$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/iEjZrND-DNiN28WT8sTGKVRLpJk.roa File: iEjZrND-DNiN28WT8sTGKVRLpJk.roa (raw, json) Hash identifier: XjKUzOyUTjyXZYtg32QFQFYNWHb5/tP1UPWmnY257Us= Subject key identifier: 88:48:D9:AC:D0:FE:0C:D8:8D:DB:C5:93:F2:C4:C6:29:54:4B:A4:99 Certificate issuer: /CN=165495E8D327E4F62D5A16438F080E608A34D0D3 Certificate serial: 0E5F Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/iEjZrND-DNiN28WT8sTGKVRLpJk.roa Signing time: Mon 26 Aug 2024 05:16:59 +0000 ROA not before: Mon 26 Aug 2024 05:16:59 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 18178 IP address blocks: 103.137.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Sep 2024 20:19:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3679 (0xe5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3 Validity Not Before: Aug 26 05:16:59 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=8848D9ACD0FE0CD88DDBC593F2C4C629544BA499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:a0:7d:6b:66:7e:d7:38:31:49:97:aa:22: cc:15:ac:f0:93:fb:2c:44:25:44:9a:85:40:14:96: 30:14:c9:e9:97:a9:24:fb:93:15:0c:9e:10:52:fa: 68:41:ab:93:3f:33:f6:80:38:6f:4c:53:f6:5e:85: 16:72:23:90:11:43:60:fe:05:df:7c:c4:9f:99:d5: d8:8a:58:51:63:7f:c6:aa:9f:d1:2d:e9:11:a7:61: d9:85:3c:28:a6:fa:b0:52:05:3b:fe:09:dd:d9:96: c9:13:2b:8c:9f:cc:5e:ab:bf:77:fe:cf:b0:11:84: d5:c6:4c:d9:61:b4:73:16:f3:b6:ca:6c:cf:3e:b7: c8:61:85:64:aa:48:e1:59:33:ca:5c:67:bf:a1:c0: 00:e7:d7:17:f7:14:1e:35:d4:41:5e:68:2e:13:fe: bc:07:24:60:ad:f3:e1:04:33:e7:1e:7a:f5:d5:29: 81:b9:db:10:08:6f:b0:89:5d:bf:ee:92:45:55:63: 95:af:11:7f:f0:f0:5e:9f:a4:76:d5:bc:5b:96:2c: 56:0f:8b:93:77:f2:d4:e4:48:35:6a:11:f3:2d:69: bb:8d:de:8b:21:cb:5d:af:f7:a7:6f:2b:b9:96:c3: 50:27:28:58:d1:0b:a9:5e:5e:1d:70:0f:3f:71:7c: b6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:48:D9:AC:D0:FE:0C:D8:8D:DB:C5:93:F2:C4:C6:29:54:4B:A4:99 X509v3 Authority Key Identifier: keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/iEjZrND-DNiN28WT8sTGKVRLpJk.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.137.246.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:d0:98:34:24:8b:2d:0d:7e:17:d9:85:b1:b2:f8:e1:c3:69: 6a:b8:56:e5:e5:e8:7d:ca:7c:84:05:0f:06:bf:b0:c3:1f:66: 30:2f:15:e8:14:78:12:32:9f:f8:c5:b7:b1:b4:da:c5:60:fb: 77:af:36:02:b3:ec:d9:82:0e:2d:55:08:ef:3d:00:89:4d:de: 21:30:36:7d:51:84:1d:1e:bf:68:8f:86:8d:a7:b7:41:50:47: 73:9f:d5:d8:89:fc:93:4d:14:74:ef:a1:07:d8:4d:0a:3e:70: 8a:c3:25:56:77:1e:5d:ae:02:a8:09:f8:68:10:73:52:84:4b: a5:3d:cd:0d:3d:22:af:9a:d7:01:7a:fc:ff:97:9d:22:30:70: a5:77:ec:05:07:9c:f7:24:21:04:4f:7a:e0:a5:72:96:51:53: c8:6e:76:20:a7:31:5e:92:08:33:1b:e3:8c:59:e8:96:6e:c3: 31:74:b7:33:31:0d:db:c9:71:0e:8a:39:cb:40:4b:a4:be:c8: 34:d9:97:ca:da:d7:87:c4:64:ab:67:8f:55:24:8c:66:2e:ca: 83:0d:f0:95:9c:5c:bd:91:2e:aa:f2:0c:6c:7a:af:2f:81:57: e6:de:65:cb:76:bf:f2:3a:ee:30:2f:ec:11:96:e5:1c:da:fc: fe:9b:28:77 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1 NDk1RThEMzI3RTRGNjJENUExNjQzOEYwODBFNjA4QTM0RDBEMzAeFw0yNDA4MjYw NTE2NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDg4NDhEOUFDRDBGRTBD RDg4RERCQzU5M0YyQzRDNjI5NTQ0QkE0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCvO6B9a2Z+1zgxSZeqIswVrPCT+yxEJUSahUAUljAUyemXqST7 kxUMnhBS+mhBq5M/M/aAOG9MU/ZehRZyI5ARQ2D+Bd98xJ+Z1diKWFFjf8aqn9Et 6RGnYdmFPCim+rBSBTv+Cd3ZlskTK4yfzF6rv3f+z7ARhNXGTNlhtHMW87bKbM8+ t8hhhWSqSOFZM8pcZ7+hwADn1xf3FB411EFeaC4T/rwHJGCt8+EEM+ceevXVKYG5 2xAIb7CJXb/ukkVVY5WvEX/w8F6fpHbVvFuWLFYPi5N38tTkSDVqEfMtabuN3osh y12v96dvK7mWw1AnKFjRC6leXh1wDz9xfLZXAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUiEjZrND+DNiN28WT8sTGKVRLpJkwHwYDVR0jBBgwFoAUFlSV6NMn5PYtWhZD jwgOYIo00NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNRVNP VUwvRmxTVjZOTW41UFl0V2haRGp3Z09ZSW8wME5NLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9GbFNWNk5NbjVQWXRXaFpEandnT1lJbzAwTk0uY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1FU09VTC9pRWpack5ELUROaU4y OFdUOHNUR0tWUkxwSmsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ4n2MA0GCSqGSIb3DQEBCwUAA4IBAQBK0Jg0JIstDX4X2YWxsvjhw2lquFbl 5eh9ynyEBQ8Gv7DDH2YwLxXoFHgSMp/4xbextNrFYPt3rzYCs+zZgg4tVQjvPQCJ Td4hMDZ9UYQdHr9oj4aNp7dBUEdzn9XYifyTTRR076EH2E0KPnCKwyVWdx5drgKo CfhoEHNShEulPc0NPSKvmtcBevz/l50iMHCld+wFB5z3JCEET3rgpXKWUVPIbnYg pzFekggzG+OMWeiWbsMxdLczMQ3byXEOijnLQEukvsg02ZfK2teHxGSrZ49VJIxm LsqDDfCVnFy9kS6q8gxseq8vgVfm3mXLdr/yOu4wL+wRluUc2vz+myh3 -----END CERTIFICATE-----Generated at Fri Sep 20 17:44:20 2024 by rpki-client on console-fra.rpki-client.org