$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/lij7sN53bKTXUShqNrioa7tZaFY.roa File: lij7sN53bKTXUShqNrioa7tZaFY.roa (raw, json) Hash identifier: JC8WWZr56BoOKCnTnQftKGPp4Ho2IFuBlHepqDjqb0Y= Subject key identifier: 96:28:FB:B0:DE:77:6C:A4:D7:51:28:6A:36:B8:A8:6B:BB:59:68:56 Certificate issuer: /CN=165495E8D327E4F62D5A16438F080E608A34D0D3 Certificate serial: 0D5B Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/lij7sN53bKTXUShqNrioa7tZaFY.roa Signing time: Fri 01 Sep 2023 08:51:23 +0000 ROA not before: Fri 01 Sep 2023 08:51:23 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 131642 IP address blocks: 103.137.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3419 (0xd5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3 Validity Not Before: Sep 1 08:51:23 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9628FBB0DE776CA4D751286A36B8A86BBB596856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f5:99:9b:3c:01:da:87:5f:28:eb:5e:b4:18: b2:15:ff:e0:86:de:d7:08:06:7d:19:1b:1b:ad:5c: 45:cd:50:b4:14:4b:77:ef:9d:98:19:71:7c:9e:23: 82:f3:19:40:5a:96:27:85:c0:e3:50:95:e5:11:49: d7:8c:71:32:ad:30:f7:a5:28:ea:10:d0:2b:d3:32: 7d:38:e3:0c:9f:7d:46:89:41:c9:ca:e4:b4:0e:70: cc:30:02:16:f8:18:d2:3e:05:16:7b:4c:20:f0:fa: d5:9c:d3:8c:d0:cd:0c:8e:27:23:c4:a2:6a:5f:2e: d5:c8:04:9c:18:68:83:49:4f:f4:15:fd:42:c7:6b: 91:cd:86:b9:89:11:c7:24:b8:c2:e5:45:53:5f:c0: 1b:d5:4e:55:e5:54:5e:d2:b6:92:3e:67:2a:7e:ec: 31:91:70:fe:ba:5b:1a:87:11:89:9b:82:e3:55:a6: a0:b7:37:e2:d8:2c:03:18:f4:b5:c1:23:4d:29:ee: 1f:2d:5d:8e:5b:70:ab:7f:e3:cb:a5:b1:e2:79:7a: be:04:ba:14:8c:64:cd:93:a6:40:3f:9a:39:ea:bb: 5c:4d:a3:2d:eb:7a:ab:ee:27:3c:00:98:70:6d:dd: 83:8a:73:63:dd:9d:7d:0f:5b:3e:12:2d:18:10:e5: 47:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:28:FB:B0:DE:77:6C:A4:D7:51:28:6A:36:B8:A8:6B:BB:59:68:56 X509v3 Authority Key Identifier: keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/lij7sN53bKTXUShqNrioa7tZaFY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.137.246.0/23 Signature Algorithm: sha256WithRSAEncryption 06:9f:6d:b7:89:90:d0:a8:97:5e:e7:4e:32:ef:50:90:cd:a3: ca:39:b1:c5:33:dc:0e:ec:c8:49:e0:5e:2e:e1:13:4f:aa:a1: d2:88:32:c6:c3:6f:ca:16:d5:71:6f:47:fe:e1:86:0f:62:67: df:b7:9b:2b:b6:e7:34:53:27:53:37:39:13:9f:ad:c5:ef:10: 60:dd:c3:c4:94:cc:4a:68:2a:ed:7e:14:4a:6a:16:34:00:d1: 14:ac:3f:60:0a:02:60:ad:44:a6:00:c9:26:35:34:1e:17:39: 9e:51:ee:26:7b:f7:a3:82:37:4d:76:37:19:fa:be:b6:b8:1f: df:f2:7c:00:92:73:84:36:96:b4:ab:5e:ee:27:dd:d9:58:c7: ba:cf:e1:c3:d0:0c:ef:fe:96:ce:7e:fd:b5:90:39:73:7d:e9: 0d:20:7a:44:17:51:9b:05:3b:49:b1:c4:50:f8:90:92:e3:43: c7:34:57:0d:be:29:82:fc:e5:5d:6e:47:44:84:b1:13:fd:2d: bd:66:49:85:ab:4e:9e:bf:dc:0b:70:a0:da:c4:e6:3d:00:38: fd:de:39:5f:54:c9:1e:1c:07:30:41:4a:d9:c7:da:aa:ac:a3: c1:4e:0a:21:ce:b4:b4:2c:89:de:13:f6:ff:f4:91:28:9f:db: 80:f9:23:5d -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDVswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1 NDk1RThEMzI3RTRGNjJENUExNjQzOEYwODBFNjA4QTM0RDBEMzAeFw0yMzA5MDEw ODUxMjNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk2MjhGQkIwREU3NzZD QTRENzUxMjg2QTM2QjhBODZCQkI1OTY4NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDC9ZmbPAHah18o6160GLIV/+CG3tcIBn0ZGxutXEXNULQUS3fv nZgZcXyeI4LzGUBalieFwONQleURSdeMcTKtMPelKOoQ0CvTMn044wyffUaJQcnK 5LQOcMwwAhb4GNI+BRZ7TCDw+tWc04zQzQyOJyPEompfLtXIBJwYaINJT/QV/ULH a5HNhrmJEcckuMLlRVNfwBvVTlXlVF7StpI+Zyp+7DGRcP66WxqHEYmbguNVpqC3 N+LYLAMY9LXBI00p7h8tXY5bcKt/48ulseJ5er4EuhSMZM2TpkA/mjnqu1xNoy3r eqvuJzwAmHBt3YOKc2PdnX0PWz4SLRgQ5UcFAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUlij7sN53bKTXUShqNrioa7tZaFYwHwYDVR0jBBgwFoAUFlSV6NMn5PYtWhZD jwgOYIo00NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNRVNP VUwvRmxTVjZOTW41UFl0V2haRGp3Z09ZSW8wME5NLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9GbFNWNk5NbjVQWXRXaFpEandnT1lJbzAwTk0uY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1FU09VTC9saWo3c041M2JLVFhV U2hxTnJpb2E3dFphRlkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ4n2MA0GCSqGSIb3DQEBCwUAA4IBAQAGn223iZDQqJde504y71CQzaPKObHF M9wO7MhJ4F4u4RNPqqHSiDLGw2/KFtVxb0f+4YYPYmfft5srtuc0UydTNzkTn63F 7xBg3cPElMxKaCrtfhRKahY0ANEUrD9gCgJgrUSmAMkmNTQeFzmeUe4me/ejgjdN djcZ+r62uB/f8nwAknOENpa0q17uJ93ZWMe6z+HD0Azv/pbOfv21kDlzfekNIHpE F1GbBTtJscRQ+JCS40PHNFcNvimC/OVdbkdEhLET/S29ZkmFq06ev9wLcKDaxOY9 ADj93jlfVMkeHAcwQUrZx9qqrKPBTgohzrS0LIneE/b/9JEon9uA+SNd -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:08 2024 by rpki-client on console-ams.rpki-client.org