$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/cmBNJBmOkVoPRxVqC932eEk8U4U.roa File: cmBNJBmOkVoPRxVqC932eEk8U4U.roa (raw, json) Hash identifier: KtkGafBeLiSh3QNd4wYz+hrNvhwahgzQlmZ3K7/RZJg= Subject key identifier: 72:60:4D:24:19:8E:91:5A:0F:47:15:6A:0B:DD:F6:78:49:3C:53:85 Certificate issuer: /CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Certificate serial: 0CB9 Authority key identifier: 83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/cmBNJBmOkVoPRxVqC932eEk8U4U.roa Signing time: Mon 10 Feb 2025 13:59:34 +0000 ROA not before: Mon 10 Feb 2025 13:59:34 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131619 IP address blocks: 103.116.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 22:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3257 (0xcb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830BC4410162A58D0DB17E0A351551FBB3D751A1 Validity Not Before: Feb 10 13:59:34 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=72604D24198E915A0F47156A0BDDF678493C5385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:5d:48:01:cf:0b:d4:19:3f:71:da:ad:8f: 98:c5:5f:64:df:3d:50:72:8b:56:48:c9:22:52:cb: 97:e9:a3:b1:9f:7a:2f:d4:47:1e:de:37:14:44:e4: 28:98:56:b6:51:9f:e3:ff:2a:09:d9:ef:fb:5a:80: 3c:33:ec:2c:f2:82:7c:18:73:93:d8:6a:03:d1:50: a4:db:dd:b6:9e:c9:c1:f1:e6:a6:ac:41:5a:70:9d: 4c:13:35:3b:fd:91:3a:c0:59:f8:2b:7c:6a:a0:6b: 41:5b:28:d1:fb:8d:a9:77:2b:eb:f4:b6:6d:06:0a: 3a:09:7d:75:53:a2:91:3b:fa:18:1d:99:88:d2:3d: 8d:d7:2b:fe:77:35:1a:70:97:cb:9e:38:16:39:37: e8:21:61:87:fb:26:6b:1b:cd:b5:09:c7:92:9c:1f: e4:91:1f:d1:c6:1c:88:a4:fc:61:89:18:1d:08:0c: b2:ef:7a:9e:2d:20:cc:d2:31:67:b7:8c:ed:8f:a8: 09:e1:50:62:39:d8:d9:37:ec:1a:f1:63:d5:73:fa: 96:6f:74:d8:04:6a:5f:1e:d7:fa:6a:20:e4:73:ad: 1b:6a:f3:4d:03:48:6e:51:59:52:d4:66:33:2d:d5: 90:91:a8:15:2a:0d:ce:e5:71:b0:29:bc:fa:5d:82: 4f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:60:4D:24:19:8E:91:5A:0F:47:15:6A:0B:DD:F6:78:49:3C:53:85 X509v3 Authority Key Identifier: keyid:83:0B:C4:41:01:62:A5:8D:0D:B1:7E:0A:35:15:51:FB:B3:D7:51:A1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/gwvEQQFipY0NsX4KNRVR-7PXUaE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwvEQQFipY0NsX4KNRVR-7PXUaE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JIGENTEC/cmBNJBmOkVoPRxVqC932eEk8U4U.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.116.98.0/24 Signature Algorithm: sha256WithRSAEncryption 72:6b:86:f9:db:f6:ab:f7:ea:b8:34:93:d7:71:dd:d4:62:96: 5e:c7:1b:f3:00:5c:52:6a:4f:0a:ec:64:fc:66:9b:b6:1f:7a: 99:25:e3:6e:80:ab:22:3e:b2:a2:26:86:61:24:e8:d0:04:45: 16:de:30:5d:ff:67:46:e7:86:5f:ba:63:cc:37:89:98:3d:8a: 80:a2:37:97:44:a9:1d:fb:80:ba:c5:59:c8:8c:4e:ef:71:ad: 32:1c:e3:09:a8:f2:fe:e4:5f:51:8f:85:90:13:6e:74:36:b9: 4c:cd:04:87:49:40:8a:c1:c6:ba:62:0f:b1:6b:2e:a6:3e:03: 92:a3:91:f9:cc:f5:56:9e:a1:c4:b8:ec:38:2b:cd:da:ad:34: 15:1d:86:3d:96:b9:7d:a4:05:38:be:4f:91:b3:04:9d:89:44: 6e:f9:4d:b7:52:51:15:dc:b1:9c:f8:12:14:89:61:3d:56:e0: 26:07:6e:36:4d:27:c3:a4:81:cb:1c:f0:bc:ff:49:40:53:6d: e2:bb:ab:6c:e7:a5:8f:0f:f5:a7:09:6e:b4:d9:71:12:30:dc: e3:ba:5c:ff:91:bc:20:bc:f0:23:3a:fe:87:c5:07:22:60:2b: 9c:56:8f:b0:ad:7e:b2:42:c5:8b:2f:19:83:41:d3:16:7c:e7: 47:36:0d:ff -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgICDLkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMw QkM0NDEwMTYyQTU4RDBEQjE3RTBBMzUxNTUxRkJCM0Q3NTFBMTAeFw0yNTAyMTAx MzU5MzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDcyNjA0RDI0MTk4RTkx NUEwRjQ3MTU2QTBCRERGNjc4NDkzQzUzODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJvl1IAc8L1Bk/cdqtj5jFX2TfPVByi1ZIySJSy5fpo7Gfei/U Rx7eNxRE5CiYVrZRn+P/KgnZ7/tagDwz7CzygnwYc5PYagPRUKTb3baeycHx5qas QVpwnUwTNTv9kTrAWfgrfGqga0FbKNH7jal3K+v0tm0GCjoJfXVTopE7+hgdmYjS PY3XK/53NRpwl8ueOBY5N+ghYYf7JmsbzbUJx5KcH+SRH9HGHIik/GGJGB0IDLLv ep4tIMzSMWe3jO2PqAnhUGI52Nk37BrxY9Vz+pZvdNgEal8e1/pqIORzrRtq800D SG5RWVLUZjMt1ZCRqBUqDc7lcbApvPpdgk9JAgMBAAGjggHyMIIB7jAdBgNVHQ4E FgQUcmBNJBmOkVoPRxVqC932eEk8U4UwHwYDVR0jBBgwFoAUgwvEQQFipY0NsX4K NRVR+7PXUaEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSklHRU5U RUMvZ3d2RVFRRmlwWTBOc1g0S05SVlItN1BYVWFFLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9nd3ZFUVFGaXBZME5zWDRLTlJWUi03UFhVYUUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9KSUdFTlRFQy9jbUJOSkJtT2tWb1BS eFZxQzkzMmVFazhVNFUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAZ3RiMA0GCSqGSIb3DQEBCwUAA4IBAQBya4b52/ar9+q4NJPXcd3UYpZexxvz AFxSak8K7GT8Zpu2H3qZJeNugKsiPrKiJoZhJOjQBEUW3jBd/2dG54ZfumPMN4mY PYqAojeXRKkd+4C6xVnIjE7vca0yHOMJqPL+5F9Rj4WQE250NrlMzQSHSUCKwca6 Yg+xay6mPgOSo5H5zPVWnqHEuOw4K83arTQVHYY9lrl9pAU4vk+RswSdiURu+U23 UlEV3LGc+BIUiWE9VuAmB242TSfDpIHLHPC8/0lAU23iu6ts56WPD/WnCW602XES MNzjulz/kbwgvPAjOv6HxQciYCucVo+wrX6yQsWLLxmDQdMWfOdHNg3/ -----END CERTIFICATE-----Generated at Fri Apr 18 22:31:50 2025 by rpki-client