$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/wJpfM-9bRaDbqc3KOTJkRm5dd6s.roa File: wJpfM-9bRaDbqc3KOTJkRm5dd6s.roa (raw, json) Hash identifier: MuWMgIiq6hkDjqTILHwW7sRrLb1k1H9VRz8lp/jEH+s= Subject key identifier: C0:9A:5F:33:EF:5B:45:A0:DB:A9:CD:CA:39:32:64:46:6E:5D:77:AB Certificate issuer: /CN=165495E8D327E4F62D5A16438F080E608A34D0D3 Certificate serial: 0E67 Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/wJpfM-9bRaDbqc3KOTJkRm5dd6s.roa Signing time: Mon 26 Aug 2024 05:17:00 +0000 ROA not before: Mon 26 Aug 2024 05:17:00 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131642 IP address blocks: 103.137.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Sep 2024 11:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3687 (0xe67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3 Validity Not Before: Aug 26 05:17:00 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C09A5F33EF5B45A0DBA9CDCA393264466E5D77AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:ce:ae:ab:f0:97:c5:bd:af:54:f7:39:d1: 97:8f:b6:47:88:ea:46:f9:e1:9b:71:0d:91:c5:69: 89:37:80:dd:77:b0:57:42:f5:99:de:e7:db:ad:4d: 1b:bc:93:3a:3b:ef:ba:e9:cd:a7:51:b1:4c:12:92: a5:89:6b:07:44:38:fc:2a:2b:c8:81:a4:ff:67:44: 69:ba:68:1d:6c:97:20:c9:1f:b9:96:55:dc:ba:d9: 0e:55:76:ff:48:63:f6:fc:70:60:07:34:24:2f:27: 64:c8:65:18:ea:58:d3:42:b0:61:be:8a:be:67:02: b3:fb:55:ca:a9:9b:9e:04:04:91:5b:82:43:e5:2a: e1:a3:95:67:81:21:2b:a8:c6:80:3b:20:8c:78:8b: b8:65:b5:fa:c2:05:c6:b7:8f:84:68:5b:dd:a3:16: 4b:f7:29:06:bc:e9:65:90:29:f0:f2:59:e7:86:18: 96:f1:25:18:2c:8d:85:e3:41:c6:e1:a1:c0:ae:18: e2:89:01:3a:78:77:d8:a3:f3:65:34:13:d8:c9:57: 97:40:35:10:bd:11:1b:0a:7e:f3:9f:0f:b2:e7:f2: 89:2c:88:41:84:bd:2a:61:7f:10:f1:75:ec:56:38: 98:ef:b4:03:60:ef:b3:79:fe:82:83:fd:d8:4b:54: 60:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9A:5F:33:EF:5B:45:A0:DB:A9:CD:CA:39:32:64:46:6E:5D:77:AB X509v3 Authority Key Identifier: keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/wJpfM-9bRaDbqc3KOTJkRm5dd6s.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.137.246.0/23 Signature Algorithm: sha256WithRSAEncryption a8:59:bf:9c:6e:19:35:8c:4e:4e:90:1c:cd:48:46:d1:6d:55: 73:09:26:14:8c:84:79:75:66:22:91:a0:40:d5:4b:1a:f3:ab: 00:1a:40:aa:c0:e5:20:b3:05:b2:45:ed:ad:b9:83:34:fa:9d: 7f:41:53:c5:9a:d6:fd:57:7e:55:3c:99:33:6c:7a:36:95:95: a7:f8:3b:ab:bb:1f:e4:15:52:7f:b8:21:9e:7d:5d:cf:05:95: 27:4c:34:77:67:18:87:64:ad:97:66:f1:53:f8:c8:bb:f7:f9: 14:04:30:32:ee:34:c7:43:07:a7:5c:76:2b:d8:a2:d8:8c:10: 47:d8:98:6e:70:9c:91:57:4b:3b:04:c6:29:7c:a0:46:87:33: 7a:36:83:bf:b2:7d:2d:13:59:e7:c8:c8:8d:82:de:92:de:dc: c1:b7:08:09:32:d7:ba:2b:0d:c1:2d:5a:65:77:45:31:f2:42: c3:e1:aa:16:27:29:41:4d:50:2f:54:0a:94:db:e8:5c:70:e5: 48:02:94:8e:43:14:3e:df:1d:e3:29:0f:e1:1a:e3:47:1e:7e: 78:4a:3f:58:fe:d0:6b:0c:19:73:e1:85:bf:8c:63:08:c2:8e: fc:e2:a6:a1:16:fc:e9:06:8e:68:af:26:ec:c6:c8:5b:c3:88: 7d:df:8a:04 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDmcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1 NDk1RThEMzI3RTRGNjJENUExNjQzOEYwODBFNjA4QTM0RDBEMzAeFw0yNDA4MjYw NTE3MDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMwOUE1RjMzRUY1QjQ1 QTBEQkE5Q0RDQTM5MzI2NDQ2NkU1RDc3QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7Dc6uq/CXxb2vVPc50ZePtkeI6kb54ZtxDZHFaYk3gN13sFdC 9Zne59utTRu8kzo777rpzadRsUwSkqWJawdEOPwqK8iBpP9nRGm6aB1slyDJH7mW Vdy62Q5Vdv9IY/b8cGAHNCQvJ2TIZRjqWNNCsGG+ir5nArP7Vcqpm54EBJFbgkPl KuGjlWeBISuoxoA7IIx4i7hltfrCBca3j4RoW92jFkv3KQa86WWQKfDyWeeGGJbx JRgsjYXjQcbhocCuGOKJATp4d9ij82U0E9jJV5dANRC9ERsKfvOfD7Ln8oksiEGE vSphfxDxdexWOJjvtANg77N5/oKD/dhLVGA5AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUwJpfM+9bRaDbqc3KOTJkRm5dd6swHwYDVR0jBBgwFoAUFlSV6NMn5PYtWhZD jwgOYIo00NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNRVNP VUwvRmxTVjZOTW41UFl0V2haRGp3Z09ZSW8wME5NLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9GbFNWNk5NbjVQWXRXaFpEandnT1lJbzAwTk0uY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1FU09VTC93SnBmTS05YlJhRGJx YzNLT1RKa1JtNWRkNnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ4n2MA0GCSqGSIb3DQEBCwUAA4IBAQCoWb+cbhk1jE5OkBzNSEbRbVVzCSYU jIR5dWYikaBA1Usa86sAGkCqwOUgswWyRe2tuYM0+p1/QVPFmtb9V35VPJkzbHo2 lZWn+Durux/kFVJ/uCGefV3PBZUnTDR3ZxiHZK2XZvFT+Mi79/kUBDAy7jTHQwen XHYr2KLYjBBH2JhucJyRV0s7BMYpfKBGhzN6NoO/sn0tE1nnyMiNgt6S3tzBtwgJ Mte6Kw3BLVpld0Ux8kLD4aoWJylBTVAvVAqU2+hccOVIApSOQxQ+3x3jKQ/hGuNH Hn54Sj9Y/tBrDBlz4YW/jGMIwo784qahFvzpBo5orybsxshbw4h934oE -----END CERTIFICATE-----Generated at Fri Sep 20 08:12:12 2024 by rpki-client on console-fra.rpki-client.org