$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/bxTrnezpDP1Xa8VQF3cI6cbxo1M.roa File: bxTrnezpDP1Xa8VQF3cI6cbxo1M.roa (raw, json) Hash identifier: pRLptR+u3w4r/JlUVL383TWJSatNcKhO5Ix/NmSTnpY= Subject key identifier: 6F:14:EB:9D:EC:E9:0C:FD:57:6B:C5:50:17:77:08:E9:C6:F1:A3:53 Certificate issuer: /CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F Certificate serial: 12B2 Authority key identifier: 68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/bxTrnezpDP1Xa8VQF3cI6cbxo1M.roa Signing time: Mon 10 Feb 2025 13:50:11 +0000 ROA not before: Mon 10 Feb 2025 13:50:11 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131663 IP address blocks: 103.130.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4786 (0x12b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CAC1FA04D80CFE3E2BE97C7AB1852B6656535F Validity Not Before: Feb 10 13:50:11 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=6F14EB9DECE90CFD576BC550177708E9C6F1A353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bb:75:69:63:8e:88:83:bd:14:2a:8d:34:2f: 90:75:a5:be:70:3e:28:85:02:2c:4f:c5:67:84:a4: 6b:63:59:30:dd:68:de:67:7a:fd:2d:d9:aa:f1:9f: 91:2d:e5:c9:58:17:b6:4e:e4:6a:d7:4b:19:1b:1c: 42:a6:8a:ac:25:2a:20:05:0a:af:e6:a5:b7:ce:e4: 6b:95:69:77:1d:2f:04:37:cd:b3:40:ae:a8:87:49: 3e:f1:68:70:35:cc:c6:8b:4a:c4:a4:52:33:be:ab: c9:0e:74:60:18:d0:2a:d0:f7:46:23:23:43:8f:46: e3:65:ae:26:ea:ef:61:aa:2d:fa:16:ea:77:90:de: 1f:02:09:63:ca:67:9a:48:c0:00:17:1c:b6:10:a5: b0:d4:51:5a:81:ea:09:ce:b4:f5:87:71:03:97:66: a7:97:53:f3:f8:63:a8:5d:bd:a0:5d:f1:b1:1d:4e: 73:cf:4e:1a:a9:8b:0f:09:b5:0a:1d:f1:6a:67:e8: c3:17:6b:d0:fc:23:b6:1f:f4:6c:d3:f7:ca:eb:64: a8:af:00:33:60:82:77:51:66:86:fc:a3:e6:1e:f9: 6f:15:d0:38:2e:00:89:68:4e:46:17:6b:42:e0:8f: a9:1a:a3:c8:69:22:13:9d:74:6e:1d:76:a9:ca:6d: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:14:EB:9D:EC:E9:0C:FD:57:6B:C5:50:17:77:08:E9:C6:F1:A3:53 X509v3 Authority Key Identifier: keyid:68:CA:C1:FA:04:D8:0C:FE:3E:2B:E9:7C:7A:B1:85:2B:66:56:53:5F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/aMrB-gTYDP4-K-l8erGFK2ZWU18.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aMrB-gTYDP4-K-l8erGFK2ZWU18.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GIGABYTE/bxTrnezpDP1Xa8VQF3cI6cbxo1M.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.130.100.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:8b:5d:ef:8d:70:38:72:f8:9c:c2:c8:19:dc:0c:a3:aa:c7: 1a:ed:74:a7:f3:a1:c9:ec:55:31:99:4f:ae:c0:e5:72:37:be: e7:92:e4:69:fa:b6:3b:e5:b3:0a:53:1a:7d:ac:94:e7:ce:1b: 2b:18:bb:7c:8b:8a:92:05:0a:37:eb:ce:49:a8:0e:ea:c3:e8: 5c:f7:ab:d7:10:09:2f:81:69:82:c1:40:3b:b9:0e:44:a5:a3: 77:2c:ed:70:6f:06:ca:26:4d:f5:ac:9a:55:c0:6b:9e:8b:fd: 64:e0:4a:e7:64:67:8b:ee:d7:b8:76:bc:b7:05:75:7e:df:c4: 51:0d:c3:af:a3:0f:b1:78:ea:cb:fd:25:be:db:c4:af:d4:ef: a4:06:61:4b:db:6c:2a:77:32:cc:61:c0:59:bb:2d:82:34:c8: 2b:10:99:97:20:a4:ac:f2:4e:0c:39:10:18:a8:20:4b:5b:72: f0:25:c2:f9:eb:5f:1d:f1:55:c6:f4:69:13:27:79:27:87:47: 65:24:26:d0:84:4e:b9:6a:db:dc:64:80:46:d6:b6:eb:a9:e5: 67:b3:be:f3:66:ed:ee:0c:f9:a1:a6:4d:6b:42:fa:07:8d:79: 12:db:89:ab:ae:ee:ae:10:0b:e7:b7:67:06:77:ce:dd:4f:fd: 3e:5b:5a:c2 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICErIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjhD QUMxRkEwNEQ4MENGRTNFMkJFOTdDN0FCMTg1MkI2NjU2NTM1RjAeFw0yNTAyMTAx MzUwMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZGMTRFQjlERUNFOTBD RkQ1NzZCQzU1MDE3NzcwOEU5QzZGMUEzNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDu3VpY46Ig70UKo00L5B1pb5wPiiFAixPxWeEpGtjWTDdaN5n ev0t2arxn5Et5clYF7ZO5GrXSxkbHEKmiqwlKiAFCq/mpbfO5GuVaXcdLwQ3zbNA rqiHST7xaHA1zMaLSsSkUjO+q8kOdGAY0CrQ90YjI0OPRuNlribq72GqLfoW6neQ 3h8CCWPKZ5pIwAAXHLYQpbDUUVqB6gnOtPWHcQOXZqeXU/P4Y6hdvaBd8bEdTnPP Thqpiw8JtQod8Wpn6MMXa9D8I7Yf9GzT98rrZKivADNggndRZob8o+Ye+W8V0Dgu AIloTkYXa0Lgj6kao8hpIhOddG4ddqnKbf99AgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUbxTrnezpDP1Xa8VQF3cI6cbxo1MwHwYDVR0jBBgwFoAUaMrB+gTYDP4+K+l8 erGFK2ZWU18wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR0lHQUJZ VEUvYU1yQi1nVFlEUDQtSy1sOGVyR0ZLMlpXVTE4LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9hTXJCLWdUWURQNC1LLWw4ZXJHRksyWldVMTguY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9HSUdBQllURS9ieFRybmV6cERQMVhh OFZRRjNjSTZjYnhvMU0ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCZ4JkMA0GCSqGSIb3DQEBCwUAA4IBAQBsi13vjXA4cvicwsgZ3Ayjqsca7XSn 86HJ7FUxmU+uwOVyN77nkuRp+rY75bMKUxp9rJTnzhsrGLt8i4qSBQo3685JqA7q w+hc96vXEAkvgWmCwUA7uQ5EpaN3LO1wbwbKJk31rJpVwGuei/1k4ErnZGeL7te4 dry3BXV+38RRDcOvow+xeOrL/SW+28Sv1O+kBmFL22wqdzLMYcBZuy2CNMgrEJmX IKSs8k4MORAYqCBLW3LwJcL5618d8VXG9GkTJ3knh0dlJCbQhE65atvcZIBG1rbr qeVns77zZu3uDPmhpk1rQvoHjXkS24mrru6uEAvnt2cGd87dT/0+W1rC -----END CERTIFICATE-----Generated at Fri Apr 18 23:56:33 2025 by rpki-client