjAFdlJwofudAw7i8= Subject key identifier: F3:55:90:13:E6:23:9D:D2:0D:B9:C2:F9:2C:B6:32:C4:78:CB:0C:74 Certificate issuer: /CN=165495E8D327E4F62D5A16438F080E608A34D0D3 Certificate serial: 0D5C Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/81WQE-YjndINucL5LLYyxHjLDHQ.roa Signing time: Fri 01 Sep 2023 08:51:23 +0000 ROA not before: Fri 01 Sep 2023 08:51:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131658 IP address blocks: 2404:bac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3420 (0xd5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3 Validity Not Before: Sep 1 08:51:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=F3559013E6239DD20DB9C2F92CB632C478CB0C74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:ac:82:8e:33:25:4d:a2:a5:fe:ee:cb:b1: 1d:9d:d0:cd:4c:f2:b2:40:f9:a9:84:a4:2f:2d:6b: 15:29:be:52:98:56:e8:c1:01:ba:32:a7:b4:7d:79: df:85:d1:b5:48:be:31:3c:a3:17:46:9e:6b:b0:4e: ce:21:d3:5c:e9:1d:3a:4a:9e:56:20:9f:17:1f:66: 7e:91:d4:25:db:b3:35:33:b4:56:91:ae:8d:02:39: d0:a6:22:3f:b8:b9:de:2c:a8:1c:c9:61:e3:28:64: 10:cf:ce:b4:c7:bc:79:47:11:d1:3c:f2:ad:71:1e: 7a:61:05:01:a3:15:e0:26:ba:c7:79:68:b2:05:80: 40:17:9d:ed:f9:dc:63:8e:78:ef:12:22:c1:dc:95: 8d:0a:ce:00:97:c5:40:a2:e0:22:4b:22:c9:4e:72: 68:9d:f1:c5:67:b5:fa:00:d5:8b:ce:1d:fb:cb:5f: 92:49:7e:32:ca:8c:e6:b5:44:6b:56:c9:74:be:96: 39:93:8c:cd:1f:d7:99:46:33:5d:2f:1a:2a:00:ba: ce:55:80:37:f1:3f:28:12:6c:fd:fc:93:a2:45:ee: cf:db:9c:78:37:1b:ee:41:85:e4:e8:7b:cf:fb:86: 3f:c9:8b:2b:d6:83:7d:5f:12:ab:69:60:d4:6d:6f: 85:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:55:90:13:E6:23:9D:D2:0D:B9:C2:F9:2C:B6:32:C4:78:CB:0C:74 X509v3 Authority Key Identifier: keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/81WQE-YjndINucL5LLYyxHjLDHQ.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2404:bac0::/32 Signature Algorithm: sha256WithRSAEncryption 06:a7:67:27:2c:d1:2b:41:61:cc:50:b7:67:0c:d2:b9:14:04: 01:80:71:51:da:92:0c:7c:ae:29:f1:d0:5c:86:a3:cc:aa:a0: bd:f4:a7:a7:77:76:56:b7:04:92:4c:5f:9a:43:9e:6e:73:e1: b6:9b:c2:8b:83:ca:37:a3:9f:de:33:83:59:89:25:de:7c:b7: 66:ae:64:f5:98:ca:ae:85:d3:ad:5d:22:af:84:5b:fc:ff:93: 98:16:e2:74:b0:f2:79:45:13:93:a9:fd:12:24:1f:3a:26:ef: 0d:b3:47:63:9f:73:6e:18:99:73:f1:67:dd:f3:4c:6f:4b:0b: 93:08:f4:fa:75:cb:db:92:46:43:bd:f7:63:22:59:ba:77:b1: 91:d5:c5:e0:d5:71:67:da:9a:ba:31:d5:29:47:31:3f:26:48: 90:07:0d:e6:ac:8b:89:00:7e:91:ae:4b:4c:4e:d3:81:8a:90: 2b:66:3a:9c:b0:50:51:99:3b:92:02:da:9e:ee:76:81:e7:8a: 38:7e:cc:7b:87:ba:16:f5:de:f3:d9:eb:72:56:54:ea:3c:d8: 4a:c0:75:af:6d:7c:23:f1:48:1a:56:87:0a:ff:e0:68:e0:4e: 70:77:a4:fa:a1:19:2e:09:ec:e4:b6:64:e0:b0:8e:7f:f6:22: 99:ee:5c:3f -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICDVwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1 NDk1RThEMzI3RTRGNjJENUExNjQzOEYwODBFNjA4QTM0RDBEMzAeFw0yMzA5MDEw ODUxMjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEYzNTU5MDEzRTYyMzlE RDIwREI5QzJGOTJDQjYzMkM0NzhDQjBDNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDFRKyCjjMlTaKl/u7LsR2d0M1M8rJA+amEpC8taxUpvlKYVujB Aboyp7R9ed+F0bVIvjE8oxdGnmuwTs4h01zpHTpKnlYgnxcfZn6R1CXbszUztFaR ro0COdCmIj+4ud4sqBzJYeMoZBDPzrTHvHlHEdE88q1xHnphBQGjFeAmusd5aLIF gEAXne353GOOeO8SIsHclY0KzgCXxUCi4CJLIslOcmid8cVntfoA1YvOHfvLX5JJ fjLKjOa1RGtWyXS+ljmTjM0f15lGM10vGioAus5VgDfxPygSbP38k6JF7s/bnHg3 G+5BheToe8/7hj/JiyvWg31fEqtpYNRtb4WZAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU81WQE+YjndINucL5LLYyxHjLDHQwHwYDVR0jBBgwFoAUFlSV6NMn5PYtWhZD jwgOYIo00NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNRVNP VUwvRmxTVjZOTW41UFl0V2haRGp3Z09ZSW8wME5NLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9GbFNWNk5NbjVQWXRXaFpEandnT1lJbzAwTk0uY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1FU09VTC84MVdRRS1Zam5kSU51 Y0w1TExZeXhIakxESFEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAS6wDANBgkqhkiG9w0BAQsFAAOCAQEABqdnJyzRK0FhzFC3ZwzSuRQEAYBx UdqSDHyuKfHQXIajzKqgvfSnp3d2VrcEkkxfmkOebnPhtpvCi4PKN6Of3jODWYkl 3ny3Zq5k9ZjKroXTrV0ir4Rb/P+TmBbidLDyeUUTk6n9EiQfOibvDbNHY59zbhiZ c/Fn3fNMb0sLkwj0+nXL25JGQ733YyJZunexkdXF4NVxZ9qaujHVKUcxPyZIkAcN 5qyLiQB+ka5LTE7TgYqQK2Y6nLBQUZk7kgLanu52geeKOH7Me4e6FvXe89nrclZU 6jzYSsB1r218I/FIGlaHCv/gaOBOcHek+qEZLgns5LZk4LCOf/Yime5cPw== -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:08 2024 by rpki-client on console-ams.rpki-client.org