$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/NBMitYmQhIh2rnquqkNjJdTprQA.roa File: NBMitYmQhIh2rnquqkNjJdTprQA.roa (raw, json) Hash identifier: 9ElOZUZFrBnQxctX56S3T+EwMNiefRafQOIg0vsLUxo= Subject key identifier: 34:13:22:B5:89:90:84:88:76:AE:7A:AE:AA:43:63:25:D4:E9:AD:00 Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Certificate serial: 0CBA Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/NBMitYmQhIh2rnquqkNjJdTprQA.roa Signing time: Mon 10 Feb 2025 13:59:34 +0000 ROA not before: Mon 10 Feb 2025 13:59:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131619 IP address blocks: 103.116.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Validity Not Before: Feb 10 13:59:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=341322B58990848876AE7AAEAA436325D4E9AD00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:23:90:4d:e0:3d:91:5b:45:9f:49:9a:8b:8d: 0b:50:25:d8:46:ae:f3:1f:bd:8c:24:71:c6:ec:71: d8:a4:de:ff:07:c9:0c:bd:86:bb:d2:69:07:d3:0e: 4d:fd:fe:50:33:a2:e4:2a:98:aa:44:63:64:c9:b2: 36:15:f5:ab:13:4d:36:42:5a:ca:28:f4:5b:d9:92: 63:4c:f3:4d:8b:c4:f9:8c:47:ca:e1:5f:7b:7a:2c: bd:fe:63:63:ce:3b:31:ca:b7:65:aa:18:a1:f4:e9: 2c:35:ca:36:df:c8:ce:b4:7e:46:ed:4a:f6:1f:bd: ff:e8:e0:73:bd:25:14:34:c5:5a:e6:4f:91:a7:f0: 60:d9:4d:d5:f1:b4:eb:fc:6f:f1:57:0a:8d:11:01: e9:2b:42:6d:74:5f:44:da:87:e1:a3:ee:43:e4:16: 40:38:d2:8b:a5:39:90:ec:a2:b2:0e:73:17:3b:e8: 3b:05:2e:19:3e:95:c5:23:69:5a:ea:92:6a:c0:1d: 55:8c:7d:ad:8e:26:14:20:35:46:73:a1:dd:ab:21: 96:e5:44:41:8e:ad:5a:aa:b7:92:61:d5:6e:ee:ac: 93:d1:08:15:1c:13:a7:bc:3b:9e:04:68:ee:bd:ed: ed:78:ea:52:62:6d:cb:a4:e6:66:db:0a:48:0d:08: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:13:22:B5:89:90:84:88:76:AE:7A:AE:AA:43:63:25:D4:E9:AD:00 X509v3 Authority Key Identifier: keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/NBMitYmQhIh2rnquqkNjJdTprQA.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.97.0/24 Signature Algorithm: sha256WithRSAEncryption 13:32:5f:bf:a1:97:04:98:b9:24:a2:4a:25:41:d6:29:3c:04: bc:0d:4b:80:39:54:26:5a:fd:df:22:56:59:c2:2c:56:1d:80: 86:f9:1e:f4:1f:fd:98:fe:1e:2f:d1:2a:0c:5e:98:76:4a:03: 95:a7:b4:61:9f:17:fe:a4:80:04:bf:ea:8b:11:53:08:48:95: 48:d6:be:0b:d6:b1:bc:28:cb:ad:22:f9:49:fb:de:90:2d:fd: fb:a0:27:b4:fb:1b:01:fe:fc:9a:b7:9c:4d:a5:25:1a:a5:b4: 2c:c4:24:84:7a:8a:c7:be:33:b3:5c:d4:2b:dc:b7:21:70:37: 41:b6:9c:85:e3:2c:79:ad:c8:a4:a1:62:30:b5:54:37:5e:b0: 65:98:c4:f5:cc:bf:99:7a:cd:69:94:4a:d6:2f:aa:ce:16:9c: 20:3f:26:f8:a7:ee:03:4a:df:6b:af:1b:91:e1:b4:d7:62:9c: cd:7b:bd:09:ba:38:45:9f:95:f2:b0:a3:9b:a5:36:b8:b4:24: 65:c7:eb:34:6f:a9:7d:2d:8c:06:75:ab:66:c1:50:04:5e:0f: d1:58:ac:76:3e:9b:62:dd:69:f9:f4:b8:b9:de:61:35:75:d8: 12:40:17:6c:83:02:da:61:6d:40:45:68:e2:55:03:01:24:27: 76:39:ff:f4 -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDLowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yNTAyMTAx MzU5MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDM0MTMyMkI1ODk5MDg0 ODg3NkFFN0FBRUFBNDM2MzI1RDRFOUFEMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkI5BN4D2RW0WfSZqLjQtQJdhGrvMfvYwkccbscdik3v8HyQy9 hrvSaQfTDk39/lAzouQqmKpEY2TJsjYV9asTTTZCWsoo9FvZkmNM802LxPmMR8rh X3t6LL3+Y2POOzHKt2WqGKH06Sw1yjbfyM60fkbtSvYfvf/o4HO9JRQ0xVrmT5Gn 8GDZTdXxtOv8b/FXCo0RAekrQm10X0Tah+Gj7kPkFkA40oulOZDsorIOcxc76DsF Lhk+lcUjaVrqkmrAHVWMfa2OJhQgNUZzod2rIZblREGOrVqqt5Jh1W7urJPRCBUc E6e8O54EaO697e146lJibcuk5mbbCkgNCPlPAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUNBMitYmQhIh2rnquqkNjJdTprQAwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy9OQk1pdFltUWhJaDJy bnF1cWtOakpkVHByUUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3RhMA0GCSqGSIb3DQEBCwUAA4IBAQATMl+/oZcEmLkkokolQdYpPAS8DUuA OVQmWv3fIlZZwixWHYCG+R70H/2Y/h4v0SoMXph2SgOVp7Rhnxf+pIAEv+qLEVMI SJVI1r4L1rG8KMutIvlJ+96QLf37oCe0+xsB/vyat5xNpSUapbQsxCSEeorHvjOz XNQr3LchcDdBtpyF4yx5rcikoWIwtVQ3XrBlmMT1zL+Zes1plErWL6rOFpwgPyb4 p+4DSt9rrxuR4bTXYpzNe70JujhFn5XysKObpTa4tCRlx+s0b6l9LYwGdatmwVAE Xg/RWKx2Ppti3Wn59Li53mE1ddgSQBdsgwLaYW1ARWjiVQMBJCd2Of/0 -----END CERTIFICATE-----Generated at Fri Apr 18 22:47:28 2025 by rpki-client