$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/wb4wDt0rHsHcwZb9BN3haY6eBHc.roa File: wb4wDt0rHsHcwZb9BN3haY6eBHc.roa (raw, json) Hash identifier: olOVXbhaMriZO3l/juNWmEUaSseWmNfvXTtb9xM1v7o= Subject key identifier: C1:BE:30:0E:DD:2B:1E:C1:DC:C1:96:FD:04:DD:E1:69:8E:9E:04:77 Certificate issuer: /CN=165495E8D327E4F62D5A16438F080E608A34D0D3 Certificate serial: 0D63 Authority key identifier: 16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/wb4wDt0rHsHcwZb9BN3haY6eBHc.roa Signing time: Fri 01 Sep 2023 08:51:25 +0000 ROA not before: Fri 01 Sep 2023 08:51:25 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 18178 IP address blocks: 103.137.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 13:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3427 (0xd63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=165495E8D327E4F62D5A16438F080E608A34D0D3 Validity Not Before: Sep 1 08:51:25 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=C1BE300EDD2B1EC1DCC196FD04DDE1698E9E0477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0c:45:1f:9a:17:5a:8c:a2:94:83:6a:57:08: ef:90:6a:a1:ad:21:9a:c6:4c:f4:92:6c:ee:36:90: 81:ed:ca:61:e0:28:32:04:d9:78:0a:6b:8f:16:2e: 31:25:8c:be:89:c5:e4:ac:ee:51:5f:0f:c8:a8:b7: b5:e0:3e:74:34:47:b2:4c:10:3e:63:6b:4e:98:03: 00:32:8f:d2:a0:7f:69:f5:86:a2:37:6a:4f:cc:eb: e7:1a:1a:2f:b6:55:25:58:56:e0:ad:48:48:25:83: 0b:dc:a0:74:22:4c:ec:e3:fa:23:08:f0:3f:a5:cc: 14:bf:b1:16:11:39:33:84:8b:13:fd:d7:4b:26:de: 8b:39:f8:f1:59:fd:7d:ce:72:9b:5c:77:d6:30:2c: d4:c9:de:05:f7:d3:0e:27:96:fa:38:a6:d5:dc:7a: f8:9e:07:4c:3e:ff:d2:44:b3:a3:72:51:0d:15:7f: 52:7b:cf:fa:8e:0c:69:6b:dd:2a:61:d6:01:f4:e1: 3c:32:51:ef:27:95:d6:44:51:7e:2b:d1:16:09:92: f9:a9:d6:c4:83:1b:da:ee:fa:88:36:34:4a:08:13: 9b:75:3b:17:69:6d:80:7a:2d:b1:84:89:88:26:cc: 21:a7:42:c5:cc:8d:06:fd:f6:b4:91:00:d1:c7:de: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BE:30:0E:DD:2B:1E:C1:DC:C1:96:FD:04:DD:E1:69:8E:9E:04:77 X509v3 Authority Key Identifier: keyid:16:54:95:E8:D3:27:E4:F6:2D:5A:16:43:8F:08:0E:60:8A:34:D0:D3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/FlSV6NMn5PYtWhZDjwgOYIo00NM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FlSV6NMn5PYtWhZDjwgOYIo00NM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMESOUL/wb4wDt0rHsHcwZb9BN3haY6eBHc.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.137.246.0/23 Signature Algorithm: sha256WithRSAEncryption 53:65:8f:62:83:dd:e4:d8:6a:49:51:42:53:02:c0:de:53:f8: 7e:04:50:5b:0f:ed:4e:e6:d6:0a:68:e0:7f:cb:49:59:e8:f4: 35:03:9b:cf:a8:6e:2a:e8:48:73:cf:e5:df:8f:e3:42:41:db: db:79:8f:d4:7c:39:18:85:78:75:41:a4:c6:27:66:c2:d5:64: 9a:e4:44:56:70:d8:47:3a:7b:6d:15:46:1d:97:61:fb:c5:0e: f8:0a:45:42:61:f1:31:76:b7:fa:c0:f8:a0:fa:73:7f:1d:2d: 36:6c:e4:b4:62:67:72:8c:ec:df:92:f8:30:aa:72:3e:56:c5: 4a:c8:ad:80:f1:a9:e9:36:9f:86:78:5c:35:5e:1f:a7:63:cc: ef:a9:df:3f:65:38:71:24:4b:56:97:35:17:73:12:1a:aa:a6: fd:4d:e4:15:0a:c5:a2:bd:53:5c:83:b3:0a:7b:fd:5e:5f:c5: c9:02:7b:79:a4:44:c3:76:2f:27:a5:fc:04:ce:c6:69:c3:6a: ef:02:b1:30:00:cc:5b:03:54:fe:1d:14:da:05:b9:8a:95:19: e2:83:99:9e:a2:73:7c:3b:31:fc:0c:5a:ad:7d:4c:ed:b6:f7: 9a:e3:ad:79:32:99:f9:a4:9e:9d:9c:7a:ee:fc:41:f7:56:17: 94:a4:d9:81 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTY1 NDk1RThEMzI3RTRGNjJENUExNjQzOEYwODBFNjA4QTM0RDBEMzAeFw0yMzA5MDEw ODUxMjVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMxQkUzMDBFREQyQjFF QzFEQ0MxOTZGRDA0RERFMTY5OEU5RTA0NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCdDEUfmhdajKKUg2pXCO+QaqGtIZrGTPSSbO42kIHtymHgKDIE 2XgKa48WLjEljL6JxeSs7lFfD8iot7XgPnQ0R7JMED5ja06YAwAyj9Kgf2n1hqI3 ak/M6+caGi+2VSVYVuCtSEglgwvcoHQiTOzj+iMI8D+lzBS/sRYROTOEixP910sm 3os5+PFZ/X3Ocptcd9YwLNTJ3gX30w4nlvo4ptXcevieB0w+/9JEs6NyUQ0Vf1J7 z/qODGlr3Sph1gH04TwyUe8nldZEUX4r0RYJkvmp1sSDG9ru+og2NEoIE5t1Oxdp bYB6LbGEiYgmzCGnQsXMjQb99rSRANHH3o4nAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUwb4wDt0rHsHcwZb9BN3haY6eBHcwHwYDVR0jBBgwFoAUFlSV6NMn5PYtWhZD jwgOYIo00NMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0FNRVNP VUwvRmxTVjZOTW41UFl0V2haRGp3Z09ZSW8wME5NLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9GbFNWNk5NbjVQWXRXaFpEandnT1lJbzAwTk0uY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HQU1FU09VTC93YjR3RHQwckhzSGN3 WmI5Qk4zaGFZNmVCSGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBZ4n2MA0GCSqGSIb3DQEBCwUAA4IBAQBTZY9ig93k2GpJUUJTAsDeU/h+BFBb D+1O5tYKaOB/y0lZ6PQ1A5vPqG4q6Ehzz+Xfj+NCQdvbeY/UfDkYhXh1QaTGJ2bC 1WSa5ERWcNhHOnttFUYdl2H7xQ74CkVCYfExdrf6wPig+nN/HS02bOS0YmdyjOzf kvgwqnI+VsVKyK2A8anpNp+GeFw1Xh+nY8zvqd8/ZThxJEtWlzUXcxIaqqb9TeQV CsWivVNcg7MKe/1eX8XJAnt5pETDdi8npfwEzsZpw2rvArEwAMxbA1T+HRTaBbmK lRnig5meonN8OzH8DFqtfUzttvea4615Mpn5pJ6dnHru/EH3VheUpNmB -----END CERTIFICATE-----Generated at Sun Jun 2 09:37:08 2024 by rpki-client on console-ams.rpki-client.org